Networking with Windows Server 2016 — Question 95

You are deploying Software Defined Networking (SDN) by using Windows Server 2016.
You plan to deploy a three-node Network Controller cluster. You plan to use virtual machines for the network controller and the management client. The virtual machines will NOT be domain-joined.
You need to configure authentication for the cluster.
Which command should you run?

Answer options

• A. Install-NetworkController ""Node @{Node1, Node2, Node3} ""ClientAuthentication X509
• B. Install-NetworkControllerCluster ""Node @{Node1, Node1, Node3} ""ClientAuthentication Kerberos
• C. Install-NetworkControllerCluster ""Node @{Node1, Node1, Node3} ""ClientAuthentication X509
• D. Install-NetworkControllerCluster ""Node @{Node1, Node1, Node3} ""ClientAuthentication None
• E. Install-NetworkController ""Node @{Node1, Node2, Node3} ""ClientAuthentication Kerberos

Correct answer: C

Explanation

The correct answer is C, as using X509 client authentication is appropriate for virtual machines that are not domain-joined. Option A is incorrect because it uses the wrong command for creating a cluster. Option B suggests using Kerberos, which is not suitable in this non-domain scenario. Option D opts for no authentication, which is not secure, and Option E also incorrectly uses Kerberos authentication.