NEW QUESTION 1

You administer the Microsoft system center virtual machine manager (SCVMM) infrastructure for an organization. The SCVMM fabric includes a highly available network Controller that stores diagnostic data in a library share. You plan to use the windows PowerShell network controller diagnostic toolset.
You are unable to access the necessary commands. You attempt to import the network controller diagnostic module but it is not available.
You need to be able to use the network controller diagnostic toolset from your device. What should install on your workstation?

• A. Network controller server role
• B. RSAT Hyper-V Tools feature
• C. Health and diagnostic role service
• D. RSAT Network controller feature

Answer: D

Explanation:
To use the Network Controller (control-path) diagnostic tools, you must first install the RSAT-NetworkController feature and import the NetworkControllerDiagnostics module

NEW QUESTION 2

Your company has two datacenters. You have Windows servers in both locations. The network that connects the datacenters has high bandwidth and low latency.
You are designing a new virtual machine (VM) and storage environment based on servers that run Windows Server 2021. You need to implement a solution that meets the following storage requirements:
Tolerates the failure of a single datacenter.
Ensures zero data loss in the event of a file system failure. Solution: You implement Distributed File System Replication. Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 3

A company plans to deploy the host guardian service.
You need to ensure that hosts are approved if they match boot sequence and code integrity policies. What should you use with the host guardian service?

• A. TPM-trusted attestation
• B. Admin trusted attestation
• C. Storage spaces direct
• D. Credential Guard

Answer: A

Explanation:
In guarded fabrics configured to use TPM attestation, each host must be configured with a code integrity policy that is trusted by the Host Guardian Service.
TPM-attestation: If your HGS is configured to use TPM attestation, the host servers must:
1. Use UEFI 2.3.1c and a TPM 2.0 module
2. Boot in UEFI mode (not BIOS or "legacy" mode)
3. Enable Secure Boot References:
https://docs.microsoft.com/en-us/system-center/vmm/guarded-deploy-host?view=sc-vmm-1807

NEW QUESTION 4

A company has a Microsoft system center virtual machine manager (SCVMM) 2021 environment. You need to deploy a highly available SCVMM library.
In which order should you perform the actions? Rearrange in correct order.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
You set up a Windows failover cluster running the File Server role. Then you create file shares on the cluster, and assign them as VMM library shares.
References:
https://docs.microsoft.com/en-us/system-center/vmm/ha-library?view=sc-vmm-1807

NEW QUESTION 5

You need to configure the SLB service templates.
To which location should you import each component? To answer, drag the appropriate store locations to the correct components. Each location may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://docs.microsoft.com/en-us/system-center/vmm/sdn-slb?view=sc-vmm-1801

NEW QUESTION 6

A company has a Microsoft System Center virtual machine manager (SCVMM) environment. The environment includes a software load balancer (SLB) and virtual machine (VMs) that run Network controller.
You need to create a guest cluster. What should you do?

• A. Create a service template
• B. Create a logical network
• C. Deploy a RAS gateway
• D. Create an internal load-balancer virtual IP address

Answer: D

Explanation:
VMM 1801 and later supports guest clustering in SDN through an Internal Load Balancer(ILB) Virtual IP(VIP).
The ILB uses probe ports which are created on the guest cluster VMs to identify the active node. At any given time, the probe port of only the active node responds to the ILB and all the traffic directed to the VIP is routed to the active node. References:
https://docs.microsoft.com/en-us/system-center/vmm/sdn-guest-clusters?view=sc-vmm-1801

NEW QUESTION 7

You need to configure an SDN network controller for the SCVMM test environment. What should you do first?

• A. In SCVMM, create a dedicated host group for Det-Server3, Det-Server4, and Det-Server5.
• B. In AD DS, create a security group and add Det-Server3, Det-Server4, and Det-Server5.
• C. In AD DS, create a security group and add Det-Server6, Det-Server7, and Det-Server8.
• D. In SCVMM, create a dedicated host group for Det-Server6, Det-Server7, and Det-Server8.

Answer: D

Explanation:
References:
https://docs.microsoft.com/en-us/system-center/vmm/sdn-controller?view=sc-vmm-1801

NEW QUESTION 8

You are securing the servers in Microsoft System Center Virtual Machine Manager (SCVMM).
You must use Network Controller to configure and manage servers that are on the same data plane as your
Software Defined Network (SDN).
You need to configure the protocols and authentication types.
Which protocols and authentication types should you use for each server? To answer, drag the appropriate protocols or authentication types to the correct devices or services. Each protocol or authentication type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://docs.microsoft.com/en-us/windows-server/networking/sdn/security/nc-security

NEW QUESTION 9

You manage Microsoft system virtual Machine Manager (SCVMM). You need to secure network traffic.
Which two protocols can you secure by using port access control lists (ACLs)? Each correct answer presents a complete solution.

• A. SCTP
• B. DTP
• C. DCCP
• D. UDP
• E. TCP

Answer: DE

Explanation:
General guidelines for what an access control list consist of are as follows:
Access control list name (depending on the router it could be numeric or combination of letters and numbers)
A sequence number or term name for each entry A statement of permission or denial for that entry
A network protocol and associated function or ports
- Examples include IP, IPX, ICMP, TCP, UDP, NETBIOS and many others
Destination and Source targets
- These are typically addresses and can be defined as a single discrete address, a range or subnet, or all addresses Additional flags or identifiers
These additional statements request additional functions when a match is found for the statement. These flags vary for each protocol but a common flag added to statements is the log feature that records any match to the statement into the router log
References:
https://www.pluralsight.com/blog/it-ops/access-control-list-concepts

NEW QUESTION 10

You administer the virtualization environment for an organization. You manage all Microsoft Hyper-V hosts locally. You plan to deploy Microsoft system center virtual machine manager (SCVMM).
(SCVMM) administrators must have full administrative permissions over the SCVMM fabric but no permission to other organizational fabrics. Administrators in the domain environment must not have any permission to the SCVMM infrastructure.
You need to deploy the SCVMM environment. What should you include?

• A. Local installation of the SCVMM agent
• B. Bit locker encrypted VHDX file
• C. Host guardian service a trusted domain
• D. Host guardian service in an isolated forest

Answer: D

Explanation:
When setting up HGS, you are given the option of creating an isolated Active Directory forest just for HGS or to join HGS to an existing, trusted domain. This decision, as well as the roles you assign the admins in your organization, determine the trust boundary for HGS. Whoever has access to HGS, whether directly as an admin or indirectly as an admin of something else (e.g. Active Directory) that can influence HGS, has control over your guarded fabric. HGS admins choose which Hyper-V hosts are authorized to run shielded VMs and manage the certificates necessary to start up shielded VMs. An attacker or malicious admin who has access to HGS can use this power to authorize compromised hosts to run shielded VMs, initiate a denial-of-service attack by removing key material, and more.
To avoid this risk, it is strongly recommended that you limit the overlap between the admins of your HGS (including the domain to which HGS is joined) and Hyper-V environments. By ensuring no one admin has access to both systems, an attacker would need to compromise 2 different accounts from 2 individuals to complete his mission to change the HGS policies. This also means that the domain and enterprise admins for the two Active Directory environments should not be the same person, nor should HGS use the same Active Directory forest as your Hyper-V hosts. Anyone who can grant themselves access to more resources poses a security risk.
References:
https://docs.microsoft.com/en-us/windows-server/security/guarded-fabric-shielded-vm/guarded-fabric-manageh

NEW QUESTION 11

You need to install SCOM.
Which SCOM component should you install first?

• A. Reporting server
• B. Web console
• C. Management server
• D. Operations console

Answer: C

NEW QUESTION 12

You need to deploy the production SCVMM instance.
Which values should you supply for each installation option? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

References:
https://docs.microsoft.com/en-us/system-center/vmm/plan-install?view=sc-vmm-1801#account-and-domainrequ

NEW QUESTION 13

You manage Microsoft system center virtual machine manager (SCVMM). You create a logical unit from a storage pool and allocate the logical unit to the host group. You plan to deploy new virtual machines (VMs) to storage arrays.
You must create a SAN copy capable template from existing VM. You need to finish creating the SAN copy capable template. Which four actions should you perform in sequence?

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://docs.microsoft.com/en-us/system-center/vmm/vm-san-copy?view=sc-vmm-1807

NEW QUESTION 14

You deploy Microsoft system virtual machine manager (SCVMM)
You need to implement software defined networking (SDN) for the environment. You must create the fewest objects possible and must not implement subnet isolation.
Which three objects should you create in sequence? Move the appropriate actions from the list of actions and arrange them in the correct order.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Here's what you need to do to set up a SDN network controller
1. Configure hosts and physical network infrastructure: You need access to your physical network devices
to configure VLANs, routing etc. You also need Hyper-V hosts to host the SDN infrastructure and tenant VMs.
2. Prepare a virtual hard disk: You can prepare a virtual hard disk for the network controller service template in VHD or VHDX format, as appropriate for the service template generation you choose.
3. Download the service templates: Download the network controller service templates and import them to the VMM library.
4. Set up Active Directory security groups: You'll need an Active Directory security group for network controller management, and another security group for network controller clients. Each group will need at least one user account in it.
5. Set up a VMM library share. You can have an optional library file share for keeping diagnostic logs. This library share will be accessed by the network controller to store diagnostics information throughout its lifetime.
6. Set up a VMM host group: Set up a dedicated host group for all of the SDN Hyper-V hosts.
Note:
Hosts must be running Windows Server 2021 with latest patches installed, and have the Hyper-V role enabled.
7. Create the management logical network: Create a logical network to mirror management network connectivity for the VMM host, network controller hosts, and tenant VM hosts. If you want to allocate static IP addresses from a pool, create a pool on this logical network.
8. Create and deploy a management logical switch: You create the logical switch, and deploy it on network controller hosts, to provide connectivity to the management network for network controller VMs.
9. Set up a certificate: You need an SSL certificate for secure/HTTPS communication with the network controller.
10. Import the template: Import and customize the network controller service template.
11. Deploy the service: Deploy the network controller service using the service template. Then add it as a VMM service.
References:
https://docs.microsoft.com/en-us/system-center/vmm/sdn-controller?view=sc-vmm-1807

NEW QUESTION 15

You need to ensure that the existing VMs meet the requirements. What should you do?

• A. Modify the VM disks to Differencing.
• B. Upgrade the VM operating system to Windows Server 2021 Standard edition.
• C. Modify the VM configuration to Generation 2.
• D. Upgrade the VM operating system to Windows Server 2021 Datacenter edition.

Answer: D

NEW QUESTION 16

You need to configure the network settings for the SLB in the test environment.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. Create a logical network that uses the Private VLAN networks option.
• B. Create a logical network that uses the One connected network option.
• C. Create a private VIP and IP address pool that uses the IP range 10.10.90.2 - 10.10.90.254. Create a publicVIP and IP address pool that uses the IP range 10.10.20.2 – 10.10.20.254.
• D. Create a private VIP and IP address pool that uses the IP range 10.40.90.2 - 10.40.90.254. Create a publicVIP and IP address pool that uses the IP range 10.40.20.2 – 10.40.20.254.

Answer: AD

NEW QUESTION 17

You need to deploy the SDN network controller for the SCVMM test environment.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://docs.microsoft.com/en-us/system-center/vmm/sdn-controller?view=sc-vmm-1801

NEW QUESTION 18

You are configuring network adapters within a Microsoft system center virtual machine (SCVMM) network fabric. You deploy switch extensions.
The switch must filter packets and choose the appropriate destination port. You need to select a virtual switch extension to include in the logical switch. Which type of virtual extension switch should you include?

• A. Forwarding
• B. Monitoring
• C. Capturing
• D. filtering

Answer: A

NEW QUESTION 19

Your company has two datacenters. You have Windows servers in both locations. The network that connects the datacenters has high bandwidth and low latency.
You are designing a new virtual machine (VM) and storage environment based on servers that run Windows Server 2021. You need to implement a solution that meets the following storage requirements:
*Tolerates the failure of a single datacenter.
*Ensures zero data loss in the event of a file system failure. Solution: You implement offloaded data transfers.
Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 20

You install Microsoft System Center Operations Manager (SCOM) and download a sealed management pack. You receive notifications from a monitor that a critical resource experiences an overload situation. When you check the resource, it is not in an overloaded condition.
You need to add a new threshold value for the resource. What should you create?

• A. an override in an existing management pack
• B. an override in a new management pack
• C. a monitor in a new management pack
• D. a monitor in an existing management pack

Answer: B

NEW QUESTION 21

You need to ensure that the Hyper-V hosts meet the requirements for the sales department application. Which three actions should you perform in sequence? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 22

You manage Microsoft System Center Virtual Machine Manager (SCVMM). You plan to implement software load balancer (SLB) on Microsoft Hyper-V host servers by using an SLB Multiplexer (MUX).
You identify the following requirements: Redirect all inbound traffic to the MUX.
Ensure that all outbound network traffic bypasses the MUX. You need to configure the environment.
Which components should you implement? To answer, drag the appropriate components to the correct traffic directions. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://technet.microsoft.com/en-US/library/mt632286.aspx

NEW QUESTION 23

Microsoft Hyper-V host has a network interface card (NIC) named NIC1 that supports Remote Direct Memory Access (RDMA). You plan to install a second NIC at a later date.
The Hyper-V host must have a virtual switch named vSwitch1. Switch Embedded Teaming (SET) must be enabled on the NIC.
You need to ensure that you can use the same virtual switch when you add the second NIC.
How should you complete the Windows PowerShell command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References:
https://docs.microsoft.com/en-us/powershell/module/hyper-v/new-vmswitch?view=win10-ps

NEW QUESTION 24
......