HOTSPOT

You have a four-node Hyper-V cluster named Cluster1. A virtual machine named VM1 runs on Cluster1. VM1 has a network adapter that connects to a

virtual switch named Network1.

You need to prevent a network disconnection on VM1 from causing VM1 to move to another cluster node.

What command should you run? To answer, select the appropriate options in the answer area.

Reveal Solution Hide Solution

Correct Answer:

You have an Active Directory domain named Contoso.com. The domain contains servers named

Server1, Server2 and Server3 that run Windows Server 2016.

Server1 and Server2 are nodes in a Hyper-V cluster named Cluster1. You add a Hyper-V Replica Broker role named Broker1 to Cluster1. Server3 is a Hyper-V server. A virtual machine named VM1 runs on Server3.

Live Migration is enabled on all three servers and it is configured to use Kerberos authentication only. You need to ensure that you can perform the migration of VM1 to Server2.

What should you do?

Reveal Solution Hide Solution

HOTSPOT

You have a server named Server1 that runs Windows Server 2016. Server1 has the Web Application Proxy role service installed.

You are publishing an application named App1 that will use Integrated Windows authentication as shown in the following graphic.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Publish an Integrated Windows authenticated-based Application for WebBrowser Clients Step 1: (configure the Backend server SPN C see first bulleted item below) Before you begin, make sure that you have done the following:

Step 2: http//server2.contoso.com/publish/app1 Use the same URL as the backend server URL. Web Application Proxy can translate host names in URLs, but cannot translate path names. Therefore, you can enter different host names, but you must enter the same path name. For example, you can enter an external URL of https://apps.contoso.com/app1/ and a backend server URL of http://app-server/app1/.

However, you cannot enter an external URL of https://apps.contoso.com/app1/ and a backend server URL of https://apps.contoso.com/internal­app1/.

References: https://technet.microsoft.com/en-us/library/dn383640(v=ws.11).aspx

Your network contains three Hyper-V hosts. You add all of the hosts to a cluster.

You need to create highly available storage spaces that connect to directly attached storage on the hosts.

Which cmdlet should you use?

Reveal Solution Hide Solution

You are configuring a Windows Server 2016 failover cluster in a workgroup.

Before installing one of the nodes, you run the ipconfig /all command and receive the following output.

You need to ensure that Server1 can be added as a node in the cluster.

What should you do?

Reveal Solution Hide Solution

Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. Server1 is located in the perimeter network.

You install the Active Directory Federation Services server role on Server1. You create an Active Directory Federation Services (AD FS) farm by using a certificate that has a subject name of sts.contoso.com.

You need to enable certificate authentication from the Internet on Server1.

Which two inbound TCP ports should you open on the firewall? Each correct answer presents part of the solution.

Reveal Solution Hide Solution

HOTSPOT

You have a server named Server1 that runs Windows Server 2016. Server1 has the Web Application Proxy role service installed.

You publish an application named App1 by using the Web Application Proxy. You need to change the URL that users use to connect to App1 when they work remotely.

Which command should you run? To answer, select the appropriate options in the answer area.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

The Set-WebApplicationProxyApplication cmdlet modifies settings of a web application published through Web Application Proxy. Specify the web application to modify by using its ID. Note that the method of preauthentication cannot be changed. The cmdlet ensures that no other applications are already configured to use any specified ExternalURL or BackendServerURL.

References: https://technet.microsoft.com/itpro/powershell/windows/wap/set­webapplicationproxyapplication

HOTSPOT

Your network contains an Active Directory domain named contoso.com. The domain contains four servers named Server1, Server2, Server3, and Server4 that run Windows Server 2016.

Server1 and Server2 are nodes in a Hyper-V cluster named Cluster1. You have a highly available virtual machine named VM1. Server1 is the owner node of VM1. Server3 and Server4 are nodes of a scale-out file server named Cluster2.

The storage on Server1 is configured as shown in the following table.

VM1 is stored in C:ClusterStorageVolume1. You need to move the virtual disk of VM1 to a different location.

What should you do? To answer, select the appropriate options in the answer area.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: Failover Cluster Manager

You can use Failover Cluster Manager to do a Storage Migration to a shared folder.

Box 2: \Cluster2Share1

For a highly-available VM, the storage must be accessible by all nodes in the cluster. Therefore, in this scenario, we have to use the file share.

You c

References:

https://blogs.msdn.microsoft.com/clustering/2012/04/26/windows-server-2012-storage-migration-for-cluster-managed-virtual-machines/

HOTSPOT

You have a Windows Server 2016 failover cluster that has a cluster network named ClusterNetwork1.

You need to ensure that ClusterNetwork1 is enabled for cluster communication only.

What command should you run? To answer, select the appropriate options in the answer area.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Box 1: Get-ClusterNetwork

Cluster network roles can be changed using PowerShell command, Get-ClusterNetwork.

For example:

(Get-ClusterNetwork “Cluster Network 1”). Role =1

Box 2: Role

Cluster Network Roles:

Cluster networks are automatically created for all logical subnets connected to all nodes in the Cluster. Each network adapter card connected to a common subnet will be listed in Failover Cluster Manager. Cluster networks can be configured for different uses.

Three roles:

References: https://blogs.technet.microsoft.com/askcore/2014/02/19/configuring-windows-failover-cluster-networks/

HOTSPOT

Your network contains an Active Directory forest named contoso.com.

Your company has a custom application named ERP1. ERP1 uses an Active Directory Lightweight Directory Services (AD LDS) server named Server1 to authenticate users.

You have a member server named Server2 that runs Windows Server 2016. You install the Active Directory Federation Services (AD FS) server role on Server2 and create an AD FS farm.

You need to configure AD FS to authenticate users from the AD LDS server.

Which cmdlets should you run? To answer, select the appropriate options in the answer area.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

To configure your AD FSfarm to authenticate users from an LDAP directory, you can complete the following steps:

Step 1: New-AdfsLdapServerConnection

First, configure a connection to your LDAP directory using the New-AdfsLdapServerConnection cmdlet:

$DirectoryCred = Get-Credential

$vendorDirectory = New-AdfsLdapServerConnection CHostName dirserver CPort 50000CSslMode None CAuthenticationMethod Basic CCredential $DirectoryCred

Step 2 (optional):

Next, you can perform the optional step of mapping LDAP attributes to the existing AD FS claims using the New-AdfsLdapAttributeToClaimMapping cmdlet.

Step 3: Add-AdfsLocalClaimsProviderTrust

Finally, you must register the LDAP store with AD FS as a local claims provider trust using the Add-AdfsLocalClaimsProviderTrust cmdlet:

Add-AdfsLocalClaimsProviderTrust CName “Vendors” CIdentifier “urn:vendors” CType L

References: https://technet.microsoft.com/en-us/library/dn823754(v=ws.11).aspx