Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 21:

  Your network contains an active directory domain named contoso.com. The domain consists of 20 member Servers and 5 domain controllers. All servers run Windows Server 2012 R2. The domain contains 500 client computers.

  You plan to deploy a domain controller for contoso.com in Microsoft Azure.

  You need to prepare the conversation for planned deployment. The solution should ensure that the domain controller hosted in Azure always have the same IP address.

  Which two actions should you perform? Each correct answer is a part of the solution.

  A. From an Azure virtual machine run the Set-AzureStaticVNetIP cmdlet
  B. Deploy a Site to site virtual private network (VPN)
  C. From Azure virtual machine run the Set 璑etIPAuthentication cmdlet
  D. From an domain controller run the Set-NetIPAdress cmdlet
  E. From an domain controller run adprep.exe
  A. From an Azure virtual machine run the Set-AzureStaticVNetIP cmdlet
  B. Deploy a Site to site virtual private network (VPN)

  ---

  Set the static VNet IP address information to a VM object.

• Question 22:

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. The domain contains a server named Server1.

  You open Review Options in the Active Directory Domain Services Configuration Wizard, and then you click View script.

  You need to ensure that you can use the script to promote Server1 to a domain controller.

  Which file extension should you use to save the script?

  A. .bat
  B. .cmd
  C. .ps1
  D. .xml
  C. .ps1

  ---

  PowerShell scripts are saved with the extension ".ps1".

  From http://technet.microsoft.com/en-us/library/jj574105.aspx The Review Options page in Server Manager also offers an optional View Script button to create a Unicode text file that contains the current ADDS Deployment configuration as a single Windows PowerShell script. This enables you to use the Server Manager graphical interface as a Windows PowerShell deployment studio. Use the Active Directory Domain Services Configuration Wizard to configure options, export the configuration, and then cancel the wizard. This process creates a valid and syntactically correct sample for further modification or direct use.

• Question 23:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You plan to create an image of Server1.

  You need to remove the source files for all server roles that are not installed on Server1.

  Which tool should you use?

  A. servermanagercmd.exe
  B. imagex.exe
  C. ocsetup.exe
  D. dism.exe
  D. dism.exe

  ---

  servermanagercmd.exe ?The ServerManagerCmd.exe command-line tool has been deprecated in Windows Server 2008 R2. imagex.exe ?ImageX is a command-line tool in Windows Vista that you can use to create and manage Windows image (.wim) files. A .wim file contains one or more volume images, disk volumes that contain images of an installed Windows operating system. dism.exe ?Deployment Image Servicing and Management (DISM.exe) is a command-line tool that can be used to service a Windows image or to prepare a Windows Preinstallation Environment (Windows PE) image. It replaces Package Manager (Pkgmgr.exe), PEimg, and Intlcfg that were included in Windows Vista. The functionality that was included in these tools is now consolidated in one tool (DISM.exe), and new functionality has been added to improve the experience for offline servicing. DISM can Add, remove, and enumerate packages. ocsetup.exe ?The Ocsetup.exe tool is used as a wrapper for Package Manager (Pkgmgr.exe) and for Windows Installer (Msiexec.exe). Ocsetup.exe is a command-line utility that can be used to perform scripted installs and scripted uninstalls of Windows optional components. The Ocsetup.exe tool replaces the Sysocmgr.exe tool that Windows XP and Windows Server 2003i use.

  The Dism utility can be used to create and mount an image of Server1.

  References: http://technet.microsoft.com/en-us/library/cc749447(v=ws.10).aspx http://technet.microsoft.com/en-us/library/dd744382(v=ws.10).aspx Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 2: Deploying Servers, p. 44 Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Chapter 1: Installing and Configuring Servers, p. 19-22

• Question 24:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Server1 and Server2 run a Server with a GUI installation of Windows Server 2012 R2. You remove the Graphical Management Tools and Infrastructure feature on Server2. You need to restart Server2. What should you do? (To answer, drag the appropriate tools to the correct statements. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)

  Select and Place:

  

  

  ---

  When you uninstall "Server-GUI-Shell" you are left with a "Minimal Server Interface" server. So, File Explorer and IE10 are unavailable, but MMC and Server Manager work and MMC and Server Manager will allow you to restart server2 either locally or remotely from Server1. References: Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 2: Deploying Servers, p.44 Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Chapter 1: Installing and Configuring Servers, p.19-22

• Question 25:

  Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All servers run Windows Server 2012 R2. The domain contains two domain controllers named DC1 and DC2. Both domain controllers

  are virtual machines on a Hyper-V host.

  You plan to create a cloned domain controller named DC3 from an image of DC1.

  You need to ensure that you can clone DC1.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Add the computer account of DC1 to the Cloneable Domain Controllers group.
  B. Create a DCCloneConfig.xml file on DC1.
  C. Add the computer account of DC3 to the Cloneable Domain Controllers group.
  D. Run the Enable-AdOptionalFeaturecmdlet.
  E. Modify the contents of the DefaultDCCIoneAllowList.xml file on DC1.
  A. Add the computer account of DC1 to the Cloneable Domain Controllers group.
  B. Create a DCCloneConfig.xml file on DC1.

  ---

  A. Membership in the Cloneable Domain Controllers Group dictates whether a DC can or cannot be cloned. This group has some permissions set on the domain head that should not be removed. Removing these permissions will cause cloning to fail. Also, as a best practice, DCs shouldn't be added to the group until you plan to clone and DCs should be removed from the group once cloning is complete. Cloned DCs will also end up in the Cloneable Domain Controllers group.

  B. DCCloneConfig.xml is an XML configuration file that contains all of the settings the cloned DC will take when it boots. This includes network settings, DNS, WINS, AD site name, new DC name and more. This file can be generated in a few different ways.

  The New-ADDCCloneConfig cmdlet in PowerShell By hand with an XML editor By editing an existing config file, again with an XML editor.

• Question 26:

  Your network contains an Active Directory domain.

  A Group Policy object (GPO) named GPO1 is linked to the domain. GPO1 has the settings shown in the following table.

  

  You have a security template named Templatel. Templatel has the settings shown in the following table.

  

  You import Templatel into GPO1.

  What is the effect of applying GPO1?

  A. • Enforce password history is set to Not Defined. • Minimum password length is set to 5 characters. • Store passwords using reversible encryption is set to Enabled.
  B. • Minimum password length is set to 10 characters. • Enforce password history is set to 5 passwords remembered. • Store passwords using reversible encryption is set to Enabled.
  C. • Minimum password length is set to 5 characters. • Enforce password history is set to 5 passwords remembered. • Store passwords using reversible encryption is set to Enabled.
  D. • Enforce password history is set to Not Defined. • Minimum password length is set to 10 characters. • Store passwords using reversible encryption is set to Enabled.
  C. • Minimum password length is set to 5 characters. • Enforce password history is set to 5 passwords remembered. • Store passwords using reversible encryption is set to Enabled.

• Question 27:

  You have 10 domain controllers in a domain.

  You need to prevent several members of domain admin groups from logging on the domain controller.

  Which two objects should you create and configure?

  A. GPO to the domain
  B. authentication policy
  C. authentication policy silo
  D. a central access policy
  E. a user certificate
  B. authentication policy
  C. authentication policy silo

  ---

  References: https://dirteam.com/sander/2014/12/23/new-features-in-active-directory-domain-services-in-windows-server-2012-r2-part-3-authentication-policies-and-authentication-policy-silos/

• Question 28:

  Your network contains an Active Directory domain named adatum.com.

  You create an organizational unit (OU) named OU1. You create a CSV file that contains following data.

  objectClass,dn,givenName,sn,samAccountName,userPrincipalName user,"cn=User1,OU=OU1,dc=Adatum,dc=com",,User1,User1,[email protected] user,"cn=User2,OU=OU1,dc=Adatum,dc=com",User2,Test,User2,[email protected] user,"cn=User3,OU=OU1,dc=Adatum,dc=com",,,User3, user,"cn=User4,OU=OU1,dc=Adatum,dc=com",User4,,User4,[email protected]

  You import the file by running csvde.exe.

  How many of the new accounts are disabled?

  A. 3
  C. 4
  D. 1
  E. 2
  C. 4

  ---

  References: https://quizlet.com/158331734/46-bulk-user-operations-flash-cards/

• Question 29:

  You are configuring a multi-subnet IPv6 network for a regional office.

  The corporate network administrator allocates the 2001:0db8:1234:0800: :/54 address space for your use.

  You need to identify network IDs of the first and last subnets that you will be able to create at the office.

  Which network IDs should you identify?

  To answer, drag the appropriate network IDs to the correct subnets. Each network ID may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

• Question 30:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC5. DC5 has a Server Core Installation of Windows Server 2012 R2.

  You need to uninstall Active Directory from DC5 manually.

  Which tool should you use?

  A. The dsamain.exe command
  B. The ntdsutil.exe command
  C. The Remove-ADComputer cmdlet
  D. The Remove-WindowsFeature cmdlet
  C. The Remove-ADComputer cmdlet

  ---

  The Remove-ADComputer cmdlet removes an Active Directory computer.

  Example: Remove-ADComputer -Identity "FABRIKAM-SRV4"

  Remove one particular computer.

  References:

  http://technet.microsoft.com/en-us/library/ee662310.aspx

  http://support.microsoft.com/kb/216498

  http://technet.microsoft.com/en-us/library/ee617250.aspx