. loopback processing in GPO4 security filtering for the link of GPO1 loopback processing in GPO1 the Enforced property for the link of GPO4 the Enforced property for the link of GPO1 security filtering for the link of GPO4.
. Azure Active Directory Domain Services (Azure AD DS) an Azure virtual machine an Azure AD administrative unit Azure AD Application Proxy.
. Create a standalone managed service account (sMSA) in AD DS. Configure the IIS application pool to run as Network Service. Configure the IIS application pool to run as a specified user account. Create a group managed service account (gMSA) in Active Directory. Create a system-assigned managed identity in Azure AD Create a user-assigned managed identity in Azure AD. Create the Key Distribution Services (KDS) root key in AD DS.
. The Azure AD Password Protection DC agent The Azure AD Password Protection proxy service. A custom banned password list.
You need to meet the technical requirements for Server1.
Which users can currently perform the required tasks? Admin3 only Admin1 and Admin3 only Admin1 only Admin1, Admin2, and Admin3.
You need to meet the technical requirements for the site links.
Which users can perform the required tasks? Admin1, Admin2, and Admin3 Admin1 and Admin3 only Admin1 only Admin1 and Admin2 only Admin3 only.
. Add Users1 to the Server Operators group in contoso.com. Create a delegation on contoso.com. Add Users1 to the Account Operators group in contoso.com. Create a delegation on OU3.
. Group6 only. Group1 and Group2 only. Group1 and Group4 only. Group1, Group2, Group4, and Group5 only. Group1, Group2, Group4, Group5, and Group6 only. Group1 only. Group4 only. Group6 only. Group2 and Group4 only. Group4 and Group6 only.
You need to meet the technical requirements for Server3.
Which users can perform the required tasks? Admin1 and Admin2 only Admin1, Admin2, and Admin3 Admin1 only Admin1 and Admin3 only Admin3 only.
. Create a hybrid runbook worker in Azure Automation. Deploy the Azure Monitor agent to all the servers. Deploy the Azure Connected Machine agent to all the servers. Hybrid Azure AD join all the serves.
. Enable-PSRemoting Enable-ServerManagerStandardUserRemoting Set-Item Start-Service Enable-PSRemoting Enable-ServerManagerStandardUserRemoting Set-Item Start-Service.
. Set-VM Set-VMBios Set-VMHost Set-VMFirmware Set-VMProcessor -NewVMName -GuestControlledCacheTypes -EnableHostResourceProtecion -ExposeVirtualizationExtensions.
. Implement shielded virtual machines. Enable the Guest services integration service. Implement Credential Guard. Enable enhanced session mode.
. Create an Azure DNZ zone named corp.fabrikam.com. Create an Azure private DNZ zone named corp.fabrikam.com. Enable autoregistration in the corp.fabrikam.com Azure private DNS zone. Configure a conditional forwarder on DC3. Create a virtual network link in the corp.fabrikam.com Azure private DNS zone. On DC3, install the DNS Server role. Configure the DNS Servers settings for Vnet1.
. An ExpressRoute gateway A virtual network gateway An ExpressRoute circuit connection An ExpressRoute circuit connection A Site to-Site VPN An Azure application gateway An on premises data gateway.
. an Azure Bastion host Azure AD Privileged Identity Management (PIM) the Remote Desktop extension for Azure Cloud Services just in time (JIT) VM access.
. On each DHCP scope, configure DHCP failover. On each DHCP server, install the Failover Clustering feature and add the DHCP cluster role. DHCP2, configure a scope that contains 25 percent of the IP addresses from Scope1. On the router in each office, configure a DHCP relay. On DHCP1, create a scope that contains 25 percent of the IP addresses from Scope2.
. 1 2 3 4 1 2 3 4.
. C and D only D only C, D, E, and F D and E only D, E, and F only.
. Yes No Yes No Yes No.
|
