Download Upgrading Your Skills to MCSA: Windows Server 2016.70-743.RealExams.2020-03-19.36q.vcex

For a Windows Server 2012 R2 AD FS server, this solution would work. However, new installations of AD FS 2016 require the Active Directory 2016 schema (minimum version 85). References:https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/operations/configure-device-based-conditional-access-on-premiseshttps://docs.microsoft.com/en-gb/windows-server/identity/ad-fs/overview/ad-fs-requirements

New installations of AD FS 2016 require the Active Directory 2016 schema (minimum version 85). You can upgrade the schema by running adprep.exe.

The Add-DnsServerTrustAnchor command adds a trust anchor to a DNS server. A trust anchor (or trust “point”) is a public cryptographic key for a signed zone. Trust anchors must be configured on every non-authoritative DNS server that will attempt to validate DNS data. Trust Anchors have no direct relation to DSSEC validation. References:https://docs.microsoft.com/en-us/powershell/module/dnsserver/add-dnsservertrustanchor?view=winserver2012-pshttps://technet.microsoft.com/en-us/library/dn593672(v=ws.11).aspxhttps://docs.microsoft.com/en-us/windows-server/networking/dns/deploy/apply-filters-on-dns-queries

Network List Manager Policies are security settings that you can use to configure different aspects of how networks are listed and displayed on one computer or on many computers. Network List Manager Policies are not related to DNSSEC. References:https://technet.microsoft.com/en-us/library/jj966256(v=ws.11).aspxhttps://docs.microsoft.com/en-us/windows/device-security/security-policy-settings/network-list-manager-policies

RAS Gateway - Multitenant. You can deploy RAS Gateway as a multitenant, software-based edge gateway and router when you are using Hyper-V Network Virtualization or you have VM networks deployed with virtual Local Area Networks (VLANs). With the RAS Gateway, Cloud Service Providers (CSPs) and Enterprises can enable datacenter and cloud network traffic routing between virtual and physical networks, including the Internet. With the RAS Gateway, your tenants can use point-so-site VPN connections to access their VM network resources in the datacenter from anywhere. You can also provide tenants with site-to-site VPN connections between their remote sites and your CSP datacenter. In addition, you can configure the RAS Gateway with BGP for dynamic routing, and you can enable Network Address Translation (NAT) to provide Internet access for VMs on VM networks. References:https://technet.microsoft.com/en-us/windows-server-docs/networking/remote-access/remote-access

Using Windows PowerShell, the REST API, or a management application, you can use Network Controller to manage the following physical and virtual network infrastructure:* Datacenter Firewall This Network Controller feature allows you to configure and manage allow/deny firewall Access Control rules for your workload VMs for both East/West and North/South network traffic in your datacenter. The firewall rules are plumbed in the vSwitch port of workload VMs, and so they are distributed across your workload in the datacenter. Using the Northbound API, you can define the firewall rules for both incoming and outgoing traffic from the workload VM. You can also configure each firewall rule to log the traffic that was allowed or denied by the rule. * Hyper-V VMs and virtual switches * Remote Access Service (RAS) Multitenant Gateways, Virtual Gateways, and gateway pools * Load Balancers References:https://technet.microsoft.com/en-us/library/dn859239.aspxhttps://docs.microsoft.com/en-us/windows-server/networking/sdn/technologies/network-controller/network-controller

Receive Side Scaling (RSS) helps improve network throughput by distributing the load of network I/O across multiple CPUs rather than using only one. The Set-NetAdapterRss cmdlet sets the receive side scaling (RSS) properties on a network adapter. RSS is a scalability technology that distributes the receive network traffic among multiple processors by hashing the header of the incoming packet. Without RSS Windows Server 2012/2016; network traffic is received on the first processor which can quickly reach full utilization limiting receive network throughput. Many properties can be configured using the parameters to optimize the performance of RSS. The selection of the processors to use for RSS is an important aspect of load balancing. Most of the parameters for this cmdlet help to determine the processors used by RSS.

You can configure NIC teaming in the Guest OS; however, before NIC teaming will work in a virtual machine, you need to enable NIC teaming in the Advanced Features section of the VM settings.

1. (A): The container feature needs to be enabled before working with Windows containers. To do so run the following command in an elevated PowerShell session.Enable-WindowsOptionalFeature -Online -FeatureName containers –All 2. (B): Docker is required in order to work with Windows containers.Note: First install the OneGet PowerShell module.Install-Module -Name DockerMsftProvider -Repository PSGallery –Force Next you use OneGet to install the latest version of Docker. Install-Package -Name docker -ProviderName DockerMsftProvider 3. (C): Install Base Container ImagesWindows containers are deployed from templates or images. Before a container can be deployed, a container base OS image needs to be downloaded. The following commands will download the Nano Server base image. Pull the Nano Server base image. docker pull microsoft/nanoserver

If the container host is virtualized, and you wish to use DHCP for IP assignment, you must enable MACAddressSpoofing. PS C:\> Get-VMNetworkAdapter -VMName ContainerHostVM | Set-VMNetworkAdapter -MacAddressSpoofing OnThe command needs to be run on the Hyper-V host.