Your data center contains 10 Hyper-V hosts that host 100 virtual machines.
You plan to secure access to the virtual machines by using the Datacenter Firewall service.
You have four servers available for the Datacenter Firewall service. The servers are configured as shown in the following table.

You need to install the required server roles for the planned deployment.
Which server role should you deploy? To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation:
References:
https://docs.microsoft.com/en-us/windows-server/networking/sdn/plan/installation-and-preparation-requirements-for-deploying-network-controller
https://docs.microsoft.com/en-us/windows-server/networking/sdn/technologies/network-controller/install-the-network-controller-server-role-using-server-manager

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
You have an organizational unit (OU) named Administration that contains the computer account of Serve1.
You import the Active Directory module to Server1.
You create a Group Policy object (GPO) named GPO1. You link GPO1 to the Administration OU.
You need to log an event each time an Active Directory cmdlet is executed successfully from Server1.
What should you do?

• A.From Advanced Audit Policy in GPO1, configure auditing for directory service changes.
• B.Run the(Get-Module ActiveDirectory).LogPipelineExecutionDetails = $falsecommand.
• C.Run the(Get-Module ActiveDirectory).LogPipelineExecutionDetails = $truecommand.
• D.From Advanced Audit Policy in GPO1, configure for other privilege use events.

Comment: *

Name: *

Email: *

Verification: *

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
You need to prevent NTLM authentication on Server1.
Solution: From a Group Policy, you configure the Kerberos Policy.
Does this meet the goal?

• A.Yes
• B.No

Comment: *

Name: *

Email: *

Verification: *

You have several virtual machines that run in a hosted data center on Hyper-V hosts.
The hosting provider recently updated the service offering in its Hyper-V environment to include a new Host Guardian Service (HSG).
You plan to use the Shielding Data File Wizard to create a data file that will include password information and an RDP file. The file will be used to create new shielded virtual machines in the fabric of the hosting provider.
What do you require from the hosting provider to complete the wizard?

• A.an XML file that contains the names of all the Hyper-V hosts in the fabric.
• B.an XML file that contains virtual machine configuration data from the Hyper-V hosts
• C.a CER file that contains a certificate from the provider
• D.an XML file that contains guardian metadata

Comment: *

Name: *

Email: *

Verification: *

You plan to implement Windows Defender Device Guard in your datacenter.
You build a model server that contains all the drivers and the software that you want to deploy and secure.
You need to create a new policy to ensure that only whitelisted files can be loaded to the servers. The policy must be in enforcement mode.
How should you complete the commands? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

References:
https://docs.microsoft.com/en-us/powershell/module/configci/new-cipolicyrule?view=win10-ps
https://docs.microsoft.com/en-us/powershell/module/configci/set-ruleoption?view=win10-ps

Comment: *

Name: *

Email: *

Verification: *