Exam 70-741 topic 1 question 84 discussion

Actual exam question from Microsoft's 70-741

Question #: 84
Topic #: 1

You manage a Windows Server 2016 software-defined network.
Network Controller is installed on a three-node domain-joined cluster of virtual machines.
You need to add a new access control list (ACL) for the network controller to the network interface on a tenant virtual machine. The ACL will have only one rule that prevents only outbound traffic from the 10.10.10.0/24 subnet.
You plan to run the following Windows PowerShell commands.
$ruleproperties = new-object Microsoft.Windows.NetworkController.AclRuleProperties
$ruleproperties.SourcePortRange = "0-65535"
$ruleproperties.DestinationPortRange = "0-65535"
$ruleproperties.Action = "Deny"
$ruleproperties.Priority = "100"
$ruleproperties.Type = "Outbound"
$ruleproperties.Logging = "Enabled"
Which three remaining properties should you add to the rule? Each correct answer presents part of the solution. (Choose three.)
NOTE: Each correct selection is worth one point.

A. $ruleproperties.SourceAddressPrefix = "10.10.10.0/24"
B. $ruleproperties.DestinationAddressPrefix = "10.10.10.0/24"
C. $ruleproperties.Protocol = "ALL"
D. $ruleproperties.Protocol = "TCP"
E. $ruleproperties.SourceAddressPrefix = "*"
F. $ruleproperties.DestinationAddressPrefix = "*"

Show Suggested Answer

Suggested Answer: ACF 🗳️

by dritter at Feb. 27, 2019, 11:45 a.m.

Comments

Submit Cancel

coleman

Highly Voted 5 years, 7 months ago

A. $ruleproperties.SourceAddressPrefix = "10.10.10.0/24" C. $ruleproperties.Protocol = "ALL" F. $ruleproperties.DestinationAddressPrefix = "*"

upvoted 11 times

...

dritter

Highly Voted 6 years, 4 months ago

I was confused shortly because of out/inbound and therefore interchanged destination and source. But the answer is clear apart from that :). "outbound traffic from the 10.10.10.0/24 subnet" means the source is 10.10.10.0/24.

upvoted 10 times

...

panda

Most Recent 4 years, 5 months ago

I think the given answers are correct. I believe that you must use following cmdlet in this situation. New-NetworkControllerAccessControlList https://docs.microsoft.com/en-us/powershell/module/networkcontroller/new-networkcontrolleraccesscontrollist?view=win10-ps

upvoted 1 times

...