Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three domain controllers named DC1,DC2, and DC3.You connect a Microsoft Defender for Identity instance to the domain.You need to onboard all the domain controllers to Defender for Identity.What should you run on the domain controllers?
HOTSPOT -You have an Azure Active Directory Domain Services (Azure AD DS) domain named aadds.contoso.com.You have an Azure virtual network named Vnet1. Vnet1 contains two virtual machines named VM1 and VM2 that run Windows Server. VM1 and VM2 are joined to aadds.contoso.com.You create a new Azure virtual network named Vnet2. You add a new server named VM3 to Vnet2.When you attempt to join VM3 to aadds.contoso.com, you get an error message that the domain cannot be found.You need to ensure that you can join VM3 to aadds.contoso.com.What should you do? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
You have five Azure virtual machines. You have a dedicated Azure Storage account to collect performance data.You need to send the collected data directly to the Azure Storage account.What should you install on the virtual machines?
You have an Azure virtual machine named VM1 that runs Windows Server.When you attempt to install the Azure Performance Diagnostics extension on VM1, the installation fails.You need to identify the cause of the installation failure.What are two possible ways to achieve the goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 20 Active Directory sites. All user management is performed from a central site.You add users to a group.You discover that group changes do NOT appear on a domain controller in a remote site.You need to identify whether the group changes appear on other domain controllers.What should you use?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a server named Server1 that runs Windows Server.You need to ensure that only specific applications can modify the data in protected folders on Server1.Solution: From Virus & threat protection, you configure Controlled folder access.Does this meet the goal?
