You need to implement an availability solution for DHCP that meets the networking requirements. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. On DHCP1, create a scope that contains 25 percent of the IP addresses from Scope2.

B. On the router in each office, configure a DHCP relay.

C. DHCP2, configure a scope that contains 25 percent of the IP addresses from Scope1.

D. On each DHCP server, install the Failover Clustering feature and add the DHCP cluster role.

E. On each DHCP scope, configure DHCP failover.

You have an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.

You need to provide an administrator with the ability to manage Group Policy Objects (GPOs). The solution must use the principle of least privilege.

To which group should you add the administrator?

A. AAD DC Administrators

B. Domain Admins

C. Schema Admins

D. Enterprise Admins

E. Group Policy Creator Owners

You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2.

A user named Admin1 is a member of the local Administrators group on Server1 and Server2.

You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1.

You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc.

What should you do first?

A. From the Azure portal, generate a new onboarding script.

B. Assign Admin1 the Azure Connected Machine Onboarding role for RG1.

C. Hybrid Azure AD join Server1 and Server2.

D. Create an Azure cloud-only account for Admin1.

You have a server that runs Windows Server and has the DHCP Server role installed. The server has a scope named Scope1 that has the following configurations:

1.

Address range: 192.168.0.2 to 192. 168.1.254

2.

Mask: 255.255.254.0

3.

Router: 192.168.0.1

4.

Lease duration: 3 days

5.

DNS server: 172.16.0.254

You have 50 Microsoft Teams Phone devices from the same vendor. All the devices have MAC addresses within the same range.

You need to ensure that all the Teams Phone devices that receive a lease from Scope1 have IP addresses in the range of 192.168.1.100 to 192.168.1.200. The solution must NOT affect other DHCP clients that receive IP configurations from

Scope1.

What should you create?

A. a scope

B. a filter

C. scope options

D. a policy

You have an Azure virtual machine named VM1 that runs Windows Server.

You need to configure the management of VM1 to meet the following requirements:

1.

Require administrators to request access to VM1 before establishing a Remote Desktop connection.

2.

Limit access to VM1 from specific source IP addresses.

3.

Limit access to VM1 to a specific management port. What should you configure?

A. a network security group (NSG)

B. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

C. Microsoft Defender for Cloud

D. Azure Front Door

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The on-premises network is connected to Azure by using a Site-to-Site VPN. You have the DNS zones shown in the following table.

You need to ensure that names from fabrikam.com can be resolved from the on-premises network. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. Create a stub zone for fabrikam.com on DC1.

B. Create a conditional forwarder for fabrikam.com on DC1.

C. Create a secondary zone for fabrikam.com on DC1.

D. Deploy an Azure virtual machine that runs Windows Server. Modify the DNS Servers settings for the virtual network.

E. Deploy an Azure virtual machine that runs Windows Server. Configure the virtual machine as a DNS forwarder.

You have an Active Directory Domain Services (AD DS) domain. The domain contains a member server named Server1 that runs Windows Server.

You need to ensure that you can manage password policies for the domain from Serve1.

Which command should you run first on Server1?

A. Install-Windows Feature RSAT-AO-PowerShell

B. Install-Windows Feature 6PHC

C. Install-Windows Feature RSAT-AD-Tool$

D. Install-windows Feature RSAT-AWIMS

HOTSPOT

You have an Azure subscription that contains the storage accounts shown in the following table.

In the East US Azure region, you create a storage sync service named Sync1.

You need to create a sync group in Sync1.

Which storage accounts can you use, and what can you specify as the cloud endpoints. To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

HOTSPOT

Your network contains two Active Directory Domain Services (AD DS) forests as shown in the following exhibit.

The forests contain the domain controllers shown in the following table.

You perform the following actions on DC1:

1.

Create a user named User1.

2.

Extend the schema with a new attribute named Attribute1.

To which domain controllers are User1 and Attribute1 replicated? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

HOTSPOT

You have an Active Directory Domain Services (AD DS) domain that contains a group named Group1.

You need to create a group managed service account (gMSA) named Account1. The solution must ensure that Group1 can use Account1.

How should you complete the script? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area: