Get Full Version of the Exam
Your network contains an Active Directory domain named contoso.com. The Functional level of the forest and the domain is Windows Server 2008 R2. All servers in the domain run Windows server 2016 standard. The domain contains 100 client computers that run either Windows 8.1 or Windows 10.
The domain contains nine servers that are configured as shown in the following table.
You have a network address translation (NAT) server named NAT1 that has an external IP
address of 18.104.22.168 and an internal IP address of 10.0.0.1.
You deploy a new server named Web1 that has an IP address of 10.0.0.211.
A remote server named app.fabrikam.com has an IP address of 22.214.171.124. You need to make Web1 accessible to app.fabrikam.com through NAT1.
What command should you run from NAT1? To answer, select the appropriate options in the answer area.
You are deploying a small network that has 30 client computers. The network uses the 192.168.1.0/24 address space. All computers obtain IP configurations from a DHCP server named Server1.
You install a server named Server2 that runs Windows Server 2016. Server2 has two network adapters named internal and Internet. Internet connects to an Internet service provider (ISP) and obtains the 126.96.36.199 IP address. Internal connects to the internal network and is configured to use the 192.168.1.250 IP address.
You need to provide Internet connectivity for the client computers. What should you do?
On Server2, select the Internet and Internal network adapters and bridge the connections. From the DHCP console on Server1, authorize Server2.
On Server1, stop the DHCP server. On the Internal network adapter on Server 2, enable Internet Connection Sharing (ICS).
On Server2 run the New-NetNat -Name NAT1 -InternalIPInterfaceAddressPrefix 192.168.1.0/24 cmdlet. Configure Server1 to provide the 003 Router option of 188.8.131.52.
Install the Routing role service on Server2 and configure the NAT routing protocol. Configure Server1 to provide the 003 Router option of 192.168.1.250.
Correct Answer: D
You plan to deploy several Hyper-V hosts that run Windows Server 2016. The deployment will use Software defined Networking (SDN) and VXLAN. Which server role should you install on the network to support the planned deployment?
Network Policy and Access Services
Host Guardian Service
Correct Answer: A
Your network contains an Active Directory forest named contoso.com. The functional level of the forest is Windows Server 2012.
The forest contains five domain controllers and five VPN servers that run Windows Server 2016. Five hundred users connect to the VPN servers daily.
You need to configure a new server named Server1 as a RADIUS server. What should you do first?
On Server1, deploy the Remote Access server role.
On Server1, deploy the Network Policy and Access Services role.
On a domain controller, set the forest functional level to Windows Server 2016.
On each VPN server, run the New-NpsRadiusClient cmdlet.
Correct Answer: B
You are implementing a new network. The network contains a DHCP server named DHCP1 that runs Windows Server 2016. DHCP1 contains a scope named Scope1 for the 192.168.0/24 subnet.
Your company has the following policy for allocating IP addresses:
All server addresses must be excluded from DHCP scopes. All client computer must receive IP addresses from Scope1.
All Windows servers must have IP addresses in the range of 192.168.0.200 to 192.168.0.240 All other network devices must have IP addresses in the range of 192.168.0.180 to
You deploy a print device named Print1.
You need to ensure that Print1 adheres to the policy for allocating IP addresses. Which command should you use?
Correct Answer: D
You company has a main office in London. The company has 1,000 users who are located in many countries.
You plan to deploy a large remote access solution for the company.
The London office has three servers named Server1, Server2, and Server3 that run Windows Server 2016.
You plan to use Server1 as a VPN server, Server2 as a RADIUS proxy, and Server3 as a RADIUS server.
You need to configure Server2 to support the planned deployment.
Which three actions should you perform on Server2? Each correct answer presents part of the solution.
Create a connection request policy.
Deploy a Windows container.
Add a RADIUS client.
Create a network policy.
Create a remote RADIUS server group.
Correct Answer: ACE
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
You have a DHCP server named Server1 that has three network cards. Each network card is configured to use a static IP address.
You need to prevent all client computers that have physical address beginning with 98-5F from leasing an IP address from Server1.
What should you do?
From the properties of Scope1, modify the Conflict detection attempts setting.
From the properties of Scope1, configure Name Protection.
From the properties of IPv4, configure the bindings.
From IPv4, create a new filter.
From the properties of Scope1, create an exclusion range.
From IPv4, run the DHCP Policy Configuration Wizard.
From Control Panel, modify the properties of Ethernet.
From Scope1, create a reservation.
Correct Answer: E
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest has three sites located in London, Paris and Berlin.
The London site contains a web server named Web1 that runs Windows Server 2016.
You need to configure Web1 as an HTTP content server for the hosted cache servers located in the Paris and Berlin sites.
Solution: You install the Deployment Server role service, and then you restart the World Wide Web Publishing Service.
Does this meet the goal?
Correct Answer: B
You have a server named Host1 that runs Windows Server 2016.
You configure Host1 as a virtualization host and create 20 new virtual machines on Host1. You need to ensure that all of the virtual machines can connect to the Internet through Host1. Which three actions should you perform? Each correct answer presents part of the solution.
On a virtual machine, install the Remote Access server role.
From the properties of each virtual machine, enable virtual LAN identification.
From the properties of each virtual machine, connect to the virtual machine switch.
On Host1, configure the network address translation (NAT) network.
On Host1, create an internal virtual machine switch and specify an IP address for the switch.
Correct Answer: CDE