Monitor and Troubleshoot Windows Server Environments

An administrator needs to capture and analyze network traffic on a Windows Server 2022 Core installation without installing third-party tools. Which TWO steps are necessary to capture traffic using the built-in 'pktmon' tool and prepare it for analysis in Wireshark on another machine?

You are investigating a replication issue between two Active Directory Domain Controllers (DCs) named DC1 and DC2. You suspect a network latency or firewall issue is preventing the replication of the 'Configuration' partition. Which tool should you use to check the current replication status and identify the specific error code associated with the failure?

You are troubleshooting a Windows Server application that occasionally hangs. You want to capture a dump file of the process when it stops responding. Which THREE tools or methods should you consider using? (Choose three.)

You have configured a Windows Server to forward events to a centralized collector. You notice that the collector is not receiving events from a specific source server. You verify that the 'Windows Event Collector' service is running on the collector and the 'Windows Remote Management' service is running on the source. What should you check next to troubleshoot the connectivity?

You are using Azure Automation Update Management to monitor and manage updates for a group of Windows Servers. Several servers are reporting a status of 'Not assessed' for several days. What is the most likely cause of this monitoring gap?

You are investigating a disk performance bottleneck on a Windows Server hosting a SQL database. You need to identify the physical disk latency. Which TWO counters should you monitor in Performance Monitor? (Choose two.)

You need to view all 'Error' level events from both the System and Application logs in a single view within Event Viewer. What is the most efficient way to maintain this view for daily use?

An administrator is troubleshooting a Storage Spaces Direct (S2D) cluster where one node shows a status of 'Retired'. The administrator needs to identify if a physical disk failure or a communication timeout caused this status. Which PowerShell cmdlet provides the most detailed health information regarding the operational status of the underlying physical disks in the storage pool?

A server administrator needs to monitor the reliability of applications on a Windows Server. They want to identify which applications have stopped working, including the time of failure and the faulting module. Which built-in utility should they use to view this historical data?

You are transitioning several Windows Server 2022 Azure Virtual Machines from the legacy Log Analytics Agent to the newer Azure Monitor Agent (AMA). You need to ensure that specific System and Application event logs are centralized in a Log Analytics workspace. What component must you create and associate with the virtual machines to facilitate this data collection?

You need to monitor the health of a Windows Server using System Monitor. You want to trigger an alert when the free space on the C: drive drops below 10%. You have already created a Data Collector Set. What do you need to add to the set to achieve this functionality?

Users report that they cannot access a shared folder on a Windows Server 2022 instance located in a different subnet. You suspect a firewall or routing issue. Which PowerShell cmdlet should you use to test both ICMP connectivity and the specific TCP port 445 availability simultaneously?

An administrator reports that Active Directory changes made on DC01 are not appearing on DC02. You suspect a replication issue. Which tool and command provide the most comprehensive output regarding the status of all replication neighbors for a specific domain controller?

An organization is migrating its on-premises Windows Server 2022 monitoring strategy to Azure Monitor. You need to collect specific event logs and performance counters from 500 servers using the most modern, secure, and centralized management method available. Which agent should you deploy to these servers to support Data Collection Rules (DCR)?

You need to collect performance data from a Windows Server for a period of 24 hours to establish a baseline. You want to ensure that the data collection starts automatically at 2:00 AM and stops exactly 24 hours later. Which feature of Performance Monitor should you use to automate this?

You are configuring Windows Event Forwarding (WEF) in a domain environment. You want the collector server to initiate the connection to the source computers to gather events. Which type of subscription should you implement to achieve this behavior?

You suspect that a specific process on a Windows Server is consuming excessive disk bandwidth, causing other applications to slow down. Which built-in tool provides the quickest way to see a live list of processes and the specific files they are currently reading or writing to?

You are managing a Windows Server 2022 instance experiencing intermittent memory pressure. You need to configure Performance Monitor to log data continuously, ensuring the logs are overwritten when they reach a maximum size of 500 MB to prevent disk exhaustion. Which setting should you modify in the Data Collector Set properties?

Refer to the exhibit. An administrator runs a PowerShell command to monitor a server. Based on the output provided, which conclusion regarding the server's state is most accurate?