exam questions

Exam 70-741 All Questions

View all questions & answers for the 70-741 exam

Exam 70-741 topic 2 question 7 discussion

Actual exam question from Microsoft's 70-741
Question #: 7
Topic #: 2
[All 70-741 Questions]

Your network contains an Active Directory domain named contoso.com. The domain contains a Hyper-V host.
You are deploying Software Defined Network (SDN) by using Windows Server 2016.
You deploy a virtual machine that runs Windows Server 2016, and you install the Network Controller server role.
You need to configure the virtual machine as the network controller.
What should you do?

  • A. Run the Install-NetworkControllerCluster cmdlet and set ClientAuthentication to X509.
  • B. Run the Install-NetworkController cmdlet and set ClientAuthentication to None.
  • C. Run the Install-NetworkControllerCluster cmdlet and set ClientAuthentication to None.
  • D. Run the Install-NetworkController cmdlet and set ClientAuthentication to Kerberos.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
References:
https://github.com/MicrosoftDocs/windowsserverdocs/blob/master/WindowsServerDocs/networking/sdn/deploy/Deploy-Network-Controller-using-
Windows-PowerShell.md#bkmk_script

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
rjc
Highly Voted 5 years, 4 months ago
D Looks correct Sample Network Controller configuration script: https://github.com/MicrosoftDocs/windowsserverdocs/blob/master/WindowsServerDocs/networking/sdn/deploy/Deploy-Network-Controller-using-Windows-PowerShell.md $a = New-NetworkControllerNodeObject -Name Node1 -Server NCNode1.contoso.com -FaultDomain fd:/rack1/host1 -RestInterface Internal $b = New-NetworkControllerNodeObject -Name Node2 -Server NCNode2.contoso.com -FaultDomain fd:/rack1/host2 -RestInterface Internal $c = New-NetworkControllerNodeObject -Name Node3 -Server NCNode3.contoso.com -FaultDomain fd:/rack1/host3 -RestInterface Internal $cert= get-item Cert:\LocalMachine\My | get-ChildItem | where {$_.Subject -imatch "networkController.contoso.com" } Install-NetworkControllerCluster -Node @($a,$b,$c) -ClusterAuthentication Kerberos -DiagnosticLogLocation \\share\Diagnostics - ManagementSecurityGroup Contoso\NCManagementAdmins -CredentialEncryptionCertificate $cert Install-NetworkController -Node @($a,$b,$c) -ClientAuthentication Kerberos -ClientSecurityGroup Contoso\NCRESTClients -ServerCertificate $cert -RestIpAddress 10.0.0.1/24
upvoted 9 times
ve22
5 years, 4 months ago
Thanks
upvoted 1 times
...
...
panda
Most Recent 4 years, 5 months ago
Following questions including this question are similar questions. page34/question07 domain-joined configure for virtual machine. page36/question19 no-domain-joined configure for Hyper-V host.
upvoted 1 times
...
panda
4 years, 7 months ago
I think the given answer D is correct. Definitely this question doesn't say that the virtual machine joins to domain. However, I believe the virtual machine is deployed on the Hyper-V host. If not so, you don't need the explanation "The domain contains a Hyper-V host."
upvoted 4 times
...
NickTim
4 years, 8 months ago
Got this at Exam
upvoted 3 times
...
ve22
5 years, 4 months ago
So, is it D or B ?
upvoted 1 times
...
SmackedWookiee
5 years, 5 months ago
I think the answer is A. To bring up a point that morlu mentioned, it's never stated that the VM is joined to the domain. Also, you have the run the Install-NetworkControllerCluster cmdlet before the Install-Network Controller. And you never want to leave authentication open in a production environment.
upvoted 2 times
slcc99
5 years, 5 months ago
You can understand SmackedWookiee's reason for the authentication type, but I guess the problem statement says "None" because there is no mention of the certificate authority or certificate.
upvoted 1 times
...
...
morlu
5 years, 6 months ago
Should be B. It never says the new VM is domain joined. Thus Kerberos won't work, and authentication has to be set to none. There is an AD on the network.. but the controller isn't a part.
upvoted 1 times
Rijvi
4 years, 7 months ago
plz kindly provide more elaborated explanation i think u r incorrect
upvoted 1 times
...
fattswindstorm
4 years, 5 months ago
Yes it does. "Your network contains an Active Directory domain named contoso.com. "
upvoted 1 times
...
...
coleman
5 years, 7 months ago
D. Run the Install-NetworkController cmdlet and set ClientAuthentication to Kerberos.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...