- (Exam Topic 1)
You need to meet the technical requirements for Server1. Which users can currently perform the required tasks?

1. A. Admin1 only
2. B. Admin3 only
3. C. Admin1 and Admin3 only
4. D. Admin1 Admin2. and Admm3

Correct Answer: C

- (Exam Topic 3)
Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain. The domains contain the servers shown in the following table.

You need to configure resources based constrained delegation so that the users In contoso.com can use Windows Admin Center on Server) to connect to Server? How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Solution:
Text Description automatically generated
Reference:
https://docs.microsoft.com/en-us/windows-server/security/kerberos/kerberos-constrained-delegation-overview https://docs.microsoft.com/en-us/powershell/module/activedirectory/set-adcomputer?view=windowsserver2022

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 3)
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child domain named east.contoso.com.
in the contoso.com domain, you create two users named Admin1 and Admin2. You need to ensure that the users can perform the following tasks:
• Admin1 can create and manage Active Directory sites.
• Admin2 can deploy domain controller to the easl.conloso.com domain. The solution must use the principle of least privilege.
To which group should you add each user? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

Solution:
Reference:
https://docs.microsoft.com/en-us/windows-server/remote/remote-access/ras/multisite/configure/step-2-configure

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 3)
Your network contains a single-domain Active Directory Domain Services (AD DS) forest named conto.com. The forest contains the servers shown in the following exhibit table.

You plan to install a line-of-business (LOB) application on Server1. The application will install a custom windows services.
A new corporate security policy states that all custom Windows services must run under the context of a group managed service account (gMSA). You deploy a root key.
You need to create, configure, and install the gMSA that will be used by the new application.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

1. A. On Server1, run the install-ADServiceAccount cmdlet.
2. B. On DC1, run the New-ADServiceAccount cmdlet.
3. C. On DC1, run the Set_ADComputer cmdlet.
4. D. ON DC1, run the Install-ADServiceAccount cmdlet.
5. E. On Server1, run the Get-ADServiceAccount cmdlet.

Correct Answer: AB

- (Exam Topic 3)
You have a server named Server1 that runs Windows Server Server1 has a just-a-bunch-of-disks (JBOD) enclosure attached.
You plan to create a storage pool on Server1 and a virtual disk that will use a mirror layout. You are considering whether to use a two-way or a three-way mirror layout.
What is the minimum number of disks required for each type of minor layout? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A