Your network contains an Active Directory domain named contoso.com. The domain contains a server named Servers that has the Windows Server Update Services server role installed.
You need to configure Windows Server Update Services (WSUS) on Servers to use SSI.
You install a certificate in the local Computer store.
Which two tools should you use? Each correct answer presents part of the solution.

• A.Update Services
• B.Internet Information Services (IIS) Manager
• C.Netsh
• D.Wsusutil
• E.Server Manager

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
The hardware configuration on Server1 meets the requirements for Credential Guard.
You need to enable Credential Guard on Server1.
What should you do? To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation

https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-requirements The Virtualization-based security requires:-64-bit CPU-CPU virtualization extensions plus extended page tables-Windows hypervisorhttps://docs.
microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-manage#hardware-readines s-tool



References:
https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-requirements
https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-manage#hardwar

Comment: *

Name: *

Email: *

Verification: *

You plan to deploy three encrypted virtual machines that use Secure Boot. The virtual machines will be configured as shown in the following table.

How should you protect each virtual machine? To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation:
Shielded VM Prevents Virtual Machine connection and PowerShell Direct, it prevent the Hyper-V host to interact in any means with the Shielded VM.
https://docs.microsoft.com/en-us/windows-server/virtualization/guarded-fabric-shielded-vm/guarded-fabric-andshielded-vms

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named contoso.com. The domain contains two DNS servers that run Windows Server 2016. The servers host two zones named contoso.com and admin.contoso.com. You sign both zones. You need to ensure that all client computers in the domain validate the zone records when they query the zone. What should you deploy?

• A.a Microsoft Security Compliance Manager (SCM) policy
• B.a zone transfer policy
• C.a Name Resolution Policy Table (NRPT)
• D.a connection security rule

Correct Answer: C

You should use Group Policy NRPT to for a DNS Client to perform DNSSEC validation of DNS zone records.

Comment: *

Name: *

Email: *

Verification: *

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. All client computers run Windows
10.
You plan to deploy a Remote Desktop connection solution for the client computers.
You have four available servers in the domain that can be configured as Remote Desktop servers. The servers are configured as shown in the following table.

You need to ensure that all Remote Desktop connections can be protected by using Remote Credential Guard.
Solution: You deploy the Remote Desktop connection solution by using Server1.
Does this meet the goal?

• A.Yes
• B.No

Comment: *

Name: *

Email: *

Verification: *