Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. Server1 is located in the perimeter network.
You install the Active Directory Federation Services server role on Server1. You create an Active Directory Federation Services (AD FS) farm by using a certificate that has a subject name of sts.contoso.com.
You need to enable certificate authentication from the Internet on Server1.
Which two inbound TCP ports should you open on the firewall? Each correct answer presents part of the solution.

• A.49443
• B.3389
• C.389
• D.8531
• E.443

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named contoso.com. All the accounts of the users in the
sales department are in an organizational unit (OU) named SalesOU.
An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object
(GPO) named Sales GPO.
You need to set the registry value of \HKEY_CURRENT_USER\Software\App1\Collaboration to 0.
Solution: You add a user preference that has an Update action.
Does this meet the goal?

• A.No
• B.Yes

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2016.
Server1 has IP Address Management (IPAM) installed. IPAM uses a Windows Internal Database.
You install Microsoft SQL Server on Server1.
You plan to move the IPAM database to SQL Server.
You need to create a SQL Server login for the IPAM service account.
For which user should you create the login? To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation:
References:
https://blogs.technet.microsoft.com/yagmurs/2014/07/31/moving-ipam-database-from-windows-internal-database-wid-to-sql-server-located-on-the-same-server/

Comment: *

Name: *

Email: *

Verification: *

Your company has two offices. The offices are located in Montreal and Seattle. The network contains an Active Directory forest named contoso.com.
The forest contains three domain controllers configured as shown in the following table.

The company physically relocates Server2 from the Montreal office to the Seattle office.
You discover that both Server1 and Server2 authenticate users who sign in to the client computers in the Montreal office. Only Server3 authenticates users who sign in to the computers in the Seattle office.
You need to ensure that Server2 authenticates the users in the Seattle office during normal network operations.
What should you do?

• A.From Windows PowerShell, run the Set-ADReplicationSite cmdlet.
• B.From Network Connections on Server2, modify the Internet Protocol Version 4 (TCP/IPv4) configuration.
• C.From Windows PowerShell, run the Move-ADDirectoryServer cmdlet.
• D.From Active Directory Users and Computers, modify the Location Property of Server2.

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. All domain-joined computers have Fast Logon Optimization enabled.
You need to ensure that the next time a user signs in to Server1, the user-targeted Group Policy objects (GPOs) are processed fully before the user gains access to the desktop.
What should you run on Server?

• A.Invoke-Gpupdate with the -Logoff switch
• B.Invoke-Gpupdate with the -Boot switch
• C.gpupdate with the /force switch
• D.Invoke-Gpupdate with the -Sync switch

Comment: *

Name: *

Email: *

Verification: *