Question 111
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2016 and has the DNS Server role installed. Automatic scavenging of stale records is enabled and the scavenging period is set to 10 days.
All client computers dynamically register their names in the contoso.com DNS zone on Server1.
You discover that the names of multiple client computers that were removed from the network several weeks ago can still be resolved.
You need to configure Server1 to automatically remove the records of the client computers that have been offline for more than 10 days.
Solution: You run the dnscmd.exe command and specify the /AgeAllRecords parameter for the zone.
Does this meet the goal?
Question 112
You have the servers configured as shown in the following table.
Your network uses an internal address space of 10.10.0.0/24. Client computers are allocated addresses from
10.10.0.60 to 10.10.0.199.
Server4 has the IPv4 configuration shown in the following table.
You need to configure Server4 to provide Internet access to the computers on the network.
Which three actions should you perform in sequence? To answer move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Question 113
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server2 than runs Windows Server 2016.
Users report that their client computers fail to obtain an IP address.
You open the DHCP console as shown in the Exhibit. (Click the Exhibit button.)
Scope1 has an address range of 172.16.0.10 to 172.16.0.100 and a prefix length of 23 bits.
You need to ensure that all of the client computers on the network can obtain an IP address from Server2.
Solution: You run the Set-DhcpServerv4MulticastScope cmdlet.
Does this meet the goal?
Question 114
You have a DirectAccess Server that is accessible by using the name directaccess.fabrikam.com.
On the DirectAccess server, you install a new server certificate that has a subject name of directaccess.contoso.com, and then you configure DNS records for directaccess.contoso.com You need to change the endpoint name for DirectAccess to directaccess.contoso.com What command should you run? To answer, select the appropriate options in the answer area.
Question 115
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.
You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From Windows PowerShell on Server1, you run the Export-DnsServerDnsSecPublicKey cmdlet.
Does this meet the goal?



