Exam 70-741 topic 2 question 19 discussion

if the question ist not wrong, it must be A Install-NetworkControllerCluster has not switch -ClientAuthentication (only -ClusterAuthentication) Install-NetworkController hast the switch -ClientAuthentication so its one of those 2 ... and you need cert auth because you have no domain so its 509 (not kerberos) https://github.com/MicrosoftDocs/windowsserverdocs/blob/master/WindowsServerDocs/networking/sdn/deploy/Deploy-Network-Controller-using-Windows-PowerShell.md#bkmk_script

In the exam, if the parameter is "-ClientAuthentication" then correct answer is: Install-NetworkController -Node @{Node1, Node2, Node3} -ClientAuthentication X509 and if the parameter is "-ClusterAuthentication" then the answer would be: Install-NetworkControllerCluster -Node @{Node1, Node1, Node3} -ClusterAuthentication X509

Following questions including this question are similar questions. page34/question07 domain-joined configure for virtual machine. page36/question19 no-domain-joined configure for Hyper-V host.

Likely answer is C, but pay attention to the wording in exam: Install-NetworkController -CLIENTauthentication *** Install-NetworkControllerCluster -CLUSTERauthentication *** Not domain joined, so it will be >X509< and NOT kerberos

l will agree with MrRiver (source: https://docs.microsoft.com/en-us/windows-server/networking/sdn/security/nc-security ) X509. Use X509 for certificate-based authentication for management clients not joined to an Active Directory domain. You must enroll certificates to all Network Controller cluster nodes and management clients. Also, all nodes and management clients must trust each others' certificates. You can configure the Authentication mode for Northbound communication by using the Windows PowerShell command Install-NetworkController with the ClientAuthentication parameter. Pls delete misleading comments, there are us who still are chasing the 70-741 until it retires and comment sections like this is confusing shit out of me...

Install a Network Controller cluster in a non domain-joined environment: Install-NetworkControllerCluster -Node @($NodeObject1,$NodeObject2,$NodeObject3) -ClusterAuthentication x509-LogLocation Source: https://docs.microsoft.com/en-us/powershell/module/networkcontroller/install-networkcontrollercluster?view=win10-ps

Got this at Exam

Remember, these questions are likely to have typos and not be entirely correct. So you can expect deviation from the real questions. The best way to deal with this is to understand what would be the correct answer - even if it is not displayed exactly. I would personally go for C (even although the switch should be -clusterauthentication). I am assuming that is just a typo here...

There is no proper answer here. Since: The virtual machines will NOT be domain-joined. => x509 You need to configure authentication for the cluster. => Install-NetworkControllerCluster Install-NetworkController is next step, see description: https://docs.microsoft.com/en-us/powershell/module/networkcontroller/install-networkcontrollercluster?view=win10-ps So it should be: Install-NetworkControllerCluster -Node @{Node1, NODE2, Node3} -CLUSTERAuthentication X509

Answer: C

Install-NetworkControllerCluster -Node @($NodeObject1,$NodeObject2,$NodeObject3) -ClusterAuthentication x509 = This command installs a Network Controller cluster in a non-domain-joined environment. The authentication used between the cluster nodes is a X.509 certificate. https://docs.microsoft.com/en-us/powershell/module/networkcontroller/install-networkcontrollercluster?view=win10-ps

C is correct PS C:\> Install-NetworkControllerCluster -Node @($NodeObject1,$NodeObject2,$NodeObject3) -ClusterAuthentication x509-LogLocation "\\share\diagnostics" -StoreAccessCredential $Cred -CredentialEncryptionCertificate $Cert

This question and answers have some typo errors that make some confusions... Here is an example taken on : https://docs.microsoft.com/en-us/powershell/module/networkcontroller/install-networkcontroller?view=win10-ps This command is the final command """ PS C:\> Install-NetworkController -Node @($Node01,$Node02,$Node03) -ClientAuthentication Kerberos -ClientSecurityGroup "Contoso\RestClients" -RestIpAddress "10.0.0.1/24" -StoreCertificate $Certificate -EnableAllLogs The final command deploys the network controller in a domain joined environment. Network controller uses Kerberos authentication between the cluster nodes, and between the REST clients and network controller. Only clients that are part of the RestClients security group can communicate with the network controller. The certificate in $Certificate is used to encrypt traffic between the REST clients and network controller.

C is Correct

I agree with Mjwc, the Install-networkcontrollercluster command does not support the -clientuthentication parameter, but the Install-networkcontroller does accept that -clientauthentication command, so for me A is the correct option

So is it A or C?

However, 'C' has {Node1, Node1, Node3}, Node 1 twice!