Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 261:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed.

  Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4.

  Server1 is configured as shown in the following table.

  

  You install a network monitoring application on VM2.

  You need to ensure that all of the traffic sent to VM3 can be captured on VM2.

  What should you configure?

  A. NUMA topology
  B. Resource control
  C. Resource metering
  D. Virtual Machine Chimney
  E. The VLAN ID
  F. Processor Compatibility
  G. The startup order
  H. Automatic Start Action
  I. Integration Services
  J. Port mirroring
  J. Port mirroring

  ---

  With Hyper-V Virtual Switch port mirroring, you can select the switch ports that are monitored as well as the switch port that receives copies of all the traffic. And since Port mirroring allows the network traffic of a virtual machine to be monitored by copying the traffic and forwarding it to another virtual machine that is configured for monitoring, you should configure port mirroring on VM2.

• Question 262:

  RODC comes with a number of features that focus on heightened security with limited functionality to remote office users. Which of the following are features of RODC?

  A. Filtered Attribute Sets
  B. Read-Only DNS
  C. Unidirectional Replication
  D. All of these
  A. Filtered Attribute Sets

• Question 263:

  Your network contains an Active Directory domain named contoso.com. The domain contains 100 servers. The servers are contained in an organizational unit (OU) named Servers OU.

  You need to create a group named Group1 on all of the servers in the domain. You must ensure that Group1 is added only to the servers.

  What should you configure?

  A. a Local Users and Groups preferences setting in a Group Policy linked to the Domain Controllers OU
  B. a Restricted Groups setting in a Group Policy linked to the domain
  C. a Local Users and Groups preferences setting in a Group Policy linked to ServersOU
  D. a Restricted Groups setting in a Group Policy linked to Servers OU
  C. a Local Users and Groups preferences setting in a Group Policy linked to ServersOU

  ---

  Preferences in Group Policy linked to Servers OU allows you to centrally manage local users and groups on domain member computers and is this is the correct OU for the GPO change

  Unlike Group Policy settings, which App1y to both local computer policy and Active Directory policy, Group Policy preferences only App1y to Active Directory policy.

  You use preferences to configure many areas of the OS, including:

  System devices, such as USB ports, floppy drives and removable media Network shares and mapping network shares to drive letters System and user environment variables

  User and group accounts for the local computer

  VPN and dial-up networking connections

  Printer configuration and mapping

  Registry settings, schedule tasks and system services

  Settings for Folder Options, Internet Options and Regional and Language Options Settings for power schemes and power management

  Start Menu properties and menu items

• Question 264:

  Your network contains a file server named Server1 that runs Windows Server 2012 R2. All client computers run Windows 8. Server1 contains a folder named Folder1. Folder1 contains the installation files for the company's desktop applications. A network technician shares Folder1 as Share 1.

  You need to ensure that the share for Folder1 is not visible when users browse the network. What should you do?

  A. From the properties of Folder1, deny the List Folder Contents permission for the Everyone group.
  B. From the properties of Folder1, remove Share1, and then share Folder1 as Share1$.
  C. From the properties of Folder1, configure the hidden attribute.
  D. From the properties of Share1, configure access-based enumeration
  B. From the properties of Folder1, remove Share1, and then share Folder1 as Share1$.

• Question 265:

  You have a server named Server1. Server1 runs Windows Server 2012 R2 and is located in a perimeter network.

  You need to configure a custom connection security rule on Server1. The rule must encrypt network communications across the Internet to a computer at another company.

  Which authentication method should you configure in the connection security rule?

  A. Advanced
  B. User (Kerberos V5)
  C. Default
  D. Computer (Kerberos V5)
  E. Computer and user (Kerberos V5)
  A. Advanced

  ---

  You need to make use of Advanced authentication method to ensure that communication is encrypted over the network to the other company from your custom connection security rule on Server1.

  References:

  http://technet.microsoft.com/en-us/library/bb742516.aspx

  Training Guide: Installing and Configuring Windows Server 2012 R2, Chapter 8: File Services and Storage, p. 428.

• Question 266:

  Your network contains an Active Directory domain named contoso.com. The domain contains a print server named Server1 that runs Windows Server 2012 R2. Server1 contains a local group named Group 1 that includes the Server

  Operators group, the Administrators group, and the Print Operators group.

  You share a printer named Printer1 on Server1.

  You need to configure Printer1 to meet the following requirements:

  Ensure that the members of Group1 can send print jobs to Printer1.

  

  Prevent other users from sending print jobs to Printer1.

  

  Which two actions should you perform? Each correct answer presents part of the solution.

  A. Remove the permissions for the Creator Owner group.
  B. Assign the Print permission to Group1.
  C. Assign the Print permission to the Administrators group.
  D. Assign the Print permission to the Server Operators group.
  E. Remove the permissions for the Everyone group.
  B. Assign the Print permission to Group1.
  E. Remove the permissions for the Everyone group.

• Question 267:

  Your network contains an Active Directory forest. The forest contains a single domain named contoso.com. The domain contains four domain controllers. The domain controllers are configured as shown in the following table.

  

  All domain controllers are DNS servers.

  You plan to deploy a new domain controller named DC5 in the contoso.com domain.

  You need to identify which domain controller must be online to ensure that DC5 can be promoted successfully to a domain controller.

  Which domain controller should you identify?

  A. DC1
  B. DC2
  C. DC3
  D. DC4
  D. DC4

  ---

  Relative ID (RID) Master: Allocates active and standby RID pools to replica domain controllers in the same domain. (corp.contoso.com). Must be online for newly promoted domain controllers to obtain a local RID pool that is required to advertise or when existing domain controllers have to update their current or standby RID pool allocation. The RID master is responsible for processing RID pool requests from all domain controllers in a particular domain. When a DC creates a security principal object such as a user or group, it attaches a unique Security ID (SID) to the object. This SID consists of a domain SID (the same for all SIDs created in a domain), and a relative ID (RID) that is unique for each security principal SID created in a domain. Each DC in a domain is allocated a pool of RIDs that it is allowed to assign to the security principals it creates. When a DC's allocated RID pool falls below a threshold, that DC issues a request for additional RIDs to the domain's RID master. The domain RID master responds to the request by retrieving RIDs from the domain's unallocated RID pool and assigns them to the pool of the requesting DC At any one time, there can be only one domain controller acting as the RID master in the domain.

  

  The Infrastructure Master ?The purpose of this role is to ensure that cross-domain object references are correctly handled. For example, if you add a user from one domain to a security group from a different domain, the Infrastructure Master makes sure this is done properly. As you can guess however, if your Active Directory deployment has only a single domain, then the Infrastructure Master role does no work at all, and even in a multi-domain environment it is rarely used except when complex user administration tasks are performed, so the machine holding this role doesn't need to have much horsepower at all.

• Question 268:

  You have a server named Server1 that runs Windows Server 2012 R2. You add a 4-TB disk named Disk 5 to Server1.

  You need to ensure that you can create a 3-TB volume on Disk 5.

  What should you do?

  A. Create a storage pool.
  B. Convert the disk to a dynamic disk.
  C. Create a VHD, and then attach the VHD.
  D. Convert the disk to a GPT disk.
  D. Convert the disk to a GPT disk.

  ---

  MBR max is 2TB, the disk must be GPT For any hard drive over 2TB, we need to use GPT partition. If you have a disk larger than 2TB size, the rest of the disk space will not be used unless you convert it to GPT. An existing MBR partition can't be converted to GPT unless it is completely empty; you must either delete everything and convert or create the partition as GPT. It is not possible to boot to a GPT partition, impossible to convert MBR to GPT without data loss.

• Question 269:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed. Server1 is connected to two Fibre Channel SANs and is configured as shown in the following table.

  

  You have a virtual machine named VM1.

  You need to configure VM1 to connect to SAN1.

  What should you do first?

  A. Add one HBA
  B. Create a Virtual Fibre Channel SAN.
  C. Create a Hyper-V virtual switch.
  D. Configure network adapter teaming.
  B. Create a Virtual Fibre Channel SAN.

  ---

  You need your virtualized workloads to connect easily and reliably to your existing storage arrays.

  Windows Server 2012 provides Fibre Channel ports within the guest operating system, which allows you to connect to Fibre Channel directly from within virtual machines. This feature protects your investments in Fibre Channel, enables you

  to virtualize workloads that use direct access to Fibre Channel storage, allows you to cluster guest operating systems over Fibre Channel, and provides an important new storage option for servers hosted in your virtualization infrastructure.

  With this Hyper-V virtual Fibre Channel feature, you can connect to Fibre Channel storage from within a virtual machine. This allows you to use your existing Fibre Channel investments to support virtualized workloads. Support for Fibre

  Channel in Hyper-V guests also includes support for many related features, such as virtual SANs, live migration, and MPIO.

  

• Question 270:

  Server1 runs Windows Server 2012 R2 and is installed as an FTP server. Client uses App1 to connect to Server1 for FTP. App1 uses TCP port 21 for control and a dynamic port for data. You have allowed port 21 in firewall. What should you do next in order to allow clients to use App1 to connect to server1 using ftp.

  A. At Server1 allow firewall rule of outbound
  B. At Server1 allow firewall rule of inbound
  C. Netsh adv firewall domain profile state off
  D. Netsh adv firewall set global StatefulFtp enable
  D. Netsh adv firewall set global StatefulFtp enable

  ---

  Set global stateful ftp

  Configures how Windows Firewall with Advanced Security handles FTP traffic that uses an initial connection on one port to request a data connection on a different port. This affects both active and passive FTP.