NEW QUESTION 1
DRAG DROP
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a print server named Server1. All printers are deployed to users by using a Group Policy Object (GPO) named GPO1.
You deploy a new server named Server2.
You need to decommission Server1. The solution must meet the following requirements:
Migrate the shared printers to Server2 by using the Printer Migration Wizard.
Ensure that the users use the printers on Server2. Minimize downtime for the users.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1.
Solution: From App & browser control, you configure the Exploit protection settings.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-controlledfolders?view=o365-worldwide

NEW QUESTION 3
HOTSPOT
You have a failover cluster named Cluster1 that contains three nodes.
You plan to add two file server cluster roles named File1 and File2 to Cluster1. File1 will use the File Server for general use role. File2 will use the Scale-Out File Server for application data role.
What is the maximum number of nodes for File1 and File2 that can concurrently serve client connections? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 4
You have an on-premises network and an Azure virtual network.
You establish a Site-to-Site VPN connection from the on-premises network to the Azure virtual network, but the connection frequently disconnects.
You need to debug the IPsec tunnel from Azure.
Which Azure VPN Gateway diagnostic log should you review?

• A. GatewayDiagnosticLog
• B. RouteDiagnosticLog
• C. IKEDiagnosticLog
• D. TunnelDiagnosticLog

Answer: D

Explanation:
Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics

NEW QUESTION 5
You have 10 servers that run Windows Server in a workgroup.
You need to configure the servers to encrypt all the network traffic between the servers. The solution must be as secure as possible.
Which authentication method should you configure in a connection security rule?

• A. NTLMv2
• B. pre-shared key
• C. Kerberos V5
• D. computer certificate

Answer: D

Explanation:
Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-authenticationrequest-rule

NEW QUESTION 6
DRAG DROP
You have a server that runs Windows Server.
You plan to back up the server to an Azure Recovery Services vault once per week starting on the next Saturday.
You need to schedule the weekly backup and perform the initial backup as soon as possible.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer are and arrange them in the correct order.
Select and Place:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 7
You are planning the data share migration to support the on-premises migration plan.
What should you use to perform the migration?

• A. Storage Migration Service
• B. Microsoft File Server Migration Toolkit
• C. File Server Resource Manager (FSRM)
• D. Windows Server Migration Tools

Answer: A

Explanation:
Reference: https://docs.microsoft.com/en-us/windows-server/storage/storage-migration-service/migrate-data

NEW QUESTION 8
DRAG DROP
You have two Azure virtual machines named VM1 and VM2. VM1 is backed up to an Azure Recovery Services vault daily and retains backups for 30 days.
You need to restore an individual file named C:\Data\Important.docx from VM1 to VM2. The solution must minimize administrative effort.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 9
You have an Azure virtual machine named VM1 that has the Web Server (IIS) server role installed. VM1 hosts a critical lineof- business (LOB) application.
After the security team at your company deploys a new security baseline to VM1, users begin reporting that the application is unresponsive.
You suspect that the security baseline has caused networking issues.
You need to perform a network trace on VM1.
What should you do?

• A. From VM1, run netstat.
• B. From Performance Monitor on VM1, create a Data Collector Set.
• C. From the Azure portal, configure the Diagnostics settings for VM1.
• D. From the Azure portal, configure the Performance diagnostics settings for VM1.

Answer: D

Explanation:
Reference: https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/performance-diagnostics

NEW QUESTION 10
DRAG DROP
Your network contains an Active Directory Domain Services (AD DS) domain that has the Active Directory Recycle Bin enabled. All domain controllers are backed up daily.
You accidentally remove all the users from a domain group.
You need to get a list of the users that were previously in the group.
Which four actions should you perform in sequence from a domain controller? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11
You have two servers named Server1 and Server2 that run Windows Server. Both servers have the Hyper-V server role installed.
Server1 hosts three virtual machines named VM1, VM2, and VM3. The virtual machines replicate to Server2.
Server1 experiences a hardware failure.
You need to bring VM1, VM2, and VM3 back online as soon as possible.
From the Hyper-V Manager console on Server2, what should you run for each virtual machine?

• A. Start
• B. Move
• C. Unplanned Failover
• D. Planned Failover

Answer: C

Explanation:
Reference: https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/manage/set-up-hyper-v-replica

NEW QUESTION 12
HOTSPOT
You have a server that runs Windows Server and has the Web Server (IIS) server role installed. Server1 hosts a single website that has the following configurations:
Is accessible by using a URL of https://www.contoso.com:8443 and has an SSL certificate that was issued by a third-partycertification authority (CA) in the Microsoft Trusted Root Program Uses anonymous authentication Was developed byusing PHPYou plan to use APP Service Migration Assistant to migrate the website to Azure App Service.
You need to migrate the website. The solution must minimize the number of changes made to the existing website.
What should you do manually to ensure that the website migration is successful? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 13
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server.
You need to ensure that only specific applications can modify the data in protected folders on Server1. Solution: From Virus & threat protection,
you configure Tamper Protection Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-controlledfolders?view=o365-worldwide

NEW QUESTION 14
HOTSPOT
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

Server3 contains a share named Share1.
On Server1, DHCP has the following configurations:
Conflict detection attempts: 3
An IPv4 scope named Scope1 that has the following settings: 1. Address Pool: 172.16.10.100
- 172.16.10.130 2. Address Leases:
- 172.16.10.100 computer1.contoso.com
- 172.16.10.101 computer2.contoso.com
Reservations: 172.16.10.101 computer2.contoso.com Policies: Policy1
You perform the following actions:
On Server1, you run
Export-DhcpServer -File \\Server3\Share1\File1.xml.
On Server2, you run
Import-DhcpServer -File \\Server3\Share1\File1.xml -BackupPath \\Server3\Share1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The functional level of the forest is Windows Server 2012 R2. All domain controllers run Windows Server 2012 R2.
Sysvol replicates by using the File Replication Service (FRS).
You plan to replace the existing domain controllers with new domain controllers that will run Windows Server 2022.
You need to ensure that you can add the first domain controller that runs Windows Server 2022.
Solution: You upgrade the PDC emulator.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 16
You need to meet the technical requirements for User1.
To which group in contoso.com should you add User1?

• A. Domain Admins
• B. Account Operators
• C. Schema Admins
• D. Backup Operators

Answer: A

NEW QUESTION 17
......