Identity with Windows Server 2016 — Question 1

Your network contains an Active Directory forest named contoso.com.
You have an Active Directory Federation Services (AD FS) farm. The farm contains a server named Server1 that runs Windows Server 2012 R2.
You add a server named Server2 to the farm. Server2 runs Windows Server 2016.
You remove Server1 from the farm.
You need to ensure that you can use role separation to manage the farm.
Which cmdlet should you run?

Answer options

• A. Set-AdfsFarmInformation
• B. Update-AdfsRelyingPartyTrust
• C. Set-AdfsProperties
• D. Invoke-AdfsFarmBehaviorLevelRaise

Correct answer: D

Explanation

The correct cmdlet is Invoke-AdfsFarmBehaviorLevelRaise, as it is necessary to raise the behavior level of the AD FS farm to enable role separation. The other options do not pertain to modifying the behavior level and therefore cannot achieve the goal of implementing role separation.