B.2.4 AZ-800 Domain 4: Implement and Manage an On-Premises and Hybrid Networking Infrastructure: Complete Exam Retaken, Scored 100% Latest Fall 2025/26.

B.2.4 AZ-800 Domain 4: Implement and Manage an On-Premises and Hybrid Networking Infrastructure: Complete Exam Retaken, Scored 100% Latest Fall 2025/26.B.2.4 AZ-800 Domain 4: Implement and Manage an On-Premises and Hybrid Networking Infrastructure Time Spent: 15:49 Windows 10 and non-Microsoft clients. All client computers use DHCP to obtain an IP address. Some Windows 10 clients report that they are experiencing DNS issues. When you investigate in the CorpN zone, you notice that the IP addresses in the A records for those clients point to non-Microsoft clients. You need to ensure that non-Microsoft clients cannot overwrite the DNS records for Microsoft clients. Non-Microsoft clients must still be able to register records with the DNS servers. What should you do? Convert the zone to Active Directory-Integrated. Convert the scope to a split scope. Implement DNSSEC on the zone. Implement DHCP Name Protection on the scope. Explanation Question 1 10/12/25, 8:21 PM Individual Response DHCP Name Protection allows the DHCP server to register DNS records on behalf of the clients. It is used when there are non-Microsoft clients in the environment that may have the same names as Microsoft clients. Since the DHCP server updates DNS, the non-Microsoft clients will not be able to overwrite the DNS records and corrupt the DNS database. A split scope uses a primary and backup server. The split scope wizard automatically creates a copy of the scope on the backup server. It also creates mirrored exclusions so that 20% of the addresses on the primary DHCP server are excluded from the scope and 80% of the addresses on the backup server are excluded. This prevents the primary and the backup server from issuing the same addresses to prevent conflicts. The split scope created on the backup server needs to be manually activated. DNSSEC allows the DNS server to digitally sign DNS records. The clients can verify the signatures to ensure that they are receiving an answer from the DNS server and that the reply has not been modified in transit. DNSSEC does not prevent non-Microsoft clients from overwriting Microsoft client DNS records. When you convert a zone to Active DirectoryIntegrated, you have support for Secure Dynamic Updates. Secure Dynamic Updates restricts updates to DNS records to the client that creates the record. This prevents non-Microsoft clients from updating Microsoft client DNS records. However, the security is configured using the SID of the computer account in Active Directory, which allows only Microsoft clients to create and update records in the zone. Since the non-Microsoft clients must continue to be able to register for the zone, converting the zone to an Active Directory-Integrated zone would not achieve all of the objectives. Related Content 2.2.1 Windows Server Roles and Features 2.2.2 Install Server Roles and Features 2.2.3 Manage Server Roles and Features 2.2.4 Server Roles and Features Facts 4.4.1 DHCP 4.4.2 DHCP Facts 4.4.3 Configure a DHCP Server 4.4.4 Configure a DHCP Server 4.4.5 Configure DHCP Options 4.4.6 Create DHCP Exclusions 10/12/25, 8:21 PM Individual Response 4.4.8 Configure Client Addressing 4.4.9 Troubleshoot DHCP Exhaustion 4.5.1 DHCP Relay 4.5.2 Configure DHCP Relay 4.5.3 DHCP Relay Facts 4.5.4 Configure a DHCP Relay Agent 4.5.5 Add a DHCP Server on Another Subnet 4.6.10 Advanced DHCP Management Facts 4.7.6 Troubleshoot DHCP 1 4.8.6 Configure a DHCP6 Server 4.9.3 IPAM and DHCP Overview 4.9.6 Manage the DHCP Server with IPAM 4.9.7 Configure DHCP Scopes and Options with IPAM 4.9.8 Configure DHCP Policies with IPAM 4.9.9 Configure DHCP Failover with IPAM 4.9.13 IPAM DNS and DHCP Facts resourcesquestionsq_dhcp_advanced_management_name_ 10/12/25, 8:21 PM Individual Response Two subnets have all Windows 10 computers. The conference room uses the third subnet. Traveling salesmen come to the conference room and plug in their laptops to gain network access. You have configured a DHCP server to deliver configuration information to hosts on this subnet. DNS is configured for dynamic updates. Over time, you notice that the size of the DNS database continues to grow. It is beginning to have an adverse effect on DNS server performance. What should you do? Compact the DNS zone file. Clear the DNS cache on the server. Enable scavenging of stale resource records on the zone and the DNS server. Enable scavenging of stale resource records on the DNS server. Enable scavenging of stale resource records on the zone. Explanation LabSim for Server Pro 2016, Section 9.3. If hosts who register their host name with DNS using dynamic updates do not shut down normally, the corresponding host record might not get removed from the DNS database. This particularly happens when the network has a large number of mobile computers. To remove old records, enable scavenging of stale records on the zone properties and on the DNS server properties. Clearing the cache only removes temporary records, not dynamically-created records. Decreasing the TTL makes records eligible for removal sooner, but scavenging would still be necessary to actually remove the records. Related Content 5.1.1 DNS - Record Types Question 2 10/12/25, 8:21 PM Individual Response 5.1.3 Configure DNS 5.1.4 Configure DNS Addresses 5.1.5 Create Standard DNS Zones 5.1.6 Create Host Records 5.1.7 Create CNAME Records 5.1.8 Troubleshoot DNS Records 5.1.9 Configure DNS Server Properties 5.1.10 DNS Server Properties Facts 5.2.4 Name Resolution Facts 5.2.6 Create a Root Zone 5.3.2 Standard DNS Zones 5.3.3 Active Directory-Integrated Zones 5.3.4 Create a New Zone 5.3.5 Configure Zone Properties 5.3.6 Zone Management Facts 5.3.7 Create an Active Directory-Integrated Zone 5.3.8 Convert a Zone to Active Directory-Integrated 5.4.1 DNS Troubleshooting 5.4.2 DNS Troubleshooting Facts 5.4.3 Examine DNS Attacks 5.4.4 Use nslookup 5.4.5 Explore nslookup 6.1.4 DNS Configuration Issues resourcesquestionsq_dns_zones_scavenging_ 10/12/25, 8:21 PM Individual Response A framework for coding and running applications on Windows. Used for secure communication over a computer network. Allows for scoping instead of the shotgun approach of a VPN connection. A protocol that provides full-duplex communications over a single TCP connection. Explanation Azure relay is an important type of hybrid connection that keeps outside exposure to your onpremises network to a minimum. It allows for scoping instead of the shotgun approach of a VPN connection. WebSocket is a protocol that provides full-duplex communications over a single TCP connection. Hypertext Transfer Protocol Secure (HTTPS) is an extension of the Hypertext Transfer Protocol (HTTP). It is used for secure communication over a computer network. .NET is a Microsoft software development framework for coding and running applications on Windows. Related Content 13.5.13 Implement Azure Relay Facts resourcesquestionsq_az_implement_relay_def_ Question 3 10/12/25, 8:21 PM Individual Response address lease is created or released? Dynamic NAT Forward lookup Dynamic DNS DHCP Relay Explanation Dynamic DNS (DDNS) enables clients or the DHCP server to update records in the zone database automatically. This occurs whenever an IP address lease is created or renewed. A forward lookup is the process of resolving a hostname to an IP address. A DHCP relay is used to forward DHCP requests to a DHCP server on a different subnet. Dynamic NAT automatically maps internal IP addresses with a dynamic port assignment. Related Content 5.1.1 DNS - Record Types 5.1.2 DNS Facts 5.1.3 Configure DNS 5.1.4 Configure DNS Addresses 5.1.5 Create Standard DNS Zones 5.1.6 Create Host Records 5.1.7 Create CNAME Records 5.1.8 Troubleshoot DNS Records 5.1.9 Configure DNS Server Properties 5.1.10 DNS Server Properties Facts 5.2.4 Name Resolution Facts 5.2.6 Create a Root Zone Question 4 10/12/25, 8:21 PM Individual Response 5.3.3 Active Directory-Integrated Zones 5.3.4 Create a New Zone 5.3.5 Configure Zone Properties 5.3.6 Zone Management Facts 5.3.7 Create an Active Directory-Integrated Zone 5.3.8 Convert a Zone to Active Directory-Integrated 5.4.1 DNS Troubleshooting 5.4.2 DNS Troubleshooting Facts 5.4.3 Examine DNS Attacks 5.4.4 Use nslookup 5.4.5 Explore nslookup 6.1.4 DNS Configuration Issues resourcesquestionsq_dns_dynamic_def_ 10/12/25, 8:21 PM Individual Response 2016. You have a server named IPAM1 that has the IPAM feature installed on it. You need to configure IPAM1 to detect the DHCP and DNS servers in the domain. What should you do first? Use the Provision the IPAM server link. Run the Invoke-IPAMGPOProvisioning cmdlet. Use the Start server discovery link. Use the Configure server discovery link. Explanation You should use the Configure server discovery link. Use Configure server discovery to identify the domains where the IPAM server automatically discovers server roles. Use the Provision the IPAM server link to configure the provisioning method of the IPAM server. Once provisioning has been completed, use the Start server discovery link to run the Server Discovery task to discover servers in the domains selected, once Server Discovery has been configured. You need to run the Invoke-IPAMGPOProvisioning cmdlet for each domain configured for Server Discovery. This cmdlet creates a series of Group Policy objects for each domain if the IPAM server has been provisioned using the Group Policy method. Related Content 4.9.1 IPAM Overview 4.9.2 IPAM Facts 4.9.3 IPAM and DHCP Overview 4.9.4 Install and Provision IPAM 4.9.5 Configure Server for Management by IPAM 4.9.6 Manage the DHCP Server with IPAM 4.9.7 Configure DHCP Scopes and Options with IPAM 4.9.8 Configure DHCP Policies with IPAM 4.9.9 Configure DHCP Failover with IPAM Question 5 10/12/25, 8:21 PM Individual Response 4.9.11 Manage the DNS Server with IPAM 4.9.12 Manage Multiple Forests with IPAM 4.9.13 IPAM DNS and DHCP Facts resourcesquestionsq_ipam_install_discovery_ 10/12/25, 8:21 PM Individual Response named DC1 that holds an Active Directory-integrated zone for the zone. You would like to configure DC1 to use forwarders and root name servers to resolve all DNS name requests for unknown zones. You edit the DNS server properties for DC1. On the Forwarders tab, you find that the Use root hints if no forwarders are available option is disabled. You also find that the entire Root Hints tab is disabled, and you are unable to add any root hint servers. How can you configure the server to use the internet root name servers for name resolution? Create a stub zone for the root zone that points to the root servers. Change the domain to a primary standard zone. Delete the zone named . (dot) on DC1. Configure a conditional forwarder to forward requests to the root servers. Explanation LabSim for Server Pro 2016, Section 9.2. In this scenario, DC1 has been configured with a root zone. The root zone is named . (dot). When the server has a root zone, it will not (and cannot) use root hints because it thinks that it is a root server. Deleting the root zone allows you to configure the root hints option. You will not be able to configure a stub zone or conditional forwarders for the root zone because the server has a primary copy of the root zone. Related Content 5.1.1 DNS - Record Types 5.1.2 DNS Facts 5.1.3 Configure DNS 5.1.4 Configure DNS Addresses 5.1.5 Create Standard DNS Zones Question 6 10/12/25, 8:21 PM Individual Response 5.1.7 Create CNAME Records 5.1.8 Troubleshoot DNS Records 5.1.9 Configure DNS Server Properties 5.1.10 DNS Server Properties Facts 5.2.4 Name Resolution Facts 5.2.6 Create a Root Zone 5.3.2 Standard DNS Zones 5.3.3 Active Directory-Integrated Zones 5.3.4 Create a New Zone 5.3.5 Configure Zone Properties 5.3.6 Zone Management Facts 5.3.7 Create an Active Directory-Integrated Zone 5.3.8 Convert a Zone to Active Directory-Integrated 5.4.1 DNS Troubleshooting 5.4.2 DNS Troubleshooting Facts 5.4.3 Examine DNS Attacks 5.4.4 Use nslookup 5.4.5 Explore nslookup 6.1.4 DNS Configuration Issues resourcesquestionsq_name_resolution_delete_zone_01_ 10/12/25, 8:21 PM Individual Response 172.16.1.26 192.168.1.512 2.2.2.2 1.254.1.1024 256.0.0.1 Explanation A valid IPv4 address consists of four 8-bit (1 byte) numbers separated by periods (for example, 10.0.0.65). Because they're eight bits long, these numbers are frequently called octets. Even though we typically express these numbers using decimal notation, it's important to remember that they're binary numbers. The lowest value one of these numbers can have is . The decimal equivalent for this number is simply 0. The highest value one of these numbers can have is . The decimal equivalent of this number is 255. So, in decimal notation, each octet must contain a number between 0 and 255. Related Content 4.1.1 Numbering Systems 4.1.2 Numbering System Facts 4.1.3 IP Addresses 4.1.4 IP Address Facts 4.1.5 Subnets Part 1 4.1.6 Subnets Part 2 4.1.7 Subnet Facts 4.1.8 IP Address Assignment 4.1.9 IP Address Assignment Facts 4.1.10 Configure IP Settings on Workstation Question 7 Partial 10/12/25, 8:21 PM Individual Response 4.2.1 IP Configuration Troubleshooting 4.2.2 Use ipconfig 4.2.3 IP Configuration Troubleshooting Facts 4.2.4 Explore IP Configuration 4.2.5 Troubleshoot IP Configuration 1 4.2.6 Troubleshoot IP Configuration 2 4.2.7 Troubleshoot IP Configuration 3 4.3.1 Network Communication Troubleshooting 4.3.2 Use ping and tracert 4.3.3 Network Communication Troubleshooting Facts 4.3.4 Explore Network Communications 4.6.8 Configure a Split Scope 4.7.1 DHCP and APIPA Issues 4.7.2 Configure Alternate Addressing 4.7.3 Troubleshoot DHCP 4.7.4 APIPA and Alternate IP Addressing Facts 4.7.5 Configure Alternate Addressing 4.7.7 Troubleshoot DHCP 2 4.8.1 IP Version 6 4.8.2 IPv6 Facts 4.8.3 IPv4 to IPv6 Migration 4.8.4 IPv6 Address Assignment 4.8.5 Configure IPv6 Addresses 4.8.7 IPv6 Address Assignment Facts 4.8.8 Configure an IPv6 Address resourcesquestionsq_number_systems_ipv4_valid_add_ 10/12/25, 8:21 PM Individual Response 255.0.0.0 255.255.255.255 255.255.255.0 255.255.0.0 Explanation IP addresses are divided into classes. The most common of these are Classes A, B, and C. Each address class has a different default subnet mask. To identify an IP address's class, look at its first octet. Class A networks use a default subnet mask of 255.0.0.0 and have 0-126 as their first octet. Class B networks use a default subnet mask of 255.255.0.0 and have 128-191 as their first octet. Class C networks use a default subnet mask of 255.255.255.0 and have 192-223 as their first octet. In this question, the IP address falls in the Class C range. It has a default subnet mask of 255.255.255.0. Related Content 4.1.1 Numbering Systems 4.1.2 Numbering System Facts 4.1.3 IP Addresses 4.1.4 IP Address Facts 4.1.5 Subnets Part 1 4.1.6 Subnets Part 2 4.1.7 Subnet Facts 4.1.8 IP Address Assignment 4.1.9 IP Address Assignment Facts Question 8 10/12/25, 8:21 PM Individual Response 4.1.11 Configure IP Addresses 4.2.1 IP Configuration Troubleshooting 4.2.2 Use ipconfig 4.2.3 IP Configuration Troubleshooting Facts 4.2.4 Explore IP Configuration 4.2.5 Troubleshoot IP Configuration 1 4.2.6 Troubleshoot IP Configuration 2 4.2.7 Troubleshoot IP Configuration 3 4.3.1 Network Communication Troubleshooting 4.3.2 Use ping and tracert 4.3.3 Network Communication Troubleshooting Facts 4.3.4 Explore Network Communications 4.6.8 Configure a Split Scope 4.7.1 DHCP and APIPA Issues 4.7.2 Configure Alternate Addressing 4.7.3 Troubleshoot DHCP 4.7.4 APIPA and Alternate IP Addressing Facts 4.7.5 Configure Alternate Addressing 4.7.7 Troubleshoot DHCP 2 4.8.1 IP Version 6 4.8.2 IPv6 Facts 4.8.3 IPv4 to IPv6 Migration 4.8.4 IPv6 Address Assignment 4.8.5 Configure IPv6 Addresses 4.8.7 IPv6 Address Assignment Facts 4.8.8 Configure an IPv6 Address 10/12/25, 8:21 PM Individual Response 10/12/25, 8:21 PM Individual Response the list on the left. (Addresses may not represent actual addresses used in production.) 2001:6789:9078::ABCE:AFFF:FE98:0001 Global unicast FD00::8907:FF:FE76:ABC Unique local FEA0::AB89:9FF:FE77:1234 Link-local FF00:98BD:6532::1 Multicast FF02::1:2 Multicast Explanation Based on previous standards, global unicast addresses start with 20, but they can now include any prefix that isn't reserved. Addresses beginning with FC or FD are unique local addresses. Addresses beginning with FE8, FE9, FEA, or FEB are link-local addresses. Addresses beginning with FF are multicast addresses. There are no broadcast addresses in IPv6. Related Content 4.1.1 Numbering Systems 4.1.2 Numbering System Facts 4.1.3 IP Addresses 4.1.4 IP Address Facts Question 9 10/12/25, 8:21 PM Individual Response 4.1.6 Subnets Part 2 4.1.7 Subnet Facts 4.1.8 IP Address Assignment 4.1.9 IP Address Assignment Facts 4.1.10 Configure IP Settings on Workstation 4.1.11 Configure IP Addresses 4.2.1 IP Configuration Troubleshooting 4.2.2 Use ipconfig 4.2.3 IP Configuration Troubleshooting Facts 4.2.4 Explore IP Configuration 4.2.5 Troubleshoot IP Configuration 1 4.2.6 Troubleshoot IP Configuration 2 4.2.7 Troubleshoot IP Configuration 3 4.3.1 Network Communication Troubleshooting 4.3.2 Use ping and tracert 4.3.3 Network Communication Troubleshooting Facts 4.3.4 Explore Network Communications 4.6.8 Configure a Split Scope 4.7.1 DHCP and APIPA Issues 4.7.2 Configure Alternate Addressing 4.7.3 Troubleshoot DHCP 4.7.4 APIPA and Alternate IP Addressing Facts 4.7.5 Configure Alternate Addressing 4.7.7 Troubleshoot DHCP 2 4.8.1 IP Version 6 4.8.2 IPv6 Facts 10/12/25, 8:21 PM Individual Response 4.8.4 IPv6 Address Assignment 4.8.5 Configure IPv6 Addresses 4.8.7 IPv6 Address Assignment Facts 4.8.8 Configure an IPv6 Address resourcesquestionsq_dhcp_ipv6_identify_address_type_ 10/12/25, 8:21 PM Individual Response stating that she is unable to access any network resources. After some initial troubleshooting, you realize that her computer is using the IP address 169.254.0.52. You've performed the following troubleshooting steps so far: Verified physical network connection Attempted to renew the IP address Discovered other devices are experiencing the same issue Which of the following is the MOST likely cause for Suzie's issue? The gateway router is down. The computer is assigned a static IP address. The DNS server is misconfigured or down. The DHCP server is misconfigured or down. Explanation In this scenario, the most likely cause is that the DHCP server is down or misconfigured. The fact that other computers are experiencing the same issue shows that this is a network-wide issue. This would indicate an issue with the DHCP server. The DNS server or gateway router would have no bearing on this issue. The computer has most likely not been assigned a static IP address. While this could be an issue, the fact that other devices are experiencing the same problem indicates that this is not the problem. Related Content 4.1.1 Numbering Systems 4.1.2 Numbering System Facts 4.1.3 IP Addresses 4.1.4 IP Address Facts 4.1.5 Subnets Part 1 Question 10 10/12/25, 8:21 PM Individual Response 4.1.7 Subnet Facts 4.1.8 IP Address Assignment 4.1.9 IP Address Assignment Facts 4.1.10 Configure IP Settings on Workstation 4.1.11 Configure IP Addresses 4.2.1 IP Configuration Troubleshooting 4.2.2 Use ipconfig 4.2.3 IP Configuration Troubleshooting Facts 4.2.4 Explore IP Configuration 4.2.5 Troubleshoot IP Configuration 1 4.2.6 Troubleshoot IP Configuration 2 4.2.7 Troubleshoot IP Configuration 3 4.3.1 Network Communication Troubleshooting 4.3.2 Use ping and tracert 4.3.3 Network Communication Troubleshooting Facts 4.3.4 Explore Network Communications 4.6.8 Configure a Split Scope 4.7.1 DHCP and APIPA Issues 4.7.2 Configure Alternate Addressing 4.7.3 Troubleshoot DHCP 4.7.4 APIPA and Alternate IP Addressing Facts 4.7.5 Configure Alternate Addressing 4.7.7 Troubleshoot DHCP 2 4.8.1 IP Version 6 4.8.2 IPv6 Facts 4.8.3 IPv4 to IPv6 Migration 10/12/25, 8:21 PM Individual Response 4.8.5 Configure IPv6 Addresses 4.8.7 IPv6 Address Assignment Facts 4.8.8 Configure an IPv6 Address resourcesquestionsq_conf_alt_address_dhcp_01_ 10/12/25, 8:21 PM Individual Response computers remotely using a tool with a graphical user interface (GUI). Which actions should you take to accomplish this task? (Select two. Each answer is a possible solution.) Establish a Remote Desktop connection to each computer. Send an assistance invitation. Run Remote Shell to manage each computer. Open Computer Management and connect to each remote computer. Use Telnet to connect to each computer. Explanation To remotely manage computers using a graphical user interface, you can use Remote Desktop or a preconfigured console, such as Computer Management. When you use Computer Management, connect to the remote computer and then use a snap-in to view and manage its components. Use Remote Shell and Telnet to execute commands on a remote computer. Initiate a Remote Assistance session by sending an assistance invitation. Related Content 2.5.3 Windows Server Configuration and Management Facts 2.7.1 Remote Management 2.7.2 Use Remote Desktop 2.7.3 Allow Remote Desktop Connections 2.7.4 Remote Management Facts 13.1.1 Remote Access 13.1.2 Remote Access Facts Question 11 10/12/25, 8:21 PM Individual Response 13.1.4 Add the Routing and Remote Access Role resourcesquestionsq_remote_manage_gui_ 10/12/25, 8:21 PM Individual Response for external connections and hosting services and VNnets to connect to the central location to host workloads. Which of the following Azure WAN solutions will meet your networking requirements? Transitive connectivity ExpressRoute Hub-and-spoke architecture SD-WAN CPE Explanation The hub-and-spoke architecture will meet your requirements. This model consists of a virtual network (the hub) and spokes, virtual networks, or VNets hosted in Azure. The hub is a central management location for external connections and hosting services. The spokes or VNets connect to the hub and host workloads. SD-WAN CPE is equipment that facilitates branch connectivity. ExpressRoute lets you connect with Azure Cloud in several ways. The advantage is that the connection does not go over the public internet. However, the types of ExpressRoute connectivity do not include a hub-and-spoke architecture. Transitive connectivity allows connections to be made between VNets. Related Content 3.2.10 Azure Security and Features Facts 13.6.1 Implement Azure Virtual WAN 13.6.2 Add a Site-to-Site VPN to an Azure Virtual WAN 13.6.3 Implement Azure Virtual WAN Facts resourcesquestionsq_az_implement_virtual_wan_hub_spoke_ Question 12 10/12/25, 8:21 PM Individual Response 2600 2400 2500 2300 Explanation DNS socket pooling is enabled by default on all modern Windows Server systems. Windows Server 2022 DNS has a default pool size of 2500 ports. Related Content 5.5.1 DNS Protection Features 5.5.2 Configure DNS Security Extensions (DNSSEC) 5.5.3 Configure DNS Socket Pooling 5.5.4 Configure DNS Cache Locking 5.5.5 Enable Response Rate Limiting 5.5.6 Configure Delegated Administration 5.5.7 DNS Protection Facts 5.5.8 Configure DNSSEC resourcesquestionsq_dns_protection_pool_size_ Question 13 10/12/25, 8:21 PM Individual Response Is configured between individual hosts Has dual-stack hosts Is configured between routers at different sites Uses an IPv6 address static association for the IPv4 address Has dual-stack routers Can be used to send data over the internet Can't be used to send data over the internet Explanation Teredo tunneling has the following characteristics. It: Is configured between individual hosts. Each host handles the encapsulation and deencapsulation process. Uses dual-stack hosts and performs IPv6 tunneling to send data on an IPv4 network. Can be used to send data over the internet. Miredo tunneling is the Teredo tunneling equivalent used on Linux systems. Related Content 4.1.1 Numbering Systems 4.1.2 Numbering System Facts 4.1.3 IP Addresses 4.1.4 IP Address Facts 4.1.5 Subnets Part 1 4.1.6 Subnets Part 2 4.1.7 Subnet Facts 4.1.8 IP Address Assignment Question 14 10/12/25, 8:21 PM Individual Response 4.1.10 Configure IP Settings on Workstation 4.1.11 Configure IP Addresses 4.2.1 IP Configuration Troubleshooting 4.2.2 Use ipconfig 4.2.3 IP Configuration Troubleshooting Facts 4.2.4 Explore IP Configuration 4.2.5 Troubleshoot IP Configuration 1 4.2.6 Troubleshoot IP Configuration 2 4.2.7 Troubleshoot IP Configuration 3 4.3.1 Network Communication Troubleshooting 4.3.2 Use ping and tracert 4.3.3 Network Communication Troubleshooting Facts 4.3.4 Explore Network Communications 4.6.8 Configure a Split Scope 4.7.1 DHCP and APIPA Issues 4.7.2 Configure Alternate Addressing 4.7.3 Troubleshoot DHCP 4.7.4 APIPA and Alternate IP Addressing Facts 4.7.5 Configure Alternate Addressing 4.7.7 Troubleshoot DHCP 2 4.8.1 IP Version 6 4.8.2 IPv6 Facts 4.8.3 IPv4 to IPv6 Migration 4.8.4 IPv6 Address Assignment 4.8.5 Configure IPv6 Addresses 4.8.7 IPv6 Address Assignment Facts 10/12/25, 8:21 PM Individual Response resourcesquestionsq_ipv6_mig_teredo_characteristics_ 10/12/25, 8:21 PM Individual Response Resolves the name of the computer on the internal network that has the AD FS role. Enables remote users to access internal resources without being prompted for credentials. Intercepts outside traffic that's headed to internal applications. Allows the same name to resolve to different IP addresses. Explanation Split DNS allows the same name to resolve to different IP addresses. The web application proxy's job is to intercept outside traffic that's headed to internal applications. SSO enables remote users to access internal resources without being prompted for credentials by each application accessed. DNS is used to resolve the name of the computer on the internal network that has the AD FS role. Related Content 5.1.2 DNS Facts 13.4.1 Web Application Proxy (WAP) Concepts 13.4.3 Install and Configure WAP 13.4.4 Configure WAP Publishing 13.4.5 Web Application Proxy (WAP) Facts 13.4.6 Web Application Proxy (WAP) Publishing Facts resourcesquestionsq_wap_install_split_dns_ Question 15 10/12/25, 8:21 PM Individual Response C:(Get-DnsServer).ServerSetting.SocketPoolSize 2500 C:dnscmd /config /socketpoolsize 2500 C:(Get-DnsServer).ServerSetting.SocketPoolSize C:dnscmd /info /socketpoolsize 2500 C:dnscmd /info /socketpoolsize Explanation To view the socket pool size at the command prompt use C:dnscmd /info /socketpoolsize. To view the socket pool size using a cmdlet enter C:(GetDnsServer).ServerSetting.SocketPoolSize. The command to change the socket pool size is C:dnscmd /config /socketpoolsize number of ports. The cmdlet to change the socket pool size is more complicated than Command Prompt. A variable is used to store the new pool size value, which is then piped, or sent, to a cmdlet that sets the new value: C:$DNSPoolSetting = New-CimInstance -Namespace root/Microsoft/Windows/Dns ClassName DNSServerSetting -Property @{SocketPoolSize = [uint32]pool size} - ClientOnly | Set-DnsServerSetting Related Content 5.5.1 DNS Protection Features 5.5.2 Configure DNS Security Extensions (DNSSEC) 5.5.3 Configure DNS Socket Pooling 5.5.4 Configure DNS Cache Locking 5.5.5 Enable Response Rate Limiting 5.5.6 Configure Delegated Administration 5.5.7 DNS Protection Facts Question 16 10/12/25, 8:21 PM Individual Response resourcesquestionsq_dns_protection_socketpool_02_ 10/12/25, 8:21 PM Individual Response used on a network? (Select two.) Configure client systems to use static IP assignment. Configure a HOSTS file for local IP resolution. Install a DHCP server on the network. Use Automatic Private IP Addressing (APIPA). Set the Windows Network Monitoring utility to identify potential IP conflicts. Explanation To avoid duplicate IP addresses being used by network systems, utilize automatic IP assignment. Both the DHCP service and APIPA can automatically assign addresses to client systems. Clients configured to use static IP addressing may inadvertently have duplicate IP addresses assigned to them. In such a case, one of the systems won't be able to log onto the network. Related Content 2.2.1 Windows Server Roles and Features 2.2.2 Install Server Roles and Features 2.2.3 Manage Server Roles and Features 2.2.4 Server Roles and Features Facts 4.4.1 DHCP 4.4.2 DHCP Facts 4.4.3 Configure a DHCP Server 4.4.4 Configure a DHCP Server 4.4.5 Configure DHCP Options 4.4.6 Create DHCP Exclusions 4.4.7 Create DHCP Client Reservations Question 17 10/12/25, 8:21 PM Individual Response 4.4.9 Troubleshoot DHCP Exhaustion 4.5.1 DHCP Relay 4.5.2 Configure DHCP Relay 4.5.3 DHCP Relay Facts 4.5.4 Configure a DHCP Relay Agent 4.5.5 Add a DHCP Server on Another Subnet 4.6.10 Advanced DHCP Management Facts 4.7.6 Troubleshoot DHCP 1 4.8.6 Configure a DHCP6 Server 4.9.3 IPAM and DHCP Overview 4.9.6 Manage the DHCP Server with IPAM 4.9.7 Configure DHCP Scopes and Options with IPAM 4.9.8 Configure DHCP Policies with IPAM 4.9.9 Configure DHCP Failover with IPAM 4.9.13 IPAM DNS and DHCP Facts resourcesquestionsq_dhcp_dynamic_ 10/12/25, 8:21 PM Individual Response addresses can you assign to a host? 127.0.0.1 127.35.88.92 199.45.207.0 132.70.254.15 Explanation 132.70.254.15 is the only address that you can assign to a host. Addresses starting with 127 are reserved and can't be assigned to hosts. The address 199.45.207.0 is a network ID; it's not assigned to a host. Related Content 4.1.1 Numbering Systems 4.1.2 Numbering System Facts 4.1.3 IP Addresses 4.1.4 IP Address Facts 4.1.5 Subnets Part 1 4.1.6 Subnets Part 2 4.1.7 Subnet Facts 4.1.8 IP Address Assignment 4.1.9 IP Address Assignment Facts 4.1.10 Configure IP Settings on Workstation 4.1.11 Configure IP Addresses 4.2.1 IP Configuration Troubleshooting 4.2.2 Use ipconfig Question 18 10/12/25, 8:21 PM Individual Response 4.2.4 Explore IP Configuration 4.2.5 Troubleshoot IP Configuration 1 4.2.6 Troubleshoot IP Configuration 2 4.2.7 Troubleshoot IP Configuration 3 4.3.1 Network Communication Troubleshooting 4.3.2 Use ping and tracert 4.3.3 Network Communication Troubleshooting Facts 4.3.4 Explore Network Communications 4.6.8 Configure a Split Scope 4.7.1 DHCP and APIPA Issues 4.7.2 Configure Alternate Addressing 4.7.3 Troubleshoot DHCP 4.7.4 APIPA and Alternate IP Addressing Facts 4.7.5 Configure Alternate Addressing 4.7.7 Troubleshoot DHCP 2 4.8.1 IP Version 6 4.8.2 IPv6 Facts 4.8.3 IPv4 to IPv6 Migration 4.8.4 IPv6 Address Assignment 4.8.5 Configure IPv6 Addresses 4.8.7 IPv6 Address Assignment Facts 4.8.8 Configure an IPv6 Address resourcesquestionsq_subnets_class_b_default_mask_02_ 10/12/25, 8:21 PM Individual Response Which of the following BEST describes how addressing is configured for this subnet? Classful Private Subnetting Supernetting Explanation The subnet address 198.162.1.0/23 is an example of a supernetted address. With supernetting, multiple smaller subnets are combined into a single larger subnet. Supernetting is performed by taking the default subnet mask and making it smaller (using less bits). For this address, the default subnet mask uses 24 bits (255.255.255.0). With supernetting, the mask is altered to use only 23 bits (255.255.254.0) in order to combine multiple subnets together. Subnetting is the process of dividing a larger network into smaller networks. With the address in this example, a subnetted address would use a larger subnet mask (more bits). A subnetted address might use 25 bits (255.255.255.128) or more to subdivide the network into multiple smaller subnets. Sometimes, the term subnetting is used to refer to both subnetting and supernetting. But in this example, supernetting better describes what's being done. Classful addressing uses the default subnet mask based on the address class. If classful addressing were used, the subnet would use a 24-bit mask. Private addresses are within the following ranges: 10.0.0.1 to 10.255.255.254 172.16.0.1 to 172.31.255.254 192.168.0.1 to 192.168.255.254 Related Content 4.1.1 Numbering Systems 4.1.2 Numbering System Facts 4.1.3 IP Addresses 4.1.4 IP Address Facts Question 19 10/12/25, 8:21 PM Individual Response 4.1.6 Subnets Part 2 4.1.7 Subnet Facts 4.1.8 IP Address Assignment 4.1.9 IP Address Assignment Facts 4.1.10 Configure IP Settings on Workstation 4.1.11 Configure IP Addresses 4.2.1 IP Configuration Troubleshooting 4.2.2 Use ipconfig 4.2.3 IP Configuration Troubleshooting Facts 4.2.4 Explore IP Configuration 4.2.5 Troubleshoot IP Configuration 1 4.2.6 Troubleshoot IP Configuration 2 4.2.7 Troubleshoot IP Configuration 3 4.3.1 Network Communication Troubleshooting 4.3.2 Use ping and tracert 4.3.3 Network Communication Troubleshooting Facts 4.3.4 Explore Network Communications 4.6.8 Configure a Split Scope 4.7.1 DHCP and APIPA Issues 4.7.2 Configure Alternate Addressing 4.7.3 Troubleshoot DHCP 4.7.4 APIPA and Alternate IP Addressing Facts 4.7.5 Configure Alternate Addressing 4.7.7 Troubleshoot DHCP 2 4.8.1 IP Version 6 4.8.2 IPv6 Facts 10/12/25, 8:21 PM Individual Response 4.8.4 IPv6 Address Assignment 4.8.5 Configure IPv6 Addresses 4.8.7 IPv6 Address Assignment Facts 4.8.8 Configure an IPv6 Address resourcesquestionsq_subnets_supernet_ 10/12/25, 8:21 PM Individual Response Which of the following describes this address type? Broadcast Classless Classful Multicast Explanation Because the IP address isn't using the default subnet mask, it's using classless addressing. Classless addressing modifies the length of the subnet mask, using a custom mask value instead of the default subnet mask. Classful addressing uses the default subnet mask. Devices that only support classful addressing assume the subnet mask based on the IP address class. A broadcast address is an address that's sent to all hosts. Broadcast addresses are the last possible address on a subnet. A multicast address is an address that identifies a group of computers. Members of the group share the same multicast address. They're in the range of 224.0.0.0 to 239.255.255.255. Related Content 4.1.1 Numbering Systems 4.1.2 Numbering System Facts 4.1.3 IP Addresses 4.1.4 IP Address Facts 4.1.5 Subnets Part 1 4.1.6 Subnets Part 2 4.1.7 Subnet Facts 4.1.8 IP Address Assignment Question 20 10/12/25, 8:21 PM Individual Response 4.1.10 Configure IP Settings on Workstation 4.1.11 Configure IP Addresses 4.2.1 IP Configuration Troubleshooting 4.2.2 Use ipconfig 4.2.3 IP Configuration Troubleshooting Facts 4.2.4 Explore IP Configuration 4.2.5 Troubleshoot IP Configuration 1 4.2.6 Troubleshoot IP Configuration 2 4.2.7 Troubleshoot IP Configuration 3 4.3.1 Network Communication Troubleshooting 4.3.2 Use ping and tracert 4.3.3 Network Communication Troubleshooting Facts 4.3.4 Explore Network Communications 4.6.8 Configure a Split Scope 4.7.1 DHCP and APIPA Issues 4.7.2 Configure Alternate Addressing 4.7.3 Troubleshoot DHCP 4.7.4 APIPA and Alternate IP Addressing Facts 4.7.5 Configure Alternate Addressing 4.7.7 Troubleshoot DHCP 2 4.8.1 IP Version 6 4.8.2 IPv6 Facts 4.8.3 IPv4 to IPv6 Migration 4.8.4 IPv6 Address Assignment 4.8.5 Configure IPv6 Addresses 4.8.7 IPv6 Address Assignment Facts 10/12/25, 8:21 PM Individual Response resourcesquestionsq_subnets_classless_