- (Exam Topic 3)
You create an Azure virtual machine named Server1 that runs Windows Server. Server1 has the disk configuration shown in the following exhibit.


Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 3)
Your network contains an on -premises Active Directory Domain Services (AD DS) domain named contoso.com The domain contains the objects shown in the following table.

You plan to sync contoso.com with an Azure Active Directory (Azure AD) tenant by using Azure AD Connect You need to ensure that all the objects can be used in Conditional Access policies What should you do?

1. A. Change the scope of Group2 to Universal
2. B. Clear the Configure device writeback option.
3. C. Change the scope o' Group1 and Group2 to Global
4. D. Select the Configure Hybrid Azure AD join option.

Correct Answer: D
Hybrid Azure AD join needs to be configured to enable Computer1 to be used in Conditional Access Policies. Synchronized users, universal groups and domain local groups can be used in Conditional Access Policies.

- (Exam Topic 3)
You haw? a server named Host! that has the Hyper-V server role installed. Host! hosts a virtual machine named VM1.
You have a management server named Server! that runs Windows Server. You remotely manage Host1 from Server1 by using Hyper-V Manager.
You need to ensure that you can access a USB hard drive connected to Server1 when you connect to VM1 by using Virtual Machine Connection.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

1. A. From the Hyper-V Settings of Host1, select Allow enhanced session mode
2. B. From Disk Management on Host1. attach a virtual hard disk.
3. C. From Virtual Machine Connection, switch to a basic session.
4. D. From Virtual Machine Connection select Show Options and then select the USB hard drive.
5. E. From Disk Management on Host1, select Rescan Disks

Correct Answer: AD
Reference:
https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/learn-more/use-local-resources-on-hype

- (Exam Topic 3)
You have a Group Policy Object (GPO) named GPO1 that contains user settings only. You plan to apply GPO1 to a global security group named Group1.
You link GP01 to the domain, and you remove all the permissions granted to the Authenticated Users group. You need to configure permissions for GP01 to meet the following requirements.
• GPO1 must apply only to the users in Group 1.
• The solution must use the principle of least privilege

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 3)
Your company has a main office and a branch office. The two offices are connected by using a WAN link. Each office contains a firewall that filters WAN traffic.
The network in the branch office contains 10 servers that run Windows Server. All servers are administered from the main office only.
You plan to manage the servers in the branch office by using a Windows Admin Center gateway.
On a server in the branch office, you install the Windows Admin Center gateway by using the defaults settings.
You need to configure the firewall in the branch office to allow the required inbound connection to the Windows Admin Center gateway.
Which inbound TCP port should you allow?

1. A. 443
2. B. 3389
3. C. 5985
4. D. 6516

Correct Answer: A