NEW QUESTION NO: 12
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com.
You need to create a Nano Server image named Nano1 that will be used as a virtualization host. The windows server 2016 source files are located in drive D.
Solution: You run the following cmdlet.
New-NanoServerImage -Edition Datacenter -DeploymentType Host -Compute
-Media 'D:\' -TargetPath c:\Nano1\Nano1.wim -ComputerName Nano1 -DomainName Contoso.com Does this meet the goal?
A. Yes
B. No
Answer: A

NEW QUESTION NO: 13
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server 2016. Server1 is configured as a VPN server.
Server1 is configured to allow domain users to establish VPN connections from 06:00 to 18:00 everyday of the week.
You need to ensure that domain users can establish VPN connections only between Monday and Friday.
Solution: From Active Directory Users and Computers, you modify the Dial-in Properties of the user accounts.
Does this meet the goal?
A. Yes
B. No
Answer: B

NEW QUESTION NO: 14
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server 2016. Server1 is configured as a VPN server.
Server1 is configured to allow domain users to establish VPN connections from 06:00 to 18:00 everyday of the week.
You need to ensure that domain users can establish VPN connections only between Monday and Friday.
Solution: From Server Manager, you modify the Access Policies on Server1.
Does this meet the goal?
A. Yes
B. No
Answer: A

NEW QUESTION NO: 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server2 than runs Windows Server 2016.
Users report that their client computers fail to obtain an IP address.
You open the DHCP console as shown in the Exhibit. (Click the Exhibit button.)

Scope1 has an address range of 172.16.0.10 to 172.16.0.100 and a prefix length of 23 bits.
You need to ensure that all of the client computers on the network can obtain an IP address from Server2.
Solution: You run the Set-DhcpServerv4MulticastScope cmdlet.
Does this meet the goal?
A. No
B. Yes
Answer: A

NEW QUESTION NO: 16
Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and litwareinc.com.
Your company recently deployed DirectAccess for the members of a group named DA_Computers. All client computers are members of DA_Computers.
You discover that DirectAccess clients can access the resources located in the contoso.com domain only.
The clients can access the resources in the litwareinc.com domain by using an L2TP VPN connection to the network.
You need to ensure that the DirectAccess clients can access the resources in the litwareinc.com domain.
What should you do?
A. From a Group Policy object (GPO), modify the Name Resolution Policy Table (NRPT).
B. From the properties of the servers in litwareinc.com, configure the delegation settings.
C. On an external DNS server, create a zone delegation for litwareinc.com.
D. Add the servers in litwareinc.com to the RAS and IAS Servers group.
Answer: A
Explanation/Reference:
Explanation:
https://blogs.technet.microsoft.com/tomshinder/2010/04/01/directaccess-client-location-awareness-nrpt- name-resolution/

NEW QUESTION NO: 17
HOTSPOT
You have a RADIUS server named RADIUS1. RADIUS1 is configured to use an IP address of
172.23.100.101.
You add a wireless access point (wap) named WAP-Secure to your network. You configure WAP-Secure to use an IP address of 10.0.100.101.
You need to ensure that WAP-Secure can authenticate to RADIUS1 by using a shared secret key.
What command should you run? To answer, select the appropriate options in answer area.
Hot Area:

Answer: 


NEW QUESTION NO: 18
Your network contains an Active Directory domain named contoso.com. The domain contains a Hyper-V host named Server1 that runs Windows Server 2016.
Server1 hosts four machines that are members of the domain. The virtual machines are configured as shown in the following table.

Which virtual machines can you manage by using PowerShell Direct?
A. VM1, VM2, and VM4
B. only VM4
C. VM1, VM2, and VM3
D. Only VM2
Answer: A

NEW QUESTION NO: 19
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest has three sites located in London, Paris, and Berlin.
The London site contains a web server named Web1 that runs Windows Server 2016.
You need to configure Web1 as an HTTP content server for the hosted cache servers located in the Paris and Berlin sites.
Solution: You install the DFS Replication role service, and then you start the Network Connections service.
Does this meet the goal?
A. Yes
B. No
Answer: B

NEW QUESTION NO: 20
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:

Server1 has two virtual machines named VM1 and VM that run Windows Server 2016. VM1 connects to Private1. VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM2 to Private1 and External1. You install the Remote Access server on VM2, and you configure NAT in the Routing and Remote Access console. You configure VM1 and VM2 as the default gateway.
Does this meet the goal?
A. Yes
B. No
Answer: B

NEW QUESTION NO: 21
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:

Server1 has two virtual machines named VM1 and VM that run Windows Server 2016. VM1 connects to Private1. VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM1 to Inernal1. You run the New-NetNatIpAddress and the New-NetNat cmdlets on Server1. You configure VM1 to use Server1 as the default gateway.
Does this meet the goal?
A. No
B. Yes
Answer: B

NEW QUESTION NO: 22
Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2012.
The forest contains five domain controllers and five VPN servers that run Windows Server 2016.
Five hundred users connect to the VPN servers daily.
You need to configure a new server named Server1 as a RADIUS server.
What should you do first?
A. On Server1, deploy the Remote Access server role.
B. On Server1, deploy the Network Policy and Access Services role.
C. On a domain controller, set the forest functional level to Windows Server 2016.
D. On each VPN server, run the New-NpsRadiusClient cmdlet.
Answer: B
Explanation/Reference:
Explanation:
http://www.nyazit.com/configure-network-policy-server-2016/

NEW QUESTION NO: 23
You have a Scale-Out File Server that has a share named Share1. Share1 contains a virtual disk file named Disk1.vhd.
You plan to create a guest failover cluster.
You need to ensure that you can use the virtual disk as a shared virtual disk for the guest failover cluster.
Which cmdlet should you use?
A. Convert-VHD
B. Optimize-VHDSet
C. Set-VHD
D. Optimize-VHD
Answer: A

NEW QUESTION NO: 24
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1.
Server1 is configured to use a forwarder named server2.contoso.com that has an IP address of 10.0.0.10.
You need to prevent Server1 from using root hints if the forwarder is unavailable.
What command should you run? To answer, select the appropriate options in the answer area.
Hot Area:

Answer: 

Explanation/Reference:
Explanation:
References: https://docs.microsoft.com/en-us/powershell/module/dnsserver/set-dnsserverforwarder?
view=win10-ps