You work as a network administrator at ABC.com. The ABC.com network consists of a single
domain named ABC.com. All servers on the ABC.com network have Windows Server 2012 R2
installed and all client computers have Windows 8 installed.
The ABC.com network contains a domain controller named ABC_DC04 and member server
named ABC_SR11. ABC_SR11 runs a Core Installation of Windows Server 2012 R2.
How would you configure THESABCING_DC04 to remotely view the event log on ABC_SR11?
A.
You should use the Windows Powershell to run the Get-NetFirewallRule command.
B.
You should use the Windows Powershell to run the Set-NetFirewallProfile command.
C.
You should use the Windows Powershell to run the New-NetIPsecRule command.
D.
You should use the Windows Powershell to run the Show-NetIPsecRule command.
Explanation:
References:
http://technet.microsoft.com/en-us/library/hh831755.aspx#BKMK_Remote
this makes no sense. get-netfirewallrule configures NOTHING! all it does is retrieve rules. a technet link doesnt prove anything!
Yeah, right! By default you can manage server without needing run this command. If you really need to configure “GET” command is is not right one…Dilemma!!!
The actual command would be Enable-NetFirewallRule -DisplayGroup “Remote Administration” to allow connections from any MMC.
C. Is the only option between those answers. It is possible to restrict communication over IPsec for security reasons. Remember that Direct Access also uses IPsec! You cannot live without IT. 😉
https://technet.microsoft.com/en-us/library/jj554889.aspx
Assuming it doesn’t work right now, configuring a new ipsec policy won’t help either. Traffic will still be blocked.
The Set-NetFirewallProfile however can modify the firewall settings (e.g. disable the domain profile). Without a firewall blocking you, you can manage the eventvwr with an mmc. > answer B
Answer is C.
Expl:
View Event Logs Remotely: Netsh advfirewall
http://windowsitpro.com/windows-server-2012/viewing-event-logs-gui-less-server-core-installation-remote-windows-server
AND
Netsh advfirewall = New-NetIPsecRule
https://technet.microsoft.com/en-us/library/hh831755.aspx
Should be B:
I finally solve the riddle! lolz
Obviously, Get-NetFirewallRule does NOOOOT affect the current configuration, its a MUST to use a pipeline on powershell to Set-NetFirewallRule in order for any changes to be made.
Get-NetFirewallRule -Syntax | Set-NetFirewallRule -Syntax
All the info is from the same technet mentioned above, is just a matter to read the entire article.
Yet , is confusing for ANY regular Windows Eng to say Modify with Get, I assume this answer is just wrong, should be B
But taking this in consideration, A makes perfect sense.
https://technet.microsoft.com/en-us/library/jj554858.aspx