Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 1:

  Your network contains two Active Directory forests named contoso.com and adatum.com. All servers run Windows Server 2012 R2.

  A one-way external trust exists between contoso.com and adatum.com.

  Adatum.com contains a universal group named Group1. You need to prevent Group1 from being used to provide access to the resources in contoso.com.

  What should you do?

  A. Modify the Managed By settings of Group1.
  B. Modify the Allowed to Authenticate permissions in adatum.com.
  C. Change the type of Group1 to distribution.
  D. Modify the name of Group1.
  B. Modify the Allowed to Authenticate permissions in adatum.com.

  ---

  *

  Accounts that require access to the customer Active Directory will be granted a special right called Allowed to Authenticate. This right is then applied to computer objects (Active Directory domain controllers and AD RMS servers) within the customer Active Directory to which the account needs access.

  *

  For users in a trusted Windows Server 2008 or Windows Server 2003 domain or forest to be able to access resources in a trusting Windows Server 2008 or Windows Server 2003 domain or forest where the trust authentication setting has been set to selective authentication, each user must be explicitly granted the Allowed to Authenticate permission on the security descriptor of the computer objects (resource computers) that reside in the trusting domain or forest.

• Question 2:

  Your network contains an Active Directory domain named adatum.com.

  You discover that when users join computers to the domain, the computer accounts are created in the Computers container.

  You need to ensure that when users join computers to the domain, the computer accounts are automatically created in an organizational unit (OU) named All_Computers.

  What should you do?

  A. From a command prompt, run the redircmp.exe command.
  B. From ADSI Edit, configure the properties of the OU1 object.
  C. From Ldp, configure the properties of the Computers container.
  D. From Windows PowerShell, run the Move-ADObject cmdlet.
  E. From ADSI Edit, configure the properties of the Computers container.
  A. From a command prompt, run the redircmp.exe command.

  ---

  This command redirects the default container for newly created computers to a specified, target organizational unit (OU) so that newly created computer objects are created in the specific target OU instead of in All_Computers. Reference: http://technet.microsoft.com/en-us/library/cc770619.aspx

• Question 3:

  You run a Windows Server 2012 R2, what is the PowerShell command to set preferred dns server. Note: Other config such as ip address should not be changed.

  A. Register-DnsClient
  B. Set-DnsClient
  C. Set-DnsPreferredClientServerAddress
  D. Set-DnsClientServerAddress
  D. Set-DnsClientServerAddress

• Question 4:

  Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named OU1.

  You need to ensure that when new client computers join the domain, their computer accounts are created in OU1 by default.

  What should you do?

  A. From Windows PowerShell, run the Move-ADObject cmdlet.
  B. From a command prompt, run the redircmp.exe command.
  C. From ADSI Edit, configure the properties of the OU1 object.
  D. From Ldp, configure the properties of the Computers container.
  B. From a command prompt, run the redircmp.exe command.

  ---

  Redirects the default container for newly created computers to a specified, target organizational unit (OU) so that newly created computer objects are created in the specific target OU instead of in CN=Computers. The CN=Computers container is a computer-protected object. For backward compatibility reasons, you cannot (and must not) remove it. Reference: http://technet.microsoft.com/en-us/library/cc770619.aspx

• Question 5:

  You work as an administrator at Contoso.com. The Contoso.com network consists of two Active Directory forests, named Contoso.com and test.com. There is no trust relationship configured between the forests.

  A backup of Group Policy object (GPO) from the test.com domain is stored on a domain controller in the Contoso.com domain.

  You are informed that a GPO must be created in the Contoso.com domain, and must be based on the settings of the GPO in the test.com domain.

  You start by creating the new GPO using the New-GPO Windows PowerShell cmdlet. You want to complete the task via a Windows PowerShell cmdlet.

  Which of the following actions should you take?

  A. You should consider making use of the Invoke-GPUpdate Windows PowerShell cmdlet.
  B. You should consider making use of the Copy-GPO Windows PowerShell cmdlet.
  C. You should consider making use of the New-GPLink Windows PowerShell cmdlet.
  D. You should consider making use of the Import-GPO Windows PowerShell cmdlet.
  D. You should consider making use of the Import-GPO Windows PowerShell cmdlet.

  ---

  Import-GPO -Imports the Group Policy settings from a backed-up GPO into a specified GPO.

• Question 6:

  Your network contains an Active Directory domain named contoso.com. Computer accounts for the marketing department are in an organizational unit (OU) namedDepartments\Marketing\Computers. User accounts for the marketing

  department are in an OU named Departments\Marketing\Users. Marketing users can only log on to the client computers in the Departments\Marketing\Computers OU.

  You need to apply an application control policy to all of the marketing users. Which Group Policy Object (GPO) should you configure? To answer, select the appropriate GPO in the answer area.

  Hot Area:

  

  

  ---

  Application control policies specify which programs are allowed to run on the local computer and which are not.

  References: http://technet.microsoft.com/en-us/library/hh125923(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc781458(v=WS.10).aspx http://technet.microsoft.com/en-us/library/hh967461.aspx

  http://technet.microsoft.com/en-us/library/ee461050.aspx http://technet.microsoft.com/en-us/library/ee461044.aspx

• Question 7:

  You have a Hyper-V host named Host1 that connects to a SAN by using a hardware Fibre Channel adapter.

  Host1 contains two virtual machines named VM1 and VM2.

  You need to provide VM1 with direct access to the SAN. VM2 must not require access to the SAN.

  Which two configurations should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. On VM1, configure a Fibre Channel adapter.
  B. On Host1, configure a new virtual switch.
  C. On VM1, add a network adapter.
  D. On Host1, configure a new Virtual Fibre Channel SAN.
  E. On Host1, modify the Hyper-V settings.
  A. On VM1, configure a Fibre Channel adapter.
  D. On Host1, configure a new Virtual Fibre Channel SAN.

  ---

  Step 1:

  D. Building a Virtual SAN

  The process of setting up virtual Fibre Channel starts with building a virtual SAN. The easiest way to accomplish this is to open the Hyper-V Manager, right click on the listing for your Hyper-V server in the console tree, and then choose the

  Virtual SAN Manager command from the shortcut menu.

  Step 2:

  A. Once you have created a virtual SAN, the next step in the process is to link a virtual machine to the virtual SAN. To do so, right click on the virtual machine for which you want to provide Fibre Channel connectivity and select the Settings

  command from the resulting shortcut menu. Next, select the Add Hardware container, as shown in the figure above, and then select the Fibre Channel Adapter option from the list of available hardware. Etc.

  Note:

  * Virtual Fibre Channel for Hyper-V (also referred to as Synthetic Fibre Channel) provides VM guest operating systems with direct access to a Fibre Channel SAN by using a standard World Wide Name (WWN) associated with a virtual

  machine.

• Question 8:

  You have a server named Print1 that runs Windows Server 2012 R2.

  On Print1, you share a printer named Printer1.

  You need to ensure that only the members of the Server Operators group, the Administrators group, and the Print Operators group can send print jobs to Printer1.

  What should you do?

  A. Remove the permissions for the Creator Owner group.
  B. Assign the Print permission to the Server Operators group.
  C. Remove the permissions for the Everyone group.
  D. Assign the Print permission to the Administrators group.
  C. Remove the permissions for the Everyone group.

  ---

  By default Everyone can print. This permissions need to be removed.

• Question 9:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. The domain contains a standalone server named Server2 that is located in a perimeter network. Both servers run the

  default installation of Windows Server 2012 R2.

  You need to manage Server2 remotely from Server1.

  What should you do?

  A. From Server1, run the Enable-PsRemoting cmdlet.
  B. From Server2, run the winrm command.
  C. From Server2, run the Enable-PsRemoting cmdlet.
  D. From Server1, run the winrm command.
  D. From Server1, run the winrm command.

• Question 10:

  Your network contains an Active Directory domain named contoso.com. The domain contains a user account named User1 that resides in an organizational unit (OU) named OU1.

  A Group Policy object (GPO) named GPO1 is linked to OU1. GPO1 is used to publish several applications to a user named User1.

  In the Users container, you create a new user named User2.

  You need to ensure that the same applications are published to User2.

  What should you do?

  A. Modify the settings in GPO1.
  B. Move User2 to OU1
  C. Link a WMI filter to GPO1.
  D. Modify the security of GPO1.
  B. Move User2 to OU1

  ---

  Moving User2 to OU1 will give him the same access as User1.

  The GPO is linked to OU1. By moving User2 to OU1 the GPO will be applied to this user.