Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 11:

  You have a server named Serverl that runs Windows Server 2012 R2.

  You need to create shares by using the New Share Wizard- The solution must meet the following requirements;

  A share named Sharel must have access-based enumeration enabled for the files and folders in the share.

  A share named Share2 must encrypt remote access to the files in the share.

  Which share profile should you use for each share? To answer, drag the appropriate share profiles to the correct shares. Each share profile may be used once, more than once, or not at all. You may need to drag the split bar between panes

  or scroll to view content.

  Select and Place:

  

  

  ---

  Share1

  To be able to share folders on Windows Server 2012, you must first use the Add Roles and Features wizard to install the File Server role service.

  On the File and Storage Services page, select Shares and then click Tasks –andgt; New Share … to begin the New Share Wizard.

  On the Select the profile for this share page, select SMB Share – Quick and click the Next button.

  On the Select the server and path for this share page, select the server on which to create the new share ( local or remote server ) and the volume on which to create the new shared folder. Click theNext button to continue.

  On the Specify share name page, type the name of your new Share name and click the Next button to continue.

  On the Configure share settings page, you will find advanced options for configuring Access-Based Enumeration (ABE), Offline folder caching, and Encryption of end-to-end SMB network traffic.

  Share2

  SMB Encryption

  Provides end-to-end encryption of SMB data and protects data from eavesdropping occurrences on untrusted networks.

  Reference: Server Message Block Overview

  https://technet.microsoft.com/en-us/library/hh831795.aspx

• Question 12:

  Your company has a remote office that contains 1,600 client computers on a single subnet.

  You need to select a subnet mask for the network that will support all of the client computers. The solution must minimize the number of unused addresses. Which subnet mask should you select?

  A. 255.255.248.0
  B. 255.255.252.0
  C. 255.255.254.0
  D. 255.255.240.0
  A. 255.255.248.0

• Question 13:

  Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server 1. Server1 runs Windows Server 2012 R2 and has the DHCP Server server role installed.

  You create two IPv4 scopes on Server1. The scopes are configured as shown in the following table.

  

  The DHCP clients in Subnet1 can connect to the client computers in Subnet2 by using an IP address or a FQDN.

  You discover that the DHCP clients in Subnet2 can connect to client computers in Subnet1 by using an IP address only.

  You need to ensure that the DHCP clients in both subnets can connect to any other DHCP client by using a FQDN.

  What should you add?

  A. The 015 DNS Domain Name option to Subnet1
  B. The 015 DNS Domain Name option to Subnet2
  C. The 006 DNS Servers option to Subnet2
  D. The 006 DNS Servers option to Subnet1
  C. The 006 DNS Servers option to Subnet2

  ---

  References: http://technet.microsoft.com/en-us/library/ee941136%28v=WS.10%29.aspx Training Guide: Installing and Configuring Windows Server 2012 R2, Chapter 6: Network Administration, p.253

• Question 14:

  You have a server named Data1 that runs a Server Core Installation of Windows Server 2012 R2 Standard.

  You need to configure Data1 to run a Server Core Installation of Windows Server 2012 R2 Enterprise. You want to achieve this goal by using the minimum amount of administrative effort.

  What should you perform?

  A. a clean installation of Windows Server 2012
  B. an offline servicing by using Dism
  C. an online servicing by using Dism
  D. an upgrade installation of Windows Server 2012
  C. an online servicing by using Dism

  ---

  References: Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 2: Deploying Servers, p. 44 Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Chapter 1: Installing and Configuring Servers, p. 19-22

• Question 15:

  You work as a senior administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2 installed.

  You are running a training exercise for junior administrators. You are currently discussing connection security rules.

  Which of the following is TRUE with regards to connection security rules? (Choose all that apply.)

  A. Connection security rules allows for traffic to be secured via IPsec.
  B. Connection security rules do not allow the traffic through the firewall.
  C. Connection security rules are applied to programs or services.
  D. Connection security rules are applied between two computers.
  A. Connection security rules allows for traffic to be secured via IPsec.
  B. Connection security rules do not allow the traffic through the firewall.
  D. Connection security rules are applied between two computers.

  ---

  Connection security involves the authentication of two computers before they begin communications and the securing of information sent between two computers. Windows Firewall with Advanced Security uses Internet Protocol security (IPsec) to achieve connection security by using key exchange, authentication, data integrity, and, optionally, data encryption. How firewall rules and connection security rules are related Firewall rules allow traffic through the firewall, but do not secure that traffic. To secure traffic with IPsec, you can create Computer Connection Security rules. However, the creation of a connection security rule does not allow the traffic through the firewall. You must create a firewall rule to do this, if the traffic is not allowed by the default behavior of the firewall. Connection security rules are not applied to programs or services; they are applied between the computers that make up the two endpoints.

• Question 16:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that has the DNS Server server role installed. DC1 hosts an Active Directory-integrated zone for the domain. The domain contains a member server named Server1. You install the DNS Server server role on Server1. You need to ensure that Server1 can respond authoritatively to queries for the existing contoso.com namespace. Which cmdlets should you run on each server? (To answer, drag the appropriate cmdlets to the correct servers. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)

  Select and Place:

  

  

  ---

  The Set-DnsServerPrimaryZone cmdlet changes settings for an existing Domain Name System (DNS) primary zone. You can change values that are relevant for either Active Directory-integrated zones or file-backed zones. This cmdlet should be run on Server1 to make it authoritative. The Add-DnsServerSecondaryZone cmdlet adds a specified secondary zone on a Domain Name System (DNS) server. You can create either a forward lookup zone or a reverse lookup zone. This cmdlet should be run on DC1. References: https://docs.microsoft.com/en-us/powershell/module/dnsserver/set-dnsserverprimaryzone?view=win10-ps https://docs.microsoft.com/en-us/powershell/module/dnsserver/add-dnsserversecondaryzone?view=win10-ps

• Question 17:

  You work as a senior administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 installed, and all workstations have Windows 8 installed.

  You are running a training exercise for junior administrators. You are currently discussing the Always Offline Mode.

  Which of the following is TRUE with regards to the Always Offline Mode? (Choose all that apply.)

  A. It allows for swifter access to cached files and redirected folders.
  B. To enable Always Offline Mode, you have to satisfy the forest and domain functional-level requirements, as well as schema requirements
  C. It allows for lower bandwidth usage due to users are always working offline.
  D. To enable Always Offline Mode, you must have workstations running Windows 7 or Windows Server 2008 R2.
  A. It allows for swifter access to cached files and redirected folders.
  C. It allows for lower bandwidth usage due to users are always working offline.

  ---

  There are no domain/forest/schema requirements, but clients must be running Windows 8/Windows Server 2012 or later. Offline Files have four modes of operation: Online Slow link Auto offline Manual offline Offline Files transition between the three modes online, slow link and auto offline depending on connection speed. The user can always override the automatic mode selection by manually switching to manual offline mode. To determine the connection speed two pings with default packet size are sent to the file server. If the average round-trip time is below 80 ms (Windows 7) or 35 ms (Windows 8), the connection is put into online mode, otherwise into slow link mode. The latency value of 35/80 ms is configurable through the Group Policy setting Configure slow-link mode. Reads, Writes and Synchronization In online mode, changes to files are made on the file server as well as in the local cache (this induces a performance hit ?see this article for details). Reads are satisfied from the local cache (if in sync). In slow link mode, changes to files are made in the local cache. The local cache is background-synchronized with the file server every 6 hours (Windows 7) or 2 hours (Windows 8), by default. This can be changed through the Group Policy setting Configure Background Sync. In auto offline mode, all reads and writes go to the local cache. No synchronization occurs. In manual offline mode, all reads and writes go to the local cache. No synchronization occurs by default, but background synchronization can be enabled through the Group Policy setting Configure Background Sync.

• Question 18:

  You have a server named Server1 that runs a Server Core installation of Windows Server 2012 R2.

  Server1 is configured to obtain an IPv4 address by using DHCP.

  You need to configure the IPv4 settings of the network connection on Server1 as follows:

  IP address: 10.1.1.1

  Subnet mask: 255.255.240.0 Default gateway: 10.1.1.254 What should you run?

  A. net.exe
  B. msconfig.exe
  C. New-NetIPAddress
  D. ipconfig.exe
  C. New-NetIPAddress

• Question 19:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2. You need to create 3-TB virtual hard disk (VHD) on Server1.

  Which tool should you use?

  A. File Server Resource Manager (FSRM)
  B. New-StoragePool
  C. Diskpart
  D. Share and Storage Management
  C. Diskpart

  ---

  You can create a VHD from either the Disk Management snap-in or the command line (diskpart). From the DiskPart command-line tool at an elevated command prompt, run the create vdisk command and specify the file (to name the file) and maximum (to set the maximum size in megabytes) parameters. The following code demonstrates how to create a VHD file at C:\vdisks\disk1.vdh with a maximum file size of 16 GB (or 16,000 MB). DiskPart Microsoft DiskPart version 6.1.7100 Copyright (C) 1999-2008 Microsoft Corporation. On computer: WIN7 DISKPART> create vdisk file="C:\vdisks\disk1.vhd" maximum=16000

• Question 20:

  Your network contains an Active Directory domain named adatum.com. The domain contains several thousand member servers that run Windows Server 2012 R2. All of the computer accounts for the member servers are in an organizational

  unit (OU) named ServersAccounts. Servers are restarted only occasionally.

  You need to identify which servers were restarted during the last two days.

  What should you do?

  A. Run dsquery computer and specify the -stalepwd parameter
  B. Run dsquery server and specify the -o parameter.
  C. Run Get-ADComputer and specify the lastlogon property.
  D. Run Get-ADComputer and specify the SearchScope parameter
  C. Run Get-ADComputer and specify the lastlogon property.