Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 131:

  You work as an administrator at Contoso.com. The Contoso.com network consists of an Active Directory forest that contains a root domain, named Contoso.com, and two child domains, named us.Contoso.com and uk.Contoso.com. All

  servers on the Contoso.com network have Windows Server 2012 R2 installed.

  The root domain hosts a domain local distribution group, named ENSUREPASSGroup. You are preparing to issue ENSUREPASSGroup read-only access to a shared folder hosted by the us.Contoso.com domain.

  You want to make sure that ENSUREPASSGroup is able to access the shared folder in the us.Contoso.com domain.

  Which of the following actions should you take?

  A. You should consider re-configuring ENSUREPASSGroup as a universal Admins group.
  B. You should consider re-configuring ENSUREPASSGroup as a universal security group.
  C. You should consider re-configuring ENSUREPASSGroup as a global administrators group.
  D. You should consider re-configuring ENSUREPASSGroup as a local administrators group.
  B. You should consider re-configuring ENSUREPASSGroup as a universal security group.

• Question 132:

  A printer named Printer1 is configured as shown in the exhibit. (Click the Exhibit button.)

  

  To answer, complete each statement according to the information presented in the exhibit. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 133:

  You have a server named Server 1 that runs Windows Server 2012 R2. The network has two VLANs named VLAN 10 and VLAN 11.

  Server1 has three physical network adapters named NIC1, NIC2, and NIC3.

  On Server1, you create a NIC team named Team1 by using NIC1 and NIC2. You configure Team1 to accept network traffic on VLAN 10.

  You need to ensure that Server can accept network traffic on VLAN 10 and VLAN 11. The solution must ensure that the network traffic can be received on both VLANs if a network adapter fails.

  A. From Server Manager, change the teaming mode of Team1.
  B. Run the Add-NetLbfoTeamMember Windows PowerShell cmdlet.
  C. From Server Manager, add NIC3 to Team1.
  D. Run the Add-NetLbfoTeamNic Windows PowerShell cmdlet.
  C. From Server Manager, add NIC3 to Team1.

• Question 134:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You configure IPSec rules for connections to Server1.

  On Server1, you plan to create an inbound firewall rule that contains the following settings:

  Allows inbound connections to an application named App1.exe

  Applies to the domain profile

  Overrides any block rules

  You need to identify the minimum information required to create the rule.

  Which two pieces of information should you identify? Each correct answer presents part of the solution.

  A. the list of computers that are authorized to use the application
  B. the list of Active Directory users who are authorized to use the application
  C. the hash of the application
  D. the name of the IPSec policies that apply to Server1
  E. the local path of the application
  A. the list of computers that are authorized to use the application
  E. the local path of the application

  ---

  E: To add a program to the rules list, you must specify the full path to the executable (.exe) file used by the program.

  Reference: Add or Edit Firewall Rule https://technet.microsoft.com/en-us/library/cc753558.aspx

• Question 135:

  You have a Hyper-V host named Server1 that runs Windows Server 2012 R2. Server1 hosts 50 virtual machines that run Windows Server 2012 R2.

  Your company uses smart cards for authentication.

  You need to ensure that you can use smart card authentication when you connect to the virtual machine by using Virtual Machine Connection.

  What should you configure?

  A. The RemoteFX settings
  B. The Enhanced Session Mode Policy
  C. The NUMA Spanning settings
  D. The Integration Services settings
  B. The Enhanced Session Mode Policy

• Question 136:

  Your network contains an Active Directory domain named contoso.com. The domain contains servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the Active Directory Federation Services server role installed.Server2 is a file server.

  Your company introduces a Bring Your Own Device (BYOD) policy.

  You need to ensure that users can use a personal device to access domain resources by using Single Sign-On (SSO) while they are connected to the internal network.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Enable the Device Registration Service in Active Directory.
  B. Publish the Device Registration Service by using a Web Application Proxy.
  C. Configure Active Directory Federation Services (AD FS) for the Device Registration Service.
  D. Install the Work Folders role service on Server2.
  E. Create and configure a sync share on Server2.
  A. Enable the Device Registration Service in Active Directory.
  C. Configure Active Directory Federation Services (AD FS) for the Device Registration Service.

  ---

  *Prepare your Active Directory forest to support devices. This is a one-time operation that you must run to prepare your Active Directory forest to support devices.

  To prepare the Active Directory forest

  On your federation server, open a Windows PowerShell command window and type:

  Initialize-ADDeviceRegistration

  *Enable Device Registration Service on a federation server farm node. To enable Device Registration Service:

  On your federation server, open a Windows PowerShell command window and type:

  Enable-AdfsDeviceRegistration.

  Repeat this step on each federation farm node in your AD FS farm.

• Question 137:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01.

  You have a domain controller named DC5 that has the Server Graphical Shell disabled.

  You create an organizational unit (OU) named OU1.

  From DC5, you need to create 50 new user accounts in OU1.

  Which tool should you use?

  A. the ntdsutil command
  B. the Set-ADDomain Windows PowerShell cmdlet
  C. the Install-ADDSDomain Windows PowerShell cmdlet
  D. the dsadd command
  E. the dsamain command
  F. the dsmgmt command
  G. the net user command
  H. the Set-ADForest Windows PowerShell cmdlet
  G. the net user command

  ---

  Net user adds or modifies user accounts, or displays user account information.

  Incorrect answers:

  Not E: Dsamain exposes Active Directory data that is stored in a snapshot or backup as a Lightweight Directory Access Protocol (LDAP) server. Not F: Not F: dsmgmt facilitates managing Active Directory Lightweight Directory Services (AD

  LDS) application partitions, managing and controlling flexible single master operations (FSMO), and cleaning up metadata that is left behind by abandoned Active Directory domain controllers and AD LDS instances.

  Reference: Net User Command for Windows Server 2012 (R2)

  http://www.isunshare.com/windows-2012/net-user-command-for-windows-server-2012-r2.html

• Question 138:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012 R2. You log on to Server1. You need to retrieve the IP configurations of Server2. Which command should you run from Server1?

  A. winrs -r:server2 ipconfig
  B. winrm get server2
  C. dsquery *-scope base-attr ip, server2
  D. ipconfig > server2.ip
  A. winrs -r:server2 ipconfig

• Question 139:

  Your network contains an Active Directory domain named contoso.com. The domain contains two standalone servers named Serverl and Server2 that are located in a perimeter network. Both servers run the default installation of Windows

  Server 2012 R2.

  You need to manage Serverl remotely from Server2.

  What should you do?

  A. From Server2, add Server1 to the list of TrustedHosts.
  B. From Server2, install a self-signed certificate.
  C. From Server1, add Server2 to the list of TrustedHosts.
  D. From Server1, install a self-signed certificate
  C. From Server1, add Server2 to the list of TrustedHosts.

  ---

  For remote connections in a Workgroup to Workgroup/Domain scenario, the remote computer (here Server2) must be added to the trusted hosts list on the source computer (here Server1). To do this, run the following command on the source

  computer in a Command Prompt window that is opened with elevated user rights.

  winrm set winrm/config/client @{TrustedHosts="RemoteComputerName"}

  Note: TrustedHosts is a setting on the local computer that defines one or more computers that are trusted when establishing remoting sessions using WinRM from the local computer using either ENTER-PSSESSION or INVOKE-COMMAND.

  Reference: Remote Management with Server Manager

  https://technet.microsoft.com/en-us/library/dd759202.aspx

• Question 140:

  You have a server named Server1 that runs a Server Core installation of Windows Server 2012 R2 Standard. You establish a remote management session to Server1.

  You need to identify which task can be performed on Server1 from within the Remote management session.

  Which tasks can you perform?

  A. Install a feature by using Server Manager.
  B. Modify the network settings by using Sconfig.
  C. Disable services by using Msconfig.
  D. Join a domain by using the System Properties.
  C. Disable services by using Msconfig.

  ---

  In Windows Server 2012 R2, you can use the Server Configuration tool (Sconfig.cmd) to configure and manage several common aspects of Server Core installations. You must be a member of the Administrators group to use the tool.

  Sconfig.cmd is available in the Minimal Server Interface and in Server with a GUI mode.

  References:

  http://technet.microsoft.com/en-us/library/jj647766.aspx

  Training Guide: Installing and Configuring Windows Server 2012 R2, Chapter 2: Deploying servers, p. 80.