NO.112 Which three actions should you perform in sequence to meet the security requirements for Webapp1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NO.113 Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
The domain contains a server named Server1 that runs Windows Server. Server1 hosts a primary DNS zone named secure.contoso.com.
You need to implement DNSSEC validation for all queries in the secure.contoso.com zone. The solution must ensure that Windows client computers reject responses when DNSSEC validation cannot be completed.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.114 You have an Azure subscription that contains the storage accounts shown in the following table. storage1:
East US, StorageV2, container cont1, file share share1 storage2: East US, BlockBlobStorage, container cont2, no file share storage3: East US, FileStorage, no container, file share share3 storage4: Central US, StorageV2, container cont4, file share share4 In the East US Azure region, you create a storage sync service named SyncA. You need to create a sync group in SyncA. Which storage accounts can you use, and what can you specify as the cloud endpoints? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

NO.115 You have a Hyper-V host named Server1 that runs Windows Server. Server1 hosts a virtual machine named VM1 that runs Windows Server and has multiple file shares. You have an Azure subscription. You need to migrate the file shares to Azure Storage by using Azure Storage Mover. The solution must minimize downtime and administrative effort. What should you do on the on-premises network first?

NO.116 You are planning the www.fabrikam.com website migration to support the Azure migration plan. How should you configure WebApp1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

NO.117 You have a Hyper-V failover cluster named Cluster1 that contains two nodes named Node1 and Node2, and a Hyper-V host named Host1.
You have the virtual machines shown in the following table.
The Balancer settings for Cluster1 are shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Exhibit

Exhibit

Exhibit

NO.118 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that runs Windows Server. You need to ensure that only specific applications can modify the data in protected folders on Server1. Solution: From App & browser control, you configure the Exploit protection settings. Does this meet the goal?

NO.119 You have an Azure subscription that contains the Azure key vaults shown in the following table. You create a virtual machine that has the following configurations: Name: VM1; Resource group: RG1; Azure region: East US; Operating system: Windows Server. You need to enable Azure Disk Encryption for VM1. Which key vault can you use to store the encryption key for VM1? (Exhibit: key vaults table.)

Key vaults and their regions/resource groups

NO.120 You need to ensure that access to storage1 for the Marketing OU users meets the technical requirements.
What should you implement?

NO.121 You have a Windows Server failover cluster named Cluster1 that has a cloud witness and the nodes shown in the following table.
Cluster1 has the roles shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Exhibit

Exhibit

NO.122 Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest is the forest root and contains a child domain named east.contoso.com. In the contoso.com domain, you create two users named Admin1 and Admin2. You need to ensure that the users can perform the following tasks:
Admin1 can create and manage Active Directory sites; Admin2 can deploy a domain controller to the east.
contoso.com domain. The solution must use the principle of least privilege. To which group should you add each user? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

NO.123 You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements. What should you configure?

NO.124 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains servers that run Windows Server and store BitLocker recovery keys in AD DS. A server named Server1 starts in BitLocker recovery mode. You need to identify the BitLocker recovery key for Server1. Solution: You use ADSI Edit and view the properties of the Server1 computer object. Does this meet the goal?

NO.125 Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child domain named east.contoso.com and the servers shown in the following exhibit: DC1 (contoso.com, holds schema master/infrastructure master/domain naming master), DC2 (east.contoso.com, holds PDC emulator/RID master, is a global catalog server), Server1 (contoso.com, File Server/DFS Namespaces/DFS Replication roles – a member server, not a domain controller). You need to create a folder for the Central Store to manage Group Policy template files for the entire forest. What should you name the folder, and on which server should you create the folder? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

DC1 (contoso.com: schema/infra/domain-naming master) / DC2 (east.contoso.com: PDC+RID master, GC) / Server1 (contoso.com, member server: File Server/DFS Namespaces/DFSR).

NO.126 You have an Azure virtual machine named VM1 that runs Windows Server. When you attempt to install the Azure Performance Diagnostics extension on VM1, the installation fails. You need to identify the cause of the installation failure. What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.