70-246 · Question #164
Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 and a member server named Server1. You have a server named Server2 that is a…
The correct answer is A. Request and install a certificate on Server2, and then import the certificate to Server1. D. Open port TCP 5723 on the firewall between the internal network and the perimeter network. E. Manually install the Microsoft Monitoring Agent on Server2. SCOM will authenticate by Kerberos or certificate. In a domain it will be kerberos. On an untrusted Workgroup Server there is no Kerberos so certificates will be used. - Create certificate for the untrusted Server - Import the certificate on the Operation Manager Server - Open…
Question
Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 and a member server named Server1. You have a server named Server2 that is a member of a workgroup. All servers run Windows Server 2012 R2. Server1 has System Center 2012 R2 Operations Manager installed. DC1 is configured as an enterprise certification authority (CA). Server1 and DC1 are located on the internal network. Server2 is located on a perimeter network. You need to monitor Server2 by using Operations Manager. Which three actions should you perform? Each correct answer presents part of the solution.
Options
- ARequest and install a certificate on Server2, and then import the certificate to Server1.
- BRun the Discovery Wizard on Server1.
- COpen port UDP 161 and UDP 162 on the firewall between the internal network and the
- DOpen port TCP 5723 on the firewall between the internal network and the perimeter network.
- EManually install the Microsoft Monitoring Agent on Server2.
- FRequest and install a certificate on Server1, and then import the certificate to Server2.
How the community answered
(47 responses)- A74% (35)
- B6% (3)
- C15% (7)
- F4% (2)
Explanation
SCOM will authenticate by Kerberos or certificate. In a domain it will be kerberos. On an untrusted Workgroup Server there is no Kerberos so certificates will be used. - Create certificate for the untrusted Server - Import the certificate on the Operation Manager Server - Open TCP 5723 both directions in Firewall if there is any (like in DMZ)
Topics
Community Discussion
No community discussion yet for this question.