Exam 70-744 topic 1 question 50 discussion

I don't think thats right. According to "Exam Ref 70-744 Securing Windows Server 2016 Timothy Warner Craig Zacker" "each HGS server becomes a domain controller in a new, separate, “safe harbor” Active Directory Domain Services (AD DS) forest. For this reason, your hosts need to be configured for workgroup networking and not be a member of any other AD domain" A certificate is required

Even the linked MS document says at the first step: obtain a cert

Correct answer is B. Obtain a certificate

Read the question carefully ..! It says What should you do before you initialize the Host Guardian Service on Server22? ( before you initialize HGS ) Now you know the answer !

Hard and confusing question... A and B may be correct answers - You need AD DS to install HGS server - You need also create (read - obtain) certificate to initialize hgs servers Your steps are: 1) Install Windows Feature HGS Server (*also AD DS feature needs!) 2) Install-HGSServer -HGSdomainname "safe.local" ........ 3) *Create and export certificate 4) Initialize-HGSServer -SigningCertificateLocationPath Obtain a certificate step is just before initialization, so it may be more accurate answer

The given reference supports Answer B, Obtain a Cert. Steps according to the given reference... Obtain Cert Install HGS - options: in it's own dedicated forest, or in an existing bastion forest Initialize HGS - options TPM mode, AD mode, Key mode Configure HTTPS Add Nodes

Answer is correct. D. Join Server22 to the domain.

I would say the answer is A. You need ADDS installed before initializing HGS

D. Join server to the domain Exp. https://docs.microsoft.com/en-us/windows-server/security/guarded-fabric-shielded-vm/guarded-fabric-install-hgs-default Install HGS ------------------ The Host Guardian Service should be installed in a separate Active Directory forest. Ensure that the HGS machine is not joined to a domain before you start and sign in as the local machine Administrtor. Run the following commands to install the Host Guardian Service and configure its domain.

I would go with B, lol

According to https://docs.microsoft.com/en-us/windows-server/security/guarded-fabric-shielded-vm/guarded-fabric-install-hgs-default "The Host Guardian Service should be installed in a separate Active Directory forest. Ensure that the HGS machine is not joined to a domain before you start and sign in as the local machine Administrtor." Where as in the next section says : "In an existing bastion forest, HGS must be added to the root domain." In the question it says "The forest contains a single domain" so technically we could install AD on Server22 and create a separate domain in the same forest.

A is correct answer

The given answer is correct, because after you join the server to the domain it’s much easier for you to configure the host gird is key atteststion

I thinkl" Xasu" is right ANSWER : B https://docs.microsoft.com/en-us/windows-server/security/guarded-fabric-shielded-vm/guarded-fabric-obtain-certs

The link says: Install HGS The Host Guardian Service should be installed in a separate Active Directory forest. Ensure that the HGS machine is not joined to a domain before you start and sign in as the local machine Administrator.

Hi guys , so you saying joining it to the domain is wrong answer ?