Your network contains an Active Directory domain named contoso.com. The domain contains two
member servers named Server1 and Server2 that run Windows Server 2012 R2. Both servers have
the Hyper-V server role installed.
The network contains an enterprise certification authority (CA). All servers are enrolled
automatically for a certificate-based on the Computer certificate template.
On Server1, you have a virtual machine named VM1. VM1 is replicated to Server2.
Youneed to encrypt the replication of VM1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose
two.)
A.
On Server1, modify the Hyper-V Settings.
B.
On Server2, modify the settings of VM1.
C.
On Server2, modify the Hyper-V Settings.
D.
On Server1, modify the settings of VM1.
E.
On Server1, modify the settings of the virtual switch to which VM1 is connected.
F.
On Server2, modify the settings of the virtual switch to which VM1 is connected.
Explanation:
B)
Each virtual machine that is to be replicated must be enabled for replication (on the replica
server – Server2).
C)
Toconfigure the Replica server (here Server2)
1. In Hyper-V Manager, click Hyper-V Settings in the Actions pane.
2. In the Hyper-V Settings dialog, click Replication Configuration.
3. In the Details pane, select Enable this computer as a Replica server.
4. In the Authentication and ports section, select the authentication method. For either
authentication method, specify the port to be used (the default ports are 80 for Kerberos over HTTP
and 443 for certificate-based authentication over HTTPS).
5. If you are using certificate-based authentication, click Select Certificate and provide the
request certificate information.
Etc Deploy Hyper-V Replica Step 2: Enable Replication
The given answer is INCORRECT.
Server1 is the Source HV server, Server 2 is the Replica.
VM1 on Server1 needs to be replicated using encryoting to Server2.
So on Server2 (Replica) we need to change the authentication mode from HTTP to HTTPS.
On Server1 we need the modify the settings of the VM to use HTTPS for replication.
So the answers should be :
C: On Server2, modify the Hyper-V Settings.
D: On Server1, modify the settings of VM1.
13
0
agree with Franc
1
0
It seems like the explanation almost agrees with you, Franc, but disagrees with you on one point. Since Server2 is the replicating server, any configuration made to replication would be done on the replicating server, thus the answer would be correct.
0
2
Pay attention to wording ! it says that VM1 is replicated to Server2.
You need to encrypt the replication of VM1.
So the VM1 was already enabled for replication !
All we need to do is to modify the Hyper-V settings on the destination to enable SSL and the same on the VM setting on the source.
Thus correct answer is >>> C & D
3
0
No!
Even if the replica exists on server2 you cant modify the replica settings of VM1 on server2.
to do this we must change the direction, so VM1 replicates to server1, then we can modify on server2.
So since its only replicated and not running on server2 C and D are correct
0
1
C & D
2
0
again WTF:
– to enable encrypted replication we have to modify replication settings of target server server2 – C – check
but now:
– question states there’s a replication already set up and therefore going on
– I cannot find ANY VM-specific setting to modify about replication behaviour!
– replication protocol setting is server-specific, not VM-specific
so, I only see one single appropriate action to be correct here…what am I missing?
0
0
C & D
https://mountainss.wordpress.com/2012/10/23/microsoft-windows-server-2012-hyperv-replica-via-ssl-port-443/
You HAVE to enable encryption on the replica server (server 2), and it is recommended to also setup replication and encryption on the host server for failover purposes.
To replicate with encryption, the VM has to be setup for HTTPS and using a certificate, so you have to modify the settings of the VM you plan to replicate which is on server 1. Yes, the VM was setup to replicate, but it was not setup to replicate encrypted.
2
0
A and C, as you point to https://mountainss.wordpress.com/2012/10/23/microsoft-windows-server-2012-hyperv-replica-via-ssl-port-443/
The are no “modify the settings of VM1″, and present modify the Hyper-V 1 Settingsmodify the Hyper-V Settings” and “modify the Hyper-V 2 Settings”, and no option to modify “modify the settings of VM1”. There is “Enable replication…” action to start repl. And repl is already present.
In “Settings of VM1” there is NO option about replication see http://cdn.aiotestking.com/wp-content/uploads/70-417-v6/178.jpg
2
1
C&D
Target = Hyper-V Settings
Source = VM Settings
Server 2 is the target, so you set its Hyper-V settings, Server 1 is the source, so you set the VM Settings.
2
0
Insane question… to get the VM to replicate via SSL encryption.. ALL four A, B, C, D must be performed.. why?…
On BOTH servers (do this on HYPER-V Settings) which means A & C answers in the question
Enable Replication -> Check “Use Certificate-Based Authentication (HTTPS)”
Doing this will ENABLE BOTH servers to replicate the VM with SSL encryption ( it must be done on both primary and target HYPER-V replication servers, that is why both answers A & C are required ) by reading the question you realize that the Hyper-V servers already got the proper SSL Certificates .. quoting the question “enterprise certification authority (CA). All servers are enrolled automatically for a certificate-based on the Computer certificate template” BUT !!!!!.. nowhere in the question says that the servers are already configured for SSL replication.
Then.. since replication has already been configured for VM1 via Kerberos (HTTP) and now we want Certificate-based SSL replication… we MUST remove the replication then re-enable it on the primary server SERVER1 ( answer D ) why?.. because during replication configuration of the VM only ONE option “Kerberos HTTP” or “Certificate-SSL HTTPS” can be selected.. and once selected and applied CANNOT be changed on the fly.. so.. break it and re-enable it..
now… why B answer also? it is not mandatory to remove replication on the target Hyper-V server.. but if you don’t.. then you will leave the VHD and configuration files behind on that server.. not good practice right?..
My take on this question?.. since we can only pick two answers.. the very first thing you should do is enable the servers for Replication using Certificate-based SSL (HTTPS).. A & C answers .. see.. in a real scenario you won’t go and disable replication of the VM then to realize the servers are not ready for SSL HTTPS replication… 🙂
Final answer: A & C
2
1
A and C
“VM1 is ALREADY replicated to Server2.” No need to do anything with VM1 so Answer B and D are out. E is out because VM1 resides on Server1, not Server2.
We have to change HyperV settings on each server in order to use encryption. “VM1 is replicated to Server2.” Which means Kerberos (HTTP) authentication is enabled and not HTTPS encryption. We have to switch to HTTPS encryption in HyperV settings on each server
1
1