bundle Flashcards

1
Q

You have an Active Directory domain that contains several Hyper-V hosts that run Windows Server 2016.
You plan to deploy network virtualization and to centrally manage Datacenter Firewall policies.
Which component must you install for the planned deployment?

A

Network Controller Server Role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

You have a server named Server1 that runs Windows Server 2016. Server1 is a Hyper-V host.
You have two network adapter cards on Server1 that are Remote Direct Memory Access (RDMA)-capable.
You need to aggregate the bandwidth of the network adapter cards for a virtual machine on Server1. The solution must ensure that the virtual machine can use the
RDMA capabilities of the network adapter cards.
Which command should you run first after DCB installed to setup with SET?

A

First make sure DCB is installed.

New-VMSwitch -Name SETswitch -NetAdapterName “SLOT 2”,”SLOT 3” -EnableEmbeddedTeaming $true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

what command enables RDMA on adapter?

A

Enable-NetAdapterRDMA “vEthernet (SMB_1)”,”vEthernet (SMB_2)” “SLOT 2”, “SLOT 3”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

You have two Hyper-v hosts, each host has a external vswitch. You want VM’s on each switch to not be able to packet capture on other hosts switch endpoints, and endpoints on its own switch?

A

Use Hyper-v network virtualization HNV. This helps with multi-tenant clients so they are separated from each other irrespective of host and switch they are on

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is MPIO multi-path IO

A

Multipath I/O is a Windows Server 2016 feature that enables a server connected to iSCSI, Fi
bre
Channel, or Serial Attached SCSI (SAS) SAN devices to revert to an alternate path through
the network when a connection fails.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is datacenter bridging DCB

A

provides bandwidth allocation to specific network traffic improving Ethernet transport reliability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Your company has 5,000 users who work remotely.
You have 40 VPN servers that host the remote connections for the users.
You plan to deploy a RADIUS solution that contains five RADIUS servers.
You need to ensure that client authentication requests are distributed evenly between the five RADIUS servers.
What should you do?

A

Deploy a RADIUS proxy to a new server. Configure all of the RADIUS clients to connect to the RADIUS proxy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and litwareinc.com.
Your company recently deployed DirectAccess for the members of a group named DA_Computers. All client computers are members of DA_Computers.
You discover that DirectAccess clients can access the resources located in the contoso.com domain only. The clients can access the resources in the litwareinc.com domain by using an L2TP VPN connection to the network.
You need to ensure that the DirectAccess clients can access the resources in the litwareinc.com domain.
What should you do?

A

From a Group Policy object (GPO), modify the Name Resolution Policy Table (NRPT).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

You want a server with RAS role installed to use another RADIUS server to authenticate to?

A

On that server in Routing and remote access configure authentication provider. basically setup this server as RADIUS client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

You want to configure server 2 as a radius proxy?

A

first add as RADIUS client
next create remote RADIUS server group
lastly create connection request policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

You want to exclude certain mac address’s from getting a DHCP lease?

A

use a DHCP deny filter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what 3 steps do you do to enable dns recursion scope?

A

disable default recursion and add recursion scope
Set-DnsServerRecursionScope -Name . -EnableRecursion $False
Add-DnsServerRecursionScope -Name “InternalAdatumClients” -EnableRecursion $True
finally you would set a query resolution policy
Add-DnsServerQueryResolutionPolicy -Name “RecursionControlPolicy” -Action ALLOW
-ApplyOnRecursion -RecursionScope “InternalAdatumClients” -ServerInterfaceIP
“EQ,10.24.60.254”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

how to enable response rate limiting

A

set-dnsserverresponseratelimiting
add-dnsserverclientsubnet
set-dnsserverresponseratelimitingexceptionlist

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

when creating a nic team in a hyper-v vm what load balancing mode are you allowed to only use?

A

address hash

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

what are the 3 load balancing modes for nic teams?

A

address hash, hyper-v port, and dynamic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

set teaming has only what mode?

A

hyper-v and dynamic

17
Q

in set teaming you have what teaming mode available?

A

switch independent

18
Q

You have a DHCP server named Server1.
Server1 has an IPv4 scope that serves 75 client computers that run Windows 10.
When you review the address leases in the DHCP console, you discover several leases for devices that you do not recognize.
You need to ensure that only the 75 Windows 10 computers can obtain a lease from the scope.
What should you do?

A

Create DHCP policy for scope

19
Q

BGP has already been setup. you want to setup multitenancy between vm’s what cmds do you run?

A

install-remoteaccess -multitenancy

enable-remoteaccessroutingdomain -name Tenant1 -type all -passthru

20
Q

You want to view the shared secret in a NPS template how do you view it?

A

export configuration to xml or run cmd below

get-npssharesecrettemplate

21
Q

if you need to resolve ip 192.168.5.10 to hello.com what kind of record should you create?

A

ptr record

22
Q

how do you authorize dhcp server using netsh

A

netsh dhcp add server

23
Q

how do you authorize dhcp server using powershell

A

Add-DhcpServerInDC -DnsName “dhcp01.contoso.com” -IPAddress 10.10.10.50

24
Q

how would you enable dns on nano server using dism?

A

Dism /online /Enable-Feature /FeatureName:DNS-Server-Full-Role /All

25
Q

Is virtual subnet ID the same as a vlan?

A

no it is different

26
Q

how to check virtual subnet ID?

A

get-vmnetworkadapter -vmname

27
Q

what four commands do you run to enable network controller cluster

A

install-windowsfeature
new-networkcontrollernodeobject
install-networkcontrollercluster
install-networkcontroller

28
Q

What cmd do you run to verify set is enabled?

A

Get-vmswitch

29
Q

You need to have direct access server accessed on feb.cont.com what command do you run in set-daentrypoint

A

Set-daentrypoint -computername

30
Q

Which authentication method do you use for always on vpn?

A

Protected eap