Black Friday / Cyber Monday Special 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ex2p65

Exact2Pass Menu

Question # 4

You need to configure remote administration to meet the security requirements. What should you use?

A.

just in time (JIT) VM access

B.

Azure AD Privileged Identity Management (PIM)

C.

the Remote Desktop extension for Azure Cloud Services

D.

an Azure Bastion host

Full Access
Question # 5

You need to meet the security requirements for passwords.

Where should you configure the components for Azure AD Password Protection? lo answer, drag the appropriate components to the correct locations. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE Each correct selection is worth one point.

Full Access
Question # 6

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant.

You plan to implement self-service password reset (SSPR) in Azure AD.

You need to ensure that users that reset their passwords by using SSPR can use the new password resources in the AD DS domain.

What should you do?

A.

Deploy the Azure AD Password Protection proxy service to the on premises network.

B.

Run the Microsoft Azure Active Directory Connect wizard and select Password writeback.

C.

Grant the Change password permission for the domain to the Azure AD Connect service account.

D.

Grant the impersonate a client after authentication user right to the Azure AD Connect service account.

Full Access
Question # 7

You have a Windows Server container host named Server1 that has a single disk.

On Server1, you plan to start the containers shown in the following table.

Which isolation mode can you use for each container? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 8

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

You need to identify which server is the PDC emulator for the domain.

Solution: From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations Master.

Does this meet the goal?

A.

Yes

B.

No

Full Access
Question # 9

Which groups can you add lo Group3 and Groups? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

Full Access
Question # 10

You need to meet the technical requirements for Server1. Which users can currently perform the required tasks?

A.

Admin1 only

B.

Admin3 only

C.

Admin1 and Admin3 only

D.

Admin1 Admin2. and Admm3

Full Access
Question # 11

You plan w deploy an Azure virtual machine that win run Windows Server. The virtual machine will host an Active Directory Domain Services (AD DS) domain controller and a drive named f: on a new virtual disk.

You need to configure storage foe the virtual machine. The solution must meet the following requirements

• Maximize resiliency for AD DS.

• Prevent accidental data loss.

How should you configure the storage? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 12

You need to meet the technical requirements for VM1.

Which cmdlet should you run first? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 13

You need to meet the technical requirements for VM2.

What should you do?

A.

Implement shielded virtual machines.

B.

Enable the Guest services integration service.

C.

Implement Credential Guard.

D.

Enable enhanced session mode.

Full Access
Question # 14

You need to meet the technical requirements for User1. The solution must use the principle of least privilege.

What should you do?

A.

Add Users1 to the Server Operators group in contoso.com.

B.

Create a delegation on contoso.com.

C.

Add Users1 to the Account Operators group in contoso.com.

D.

Create a delegation on OU3.

Full Access
Question # 15

You need to meet the technical requirements for Server4.

Which cmdlets should you run on Server1 and Server4? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 16

You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements. What should you configure?

A.

security filtering for the link of GP04

B.

security filtering for the link of GPO1

C.

loopback processing in GPO4

D.

the Enforced property for the link of GP01

E.

loopback processing in GPO1

F.

the Enforced property for the link of GP04

Full Access