Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 91:

  Catalog Servers. Your domain structure contains one root domain and one child domain. You modify the folder permissions on a file server that is in the child domain. You discover that some Access Control entries start with S-1-5-21 and that no account name is listed.

  You need to list the account names. What should you do?

  A. Move the RID master role in the child domain to a domain controller that holds the Global Catalog.
  B. Modify the schema to enable replication of the friendly names attribute to the Global Catalog.
  C. Move the RID master role in the child domain to a domain controller that does not hold the Global Catalog.
  D. Move the infrastructure master role in the child domain to a domain controller that does not hold the Global Catalog.
  D. Move the infrastructure master role in the child domain to a domain controller that does not hold the Global Catalog.

  ---

  If the IM Flexible Single Master Operation (FSMO) role holder is also a global catalog server, the phantom indexes are never created or updated on that domain controller. (The FSMO is also known as the operations master.) This behavior occurs because a global catalog server contains a partial replica of every object in Active Directory. The IM does not store phantom versions of the foreign objects because it already has a partial replica of the object in the local global catalog.

  For this process to work correctly in a multi domain environment, the infrastructure FSMO role holder cannot be a global catalog server. Be aware that the first domain in the forest holds all five FSMO roles and is also a global catalog. Therefore, you must transfer either role to another computer as soon as another domain controller is installed in the domain if you plan to have multiple domains.

• Question 92:

  Which of the following groups do you use to consolidate groups and accounts that either span multiple domains or the entire forest?

  A. Global
  B. Domain local
  C. Built-in
  D. Universal
  D. Universal

  ---

  Universal groups, like global groups, are used to organize users according to their resource access needs. You can use them to organize users to facilitate access to any resource located in any domain in the forest through the use of domain local groups. Universal groups are used to consolidate groups and accounts that either span multiple domains or the entire forest.

  Incorrect Answers:

  A: Global groups cannot contain users from other domains.

  B: Domain local groups cannot have permissions for resources in other domains.

  C: Built-in groups have no inherent cross-domain qualities.

• Question 93:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed. Server1 has 8 GB of RAM.

  Server1 hosts five virtual machines that run Windows Server 2012 R2.

  The settings of a virtual machine named Server3 are configured as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that when Server1 restarts, Server3 automatically resumes without intervention. The solution must prevent data loss. Which settings should you modify?

  A. BIOS
  B. Automatic Start Action
  C. Automatic Stop Action
  D. Integration Services
  C. Automatic Stop Action

  ---

  The Automatic Stop Action setting should be modified because it will allow you to configure: "Save the virtual machine state" option instructs Hyper-V Virtual Machine Management Service to save the virtual machine state on the local disk when the Hyper-V Server shuts down. OR "Turn Off the virtual machine" is used by the Hyper-V Management Service (VMMS.exe) to gracefully turn off the virtual machine. OR "Shut down the guest operating system" is successful only if the "Hyper-V Shutdown" guest service is running in the virtual machine. The guest service is required to be running in the virtual machine as the Hyper-V VMMS.EXE process will trigger Windows Exit message which is received by the service. Once the message is received by the guest service, it takes the necessary actions to shut down the virtual machine.

• Question 94:

  Your network contains an Active Directory domain named contoso.com. The domain contains 100 user accounts that reside in an organizational unit (OU) named OU1.

  You need to ensure that a user named User1 can link and unlink Group Policy objects (GPOs) to OU1. The solution must minimize the number of permissions assigned to User1.

  What should you do?

  A. Run the Delegation of Control Wizard on the Policies containers
  B. Run the Set-GPPermission cmdlet
  C. Run the Delegation of Control Wizard on OU1
  D. Modify the permission on the user1 account
  C. Run the Delegation of Control Wizard on OU1

  ---

  Delegation of Control Wizard The following are common tasks that you can select to delegate control of them: Create, delete, and manage user accounts Reset user passwords and force password change at next logon Read all user information Modify the membership of a group Join a computer to a domain Manage Group Policy links Generate Resultant Set of Policy (Planning) Generate Resultant Set of Policy (Logging) Create, delete, and manage inetOrgPerson accounts Reset inetOrgPerson passwords and force password change at next logon Read all inetOrgPerson information

  Incorrect Answers:

  A: Not minimum permissions

  B: Grants a level of permissions to a security principal for one GPO or all the GPOs in a domain

  D: Will not allow GPO changes to the OU

• Question 95:

  You have a server named Server1. Server1 runs Windows Server 2012 R2. A user named Admin1 is a member of the local Administrators group. You need to ensure that Admin1 receives a User Account Control (UAC) prompt when attempting to open Windows PowerShell as an administrator. Which setting should you modify from the Local Group Policy Editor? To answer, select the appropriate setting in the answer area.

  Hot Area:

  

  

  ---

  Local Group Policy Editor is a Microsoft Management Console (MMC) snap-in that is used to configure and modify Group Policy settings within Group Policy Objects (GPOs). Administrators need to be able to quickly modify Group Policy settings for multiple users and computers throughout a network environment. The Local Group Policy Editor provides administrators with a hierarchical tree structure for configuring Group Policy settings in GPOs. These GPOs can then be linked to sites, domains, and organizational units (OU) that contain computer or user objects.To work efficiently, administrators need to have immediate access to information about the function and purpose of individual policy settings. For Administrative Templates policy settings, Local Group Policy Editor provides information about each policy setting directly in the web view of the console. This information shows operating system requirements, defines the policy setting, and includes any specific details about the effect of enabling or disabling the policy setting.

  Reference: http://technet.microsoft.com/en-us/library/dn265982.aspx

• Question 96:

  Your network contains an Active Directory domain named contoso.com. The network contains a domain controller named DC1 that has the DNS Server server role installed. DC1 has a standard primary DNS zone for contoso.com.

  You need to ensure that only client computers in the contoso.com domain will be able to add their records to the contoso.com zone.

  What should you do first?

  A. Sign the contoso.com zone.
  B. Modify the Security settings of DC1.
  C. Modify the Security settings of the contoso.com zone.
  D. Store the contoso.com zone in Active Directory.
  D. Store the contoso.com zone in Active Directory.

  ---

  Only Authenticated users can create records when zone is stored in AD.

  Secure dynamic updates allow an administrator to control what computers update what names and prevent unauthorized computers from overwriting existing names in DNS.

  References:

  Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 6: Network Administration, Lesson 2: Implementing DNSSEC, p. 237 http://technet.microsoft.com/en-us/library/cc731204(v=ws.10).aspx

  http://technet.microsoft.com/en-us/library/cc755193.aspx

• Question 97:

  Your network contains a subnet named Subnet1. Subnet1 contains a DHCP server named Server1. You deploy a new subnet named Subnet2. On Subnet2, you deploy a new server named 5erver2 that runs Windows Server 2012 R2. You need to configure Server2 to route DHCP broadcast from Subnet2 to Server1. Which server role should you install on Server2? To answer, select the appropriate role in the answer area.

  Hot Area:

  

  

  ---

  In Windows Server 2012 R2 the DirectAccess feature and the RRAS role service were combined into a new unified server role. This new Remote Access server role allows for centralized administration, configuration, and monitoring of both DirectAccess and VPN-based remote access services. Additionally, Windows Server 2012 R2 DirectAccess provided multiple updates and improvements to address deployment blockers and provide simplified management.

  References: http://technet.microsoft.com/library/hh831416 http://technet.microsoft.com/en-us/library/cc732263.aspx

• Question 98:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2 installed.

  Contoso.com has a server, named ENSUREPASS-SR07, which has two physical disks installed. The C: drive hosts the boot partition, while the D: drive is not being used. Both disks are online. You have received instructions to create a virtual machine on ENSUREPASS-SR07. Subsequent to creating the virtual machine, you have to connect the D: drive to the virtual machine.

  Which of the following is TRUE with regards to connecting a physical disk to a virtual machine?

  A. The physical disk should not be online.
  B. The physical disk should be uninstalled and re-installed.
  C. The physical disk should be configured as a striped disk.
  D. The physical disk should be configured as a mirrored disk.
  A. The physical disk should not be online.

  ---

  Your virtual machines can also be connected to physical hard disks on the virtualization server virtual hard disks. (This is sometimes referred to as having a "pass-through" disk connected to a virtual machine.) The physical hard disk that you connect to a virtual machine can also be a network-attached disk, like a logical unit number (LUN) in a storage area network (SAN). A common example is an iSCSI LUN that has been mapped to the virtualization server by using Microsoft iSCSI Initiator. Because the virtualization server sees network-attached storage as local disks, the iSCSI LUN can be connected to a virtual machine. The most important limitation about having a physical hard disk connected to a virtual machine is that it cannot be connected to the virtualization server or to other virtual machines at the same time. The virtual machine must have exclusive access to the physical hard disk. Pass-through Disk Configuration Hyper-V allows virtual machines to access storage mapped directly to the Hyper-V server without requiring the volume be configured. The storage can either be a physical disk internal to the Hyper-V server or it can be a Storage Area Network (SAN) Logical Unit (LUN) mapped to the Hyper-V server. To ensure the Guest has exclusive access to the storage, it must be placed in an Offline state from the Hyper-Vserver perspective.

• Question 99:

  Your network contains an Active Directory forest named adatum.com.

  The forest contains a child domain named asia.adatum.com. The asia.adatum.com child domain contains a server named DHCP1 that runs Windows Server 2012 R2.

  You install the DHCP Server server role on DHCP1.

  You have access to the administrative accounts shown in the following table.

  

  You need to authorize DHCP1. Which user account should you use?

  A. Admin1
  B. Admin2
  C. Admin3
  D. Admin4
  B. Admin2

• Question 100:

  You have a domain controller named Server1 that runs Windows Server 2012 R2 and has the DNS Server server role installed. Server1 hosts a DNS zone named contoso.com and a GlobalNames zone.

  You discover that the root hints were removed from Server1.

  You need to view the default root hints of Server1.

  Which file should you open?

  A. Netlogon.dns
  B. Cache.dns
  C. Globalnames.dns
  D. Place.dns
  B. Cache.dns

  ---

  DNS Server service implements root hints using a file, Cache.dns, stored in the systemroot\System32\Dns folder on the server. Thus viewing the Cache.dns file will show the root hints.