Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-800 Exam - Topic 3 Question 44 Discussion

You need to implement a name resolution solution that meets the networking requirements. Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point
A) Create an Azure private DNS zone named corp.fabhkam.com.
B) Create a virtual network link in the coip.fabnkam.c om Azure private DNS zone.
C) Create an Azure DNS zone named corp.fabrikam.com.
D) Configure the DNS Servers settings for Vnet1.
E) Enable autoregistration in the corp.fabnkam.com Azure private DNS zone.
F) On DC3, install the DNS Server role.
G) Configure a conditional forwarder on DC3.

Microsoft AZ-800 Exam - Topic 3 Question 44 Discussion

Actual exam question for Microsoft's AZ-800 exam
Question #: 44
Topic #: 3
[All AZ-800 Questions]

You need to implement a name resolution solution that meets the networking requirements. Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point

Show Suggested Answer Hide Answer
Suggested Answer: A

To create a GPO named GPO1 that only applies to a group named MemberServers, you can follow these steps:

On a domain controller or a computer that has the Remote Server Administration Tools (RSAT) installed, openGroup Policy Managementfrom theAdministrative Toolsmenu or by typinggpmc.mscin the Run box.

In the left pane, expand your domain and right-click onGroup Policy Objects. SelectNewto create a new GPO.

In theNew GPOdialog box, enterGPO1as theNameof the new GPO and clickOK. You can also optionally select a source GPO to copy the settings from.

Right-click on the new GPO and selectEditto open theGroup Policy Management Editor. Here, you can configure the settings that you want to apply to the group under theComputer ConfigurationandUser Configurationnodes. For more information on how to edit a GPO, seeEdit a Group Policy Object.

Close theGroup Policy Management Editorand return to theGroup Policy Managementconsole. Right-click on the new GPO and selectScope. Here, you can specify the scope of management for the GPO, such as the links, security filtering, and WMI filtering.

Under theSecurity Filteringsection, click onAuthenticated Usersand then click onRemove. This will remove the default permission granted to all authenticated users and computers to apply the GPO.

Click onAddand then type the name of the group that you want to apply the GPO to, such asMemberServers. ClickOKto add the group to the security filter. You can also click onAdvancedto browse the list of groups available in the domain.

Optionally, you can also configure theWMI Filteringsection to further filter the GPO based on the Windows Management Instrumentation (WMI) queries. For more information on how to use WMI filtering, seeFilter the scope of a GPO by using WMI filters.

To link the GPO to an organizational unit (OU) or a domain, right-click on the OU or the domain in the left pane and selectLink an Existing GPO. Select the GPO that you created, such asGPO1, and clickOK. You can also change the order of preference by using theMove UpandMove Downbuttons.

Wait for the changes to replicate to other domain controllers. You can also force the update of the GPO by using thegpupdate /forcecommand on the domain controller or the client computers. For more information on how to update a GPO, seeUpdate a Group Policy Object.

Now, you have created a GPO named GPO1 that only applies to a group named MemberServers. You can verify the GPO application by using thegpresult /rcommand on a member server and checking theApplied Group Policy Objectsentry. You can also use theGroup Policy Resultswizard in theGroup Policy Managementconsole to generate a report of the GPO application for a specific computer or user. For more information on how to use the Group Policy Results wizard, seeUse the Group Policy Results Wizard.


by Renea at Apr 29, 2024, 03:13 AM

Limited Time Offer

25%

Off

Get Premium AZ-800 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Golda
10 months ago
Wait, are we sure about E? Sounds a bit sketchy.
upvoted 0 times
...
Reiko
10 months ago
Totally agree with A and B!
upvoted 0 times
...
Romana
10 months ago
C seems off, we need a private zone, not public.
upvoted 0 times
...
Bea
10 months ago
B makes sense too, gotta link that VNet!
upvoted 0 times
...
Lilli
10 months ago
A is definitely needed for private DNS.
upvoted 0 times
...
Jordan
11 months ago
I definitely remember something about configuring DNS server settings for virtual networks, so option D seems relevant to me.
upvoted 0 times
...
Catalina
11 months ago
I feel like enabling autoregistration in the Azure private DNS zone could be useful, but I can't recall if it's necessary for this scenario.
upvoted 0 times
...
Victor
11 months ago
I remember practicing a question about virtual network links in DNS zones. I think option B might be the right choice.
upvoted 0 times
...
Laila
11 months ago
I think creating an Azure private DNS zone named corp.fabrikam.com could be important, but I'm not sure if it's the right name.
upvoted 0 times
...
Hassie
11 months ago
Alright, I think I've got this. Create the private DNS zone, link it to the VNet, and enable autoregistration. That should do the trick.
upvoted 0 times
...
Lezlie
11 months ago
I've got a strategy - I'll start by creating the private DNS zone, then link it to the virtual network. That should cover the core requirements. The other options seem like they might be distractions.
upvoted 0 times
...
Kattie
11 months ago
I'm a bit confused by the options - some of them seem to be related to on-premises DNS, which doesn't seem relevant here. I'll need to focus on the Azure-specific actions.
upvoted 0 times
...
Lilli
11 months ago
Okay, let's see here. I think the key is to create an Azure private DNS zone and link it to the virtual network. That should handle the name resolution needs.
upvoted 0 times
...
Blondell
11 months ago
Hmm, this looks like a tricky one. I'll need to carefully read through the options and think about the networking requirements mentioned in the question.
upvoted 0 times
...
Novella
12 months ago
Okay, let me see here. The question says the risk management plan is "put in place," which to me implies it's created during the planning phase. So I'm going to go with option D - Program risk management planning.
upvoted 0 times
...
Mitsue
12 months ago
I remember in our last practice exam, we discussed how independence and objectivity are key strengths of the internal audit function, so I think option E makes sense.
upvoted 0 times
...
Mayra
12 months ago
This is a tricky one. The IPv6 aspect makes it a bit more complex, but I'll methodically go through the options and try to determine the most likely configuration being set up.
upvoted 0 times
...
Sommer
1 year ago
Hmm, let's see... I think the answer is A and G. Creating an Azure private DNS zone and configuring a conditional forwarder on DC3 should do the trick. Now, where's the coffee? This exam is giving me a headache!
upvoted 0 times
Laura
1 year ago
I agree. And don't forget to enable autoregistration in the Azure private DNS zone. That's another important step.
upvoted 0 times
...
Linsey
1 year ago
Yeah, setting up the Azure private DNS zone and configuring the conditional forwarder are key. Good luck with the exam!
upvoted 0 times
...
Renato
1 year ago
Don't forget to also configure the DNS Servers settings for Vnet1. That's an important step.
upvoted 0 times
...
Dahlia
1 year ago
I think you're right. Creating an Azure private DNS zone and configuring a conditional forwarder on DC3 should work.
upvoted 0 times
...
...
Candida
1 year ago
Haha, this question is like a game of 'Which two don't belong?' I'm gonna go with C and F - creating an Azure DNS zone and installing the DNS Server role on DC3. Who needs on-prem solutions when you've got the cloud, am I right?
upvoted 0 times
...
Yaeko
1 year ago
Woah, this is a tricky one. I'm leaning towards B and D - setting up a virtual network link and configuring the DNS Servers settings for Vnet1 seems like the way to go. Let's hope I don't mess this up!
upvoted 0 times
Ezekiel
1 year ago
User1: Yeah, it's important to cover all the bases when setting up the solution.
upvoted 0 times
...
Jimmie
1 year ago
User2: Good point! That could definitely help with name resolution.
upvoted 0 times
...
Aliza
1 year ago
User1: I think you should also consider creating an Azure private DNS zone named corp.fabhkam.com.
upvoted 0 times
...
...
Alaine
1 year ago
Hmm, I think options A and E are the way to go. Creating an Azure private DNS zone and enabling autoregistration should do the trick. Gotta love those cloud solutions, am I right?
upvoted 0 times
Deandrea
1 year ago
Let's go ahead and implement options A and E then.
upvoted 0 times
...
Francis
1 year ago
Cloud solutions really do make things more efficient.
upvoted 0 times
...
Elbert
1 year ago
Enabling autoregistration will make things a lot easier for us.
upvoted 0 times
...
Oliva
1 year ago
I agree, setting up an Azure private DNS zone is definitely important.
upvoted 0 times
...
...
King
1 year ago
Yes, that sounds like a good plan. It will help meet the networking requirements.
upvoted 0 times
...
Gail
1 year ago
I agree with that. We also need to configure the DNS Servers settings for Vnet1.
upvoted 0 times
...
King
1 year ago
I think we should create an Azure private DNS zone named corp.fabhkam.com.
upvoted 0 times
...

Save Cancel