Your network contains an Active Directory domain named contoso.com. The domain contains a
domain controller named DC1 and a member server named Server1.
You have a server named Server2 that is a member of a workgroup. All servers run Windows Server
2012 R2.
Server1 has System Center 2012 R2 Operations Manager installed. DC1 is configured as an enterprise
certification authority (CA). Server1 and DC1 are located on the internal network. Server2 is located
on a perimeter network.
You need to monitor Server2 by using Operations Manager.
Which three actions should you perform? Each correct answer presents part of the solution.
A.
Request and install a certificate on Server2, and then import the certificate to Server1.
B.
Run the Discovery Wizard on Server1.
C.
Open port UDP 161 and UDP 162 on the firewall between the internal network and the perimeter
network.
D.
Open port TCP 5723 on the firewall between the internal network and the perimeter network.
E.
Manually install the Microsoft Monitoring Agent on Server2.
F.
Request and install a certificate on Server1, and then import the certificate to Server2.
A little bit to much highlighted.
Answer should be ADE.
SCOM will authenticate by Kerberos or certificate.
In a domain it will be Kerberos.
On an untrusted Workgroup Server there is no Kerberos so certificates will be used.
– Create certificate for the untrusted Server
– Import the certificate on the Operation Manager Server
– Open TCP 5723 both directions in Firewall if there is any (like in DMZ)
http://www.toolzz.com/?p=279