Download Upgrading Your Skills to MCSA: Windows Server 2016.70-743.PracticeTest.2018-05-17.19q.tqb

Step 1: Import ModuleImport-Module .\NanoServerImageGenerator.psm1 Step 2: New New-NanoServerImageCreate Nano Server Image VHDX New-NanoServerImage -MediaPath .\Files -BasePath .\Base -TargetPath .\Images\NanoVMGA.vhdx References: https://technet.microsoft.com/en-us/windows-server-docs/get-started/deploy-nano-server

Box 1: WindowsFeatureThe WindowsFeature resource in Windows PowerShell Desired State Configuration (DSC) provides a mechanism to ensure that roles and features are added or removed on a target node. Box 2: PresentThe Ensure Property indicates if the role or feature is added. To ensure that the role or feature is added, set this property to "Present" To ensure that the role or feature is removed, set the property to "Absent". Example:WindowsFeature RoleExample {      Ensure = "Present"      # Alternatively, to ensure the role is uninstalled, set Ensure to "Absent"      Name = "Web-Server"# Use the Name property from Get-WindowsFeature } Box 3: ServiceThe Service resource in Windows PowerShell Desired State Configuration (DSC) provides a mechanism to manage services on the target node. Box 4: RunningThe State property indicates the state, either Running or Stopped, you want to ensure for the service. References:https://msdn.microsoft.com/en-us/powershell/dsc/windowsfeatureresourcehttps://msdn.microsoft.com/en-us/powershell/dsc/serviceresource

On virtualization servers that are activated using Volume Licensing or OEM licensing, AVMA offers several benefits. Server datacenter managers can use AVMA to do the following:Activate virtual machines in remote locations Activate virtual machines with or without an internet connection Track virtual machine usage and licenses from the virtualization server, without requiring any access rights on the virtualized systems Note: AVMA requires a Microsoft Virtualization Server running Windows Server 2012 R2 Datacenter or Windows Server 2016 Datacenter.

A group has been modified. Nothing has been deleted. Therefore, answers A and D will not work. Answer C would work if it was an authoritative restore, but not a non-authoritative restore. The solution is to recover an earlier copy of the group from a backup or active directory snapshot by using Dsamain. References:https://technet.microsoft.com/en-us/library/cc772168(v=ws.11).aspx https://www.briefmenow.org/microsoft/you-need-to-restore-the-membership-of-group1-15/

The Add-DnsServerTrustAnchor command adds a trust anchor to a DNS server. A trust anchor (or trust “point”) is a public cryptographic key for a signed zone. Trust anchors must be configured on every nonauthoritative DNS server that will attempt to validate DNS data. Trust Anchors have no direct relation to DSSEC validation. References:https://docs.microsoft.com/en-us/powershell/module/dnsserver/add-dnsservertrustanchor?view=win10-pshttps://technet.microsoft.com/en-us/library/dn593672(v=ws.11).aspx

Example: Export a trust anchor to a file shareThis command exports the trust anchor (DS record) for Contoso.com to a file share. A DNS administrator runs this command from the DNS server that hosts the zone Contoso.com and specifies that the zone signing key uses the SHA-1 algorithm to create the DS record. PS C:\> Export-DnsServerDnsSecPublicKey -ComputerName "DNSDC1.Contoso.com" -ZoneName "Contoso.com" -Path "\\MyDNSKeyShare\keys" -PassThru -DigestType "Sha1"

On WSUS 6.2 and later (at least Windows Server 2012), port 8530 for HTTP and 8531 for HTTPS References: https://technet.microsoft.com/en-us/library/hh852346(v=ws.11).aspx

This solution only shows the domain FSMO roles, not the forest FSMO roles. References: https://blogs.technet.microsoft.com/mempson/2007/11/08/how-to-find-out-who-has-your-fsmo-roles/