You need to implement a security policy solution to authorize the applications. The solution must meet the security requirements.
Which service should you use to enforce the security policy, and what should you use to manage the policy settings? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Note: This question is part of a series of questions that present the same scenario. Each question in the seri es contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it . As a result, these questions will not appear in the review screen.
You have a failover cluster named Cluster1 that hosts an application named App1.
The General tab in App1 Properties is shown in the General exhibit. (Click the General tab.)
The Fai lover tab in App1 Properties is shown in the Failover exhibit. (Click the Failover tab.)
Server1 shuts down unexpectedly.
You need to ensure that when you start Server1, App1 continues to run on Server2.
Solution: From the Failover settings, you select Prevent failback .
Does this meet the goal?
Your network contains an Active Directory Domain Services (AD DS) domain.
You need to implement a solution that meets the following requirements:
Ensures that the members of the Domain Admins group are allowed to sign in only to domain controllers
Ensures that the lifetime of Kerberos Ticket Granting Ticket (TGT) for the members of the Domain Admins group is limited to one hour
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You have a Storage Spaces Direct cluster in a hyper-converged deployment. The cluster contains three nodes that run Windows Server 2022. The cluster hosts 20 Hyper-V virtual machines.
You need to upgrade the servers to Windows Server 2025. The solution must meet the following requirements:
• Minimize downtime of the virtual machines.
• Minimize administrative effort.
Which four actions should you perform on each node in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You need to implement alerts for the domain controllers. The solution must meet the technical requirements.
What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.
For each server. Windows Defender Firewall is configured to allow only communication between servers on the same segment. Server! has the following connection security rule:
• Name: Rule1
• Rule type: Isolation
• Requirement: Require authentication for inbound connections and request authentication for outbound connections
• Authentication method: Computer (Kerberos V5)
• Profile: Domain. Private. Public
Server2 does not have any connection security rules.
Server3 has the following connection security rule:
• Name: Rute3
• Rule type: Server-to-server
• Endpoints:
o Computers in Endpoint 1:192.168.50/24
o Computers in Endpoint 2: 192.168.1.0/24
• Requirement Request authentication (or inbound and outbound connections
• Authentication method: Computer (Kerberos V5)
• Profile: Domain. Private. Public
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Your network contains an Active Directory Domain Services (AD DS) domain.
You need to implement a Storage Spaces Direct cluster. The solution must ensure that the cluster supports delimiting the allocation of volumes.
What is the minimum number of servers required, and which type of resiliency is required for the cluster volumes? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains servers that run Windows Server 2022.
You have a Storage Spaces Direct cluster named SSCIuster1 that contains two physical nodes named Node! and Node2. Node! and Node2 host highly available virtual machines.
You plan to perform an in-place upgrade to Windows Server 2025 on Node1
You need to ensure that the virtual machines remain running during the upgrade.
Which four actions should you perform in sequence on Node1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Your on-premises network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the domains shown in the following table.
You create a user named User1 that has the following attributes:
You plan to move User1 to OU3 by using the Active Directory Migration Tool (ADMT). Which attributes will change if User1 moves to OU3?
You have a single-domain Active Directory Domain Services (AD DS) forest named contoso.com that contains two domain controllers named DC1 and DC2. DC1 and DC2 run Windows Server.
You plan to perform an authoritative restore of SYSVOL on DC1.
You isolate DC1 and restore DC1 from a backup.
You need to ensure that SYSVOL on DC1 replicates to DC2.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
