troubleshooting

You plan to deploy a new domain controller as an Azure Virtual Machine (VM) to provide authentication for cloud workloads. Which THREE actions should you take to ensure the stability and supportability of the domain controller? (Each correct answer presents part of the solution.)

You are adding a new Windows Server 2022 domain controller to an existing forest that currently has a functional level of Windows Server 2012 R2. What is the maximum functional level you can set for the new domain controller?

An administrator needs to capture and analyze network traffic on a Windows Server 2022 Core installation without installing third-party tools. Which TWO steps are necessary to capture traffic using the built-in 'pktmon' tool and prepare it for analysis in Wireshark on another machine?

You are configuring Azure Arc-enabled servers for an on-premises Windows Server 2022 instance. You need to ensure that the server can communicate with Azure services while adhering to strict outbound firewall rules. Which port must be opened to support the Azure Connected Machine agent?

You are implementing Shielded Virtual Machines in an on-premises Hyper-V environment to protect sensitive workloads from fabric administrators. Which TWO infrastructure components are required to support the deployment and health validation of Shielded VMs? (Choose two.)

You are configuring Azure Arc-enabled servers for a fleet of Windows Servers. You need to ensure that the servers can be managed via Azure Policy. What is the mandatory prerequisite before installing the Azure Connected Machine agent?

You need to automate the installation of the Azure Connected Machine agent across 500 on-premises Windows Servers using Group Policy. What is the most efficient way to deploy the onboarding script while ensuring secure handling of the service principal secret?

Refer to the exhibit. You are troubleshooting a replication issue between the Head Office (Site-HQ) and a Branch Office (Site-Branch-A). Based on the output, what is the most likely cause of the failure?

Refer to the exhibit. You are troubleshooting an issue where several users are unable to change their passwords, and the help desk is seeing inconsistent results when resetting them. Based on the output provided, which domain controller should you investigate first for potential failures or connectivity issues?

You are investigating a replication issue between two Active Directory Domain Controllers (DCs) named DC1 and DC2. You suspect a network latency or firewall issue is preventing the replication of the 'Configuration' partition. Which tool should you use to check the current replication status and identify the specific error code associated with the failure?

When onboarding servers to Azure Arc, which type of identity is automatically created for the server?

You are using the Storage Migration Service (SMS) to migrate data from an aging Windows Server 2012 R2 machine to a new Windows Server 2022 instance. During the cutover phase, what happens to the source server's identity and network configuration?

You are the administrator of a large multi-domain forest. You have a branch office with a slow WAN link that contains only one domain controller. Users in this office complain that they cannot log on when the WAN link is down, even though they belong to Universal Groups. How should you resolve this issue while minimizing WAN traffic?

An administrator is implementing Azure File Sync to centralize file shares from several branch offices. The administrator notices that the local server's disk space is nearly full, despite enabling Cloud Tiering. Which setting should be adjusted to ensure the server maintains at least 20% free space at all times?

You are troubleshooting an issue where an Azure Arc-enabled server is showing a status of 'Offline' in the Azure portal. Which TWO logs or files should you inspect on the Windows Server? (Choose two.)

You are configuring Azure File Sync to synchronize a local folder on FileServer1 with an Azure file share. Which TWO endpoint types must be added to a Sync Group to enable this functionality?

Refer to the exhibit. You are reviewing a partial Windows Defender Application Control (WDAC) policy XML file. You need to identify the behavior of this policy regarding the file 'untrusted.exe'. What will occur if a user attempts to run 'untrusted.exe'?

You are managing hybrid servers and need to use Azure Policy to enforce security standards. What is the primary benefit of using Azure Policy with Azure Arc-enabled servers?

Refer to the exhibit. An administrator is attempting to run a locally created, unsigned PowerShell script named 'Update-Config.ps1' on a Windows Server 2022. Based on the output of 'Get-ExecutionPolicy -List', what will happen when the administrator attempts to run the script in the current session?

You accidentally delete an Organizational Unit (OU) containing 500 users. You need to recover the OU and its contents with all attributes, including group memberships, intact. What is the most efficient way to achieve this?

You are troubleshooting a Windows Server application that occasionally hangs. You want to capture a dump file of the process when it stops responding. Which THREE tools or methods should you consider using? (Choose three.)

You need to create a service account for a custom application that runs on a single Windows server. The account must support automatic password management and must not require manual SPN registration. Which type of account should you use?

An administrator wants to provide secure file access to remote workers without requiring a traditional VPN. They decide to implement SMB over QUIC on a Windows Server 2022 Datacenter: Azure Edition file server. What is a requirement for the client side of this connection?

You are troubleshooting a Windows Server DNS environment where stale resource records are not being removed, leading to name resolution errors. Which THREE conditions must be met for DNS scavenging to successfully delete a stale record?

Your company is implementing a Tiered Administration Model to secure its Windows Server infrastructure. You need to deploy Privileged Access Workstations (PAWs) for all Domain Admins. What is the primary purpose of using a PAW in this environment?

Your company runs Windows Server 2022 and utilizes Storage Spaces Direct. You need to configure a new storage pool using available drives. Which Windows PowerShell cmdlet should you create and initialize this storage pool?

You are planning the deployment of Shielded Virtual Machines in a Windows Server 2022 environment. You need to ensure that the Fabric Administrators cannot access the data within the VMs. Which component of the Host Guardian Service (HGS) is responsible for verifying that a Hyper-V host is authorized to run a Shielded VM?

An administrator accidentally deleted an Organizational Unit (OU) containing several hundred user accounts. You need to recover the OU and its contents with the least amount of administrative effort and without taking any domain controllers offline. What should you use?

You need to provide a secure method for on-premises administrators to manage Azure SQL databases without exposing the database to the public internet. You want to ensure that traffic from the on-premises network stays within the private network space. Which solution should you implement?

Your organization implements Just Enough Administration (JEA) to manage Windows Servers. A junior administrator needs to restart the Print Spooler service on several print servers but should not have full administrative rights. You need to identify the specific file that defines which cmdlets and external commands the junior administrator can execute. Which file should you configure?

You are creating a new virtual machine on a Hyper-V host. You decide to use the VHDX file format for the virtual hard disks. Which THREE advantages does VHDX provide over the older VHD format? (Choose three.)

Refer to the exhibit displaying the status of a DHCP failover relationship. A network administrator notices the 'CommunicationInterrupted' state. What is the immediate impact on DHCP clients that attempt to renew their leases while the server is in this state?

You plan to implement Storage Replica between two Windows Server 2022 clusters in different cities. The network connection between the sites has a consistent round-trip latency of 20ms. Which replication mode should you implement to ensure application performance is not negatively impacted by storage writes?

A small branch office has five client computers running Windows 11. There is no server located at the branch. You want to implement BranchCache to reduce WAN traffic when users access files from the main office. Which mode should you use?

An administrator is managing a Hyper-V cluster with Scale-Out File Server (SOFS) storage. They want to prevent a single non-critical virtual machine from consuming all available storage bandwidth and affecting the performance of a production database VM. Which feature should be used?

A company has a two-node Windows Server 2022 cluster running Storage Spaces Direct (S2D). They need to ensure the highest possible availability for their storage pool, allowing it to survive both a disk failure and a simultaneous node failure. Which resiliency setting must be applied to the virtual disks?

Refer to the exhibit. You are troubleshooting an Azure Arc onboarding failure. The server has an internet connection, but the registration script returns the provided error. What should you verify first?

You use File Server Resource Manager (FSRM) to manage a folder shared by the marketing department. You want to prevent users from saving more than 10GB of data in the folder. If they reach this limit, they must be blocked from adding new files. What should you configure?

You plan to implement Group Managed Service Accounts (gMSAs) to improve the security of several web services. Which TWO prerequisites must be met before you can create and use gMSAs in your Active Directory environment?

You are deploying a Windows Server 2022-based Gateway server for a hybrid network. The gateway must perform Network Address Translation (NAT) for a private subnet. Which feature should you enable?

Refer to the exhibit. An Arc-enabled server is reporting a 403 Forbidden error when trying to access an Azure key vault. What is the most likely cause?

You have configured a Windows Server to forward events to a centralized collector. You notice that the collector is not receiving events from a specific source server. You verify that the 'Windows Event Collector' service is running on the collector and the 'Windows Remote Management' service is running on the source. What should you check next to troubleshoot the connectivity?

You are using Azure Automation Update Management to monitor and manage updates for a group of Windows Servers. Several servers are reporting a status of 'Not assessed' for several days. What is the most likely cause of this monitoring gap?

You are configuring Data Deduplication on a Windows Server 2022 file server that hosts various types of data. One volume is dedicated to storing virtual machine backup files. Which usage type should you select to maximize space savings for this specific data?

You are implementing Azure Monitor for your hybrid servers. Which THREE steps are required to collect guest-level metrics and logs from an Arc-enabled Windows Server? (Choose three.)

You are configuring an iSCSI Target Server on Windows Server 2022 to provide block storage to a Linux-based application server. Which TWO components must be configured on the Windows Server to allow the Linux host to connect and mount a volume? (Select TWO)

You are deploying IP Address Management (IPAM) on a Windows Server 2022 instance to manage your hybrid environment. You choose the Group Policy-based provisioning method. Which requirement must be met for the IPAM server to successfully manage the domain controllers and DHCP servers?

Refer to the exhibit. You are reviewing the output of a command used to check the health of your domain controllers. Based on the first line of the output, which specific role or feature is currently enabled on this domain controller?

You are investigating a disk performance bottleneck on a Windows Server hosting a SQL database. You need to identify the physical disk latency. Which TWO counters should you monitor in Performance Monitor? (Choose two.)

You need to audit successful and failed attempts to modify user accounts in Active Directory. Which policy should you configure?

Refer to the exhibit. An administrator has configured a share with the FolderEnumerationMode shown. What is the result when a user without Read permissions to a specific subfolder browses the share?

You are preparing to use the Storage Migration Service to migrate data from several Windows Server 2012 R2 servers. Which THREE components are essential parts of the Storage Migration Service architecture?

You are configuring Windows Defender Credential Guard on a fleet of Windows Server 2022 Hyper-V hosts. You want to protect the LSA process from being accessed by unauthorized users or malware. Which hardware-based security feature must be enabled in the BIOS/UEFI and supported by the CPU for Credential Guard to operate?

You need to view all 'Error' level events from both the System and Application logs in a single view within Event Viewer. What is the most efficient way to maintain this view for daily use?

An administrator is troubleshooting a Storage Spaces Direct (S2D) cluster where one node shows a status of 'Retired'. The administrator needs to identify if a physical disk failure or a communication timeout caused this status. Which PowerShell cmdlet provides the most detailed health information regarding the operational status of the underlying physical disks in the storage pool?

A server administrator needs to monitor the reliability of applications on a Windows Server. They want to identify which applications have stopped working, including the time of failure and the faulting module. Which built-in utility should they use to view this historical data?

An organization uses an on-premises Active Directory Domain Services (AD DS) environment and an Azure subscription. The IT team needs to ensure that on-premises clients can resolve names for resources hosted in an Azure Private DNS zone. Which component should be implemented to facilitate this specific name resolution path without deploying custom DNS servers in Azure?

You are transitioning several Windows Server 2022 Azure Virtual Machines from the legacy Log Analytics Agent to the newer Azure Monitor Agent (AMA). You need to ensure that specific System and Application event logs are centralized in a Log Analytics workspace. What component must you create and associate with the virtual machines to facilitate this data collection?

You are tasked with securing your Windows Server 2022 environment. Which TWO actions should you perform to implement Just Enough Administration (JEA)?

You are using Azure Update Management to manage updates for both on-premises Windows Servers and Azure VMs. You need to ensure that a specific group of on-premises servers never receives a particular update that is known to cause application compatibility issues. How should you configure this in Azure Update Management?

You are configuring Azure Bastion to provide secure RDP access to your Windows Server VMs in an Azure Virtual Network. Which THREE requirements must be met for a successful deployment? (Select THREE)

You are managing an Active Directory domain that includes several Fine-Grained Password Policies (FGPP). A user is a member of two global groups: 'Sales-Group' and 'Marketing-Group'. 'Sales-Group' is assigned a Password Settings Object (PSO) with a precedence of 50. 'Marketing-Group' is assigned a PSO with a precedence of 20. Which policy will be applied to the user?

You are preparing to raise the forest functional level of an existing Active Directory environment to Windows Server 2016. Which TWO requirements must be met before you can successfully perform this action? (Each correct answer presents part of the solution.)

You are deploying a new file server that will host Hyper-V virtual machine files. You want to take advantage of block cloning to improve the performance of checkpoint merging and VM cloning operations. Which file system should you use?

You manage two Active Directory forests named fabrikam.com and contoso.com. A two-way forest trust exists between them. You want to allow users from fabrikam.com to access a specific file server in contoso.com, but you must ensure they cannot authenticate to any other resources in the contoso.com forest by default. Which authentication setting should you configure on the trust?

You need to ensure that only authorized administrative users can access the server via PowerShell Remoting. Which security control should you implement?

Your company is merging with another firm. You need to allow users in the 'contoso.com' forest to access resources in the 'fabrikam.com' forest. The solution must ensure that users from Fabrikam cannot access any resources in Contoso unless specifically granted permission on each individual resource. What should you configure?

Your organization has two primary data centers in Seattle and New York, connected by a high-latency WAN link. You need to ensure that Active Directory replication occurs only during non-business hours to preserve bandwidth for critical applications. Which Active Directory object should you modify to control the timing of data synchronization between these locations?

What is the primary function of the Azure Connected Machine agent in a hybrid environment?

You are configuring a Windows Server 2022 instance to act as a router between two subnets. You have enabled IP forwarding, but traffic is not passing between the subnets. Which PowerShell cmdlet should you use to verify if the routing table is correctly identifying the local interface routes?

Refer to the exhibit. A Storage Spaces Direct cluster is configured with the resiliency settings shown. What is the maximum number of simultaneous drive failures this pool can sustain without losing data access?

You are managing a Windows Server 2022 DNS server. You need to implement DNS policies to ensure that queries for 'www.contoso.com' are resolved to different IP addresses based on the client's subnet. Which DNS policy component should you create first to define the client groupings?

You need to monitor the health of a Windows Server using System Monitor. You want to trigger an alert when the free space on the C: drive drops below 10%. You have already created a Data Collector Set. What do you need to add to the set to achieve this functionality?

You need to capture the state of a virtual machine named VM-DEV before applying a series of software updates. You want to ensure that the capture process uses the Volume Shadow Copy Service (VSS) to provide a consistent state of the guest operating system. Which checkpoint type should you use?

You want to run a Hyper-V virtual machine inside another virtual machine for testing purposes. After creating the guest VM, you find that you cannot install the Hyper-V role within it. Which PowerShell command must you run on the physical host to enable this capability?

Refer to the exhibit. You need to ensure that all data transmitted over SMB between your file server and domain-joined clients is encrypted. You set the configuration to True, but users report connectivity issues. What is the most likely cause?

You are deploying a Read-Only Domain Controller (RODC) in a branch office with low physical security. You need to ensure that the branch manager, who is not a member of Domain Admins, can log on to the RODC even if the WAN link to the main office is down. What must you configure?

You are configuring DHCP failover between two Windows Server 2022 nodes named Server1 and Server2 to ensure high availability for a critical subnet. Which TWO failover modes are available for selection during the configuration wizard?

You administer a Windows Server 2022 file server hosting critical engineering files. You need to configure File Server Resource Manager storage quotas to ensure that a specific engineering department folder cannot exceed 500 GB of capacity. When usage reaches 90 percent, you must ensure that users can still save files without immediate rejection, but administrative alerts are generated automatically. Which type of quota should you configure?

Users report that they cannot access a shared folder on a Windows Server 2022 instance located in a different subnet. You suspect a firewall or routing issue. Which PowerShell cmdlet should you use to test both ICMP connectivity and the specific TCP port 445 availability simultaneously?

An administrator reports that Active Directory changes made on DC01 are not appearing on DC02. You suspect a replication issue. Which tool and command provide the most comprehensive output regarding the status of all replication neighbors for a specific domain controller?

You are managing a Windows Server 2022 server that needs to access a storage array on a different subnet. You notice the server is not reaching the storage controller. Which PowerShell command should you use to add a permanent persistent route to the storage network?

Refer to the exhibit. You are investigating why a secure connection is failing on your web server. Based on the output, what is the most likely reason?

Your company, Contoso, Ltd., has a branch office with ten employees. The office has poor physical security, and you are concerned about the risks of a local domain controller being stolen. You need to deploy a domain controller to this site that minimizes the security risk of credential theft for the rest of the domain. Which solution should you implement?

You are managing Windows Server 2022 instances in a hybrid environment. You need to implement Azure Monitor VM Insights for these servers. Which TWO steps must you complete to accomplish this? (Choose two.)

An organization is migrating its on-premises Windows Server 2022 monitoring strategy to Azure Monitor. You need to collect specific event logs and performance counters from 500 servers using the most modern, secure, and centralized management method available. Which agent should you deploy to these servers to support Data Collection Rules (DCR)?

You are troubleshooting an issue where an Azure Arc-enabled server is showing as 'Offline' in the Azure portal, despite the server being powered on. Which local service should you check first to ensure the agent is running?

You manage a Windows Server Update Services (WSUS) infrastructure with one upstream server and three downstream servers. You want the downstream servers to only download updates that have been approved on the upstream server. Which WSUS configuration mode should you use for the downstream servers?

You have three Active Directory sites: SiteA, SiteB, and SiteC. SiteA is connected to SiteB with a cost of 50. SiteB is connected to SiteC with a cost of 50. There is no direct link between SiteA and SiteC. If 'Bridge all site links' is enabled, what is the effective replication cost between SiteA and SiteC?

An administrator is configuring a new storage pool on a Windows Server 2022 stand-alone server with four 4TB SATA drives. They need to create a virtual disk that can survive the failure of any single drive while providing the best possible write performance. Which resiliency type should they choose?

You are optimizing a Windows Server 2022 cluster for high-performance storage traffic. You want to enable SMB Direct to allow the network adapters to transfer data directly between application memory and the network. Which feature must the network adapters support?

You want to allow a specific help desk user to reset passwords for all users in a specific Organizational Unit (OU), but you do not want to grant them any other administrative rights. What is the most appropriate tool to use?

You are deploying a 4-node Azure Stack HCI cluster. You need to configure the networking to support Storage Spaces Direct (S2D) east-west traffic. Which TWO networking features are highly recommended by Microsoft to ensure low-latency and high-throughput storage communication? (Select TWO)

You need to collect performance data from a Windows Server for a period of 24 hours to establish a baseline. You want to ensure that the data collection starts automatically at 2:00 AM and stops exactly 24 hours later. Which feature of Performance Monitor should you use to automate this?

You need to automate the deployment of a new domain controller in an existing domain using PowerShell. Which cmdlet should you use to install the Active Directory Domain Services role and promote the server after the binaries are present?

Refer to the exhibit. You are running dcdiag to investigate synchronization issues between two domain controllers. Based on the error code 1256 and the output provided, which action is most likely to resolve the underlying problem?

You are configuring Windows Event Forwarding (WEF) in a domain environment. You want the collector server to initiate the connection to the source computers to gather events. Which type of subscription should you implement to achieve this behavior?

You suspect that a specific process on a Windows Server is consuming excessive disk bandwidth, causing other applications to slow down. Which built-in tool provides the quickest way to see a live list of processes and the specific files they are currently reading or writing to?

You are tasked with securing network traffic in a Windows Server 2022 environment using Windows Firewall with Advanced Security. Which TWO actions are required to allow traffic only from a specific trusted application while blocking all other incoming connections?

You are configuring Azure Arc to manage your on-premises servers. Which THREE of the following are benefits of using the Azure Arc resource bridge? (Choose three.)

You are managing a Windows Server 2022 instance experiencing intermittent memory pressure. You need to configure Performance Monitor to log data continuously, ensuring the logs are overwritten when they reach a maximum size of 500 MB to prevent disk exhaustion. Which setting should you modify in the Data Collector Set properties?

Refer to the exhibit. An administrator executes the PowerShell command shown to configure an iSCSI target. What is the effect of the -InitiatorId parameter in this command?

An administrator is planning to enable Data Deduplication on a Windows Server 2022 file server. Which TWO of the following workloads are officially supported and typically see high savings from Data Deduplication? (Select TWO)

You need to create a Group Managed Service Account (gMSA) for a new web application cluster running on Windows Server 2022. Which TWO prerequisites must be met before you can successfully create and use the gMSA in your Active Directory domain? (Select TWO)

You are preparing to onboard a sensitive on-premises Windows Server to Azure Arc. You want to ensure the traffic is as secure as possible. Which THREE actions should you take? (Choose three.)

You are monitoring network utilization on a Windows Server 2022 node. You notice consistently high CPU usage when transferring large amounts of data over the network. Which feature can you enable to offload this processing and improve performance?

You are securing Windows Admin Center (WAC) to manage your Windows Server 2022 environment. You want to implement granular access control for different IT teams. Which TWO methods can be used to control who has access to Windows Admin Center and what they can do? (Select TWO)

Refer to the exhibit. An administrator runs a PowerShell command to monitor a server. Based on the output provided, which conclusion regarding the server's state is most accurate?

You need to inspect the state of Active Directory objects as they existed three days ago to troubleshoot an issue. You have a system state backup from that time. Which TWO tools must you use to view the contents of the database from the backup without performing a full restore? (Each correct answer presents part of the solution.)

You are managing a hybrid cloud environment and need to connect an on-premises Windows Server 2022 to an Azure Virtual Network. Which service should you implement to provide a secure, persistent, and encrypted tunnel over the public internet?

The domain controller holding the RID Master FSMO role in your domain has suffered a catastrophic hardware failure and will be offline for several weeks. You notice that administrators can no longer create new user objects. What should you do to resolve this issue immediately?

You need to track the average CPU and memory usage for a specific virtual machine over a period of 30 days to assist with capacity planning. Which Hyper-V feature should you enable and use to collect this data?

An administrator is concerned about man-in-the-middle attacks where an attacker intercepts and modifies SMB traffic between a Windows Server 2022 file server and its clients. Which security feature should be enforced to ensure the integrity and authenticity of the SMB traffic?

You are securing a Windows Server 2022 instance against potential malware. Which THREE actions are recommended to minimize the attack surface?

An organization uses Azure Files to store sensitive company data. They need to ensure that users can only access the files if they are authenticated via their on-premises Active Directory Domain Services (AD DS). Which technology should be implemented to support this?

You need to apply a stricter password policy to a group of executives than the one defined in the Default Domain Policy. You want to achieve this without creating a separate domain. Which feature should you implement?