NEW QUESTION 1
Your network contains three Hyper-V hosts. You add all of the hosts to a cluster.
You need to create highly available storage spaces that connect to directly attached storage on the hosts.
Which cmdlet should you use?

• A. Update-ClusterVirtualMachineConfiguration
• B. Enable-ClusterStorageSpacesDirect
• C. Set-StoragePool
• D. Add-ClusterDisk

Answer: B

Explanation:
The Enable-ClusterStorageSpacesDirect cmdlet enables highly available Storage Spaces that use directly attached storage Storage Spaces Direct (S2D) on a cluster.

NEW QUESTION 2
You have a server named Server1 that runs Windows Server 2021 and has the File and Storage Services server role installed. Server1 has an ReFS-formatted volume named Volume1 that is 512 GB. Volume1 is mounted as C:Appltemp. You need to ensure that you can enable deduplication of Volume1. What should you do?

• A. Format Volume1
• B. Install a Windows feature.
• C. Initialize the physical disk that contains Volume1.
• D. Unmount Volume1.

Answer: B

NEW QUESTION 3
You have a server named Server1 that runs Windows Server 2021 and has the Hyper-V server role installed.
On Server1, you plan to create a virtual machine named VM1. You need to ensure that you can start VM1 from the network.
What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

• A. Create a generation 2 virtual machine.
• B. Create a generation 1 virtual machine and run theEnable-NetAdapterPackageDirectcmdlet.
• C. Create a generation 1 virtual machine that has a legacy network adapter.
• D. Create a generation 1 virtual machine and configure a single root I/O virtualization (SRV-IO) interface for the network adapter.

Answer: AC

NEW QUESTION 4
You have a server named Server1 that runs Windows Server 2021. You need to configure Server1 as a multitenant RAS Gateway. What should you install on Server1?

• A. the Network Controller server role
• B. the Remote Access server role
• C. the Data Center Bridging feature
• D. the Network Policy and Access Services server role

Answer: B

Explanation:
RAS Gateway - Multitenant. You can deploy RAS Gateway as a multitenant, software-based edge gateway and router when you are using Hyper-V Network Virtualization or you have VM networks deployed with virtual Local Area Networks (VLANs). With the RAS Gateway, CloudService Providers (CSPs) and Enterprises can enable datacenter and cloud network traffic routing between virtual and physical networks, including the Internet. With the RAS Gateway, your tenants can use point-so-site VPN connections to access their VM network resources in the datacenter from anywhere. You can also provide tenants with site-to-site VPN connections between their remote sites and your CSP datacenter. In addition, you can configure the RAS Gateway with BGP for dynamic routing, and you can enable Network Address Translation (NAT) to provide Internet access for VMs on VM networks. References:
https://technet.microsoft.com/en-us/windows-server-docs/networking/remote-access/remoteaccess

NEW QUESTION 5
You deploy a Hyper-V server named Server1 in an isolated test environment. The test environment is prevented from accessing the Internet. Server1 runs the Datacenter edition of Windows Server 2021. You plan to deploy the following guest virtual machines on the server:

Which activation model should you use for the virtual machines?

• A. Multiple Activation Key (MAK)
• B. Key Management Service (KMS)
• C. Original Equipment Manufacturer (OEM) key
• D. Automatic Virtual Machine Activation (AVMA)

Answer: D

Explanation:
https://technet.microsoft.com/en-us/library/dn303421(v=ws.11).aspx
AVMA lets you install virtual machines on a properly activated Windows server without having to manage product keys for each individual virtual machine, even in disconnected environments. AVMA binds the virtual machine activation to the licensed virtualization server and activates the virtual machine when it starts up. AVMA also provides real-time reporting on usage and historical data on the license state of the virtual machine. Reporting and tracking data is available on the virtualization server.

NEW QUESTION 6
You have a server named Server1 that runs Windows Server 2021.
Sever1 is an IP Address Management (IPAM) server that collects DHCP and DNS logs and events for your entire network.
You need to enable a user named TECH1 to create pointer (PTR), host (A) and service location (SRV) records on all of the DNS servers on the network.
What should you do on Server1?

• A. Run the Set-IpamCustomFieId cmdlet and then run the Set-IpamAddressSpace cmdlet
• B. From the IPAM node in Server Manager, create a new user role and a new access policy
• C. Run the Set-IpamCustomField cmdlet and then run the Set-IpamAccessScope cmdlet
• D. From the IPAM node in Server Manager, create a new user role and a new access scop

Answer: D

NEW QUESTION 7
You have an application named App1. App1 is distributed to multiple Hyper-V virtual machines in a multitenant environment.
You need to ensure that the traffic is distributed evenly among the virtual machines that host App1. What should you include in the environment?

• A. Network Controller and Windows Server Software Load Balancing (SLB) nodes
• B. an RAS Gateway and Windows Server Software Load Balancing (SLB) nodes
• C. an RAS Gateway and Windows Server Network Load Balancing (NLB) nodes
• D. Network Controller and Windows Server Network Load Balancing (NLB) nodes

Answer: A

Explanation:
References:
https://technet.microsoft.com/en-us/library/mt632286.aspx

NEW QUESTION 8
You have a Hyper-V host named Server1 that runs Windows Server 2021. Server1 hosts a virtual machine named VM1.
You need to provide VM1 with direct access to a graphics processing unit (GPU) on Server1. What should you do first?

• A. OnVM1, install the Quality Windows Audio Video Experience (qWave) feature.
• B. Disable the display adapter device on Server1.
• C. In the settings of VM1, add a RemoteFX 3D Video Adapter.
• D. Dismount the display adapter on Server1.

Answer: B

Explanation:
Before the physical device is allowed to be passed through to the VM, the device must be disabled on the host system. The physical device must be accessible/available exclusively to the VM only. References:
Introduction to Windows Server 2021 Hyper-V DiscreteDevice Assignment, page 5 https://lenovopress.com/lp0088.pdf

NEW QUESTION 9
HOTSPOT
You have a server named VM1. VM1 is a virtual machine on a Hyper-V host that runs Windows Server 2021.
You need to create a checkpoint that includes the virtual machine memory state of VM1. What commands should you run? To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 10
You have a remote access server named Server1 that runs Windows Server 2021. Server1 has DirectAccess enabled.
You have a proxy server named Server2. All computers on the internal network connect to the Internet by using the proxy.
On Server1, you run the command Set-DAClient -forceTunnel Enabled.
You need to ensure that when a DirectAccess client connects to the network, the client accesses all the Internet resources through the proxy.
What should you run on Server1?

• A. Set-DnsClientGlobalSetting
• B. Set-DAEntryPoint
• C. Set-DnsClientNrptRule
• D. Set-DnsClientNrptGlobal

Answer: B

NEW QUESTION 11
DRAG DROP
You have a server named Server1 that runs Windows Server 2021.
You need to deploy the first cluster node of a Network Controller cluster.
Which four cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Deploy Network Controller using Windows PowerShell Step 1: Install-WindowsFeature
Install the Network Controller server role
To install Network Controller by using Windows PowerShell, type the following commands at a Windows PowerShell prompt, and then press ENTER.
Install-WindowsFeature -Name NetworkController –IncludeManagementTools Step 2: New-NetworkControllerNodeObject
You can create a Network Controller cluster by creating a node object andthen configuring the cluster.
You need to create a node object for each computer or VM that is a member of the Network Controller cluster.
Tocreate a node object, type the following command at the Windows PowerShell command prompt, and then press ENTER. Ensure that you add values for each parameter that are appropriate for your deployment.
New-NetworkControllerNodeObject –Name <string> -Server<String> -FaultDomain <string>-RestInte Step 3: Install-NetworkControllerCluster
To configure the cluster, typethe following command at the Windows PowerShell command prompt, and then press ENTER. Ensure that you add values for each parameter that are appropriate for your deployment.
Install-NetworkControllerCluster –Node <NetworkControllerNode[]> –ClusterAuthentication …
Step 4: Install-NetworkController
To configure the Network Controller application, type the following command at the Windows PowerShell command prompt, and then press ENTER. Ensure that you add values for each parameter that are appropriate for your deployment.
Install-NetworkController –Node <NetworkControllerNode[]> –ClientAuthentication References:
https://technet.microsoft.com/en-us/library/mt282165.aspx

NEW QUESTION 12
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. Refer to exhibit:

Server1 has two virtual machines named VM1 and VM that run Windows Server 2021. VM1 connects to Private VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM1 to Internal1. You run the New-NetNatIpAddress and the New-NetNat cmdlets on Server1. You configure VM1 to use VM2 as the default gateway.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 13
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
Your network contains Windows and non-Windows devices.
You have a DHCP server named Server1 that has an IPv4 scope named Scope1.
You need to prevent a client computer that uses the same name as an existing registration from updating the registration.
What should you do?

• A. From the properties of Scope1, modify the Conflict detection attempts setting.
• B. From the properties of Scope1, configure Name Protection.
• C. From the properties of IPv4, configure the bindings.
• D. From IPv4, create a new filter.
• E. From the properties of Scope1, create an exclusion range.
• F. From IPv4 run the DHCP Policy Configuration Wizard.
• G. From Control Panel, modify the properties of Ethernet.
• H. From Scope1, create a reservatio

Answer: F

NEW QUESTION 14
HOTSPOT
Your network contains an Active Directory forest. The forest contains two domain controllers named DC1 and DC2 that run Windows Server 2021. DC1 holds all of the operations master roles.
DC1 experiences a hardware failure.
You plan to use an automated process that will create 1,000 user accounts. You need to ensure that the automated process can complete successfully.
Which command should you run? To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Box 1: Move-ADDirectoryServerOperationMasterRole
Box 2: RIDMaster
Box 3: -Force

NEW QUESTION 15
DRAG DROP
You network contains an Active Directory forest. The forest contains an Active Directory Federation Services (AD FS) deployment.
The AD FS deployment contains the following:
* An AD FS server named server1.contoso.com that runs Windows Server 2021
* A Web Application Proxy used to publish AD FS
* A LIPN that uses the contoso.com suffix
* A namespace named adfs.contoso.com
You create a Microsoft Office 365 tenant named contoso.onmicrosoft.com. You use Microsoft Azure Active Directory Connect (AD Connect) to synchronize all of the users and the UPNs from the contoso.com forest to Office 365.
You need to configure federation between Office 365 and the on-premises deployment of Active Directory.
Which three commands should you run in sequence from Server1? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 16
You have a Hyper-V host named Server1 that runs Windows Server 2021. The host has two virtual machines (VMs) named VM1 and VM2.
On the Hyper-V host, you create two virtual disks named Disk1 and Disk2. You plan to create a test environment for Storage Spaces Direct.
You need to configure the VMs to connect to the virtual disks. What should you use?

• A. An iSCSI target
• B. A virtual SCSI controller
• C. A virtual fibre channel adapter
• D. A virtual IDE controller

Answer: B

Explanation:
References:
https://blogs.msdn.microsoft.com/clustering/2015/05/27/testing-storage-spaces-direct-usingwindows- server-2021-virtual-machines/

NEW QUESTION 17
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2021. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration:

You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.
You need to configure Active Directory to support the planned deployment. Solution: You run adprep.exe from the Windows Server 2021 installation media. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
Device registration requires a forest functional level of Windows Server 2012 R2.
New installations of AD FS 2021 require the Active Directory 2021 schema (minimum version 85). References:
https://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/operations/configuredevice- based-conditional-access-on-premises

NEW QUESTION 18
You have a server named Server1 that runs Windows Server 2021. You need to install the DNS Server role on Server1.
What should you run?

• A. the Install-Package cmdlet
• B. the setup.exe command
• C. the dnscmd.exe command
• D. the Enable-WindowsOptionalFeature cmdlet

Answer: D

NEW QUESTION 19
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Hyper-V host named Server1 that hosts a virtual machine named VM1. Server1 and VM1 run Windows Server 2021.
The settings for VM1 are configured as shown in the exhibit below.

You need to ensure that you can use the Copy-VMFile cmdlet on Server1 to copy files from VM1. Solution: You need to enable the Data Exchange integration service for VM1.
Does this meet the goal?

• A. YES
• B. NO

Answer: A

NEW QUESTION 20
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2021. The servers have the same hardware configuration.
You need to asynchronously replicate volume F: from Server1 to Server2. What should you do?

• A. Install the Failover Clustering feature and create a new cluster resource group.
• B. Run Set-DfsrServiceConfiguration and specify the –RPCPort parameter.
• C. Run New-SRPartnership and specify the –ReplicationMode parameter.
• D. Install the Failover Clustering feature and use Cluster Shared Volumes (CSV).

Answer: C

Explanation:
Run New-SRPartnership and specify the –ReplicationMode parameter. References:
https://www.starwindsoftware.com/blog/how-to-configure-storage-replication-using-windowsserver- 2021-part-2

NEW QUESTION 21
You have a server named Server1 that runs Windows Server 2021. Server1 is a Hyper-V host that hosts a virtual machine named VM1.
Server1 has three network adapter cards that are connected to virtual switches named vSwitch1, vSwitch2 and vSwitch3.
You configure NIC Teaming on VM1 as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that VM1 will retain access to the network if a physical network adapter card fails on Server1.
What should you do?

• A. From Windows PowerShell on VM1, run the Set-VmNetworkAdapterTeamMapping cmdlet.
• B. From Windows PowerShell on Server1, run the Set-VmNetworkAdapter cmdlet.
• C. From Windows PowerShell on Server1, run the Set-VmSwitch cmdlet.
• D. From Windows PowerShell on Server1, run the Set-VmNetworkAdapterFailoverConfiguration cmdlet

Answer: A

NEW QUESTION 22
You have a Nano Server named Nano1.
You deploy several containers to Nano1 that use an image named Image1. You need to deploy a new container to Nano1 that uses Image1.
What should you run?

• A. the Install-WindowsFeature cmdlet
• B. the docker run command
• C. the docker load command
• D. the Install-NanoServerPackage cmdlet

Answer: B

Explanation:
When an operator executes docker run, the container process that runs is isolated in that it has its own file system, its own networking, and its own isolated process tree separate from the host. The basic docker run command takes this form:
$ docker run [OPTIONS] IMAGE[:TAG|@DIGEST] [COMMAND] [ARG...]

NEW QUESTION 23
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2021.
You install IP Address Management (IPAM) on Server1. You select the automatic provisioning method, and then you specify a prefix of IPAM1.
You need to configure the environment for automatic IPAM provisioning.
Which cmdlet should you run? To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Invoke-IpamGpoProvisioning –Domain contoso.com –GpoPrefixName IPAM –IpamServerFqdn dc1.contoso.com

NEW QUESTION 24
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2021. Server1 is located in the perimeter network.
You install the Active Directory Federation Services server role on Server1. You create an Active Directory Federation Services (AD FS) farm by using a certificate that has a subject name of sts.contoso.com.
You need to enable certificate authentication from the Internet on Server1.
Which two inbound TCP ports should you open on the firewall? Each correct answer presents part of the solution.

• A. 389
• B. 443
• C. 3389
• D. 8531
• E. 49443

Answer: BE

Explanation:
Configuring the following network services appropriately is critical for successful deployment of AD FS in your organization:
Configuring Corporate Firewall References:
https://technet.microsoft.com/en-us/library/dn554247(v=ws.11).aspx https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/design/ad-fsrequirements# BKMK_7

NEW QUESTION 25
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
You have a Hyper-V host named Server1 that runs Windows Server 2021. You plan to deploy several shielded virtual machines on Server1.
You deploy a Host Guardian on a new server.
You need to ensure that Server1 can host shielded virtual machines. What should you do first?

• A. the Mount-VHD cmdlet
• B. the Diskpart command
• C. the Set-VHD cmdlet
• D. the Set-VM cmdlet
• E. the Set-VMHost cmdlet
• F. the Set-VMProcessor cmdlet
• G. the Install-WindowsFeature cmdlet
• H. the Optimize-VHD cmdlet

Answer: G

Explanation:
Installing Host Guardian Service (HGS) Role
On a machine running Windows Server 2021, install the Host Guardian Service role using Server Manager or Windows PowerShell.
From the command line issue the following command:
Install-WindowsFeature HostGuardianServiceRole –IncludeManagementTools References:
https://blogs.technet.microsoft.com/datacentersecurity/2021/03/16/windows-server-2021-andhost- guardian-service-for-shielded-vms/

NEW QUESTION 26
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From a Group Policy object (GPO) in the domain, you add a rule to the Name Resolution Policy Table (NRPT).
Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation:
The NRPT stores configurations and settings that are used to deploy DNS Security Extensions (DNSSEC), and also stores information related to DirectAccess, a remote access technology.
Note: The Name Resolution Policy Table (NRPT) is a new feature available in Windows Server 2008 R2. The NRPT is a table that contains rules you can configure to specify DNS settings or special behavior for names or namespaces. When performing DNS name resolution, the DNS Client service checks the NRPT before sending a DNS query. If a DNS query or response matches an entry in the NRPT, it is handled according to settings in the policy. Queries and responses that do not match an NRPT entry are processed normally.
References:
https://technet.microsoft.com/en-us/library/ee649207(v=ws.10).aspx

NEW QUESTION 27
You have a server named Server1 that runs Windows Server 2021. Server1 is a Hyper-V host that hosts a virtual machine named VM1.
Server1 has three network adapter cards that are connected to virtual switches named vSwitch1, vSwitch2 and vSwitch3.
You configure NIC Teaming on VM1 as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that VM1 will retain access to the network if a physical network adapter card fails on Server1.
What should you do?

• A. From Hyper-V Manager on Server1, modify the settings of VM1.
• B. From Windows PowerShell on VM1, run theSet-VmNetworkAdapterTeamMapping cmdlet.
• C. From Windows PowerShell on Server1, run the Set-VmNetworkAdapterFailoverConfiguration cmdlet.
• D. From Windows PowerShell on Server1, run the Set-VmSwitch cmdle

Answer: A

Explanation:
You can configure NIC teaming in the Guest OS; however, before NIC teaming will work in a virtual machine, you need to enable NIC teaming in the Advanced Features section of the VM settings.

NEW QUESTION 28
You deploy two servers that run Windows Server 2021. You install the Failovers Clustering feature on both servers. You need to create a workgroup cluster.
What should you do?

• A. Create matching local administrative accounts on both of the server
• B. Assign the same primary DNS suffix to both of the server
• C. Run the New-Cluster cmdlet and specify an administrative access point of None.
• D. Configure both of the server to be in a workgroup named Workgrou
• E. Configure the Cluster Service to log on as Network Servic
• F. Run the New-Cluster cmdlet and specify an administrative access point of DNS.
• G. Create matching local administrative accounts on both of the server
• H. Assign the same primary DNS suffix to both of the server
• I. Run the New-Cluster cmdlet and specify an administrative access point of DNS.
• J. Configure both of the server to be in a workgroup named Workgrou
• K. Configure the Cluster Service to log on as Network Servic
• L. Run the New-Cluster cmdlet and specify an administrative access point of None.

Answer: D

NEW QUESTION 29
......