You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains the resources shown in the following table.

Sub1 has Microsoft Defer>der for Servers enabled You are assigned the Contributor role for Sub1. You need to implement just-in-time (JIT) VM access for VM1. What should you do first?

A. Enable enhanced security in Microsoft Defender for Cloud.

B. Request the Owner role for Sub1.

C. Create a network security group (NSG).

D. Create an application security group.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

You need to migrate App1 to a Docker image on Server2.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the coned order.

You have an Azure subscription.

Your on-premises network connects to Azure by using an Azure VPN gateway named VPN1.

You need to monitor the Azure gateway health probe for VPN1.

Which TCP port should you use?

A. 443

B. 1723

C. 3389

D. 8081

E. 65500

You have an Azure subscription that contains a network security group (NSG) named NSG1 and a virtual network named VNet1. NSG1 contains only default security rules. VNet1 contains the subnets shown in the following table.

The subscription contains virtual machines that run Windows Server as shown in the following table.

You configure just-in-time (JIT) VM access as shown in the following exhibit.

for each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point

Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabtikam.com. Contoso.com includes the groups shown in the following table.

You need to migrate the groups to fabrikam.com by using ADMT.

Which groups can be migrated and which groups can have the sIDHistory attribute populated after the migration?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a failover cluster named Cluster1 that hosts an application named App1.

The General tab in App1 Properties is shown in the General exhibit. (Click the General tab.)

The Failover tab in App1 Properties is shown in the Failover exhibit. (Click the Failover tab.)

Server1 shuts down unexpectedly.

You need to ensure that when you start Server1, App1 continues to run on Server2.

Solution: From the General settings, you move Server2 up.

Does this meet the goal?

A. Yes

B. No

Your network contains an Active Director/ Domain Services {AD DS) domain named contoso.com. The domain contains two sites named Site1 and Site2 and servers that run Windows Server and are configured as shown in the following table.

The domain contains a group named Group1 that contains Server3.

RODC1 has the Password Replication Policy shown in the following exhibit.

You have an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1 that runs Windows Server.

You need to prevent the registration of specific COM objects on Server1.

What should you use?

A. exploit protection

B. Windows Defender Application Control (WDAC)

C. Smart App Control

You have two onpremises Hyper-V hosts named Served and Server2, Server1 contains two virtual machines named VM1 and VM2. Server2 contains three virtual machines named VM21. VM22, and VM23.

You have an Azure subscription.

You plan to use Azure Site Recovery to replicate all the virtual machines to Azure.

You need to deploy the Microsoft Azure Site Recovery Provider to the on-premises infrastructure.

What is the minimum number of providers you should install?

A. 1

B. 2

C. 5

D. 7

Your company uses Storage Spaces Direct. You need to view the available storage in a Storage Space Direct storage pool. What should you use?

A. The Get-StoragefileServer cmdlet

B. Resource Monitor

C. System Configuration

D. Windows Admin Center