You have 10 Hyper-V hosts that run Windows Server 2016.
Each Hyper-V host has eight virtual machines that run a distributed web application named App1.
You plan to implement a Software Load Balancing (SLB) solution for client access to App1.
You deploy two new virtual machines named SLB1 and SLB2.
You need to install the required components on the Hyper-V hosts and the new servers for the planned implementation.
Which components should you install? Select the Appropriate in selection area.

Correct Answer:

Explanation
Component to install on SLB1 and SLB2: SLB Multiplexer (MUX)
Component to install on each Hyper-V host:SLB Host Agent
https://blogs.technet.microsoft.com/tip_of_the_day/2016/06/28/tip-of-the-day-demystifying-software-definednetw
https://technet.microsoft.com/en-us/library/mt632286.aspxSLB Host Agent - When you deploy SLB, you must use System Center, Windows PowerShell, or anothermanagement application to deploy the SLB Host Agent on every Hyper-V host computer.You can install the SLB Host Agent on all versions of Windows Server 2016 that provide Hyper-V support,including Nano Server.SLB MUX - Part of the Software Load Balancer (SLB on Windows Server 2016, the SLB MUX processesinbound network traffic and maps VIPs (virtual IPs) toDIPs (datacenter IPs), then forwards the traffic to the correct DIP. Each MUX also uses BGP to publish VIProutes to edge routers. BGP Keep Alive notifies MUXeswhen a MUX fails, which allows active MUXes to redistribute the load in case of a MUX failure - essentiallyproviding load balancing for the load balancers.

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named contoso.com.
The domain contains 10 servers that run Windows Server 2016 and 800 client computers that run Windows 10.
You need to configure the domain to meet the following requirements:
-Users must be locked out from their computer if they enter an incorrect password twice.
-Users must only be able to unlock a locked account by using a one-time password that is sent to their mobile phone.
You deploy all the components of Microsoft Identity Manager (MIM) 2016.
Which three actions should you perform before you deploy the MIM add-ins and extensions? Each correct answer presents part of the solution.

• A.From a Group Policy object (GPO), configure Public Key Policies
• B.Deploy a Multi-Factor Authentication provider and copy the required certificates to the MIM server.
• C.From the MIM Portal, configure the Password Reset AuthN Workflow.
• D.Deploy a Multi-Factor Authentication provider and copy the required certificates to the client computers.
• E.From a Group Policy object (GPO), configure Security Settings.

Comment: *

Name: *

Email: *

Verification: *

_____ enables easier management for BitLocker enabled desktops and servers in a domain environment by providing automatic unlock of operating system volumes at system reboot when connected to a wired corporate network. This feature requires the client hardware to have a DHCP driver implemented in its UEFI firmware.

• A.Network Unlock
• B.JEA
• C.EFS recovery agent
• D.Credential Guard

Comment: *

Name: *

Email: *

Verification: *

You have a server named Server1 that runs Windows Server 2016.
You need to install Security Compliance Manager (SCM) 4.0 on Server1.
What should you install on Server1 first?

• A.the Active Directory Rights Management Services server role
• B.the .NET Framework 3.5 Features feature
• C.the Remote Server Administration Tools feature
• D.the Group Policy Management feature

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Secure that contains all servers.
You install Microsoft Security Compliance Manager (SCM) 4.0 on a server named Server1.
You need to export the SCM Pnnt Server Secunty baseline and to deploy the baseline to a server named Server2.
What should you do? To answer, select the appropnate options in the answer area.

Correct Answer:

Explanation
Format to use to export the baseline: GPO Backup (folder)
Tool to use to import the baseline: Group Policy Management
When the security settings is exported from SCM 4 in a GPO (folder) format, with a long GUID name

You have to import it to GPO by using "Group Policy Management", right-click the GPO and use "Import Settings" button

Do not confuse with security template .inf files. Only security template .INF file (which is a single file, not a folder) could be imported to a GPO by Group

Comment: *

Name: *

Email: *

Verification: *