Question 6

Which groups can you add lo Group3 and Groups? To answer, select the appropriate options in the answer are a. NOTE Each correct selection is worth one point.

Question 7

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The on-premises network is connected to Azure by using a Site-to-Site VPN.
You have the DNS zones shown in the following table.

You need to ensure that names from fabrikam.com can be resolved from the on-premises network.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
  • Question 8

    You need to meet the technical requirements for VM1.
    Which cmdlet should you run first? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.

    Question 9

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
    You are planning the deployment of DNS to a new network.
    You have three internal DNS servers as shown in the following table.

    The contoso.local zone contains zone delegations for east.contoso.local and west.contoso.local. All the DNS servers use root hints.
    You need to ensure that all the DNS servers can resolve the names of all the internal namespaces and internet hosts.
    Solution: On Server2, you create a conditional forwarder for west.contoso.local. On Server3, you create a conditional forwarder for east.contoso.local.
    Does this meet the goal?
  • Question 10

    Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. Contoso.com contains three child domains named amer.contoso.com, apac.contoso.com, and emea.contoso.com. Fabrikam.com contains a child domain named apac.fabrikam.com. A bidirectional forest trust exists between contoso.com and fabrikam.com.
    You need to provide users in the contoso.com forest with access to the resources in the fabrikam.com forest.
    The solution must meet the following requirements:
    * Users in contoso.com must only be added directly to groups in the contoso.com forest.
    * Permissions to access the resources in fabrikam.com must only be granted directly to groups in the fabrikam.com forest.
    * The number of groups must be minimized.
    Which type of groups should you use to organize the users and to assign permissions? To answer, drag the appropriate group types to the correct requirements. Each group type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
    NOTE: Each correct selection is worth one point.