Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains two Windows Server Failover Cluster (WSFQ instances named Cluster1 and Ckister2. Cluster! hosts Hyper-V virtual machines. Cluster2 does NOT have any high availability roles configured.

You need to create a Storage Spaces Direct cluster in Cluster2 that will store the virtual machine hard disk files for Cluster1.

Which role should you configure for Cluster2? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the implementation of Cluster2 to support the on-premises migration plan.

You need to ensure that the disks on Cluster2 meet the security requirements.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

You are planning the www.fabrikam.com website migration to support the Azure migration plan.

How should you configure WebApp1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are remediating the firewall security risks to meet the security requirements.

What should you configure to reduce the risks?

You are planning the europe.fabrikam.com migration to support the on-premises migration plan-Where should you install the Password Export Server (PES) service, where should you generate the encryption key? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the deployment of Microsoft Sentinel.

Which type of Microsoft Sentinel data connector should you use to meet the security requirements?

You need to back up Server 4 to meet the technical requirements.

What should you do first?

With which servers can Server1 and Server3 communicate? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to meet technical requirements for Share1.

What should you use?

Which domain controller should be online to meet the technical requirements for DC4?

You are evaluating the technical requirements tor Cluster2.

What is the minimum number of Azure Site Recovery Providers that you should install?

You need to meet the technical requirements for User1.

To which group in contoso.com should you add User1?

You need to implement alerts for the domain controllers. The solution must meet the technical requirements.

What should you do on the domain controllers, and what should you create on Azure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to configure BitLocker on Server4.

On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

For each server. Windows Defender Firewall is configured to allow only communication between servers on the same segment. Server! has the following connection security rule:

• Name: Rule1

• Rule type: Isolation

• Requirement: Require authentication for inbound connections and request authentication for outbound connections

• Authentication method: Computer (Kerberos V5)

• Profile: Domain. Private. Public

Server2 does not have any connection security rules.

Server3 has the following connection security rule:

• Name: Rute3

• Rule type: Server-to-server

• Endpoints:

o Computers in Endpoint 1:192.168.50/24

o Computers in Endpoint 2: 192.168.1.0/24

• Requirement Request authentication (or inbound and outbound connections

• Authentication method: Computer (Kerberos V5)

• Profile: Domain. Private. Public

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You are planning the DHCP1 migration to support the DHCP migration plan.

Which two PowerShell cmdlets should you run on DHCP1, and which two PowerShell cmdlets should you run on DHCP2? To answer, drag the appropriate cmdlets to the correct servers. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You are planning the data share migration to support the on-premises migration plan.

What should you use to perform the migration?

You need to implement a security policy solution to authorize the applications. The solution must meet the security requirements.

Which service should you use to enforce the security policy, and what should you use to manage the policy settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the migration of APP3 and APP4 to support the Azure migration plan.

What should you do on Cluster1 and in Azure before you perform the migration? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning the migration of Archive1 to support the on-premises migration plan.

What is the minimum number of IP addresses required for the node and cluster roles on Cluster3?

You need to meet the technical requirements for Cluster3.

What should you include in the solution?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains servers that run Windows Server 2022.

You have a Storage Spaces Direct cluster named SSCIuster1 that contains two physical nodes named Node! and Node2. Node! and Node2 host highly available virtual machines.

You plan to perform an in-place upgrade to Windows Server 2025 on Node1

You need to ensure that the virtual machines remain running during the upgrade.

Which four actions should you perform in sequence on Node1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have five Azure virtual machines.

You need to collect performance data and Windows Event logs from the virtual machines. The data collected must be sent to an Azure Storage account.

What should you install on the virtual machines?

You have an Azure Active Directory Domain Services (Azure AD DS) domain named aadds.contoso.com.

You have an Azure virtual network named Vnet1. Vnet1 contains two virtual machines named VM1 and VM2 that run Windows Server. VMI and VM2 are joined to aadds.contoso.com.

You create a new Azure virtual network named Vnet2. You add a new server named VM3 to Vnet2.

When you attempt to join VM3 to aadds.contoso.com, you get an error message that the domain cannot be found.

You need to ensure that you can join VM3 toaadds.contoso.com.

You have a Windows Server 2022 Storage Spaces Direct cluster named Cluster1. Cluster1 has four nodes that contain virtual machines.

You need to perform an in-place upgrade of Cluster! to Windows Server 2025. The solution must ensure that the virtual machines are always available during the upgrade.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

Your network contains an on-premises Active Directory Domain Services (AD DS) domain.

The domain contains the servers shown in the following table.

Server1 has the connection security rule as shown in the Server1 exhibit. (Click the Server1 tab.)

Server2 has the connection security rule as shown in the Server2 exhibit. (Click the Server2 tab.)

Server1 has the inbound firewall rules as shown in the Server1 inbound rules exhibit. (Click the Server1 inbound rules tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Your network contains an Active Directory Domain Services (AD DS) domain. You plan to protect high-privilege domain credentials by specifying the following:

• The lifetime of the Kerberos Ticket Granting Ticket (TGT)

• The conditions required for devices to request a TGT

What should you use, and what should you create? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains domain controllers that run Windows Server 2019 and are configured as shown in the following table.

You plan to run the adprep /domainprep command.

Which domain controller should be available for the command to complete?

You have a server named Server1 that runs Windows Server and has the Hyper-V server role installed.

You import the Azure Migrate appliance as VM1.

You need to register VM1 with Azure Migrate.

What should you do in Azure Migrate? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.

Sysvol replicates by using the File Replication Service (FRS).

You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.

You need to ensure that you can add the first domain controller that runs Windows Server 2022.

Solution: You upgrade the PDC emulator.

Does this meet the goal?

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant by using password hash synchronization.

You have a Microsoft 365 subscription.

All devices are hybrid Azure AD-joined.

Users report that they must enter their password manually when accessing Microsoft 365 applications.

You need to reduce the number of times the users are prompted for their password when they access Microsoft 365 and Azure services.

What should you do?

You have an Azure virtual machine named VM1 that runs Windows Server.

You plan to deploy a new line-of-business (LOB) application to VM1.

You need to ensure that the application can create child processes.

What should you configure on VM1?

Your network contains an Active Directory Domain Services (AD DS) domain that has the Active Directory Recycle Bin enabled. The domain contains two domain controllers named DC1 and DC2. The system state of the domain controllers is backed up daily at 23:00 by using Windows Server Backup.

You have an organizational unit (OU) named ParisUsers that contains 1,000 users.

At 08:00, DC1 shuts down for hardware maintenance. The maintenance completes, but DC1 remains shut down.

At 09:00, an administrative error causes the manager attribute of each user in ParisUsers to be deleted.

You need to recover the user account details as quickly as possible. The solution must minimize data loss.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have an on-premises server named Server1 that runs Windows Server and has the Hyper-V server role installed. Server1 hosts a virtual machine named VM1 that runs Windows Server.

You need to protect VM1 by using Azure Site Recovery. The solution must use Azure as the disaster recovery site.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have a failover cluster named Cluster1 that contains three Windows Server nodes named Node 1, Node2. and Node3.

You need to deploy a Storage Spaces Direct virtual disk to Cluster1.

You add the following disks to each node:

• Three 512-6B NVMe disks

• Three 3-TB diskS

• Three 1-TB SSD disks

On Cluster1. you enable Storage Spaces Direct and add the new disks.

What is the total amount of disk space available for the Storage Spaces Direct virtual disk, and which operations are cached for the SSD and HDD disks? To answer, select the appropriate options in the answer area.

You have a server named Server1 that runs Windows Server.

On Server1, you create a Data Collector Set named CollectorSet1 based on the Basic template.

You need to configure CollectorSet1 to meet the following requirements:

Older performance counter logs must be overwritten by new ones.

Performance counter logging must stop if there is less than 500 MB of free disk space.

What should you configure for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains the virtual machines shown in the following table.

You plan to use Azure Site Recovery to replicate supported virtual machines to a secondary Azure region. Which virtual machines can be replicated by using Azure Site Recovery?

You have an Azure subscription. The subscription contains multiple virtual machines that run Windows Server. You have the Azure virtual machine backup policies shown in the following table.

You are evaluating automatically moving recovery points to the vault-archive tier. For which policies can you enable tiering?

Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabtikam.com. Contoso.com includes the groups shown in the following table.

You need to migrate the groups to fabrikam.com by using ADMT.

Which groups can be migrated and which groups can have the sIDHistory attribute populated after the migration?

You need to meet the technical requirements for Cluster2.

Which four actions should you perform in sequence before you can enable replication? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

What is the effective minimum password length for User1 and Admin1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You have 500 on-premises servers that run Windows Server.

You have an Azure subscription that contains a Log Analytics workspace named Workspace1.

You plan to use VM insights in Azure Monitor to monitor the on-premises servers.

You need to onboard the servers to Azure Arc by using the template script. The solution must meet the following requirements:

• Follow the principle of least privilege.

• Minimize administrative effort.

What should you do first?

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com contains a member server named Server1 .contoso.com.

You cannot resolve the FQDN of server1.contoso.com.

You verify that Windows Defender Firewall is configured correctly and that you can ping server1.contoso.com successfully by using the server's IP address.

You need to validate that the DNS record for server1.contoso.com exists.

Which command should you run?

You have two servers that run Windows Server as shown in the following table.

You need to copy the contents of volume E from Server1 to Server2. The solution must meet the following requirements:

Ensure that files in-use are copied.

Minimize administrative effort.

What should you use?

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the organizational units (OUs) shown in the following table.

In the domain, you create the Group Policy Objects (GPOs) shown in the following table.

You need to implement IPsec authentication to ensure that only authenticated computer accounts can connect to the members in the domain. The solution must minimize administrative effort.

Which GPOs should you apply to the Domain Controllers OU and the Domain Servers OU? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. You enable Microsoft Defender for Servers Plan 2. You need to implement File Integrity Monitoring (FIM). What should you create first?

You have three servers named Server 1. Servers and Server3 that run Windows Server. The servers have the Hyper-V server rote installed and are configured in a Storage Spaces Deed cluster named Cluster1.

Cluster1 hosts a virtual machine named VM1 that has Windows Admin Center Installed.

You manage all servers and clusters by using Windows Admin Center.

You purchase an Azure subscription.

You need to configure email alerts in Azure Monitor for the following:

• Disk Capacity Utilization Over 80% for 10 Minutes

• Any critical alert in the cluster system event log

• Memory Utilization over 95% for 10 minutes

• Heartbeat fewer than 5 beats for 5 Minutes.

• CPU Utilization over 85 % for 10 Minutes.

• Any hearth service faults for the cluster

The solution must use the minimum amount of administrative effort.

What should you do?