A company has Active Directory Domain Services (AD DS) domain controllers that run on Windows Server
2012 R2 servers. There are two forests, and each has a single domain. There is a two-way forest trust between
the forests. The company uses Hyper-V for server visualization. The Hyper-V environment contains the HyperV host servers as shown in the following table:
You prepare to deploy System Center 2012 R2 Data Protection Manager (DPM) to back up the Hyper-V
environment. The deployment must meet the followingrequirements:
ensure that all Hyper-V servers can be backed up from a minimum of two DPM servers
minimize the total number of DPM servers
You need to deploy DPM to the environment.
What should you deploy?
A.
four DPM servers in the internal network and two DPM servers in the perimeter network
B.
two DPM servers in the internal network and one DPM server in the perimeter network
C.
two DPM servers in the internal network only
D.
two DPM servers in the internal network and two DPM servers in the perimeter network
I think the correct ans should be D.. not 100% sure thou
Anyone?
0
0
i think Answer A is correct
0
0
But why Ned 4 DPM server?
0
0
In my opinion “Internal Networks” are clue. All machines must be backuped by two DPM servers. From definition of Internal Network “Internal virtual networks are used where you want to allow communications between
•Virtual machine to virtual machine on the same physical server
•Virtual machine to parent partition (and visa-versa)”
In each internal network you need 2 DPM servers totaly 4.
0
0
Internal networks are network locations, not vswitch types.
D seems the best answer.
0
0
IMHO D
DPM can protect servers and workstations across domains within a forest that has a
two-way trust relationship with the domain that the DPM server is located in. If there is not a two-way trust across domains, you must have a separate DPM server for each domain.
DPM supports data protection across forests as long as you establish a forest-level, two-way trust between the separate forests. To set up a forest-level trust relationship, both domains must be in Windows Server 2008 forest mode.
0
0
I believe the answer is C
I believe that just 2 DPM servers is the minimum number of servers that can take care of all the hosts and with this scenario, please read the following regarding certificates between DPM servers:
DPM 2012 brings certificate-based authentication to bear on the following workloads: File Server, Hyper-V and SQL Server in both standalone and clustered configurations. You can also use certificate-based authentication on a secondary DPM 2012 server for disaster recovery to protect data sources in a non-trusted domain when the primary DPM 2012 server fails. The two DPM 2012 servers need to be in the same or trusted domains. The only data sources that support certificate-based protection that are missing from this lineup are Exchange, SharePoint and Bare-Metal Recovery/System State.
http://technet.microsoft.com/en-us/magazine/jj554308.aspx
0
0
Agreed
0
0
Forgot the links:
http://technet.microsoft.com/en-us/library/hh757801.aspx
http://technet.microsoft.com/en-us/library/hh757942.aspx
0
0
yep C:
“DPM can protect servers and workstations across domains within a forest that has a two-way trust relationship with the domain that the DPM server is located in. If there is not a two-way trust across domains, you must have a separate DPM server for each domain.
http://technet.microsoft.com/en-us/library/hh758203.aspx
0
0
sorry my bad, haven’t read it carefully that it should be between forests
0
0
Then the answer for question 5 should be 1 DPM server ? This answer is not listed
0
0
No, it states:
“ensure that all Hyper-V servers can be backed up from a minimum of two DPM servers”
0
0
Agreed
0
0
but how will you back up the hosts from the perimeter network? if you will have 2 dpm servers in the internal one?
0
0
You use certificates to communicate with perimeter servers and open FW ports to these hyper-v hosts.
DPM can now backup such hosts which are in untrusted domains or workgroups using certificates
0
0
not even, the perimeter network seems to be a domain in the contoso forest.
0
0
So which one is correct??
C: two DPM servers in the internal network only
D: two DPM servers in the internal network and two DPM servers in the perimeter network
0
0
https://social.technet.microsoft.com/wiki/contents/articles/17493.protecting-hyper-v-virtual-machines-with-system-center-dpm-2012.aspx
DPM servers and Hyper-V servers must be located in the same domains. Different domains are not supported.
Right answer is A
0
0
Nope,
your article is for DPM 2012, Not 2012 R2
0
0
The answer is c: Two DPM servers (total).
Network requirements – http://technet.microsoft.com/en-us/library/hh758176.aspx
The following are the network requirements for System Center 2012 – Data Protection Manager (DPM):
DPM must be installed on a 64-bit computer that is located in a Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, or Windows Server 2003 Active Directory domain.
DPM can protect servers and workstations across domains within a forest that has a two-way trust relationship with the domain that the DPM server is located in. If there is not a two-way trust across domains, you can protect the computers using DPM’s support for computers in workgroups or untrusted domains. For more information, see Managing Protected Computers in Workgroups and Untrusted Domains.
DPM supports data protection across forests as long as you establish a forest-level, two-way trust between the separate forests. To set up a forest-level trust relationship, both domains must be in Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, or Windows Server 2003 forest mode.
If you are protecting data over a wide area network (WAN), there is a minimum network bandwidth requirement of 512 kilobits per second (Kbps).
DPM does not support disjointed namespaces.
0
0
so which one is the best answer C OR D ??????????
0
0
The answer is C – you do not need a server on the perimeter network.
0
0
How does this relate to question 5 where you need to implement a minimum DPM servers for backup ?
The answer should be 1 server there, but this is not listed. Only difference with question 5 is the type of authentication is mentioned ; kerberos internally, certificate for perimeter
0
0
I think that the best answer is B and I explain why:
1) here http://technet.microsoft.com/en-us/library/hh916530.aspx it is written that
“DPM supports protecting DPM SERVERS THAT ARE IN UNTRUSTED DOMAINS if the primary and secondary DPM servers are in domains that trust each other or if they are in the same domain”.
So there must be at least one DPM Server in the untrusted domain in order for the two DPM servers in the internal network to protect it.
2) here http://technet.microsoft.com/en-us/library/hh757954.aspx it is written that
“Restrictions: Protection of perimeter network (DMZ) machines is not supported in DPM.”
So there must be another DPM Server in the untrusted domain in order for the two DPM servers in the internal network to protect it.
0
0
I agree with “mark86”; I believe that the correct answer is B. VMs in the perimeter network cannot be protected by DPM from the internal network directly. Only a DPM server in the perimeter network can be protected by a DPM server on the internal network, so you need one DPM server in the perimeter network and two DPM servers in the internal network.
0
0
DPM supports data protection across forests as long as you establish a forest-level, two-way trust between the separate forests. – So we need only 2 DPM servers for the hosts in the internal networks.
And since it also supports certificates so the requirement of putting DPM server(s) in the perimeter network gets nullified.
So C should be the correct answer here. I haven’t studied anything about DPM so not 100% sure.
0
0
Has everybody forgotten that Contoso and Fabrikam are in INTERNAL networks? So there is only communication possible between the VM’s and the host itself! When a DPM-server is placed inside this internal network, it cannot communicate outside of it’s own network. So when you place a DPM-server inside the Contoso-network, it cannot backup Fabrikam or the DMZ and the other way around.
So per network we need at least 1 DPM-server because the DPM-server does not have connection to other networks. And the question states that at least 2 DPM-servers must be used per Hyper-v host. So 2 DPM-servers per network, that’s answer A.
0
0
Your reading it wrong. I’ll agree it’s poorly worded. Read the comment above from Peter. The Internal network is not what your thinking it is.
0
0
Is the question correct ? Two forests with each one domain ; ext.contoso.com looks like a subdomain of contoso.com. That’s 2 domains in the contoso forest and one in fabrikam.com. Or is ext.contoso.com a workgroup ?
0
0
So whats the Final ANSWER
0
0
Very neat article post.Thanks Again.
http://sendgift.info/internet/-94050/
0
0
im guessing c
https://technet.microsoft.com/en-us/library/jj554308.aspx
0
0
That is the awesome wonderful search system in the world
http://google.com
0
0
Enjoyed every bit of your article post.Really looking forward to read more. Much obliged.
0
0