Task 1

You need to prevent domain users from saving executable files in a share named \\SRVl\Data. The users must be able to save other files to the share.

You need to implement a name resolution solution that meets the networking requirements. Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point

You need to configure network communication between the Seattle and New York offices. The solution must meet the networking requirements.

What should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Which three actions should you perform in sequence to meet the security requirements for Webapp1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You are planning the implementation Azure Arc to support the planned changes. You need to configure the environment to support configuration management policies. What should you do?

You need to configure Azure File Sync to meet the file sharing requirements. What should you do? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

What should you implement for the deployment of DC3?

You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements. What should you configure?

You need to configure remote administration to meet the security requirements. What should you use?

You need to implement an availability solution for DHCP that meets the networking requirements.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You need to meet the security requirements for passwords.

Where should you configure the components for Azure AD Password Protection? lo answer, drag the appropriate components to the correct locations. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE Each correct selection is worth one point.

You need to implement the planned changes for Microsoft Entra users to sign in to Server1.

Which PowerShell cmdlet should you run?

You need to ensure that access to storage1 for the Marketing OU users meets the technical requirements.

What should you implement?

You need to meet the technical requirements for VM1.

Which cmdlet should you run first? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Which groups can you add to Group3 and Group5? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet the technical requirements for User1. The solution must use the principle of least privilege.

What should you do?

You need to meet the technical requirements for Server4.

Which cmdlets should you run on Server1 and Server4? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet the technical requirements for VM3

On which volumes can you enable Data Deduplication?

You need to meet the technical requirements for Server1. Which users can currently perform the required tasks?

You need to meet the technical requirements for VM2.

What should you do?

You need to meet the technical requirements for the site links. Which users can perform the required tasks?

Which groups can you add lo Group3 and Groups? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

The network contains the servers shown in the following table.

You plan to implement IP Address Management (IPAM).

You need to use the Group Policy based provisioning method for managed servers. The solution must support server discovery.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have on-premises file servers that run Windows Server as shown in the following table.

You have the Azure file shares shown in the following table.

You add a Storage Sync Service named Sync1 and an Azure File Sync sync group named Group1. Group1 uses share1 as a cloud endpoint.

You register Server1 and Server2 with Sync1. You add D:\Folder1 from Server1 as a server endpoint in Group1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You have an Azure virtual machine named Served that runs a network management application. Server1 has the following network configurations:

• Network interface: Nic1

• IP address. 10.1.1.1/24

• Connected to: VnetVSubnet1

You need to connect Server1 to an additional subnet named Vnet1/Subnet2.

What should you do?

Your on-premises network contains an Active Directory Domain Services (AD DS) domain.

You plan to sync the domain with a Microsoft Entra tenant by using Microsoft Entra Connect cloud sync.

You need to meet the following requirements:

• Install the software required to sync the domain and Microsoft Entra ID.

• Enable password hash synchronization.

What should you install, and what should you use to enable password hash synchronization? To answer, select the appropriate options in the answer area.

You have an Azure virtual machine named VM1 that runs Windows Server. You perform the following actions on VM1:

• Create a folder named Folder1 on volume C

• Create a folder named Folder2 on volume D.

• Add a new data disk to VM1 and create a new volume that is assigned drive letter E.

• Install an app named App1 on volume E.

You plan to resize VM1.

Which objects will present after you resize VM1?

You have a Group Policy Object (GPO) named GPO1 that contains user settings only.

You plan to apply GPO1 to a global security group named Group1.

You link GP01 to the domain, and you remove all the permissions granted to the Authenticated Users group.

You need to configure permissions for GP01 to meet the following requirements.

• GPO1 must apply only to the users in Group 1.

• The solution must use the principle of least privilege

Your network contains a two-domain on-premises Active Directory Domain Services (AD DS) forest named Contoso.com. The forest contains the domain controllers shown in the following table.

You create an Active Directory site named Site3. Site1, Site2 and Site3 each has a dedicated site link to the Hub site.

In Site3, you install a new server named Server1.

You need to promote Server1 to an ROOC in child.contoso.com by using the install from Media (IFM) option. The solution must minimize network traffic.

What should you do? To answer select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains two VLANs for client computers and one VLAN for a datacenter Each VLAN is assigned an IPv4 subnet Currently, all the client computers use static IP addresses.

You plan to deploy a DHCP server to the VLAN in the datacenter.

You need to use the DHCP server to provide IP configurations to all the client computers.

What is the minimum number of scopes and DHCP relays you should create? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.

You need to provide an administrator with the ability to manage Group Policy Objects (GPOs). The solution must use the principle of least privilege.

To which group should you add the administrator?

You plan to deploy an Azure virtual machine that will run Windows Server.

You need to ensure that an Azure Active Directory (Azure AD) user nameduserl@contoso.com can connect 10 the virtual machine by using the Azure Serial Console.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains a Active Directory Domain Service (AD DS) forest named contoso.com. The forest root domain contains a server named server1. contoso.com.

A two-way forest trust exists between the contoso.com forest and an AD DS forest named fabrikam.com. The fabrikam.com forest contains 10 child domains.

You need to ensure that only the members of a group named fabrikam\Group1 can authenticate to server1.contoso.com.

What should you do first?

You have an on-premises server named Server 1 that runs Windows Server. Server 1 contains a file share named Share 1.

You have an Azure subscription.

You perform the following actions:

• Deploy Azure File Sync

• Install the Azure File Sync agent on Server1.

• Register Server1 with Azure File Sync

You need to ensure that you can add Share1 as an Azure File Sync server endpoint.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Task 4

You need to register SRV1 to sync Azure file shares The registration must use the 34646045 Storage Sync Service.

The required source files are located in a folder named \\dc1.contoso.com\install.

You do NOT need to configure file share synchronization at this time and you do NOT need to update the agent.