You work as a network administrator at ABC.com. The ABC.com network consists of a single
domain named ABC.com. All servers on the ABC.com network have Windows Server 2012 R2
installed and all client computers have Windows 8 installed.
The ABC.com network contains a domain controller named ABC_DC04 and member server
named ABC_SR11. ABC_SR11 runs a Core Installation of Windows Server 2012 R2.
How would you configure THESABCING_DC04 to remotely view the event log on ABC_SR11?
A.
You should use the Windows Powershell to run the Get-NetFirewallRule command.
B.
You should use the Windows Powershell to run the Set-NetFirewallProfile command.
C.
You should use the Windows Powershell to run the New-NetIPsecRule command.
D.
You should use the Windows Powershell to run the Show-NetIPsecRule command.
Explanation:
References:
http://technet.microsoft.com/en-us/library/hh831755.aspx#BKMK_Remote
this makes no sense. get-netfirewallrule configures NOTHING! all it does is retrieve rules. a technet link doesnt prove anything!
0
0
Yeah, right! By default you can manage server without needing run this command. If you really need to configure “GET” command is is not right one…Dilemma!!!
0
0
The actual command would be Enable-NetFirewallRule -DisplayGroup “Remote Administration” to allow connections from any MMC.
0
0
C. Is the only option between those answers. It is possible to restrict communication over IPsec for security reasons. Remember that Direct Access also uses IPsec! You cannot live without IT. 😉
0
0
https://technet.microsoft.com/en-us/library/jj554889.aspx
0
0
Assuming it doesn’t work right now, configuring a new ipsec policy won’t help either. Traffic will still be blocked.
The Set-NetFirewallProfile however can modify the firewall settings (e.g. disable the domain profile). Without a firewall blocking you, you can manage the eventvwr with an mmc. > answer B
0
0
Answer is C.
Expl:
View Event Logs Remotely: Netsh advfirewall
http://windowsitpro.com/windows-server-2012/viewing-event-logs-gui-less-server-core-installation-remote-windows-server
AND
Netsh advfirewall = New-NetIPsecRule
https://technet.microsoft.com/en-us/library/hh831755.aspx
0
0
Should be B:
I finally solve the riddle! lolz
Obviously, Get-NetFirewallRule does NOOOOT affect the current configuration, its a MUST to use a pipeline on powershell to Set-NetFirewallRule in order for any changes to be made.
Get-NetFirewallRule -Syntax | Set-NetFirewallRule -Syntax
All the info is from the same technet mentioned above, is just a matter to read the entire article.
Yet , is confusing for ANY regular Windows Eng to say Modify with Get, I assume this answer is just wrong, should be B
But taking this in consideration, A makes perfect sense.
https://technet.microsoft.com/en-us/library/jj554858.aspx
0
0