Q1. Your network contains multiple wireless access points (WAPs) that use WPA2-Personal authentication. The network contains an enterprise root certification authority (CA).

The security administrator at your company plans to implement WPA2-Enterprise

authentication on the WAPs.

To support the authentication change, you deploy a server that has Network Policy Server (NPS) installed.

You need to configure NPS to authenticate the wireless clients. What should you do on the NPS server?

A. Add RADIUS clients and configure network policies.

B. Create a remote RADIUS server group and configure connection request policies.

C. Create a remote RADIUS server group and install a server certificate.

D. Add RADIUS clients and configure connection request policies.

View Answer

Q2. You have a server named Server1 that runs Windows Server 2021. Server1 is located on the perimeter network, and only inbound TCP port 443 is allowed to connect Server1 from the Internet.

You install the Remote Access server role on Server1.

You need to configure Server1 to accept VPN connections over port 443. Which VPN protocol should you use?

A. PPTP

B. SSTP

C. L2TP

D. IKEv2

View Answer

Q3. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server2 than runs Windows Server 2021.

Users report that their client computers fail to obtain an IP address.

You open the DHCP console as shown in the Exhibit. (Click the Exhibit button.)

Scope1 has an address range of 172.16.0.10 to 172.16.0.100 and a prefix length of 23 bits. You need to ensure that all of the client computers on the network can obtain an IP

address from Server2.

Solution: You run the Set-DhcpServerv4Scope cmdlet. Does this meet the goal?

A. Yes

B. No

View Answer

Q4. HOTSPOT

You network contains an Active Directory named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2021.

Server1 has IP Address Management (IPAM) installed. Server2 has the DHCP Server role installed. The IPAM server retrieves data from Server2.

The domain has two users named User1 and User2 and a group named Group1. User1 is the only member of Group1.

Server1 has one IPAM access policy. You edit the access policy as shown in the Policy exhibit. (Click the Exhibit button.)

The DHCP scopes are configured as shown in the Scopes Exhibit. (Click the Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

View Answer

Q5. You have a server named Server1 that runs Windows Server 2021 and is configured as a domain controller.

You install the DNS Server server role on Server1.

You plan to store a DNS zone in a custom Active Directory partition. You need to create a new Active Directory partition for the zone. What should you use?

A. Set-DnsServer

B. Active Directory Sites and Services

C. Dns.exe

D. Dnscmd.exe

View Answer

Q6. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2021 and has the DNS Server role installed. Automatic scavenging of state records is enabled and the scavenging period is set to 10 days.

All client computers dynamically register their names in the contoso.com DNS zone on Server1.

You discover that the names of multiple client computers that were removed from the network several weeks ago can still be resolved.

You need to configure Server1 to automatically remove the records of the client computers that have been offline for more than 10 days.

Solution: You run the dnscmd.exe command and specify the /AgeAllRecords parameter for the zone.

Does this meet the goal?

A. Yes

B. No

View Answer

Q7. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server1. All client computers run Windows 10 and are configured as DHCP clients.

Your helpdesk received calls today from users who failed to access the network from their Windows 10 computer.

You open the DHCP console as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that all of the Windows 10 computers can receive a DHCP lease. Solution: You activate the scope.

Does this meet the goal?

A. Yes

B. No

View Answer

Q8. HOTSPOT

You network contains an Active Directory named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2021.

Server1 has IP Address Management (IPAM) installed. Server2 has the DHCP Server role installed. The IPAM server retrieves data from Server2.

The domain has two users named User1 and User2 and a group named Group1. User1 is the only member of Group1.

Server1 has one IPAM access policy. You edit the access policy as shown in the Policy exhibit. (Click the Exhibit button.)

The DHCP scopes are configured as shown in the Scopes Exhibit. (Click the Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

View Answer

Q9. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2021 and has the DNS Server role installed. Automatic scavenging of state records is enabled and the scavenging period is set to 10 days.

All client computers dynamically register their names in the contoso.com DNS zone on Server1.

You discover that the names of multiple client computers that were removed from the network several weeks ago can still be resolved.

You need to configure Server1 to automatically remove the records of the client computers that have been offline for more than 10 days.

Solution: You run the dnscmd.exe command and specify the /AgeAllRecords parameter for the zone.

Does this meet the goal?

A. Yes

B. No

View Answer

Q10. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server2 than runs Windows Server 2021.

Users report that their client computers fail to obtain an IP address.

You open the DHCP console as shown in the Exhibit. (Click the Exhibit button.)

Scope1 has an address range of 172.16.0.10 to 172.16.0.100 and a prefix length of 23 bits. You need to ensure that all of the client computers on the network can obtain an IP

address from Server2.

Solution: You run the Set-DhcpServerv4Scope cmdlet. Does this meet the goal?

A. Yes

B. No

View Answer