NEW QUESTION NO: 20
You are a network administrator for a company named Contoso, Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured:
Network address translation (NAT)

The DHCP Server server role

The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to Server2.
You identify the following requirements:
Add 28 devices to subnet2 for a temporary project.

Configure Server2 to accept VPN connections from the internet.

Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.

You add a computer to subnet1. The computer has an IP address of 10.10.0.129. Web1 receives a request from the new computer and sends a response.
You need to determine which address Web1 sends the response to.
Which IP address should you choose?
A. 10.10.0.129
B. 10.10.0.224
C. 131.107.0.223
D. 172.16.128.222
Answer: C
Explanation/Reference:

NEW QUESTION NO: 21
You have a test environment that includes two servers named Server1 and Server2. The servers run Windows Server 2016.
You need to ensure that you can implement SMB Direct between the servers.
Which feature should the servers support?
A. Remote Direct Memory Access (RDMA)
B. Multipath I/O (MPIO)
C. Virtual Machine queue (VMQ)
D. Single root I/O virtualization (SR-IOV)
Answer: A
Explanation/Reference:
References: https://technet.microsoft.com/en-us/library/jj134210(v=ws.11).aspx

NEW QUESTION NO: 22
Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and litwareinc.com.
Your company recently deployed DirectAccess for the members of a group named DA_Computers. All client computers are members of DA_Computers.
You discover that DirectAccess clients can access the resources located in the contoso.com domain only.
The clients can access the resources in the litwareinc.com domain by using an L2TP VPN connection to the network.
You need to ensure that the DirectAccess clients can access the resources in the litwareinc.com domain.
What should you do?
A. From a Group Policy object (GPO), modify the Name Resolution Policy Table (NRPT).
B. From the properties of the servers in litwareinc.com, configure the delegation settings.
C. On an external DNS server, create a zone delegation for litwareinc.com.
D. Add the servers in litwareinc.com to the RAS and IAS Servers group.
Answer: A
Explanation/Reference:
Explanation:
https://blogs.technet.microsoft.com/tomshinder/2010/04/01/directaccess-client-location-awareness-nrpt- name-resolution/

NEW QUESTION NO: 23
You need to implement network virtualization.
On which object should you configure the virtual subnet ID?
A. Hyper-V server
B. Virtual network adapter
C. VM
D. Virtual switch
Answer: B

NEW QUESTION NO: 24
You have an Active Directory domain named Contoso.com. The domain contains servers named Server1 and Server2 that run Windows Server 2016.
You install the Remote Access server role on Server1. You install the Network Policy and Access Services server role on Server2.
You need to configure Server1 to use Server2 as a RADIUS server.
What should you do?
A. From the Connection Manager Administration Kit, create a Connection Manager profile.
B. From Server Manager, create an Access Policy.
C. From Active Directory Users and Computers, modify the Delegation settings of the Server1 computer account.
D. From Routing and Remote Access, configure the authentication provider.
Answer: D

NEW QUESTION NO: 25
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
You have a DHCP server named Server1 that has three network cards. Each network card is configured to use a static IP address. Each network card connects to a different network segment.
Server1 has an IPv4 scope named Scope1.
You need to ensure that Server1 only uses one network card when leasing IP addresses in Scope1.
What should you do?
A. From the properties of Scope1, modify the Conflict detection attempts setting.
B. From the properties of Scope1, configure Name Protection.
C. From the properties of IPv4, configure the bindings.
D. From IPv4, create a new filter.
E. From the properties of Scope1, create an exclusion range.
F. From IPv4, run the DHCP Policy Configuration Wizard.
G. From Control Panel, modify the properties of Ethernet.
H. From Scope1, create a reservation.
Answer: C
Explanation/Reference:
Explanation:
https://technet.microsoft.com/en-us/library/cc770650(v=ws.11).aspx

NEW QUESTION NO: 26
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Your network contains an Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2012.
The network uses an address space of 192.168.0.0/16 and contains multiple subnets.
The network is not connected to the Internet.
The domain contains three servers configured as shown in the following table.

Client computers obtain TCP/IP settings from Server3.
You add a second network adapter to Server2. You connect the new network adapter to the Internet. You install the Routing role service on Server2.
Server1 has four DNS zones configured as shown in the following table.

What should you do to enable Server2 as a NAT server?
A. From Routing and Remote Access, add an interface.
B. From Windows PowerShell, run the New-RoutingGroupConnector cmdlet.
C. From Routing and Remote Access, add a routing protocol.
D. From Windows PowerShell, run the Install-WindowsFeature cmdlet.
Answer: A
Explanation/Reference:
Explanation:
https://technet.microsoft.com/en-us/library/dd469812(v=ws.11).aspx

NEW QUESTION NO: 27
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
You have multiple servers that run Windows Server 2016.
You need to install the DNS Server server role on one of the servers.
What should you run?
A. Set-DNSServerSetting
B. Set-DhcpServerv4DnsSetting
C. dnscmd.exe
D. Set-DhcpServerv6DnsSetting
E. netsh.exe
F. dns.exe
G. Set-DhcpServerDatabase
H. dism.exe
Answer: H

NEW QUESTION NO: 28
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:

Server1 has two virtual machines named VM1 and VM2 that run Windows Server 2016. VM1 connects to Private1. VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM1 to Inernal1. You run the New-NetNatIpAddress and the New-NetNat cmdlets on Server1. You configure VM1 to use VM2 as the default gateway.
Does this meet the goal?
A. No
B. Yes
Answer: A

NEW QUESTION NO: 29
Your network contains an Active Directory domain named contoso.com. The domain contains a Hyper-V host named Server1 that runs Windows Server 2016.
Server1 hosts four machines that are members of the domain. The virtual machines are configured as shown in the following table.

Which virtual machines can you manage by using PowerShell Direct?
A. only VM4
B. Only VM2
C. VM1, VM2, and VM4
D. VM1, VM2, and VM3
Answer: C

NEW QUESTION NO: 30
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that has the Network Policy and Access Services server role installed.
You create a Shared Secret Network Policy Server (NPS) template named Template1.
You need to view the shared secret string used for Template1.
Solution: From the Network Policy Server console, you export the configuration, and you view the exported XML file.
Does this meet the goal?
A. No
B. Yes
Answer: B

NEW QUESTION NO: 31
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
Your network contains Windows and non-Windows devices.
You have a DHCP server named Server1 that has an IPv4 scope named Scope1.
You need to prevent a client computer that uses the same name as an existing registration from updating the registration.
What should you do?
A. From the properties of Scope1, modify the Conflict detection attempts setting.
B. From Scope1, create a reservation.
C. From Control Panel, modify the properties of Ethernet.
D. From IPv4, create a new filter.
E. From the properties of Scope1, create an exclusion range.
F. From IPv4 run the DHCP Policy Configuration Wizard.
G. From the properties of IPv4, configure the bindings.
H. From the properties of Scope1, configure Name Protection.
Answer: H

NEW QUESTION NO: 32
Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2012.
The forest contains five domain controllers and five VPN servers that run Windows Server 2016.
Five hundred users connect to the VPN servers daily.
You need to configure a new server named Server1 as a RADIUS server.
What should you do first?
A. On Server1, deploy the Remote Access server role.
B. On Server1, deploy the Network Policy and Access Services role.
C. On a domain controller, set the forest functional level to Windows Server 2016.
D. On each VPN server, run the New-NpsRadiusClient cmdlet.
Answer: B
Explanation/Reference:
Explanation:
http://www.nyazit.com/configure-network-policy-server-2016/

NEW QUESTION NO: 33
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:

Server1 has two virtual machines named VM1 and VM that run Windows Server 2016. VM1 connects to Private1. VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM2 to Private1 and External1. You install the Remote Access server on VM2, and you configure NAT in the Routing and Remote Access console. You configure VM1 and VM2 as the default gateway.
Does this meet the goal?
A. Yes
B. No
Answer: B

NEW QUESTION NO: 34
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named adatum.com. The domain contains two DHCP servers named Server1 and Server2.
Server1 has the following IP configuration.

Server2 has the following IP configuration.

Some users report that sometimes they cannot access the network because of conflicting IP addresses.
You need to configure DHCP to avoid leasing addresses that are in use already.
Solution: On Server2, you modify the ConflictDetectionAttempts value for IPv4.
Does this meet the goal?
A. No
B. Yes
Answer: A

NEW QUESTION NO: 35
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:

Server1 has two virtual machines named VM1 and VM that run Windows Server 2016. VM1 connects to Private1. VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM2 to Private1 and External1. You install the Remote Access server on VM2, and you configure NAT in the Routing and Remote Access console. You configure VM1 to use VM2 as the default gateway.
Does this meet the goal?
A. Yes
B. No
Answer: A