Microsoft Implementing a Software-Defined Datacenter 70-745 Exam Questions

Page: 1 / 14
Total 99 questions
Question 1

You plan to deploy Windows Server Gateway (WSG) with Microsoft System Center Virtual Machine Manager (SCVMM).

You need to configure the send and receive buffers for the Hyper-V hosts.

Solution: You run the Windows PowerShell cmdlet Set-NetAdapterBinding.

Does the solution meet the goal?



Answer : B

The Set-NetAdapterBinding cmdlet sets the binding state of a transport or filter on a network adapter.

References:

https://docs.microsoft.com/en-us/powershell/module/netadapter/set-netadapterbinding?view=win10-ps


Question 2

You plan to deploy a Microsoft system center virtual machine manager (SCVMM) with network controller.

You need to configure the datacenter firewall policies.

Which two options can you use?



Answer : A, B

The Network Controller Northbound API allows you to configure, monitor, troubleshoot, and deploy new devices on the network by using Windows PowerShell, the Representational State Transfer (REST) API, or a management application with a graphical user interface, such as System Center Virtual Machine Manager.

Firewall Management

This Network Controller feature allows you to configure and manage allow/deny firewall Access Control rules for your workload VMs for both East/West and North/South network traffic in your datacenter. The firewall rules are plumbed in the vSwitch port of workload VMs, and so they are distributed across your workload in the datacenter. Using the Northbound API, you can define the firewall rules for both incoming and outgoing traffic from the workload VM. You can also configure each firewall rule to log the traffic that was allowed or denied by the rule.

References:

https://docs.microsoft.com/en-us/windows-server/networking/sdn/technologies/network-controller/network-controller#bkmk_firewall


Question 3

You plan to deploy Windows Server Gateway (WSG) with Microsoft System Center Virtual Machine Manager (SCVMM).

You need to configure the send and receive buffers for the Hyper-V hosts.

Solution: You run the Windows PowerShell cmdlet Set-NetAdapterAdvancedProperty.

Does the solution meet the goal?



Answer : A

You can use the following Windows PowerShell command to set the Send Buffers size:

Set-NetAdapterAdvancedProperty 'NIC1' --DisplayName 'Transmit Buffers' --DisplayValue 3000

You can use the following Windows PowerShell command to set the Receive Buffers size:

Set-NetAdapterAdvancedProperty 'NIC1' --DisplayName 'Receive Buffers' --DisplayValue 3000

References:

https://docs.microsoft.com/en-us/windows-server/administration/performance-tuning/subsystem/software-defined-networking/hnv-gateway-performance


Question 4

You administer the virtualization environment for an organization. You manage all Microsoft Hyper-V hosts

locally. You plan to deploy Microsoft system center virtual machine manager (SCVMM).

(SCVMM) administrators must have full administrative permissions over the SCVMM fabric but no permission

to other organizational fabrics. Administrators in the domain environment must not have any permission to the

SCVMM infrastructure.

You need to deploy the SCVMM environment.

What should you include?



Answer : D

When setting up HGS, you are given the option of creating an isolated Active Directory forest just for HGS or to

join HGS to an existing, trusted domain. This decision, as well as the roles you assign the admins in your

organization, determine the trust boundary for HGS. Whoever has access to HGS, whether directly as an

admin or indirectly as an admin of something else (e.g. Active Directory) that can influence HGS, has control over your guarded fabric. HGS admins choose which Hyper-V hosts are authorized to run shielded VMs and manage the certificates necessary to start up shielded VMs. An attacker or malicious admin who has access to HGS can use this power to authorize compromised hosts to run shielded VMs, initiate a denial-of-service attack by removing key material, and more.

To avoid this risk, it is strongly recommended that you limit the overlap between the admins of your HGS (including the domain to which HGS is joined) and Hyper-V environments. By ensuring no one admin has access to both systems, an attacker would need to compromise 2 different accounts from 2 individuals to complete his mission to change the HGS policies. This also means that the domain and enterprise admins for the two Active Directory environments should not be the same person, nor should HGS use the same Active Directory forest as your Hyper-V hosts. Anyone who can grant themselves access to more resources poses a security risk.

References:

https://docs.microsoft.com/en-us/windows-server/security/guarded-fabric-shielded-vm/guarded-fabric-managehgs


Question 5

You install Microsoft System Center Operations Manager (SCOM) and download a sealed management pack.

You receive notifications from a monitor that a critical resource experiences an overload situation. When you check the resource, it is not in an overloaded condition.

You need to add a new threshold value for the resource.

What should you create?



Answer : B


Question 6

You manage a System Center Virtual Machine Manager (SCVMM) environment. You plan to create virtual

machine (VM) networks and IP address pools.

You need to ensure that VM networks are segmented.

Solution: You create Windows Firewall rules on the VMs.

Does the solution meet the goal?



Answer : B

The type of VM network you set up depends on the isolation settings for the logical network:

Network virtualization: If the logical network is isolated using network virtualization you can create multiple VM networks for a logical network. Within a VM network tenants can use any IP addresses they want for their VMs regardless of the IP addresses used on other VM networks. Tenants can also configure some network settings.

VLAN: If the logical network is isolated using VLAN or PVLAN you'll create on VM network for each network site and VLAN in the logical network.

No isolation: If the logical network is configured without isolation you'll create a single VM network linked to a logical network.

References:

https://docs.microsoft.com/en-us/system-center/vmm/network-virtual?view=sc-vmm-1807#create-a-vm-network-no-isolation


Question 7

You administer a Microsoft System Center Virtual Machine Manager (SCVMM) infrastructure. You have a Microsoft Azure subscription. You must design a backup strategy that meets the following requirements:

* Back up the SCVMM hosts, virtual machines (VMs), and workloads.

* Use a protection agent to perform the backups.

* Automate the backup process.

You need to recommend a backup solution. What should you recommend?



Answer : B


Page:    1 / 14   
Total 99 questions