Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 291:

  Your network contains an Active Directory domain named contoso.com. The domain contains 100 user accounts that reside in an organizational unit (OU) named OU1.

  You need to ensure that a user named User1 can link and unlink Group Policy objects (GPOs) to OU1. The solution must minimize the number of permissions assigned to User1.

  What should you do?

  A. Run the Delegation of Control Wizard on OU1.
  B. Add User1 to the Group Policy Creator Owners group.
  C. Modify the permission on the \\Contoso.com\SYSVOL\Contoso.com\Policies folder.
  D. Modify the permissions on the User1 account.
  A. Run the Delegation of Control Wizard on OU1.

  ---

  The Delegation of Control Wizard allows you to delegate tasks, active Directory Object types and to set permissions.

• Question 292:

  Your company has a main office that contains 225 client computers. The client computers are located on a subnet that uses the network ID of 10.10.1.0/24. The company plans to open two branch offices. The offices will be configured as shown in the following table.

  

  You need to select a network prefix for each office to ensure that there are enough IPv4 addresses for each client computer. The solution must minimize the number of unused IP addresses. Which network prefixes should you select? To answer, drag the appropriate network prefix to the correct branch office in the answer area.

  Select and Place:

  

  

• Question 293:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed.

  On Server1, you create a virtual machine named VM1.

  When you try to add a RemoteFX 3D Video Adapter to VM1, you discover that the option is unavailable as shown in the following exhibit. (Click the Exhibit button.)

  

  You need to add the RemoteFX 3D Video Adapter to VM1. What should you do first?

  A. On Server1, run the Add-VMRemoteFx3dVideoAdapter cmdlet
  B. On Server1, install the Media Foundation feature.
  C. On Server1, run the Enable-VMRemoteFxPhysicalVideoAdapter cmdlet.
  D. On Server1, install the Remote Desktop Visualization Host (RD Visualization Host) role service.
  D. On Server1, install the Remote Desktop Visualization Host (RD Visualization Host) role service.

  ---

  Remote Desktop services are not available in server core installation; you need to add the role.

  References: Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2, Chapter 1: Installing and Configuring servers, Objective 1.2: Configure servers, p. 19 http://technet.microsoft.com/en-us/library/hh848506(v=wps.620).aspx http://technet.microsoft.com/en-us/library/hh848520(v=wps.620).aspx http://technet.microsoft.com/en-us/library/ff817586(v=ws.10).aspx

• Question 294:

  You have a Hyper-V host named Server1 that runs Windows Server 2012 R2. Server1 has the virtual switches listed in the following table.

  

  You create a virtual machine named VM1. VM1 has two network adapters. One network adapter connects to vSwitch1. The other network adapter connects to vSwitch2.You configure NIC teaming on VM1.

  You need to ensure that if a physical NIC fails on Server1, VM1 remains connected to the network.

  What should you do on Server1?

  A. Run the Set-VmNetworkAdapterIsolation cmdlet.
  B. Add a new network adapter to VM1.
  C. Modify the properties of the network adapters on VM1.
  D. Modify the properties of vSwitch1 and vSwitch2.
  E. Modify the properties of the network adapters on VM1.
  F. Run the Set-VmNetworkAdapterAdapterFailoverConfiguration cmdlet.
  C. Modify the properties of the network adapters on VM1.

  ---

  References: https://www.altaro.com/hyper-v/work-hyper-v-virtual-network-adapters/

• Question 295:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have Windows Server 2012 R2 installed.

  You have configured a server, named ENSUREPASS-SR07, as a VPN server. You are required to configure new firewall rules for workstation connections.

  You want to achieve this using the least amount of administrative effort.

  Which of the following actions should you take?

  A. You should consider making use of the Enable-NetFirewallRule cmdlet.
  B. You should consider making use of the New-NetFirewallRule cmdlet.
  C. You should consider making use of dism.exe from the command prompt.
  D. You should consider making use of dsadd.exe from the command prompt.
  B. You should consider making use of the New-NetFirewallRule cmdlet.

  ---

  New-NetFirewallRule ?Creates a new inbound or outbound firewall rule and adds the rule to the target computer. You can't Enable what doesn't exist yet, you must use New-NetFirewallRule

• Question 296:

  Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01.

  The domain contains an administrator account named Admin1.

  You need to prevent Admin1 from creating more than 100 objects in the domain partition.

  Which tool should you use?

  A. the ntdsutil command
  B. the Set-ADDomain cmdlet
  C. the Install-ADDSDomain cmdlet
  D. the dsadd command
  E. the dsamain command
  F. the dsmgmt command
  G. the net user command
  H. the Set-ADForest cmdlet
  D. the dsadd command

  ---

  Active Directory quotas are limits on the number of objects that a security principal (that has been delegated the Create Child Objects or Delete Child Objects permission) can own and create. To assign a quota to a security principal, you must

  use the directory services tools. The command and required parameters for assigning a quota to a security principal are as follows:

  dsadd quota -part -qlimit -acct

  Incorrect answers:

  Not E: Dsamain exposes Active Directory data that is stored in a snapshot or backup as a Lightweight Directory Access Protocol (LDAP) server.

  Not G: Net user adds or modifies user accounts, or displays user account information.

  Reference: Active Directory Quotas

  https://technet.microsoft.com/en-us/library/cc904295(v=ws.10).aspx

• Question 297:

  Your network contains an Active Directory domain named contoso.com. The domain contains three servers named Server1, Server2, and Server3.

  You create a server group named ServerGroup1.

  You discover the error message shown in the following exhibit. (Click the Exhibit button.)

  

  You need to ensure that Server2 can be managed remotely by using Server Manager. What should you do?

  A. On DC1, run the Enable-PSSessionConfiguration cmdlet.
  B. On Server2, run the Add-Computer cmdlet.
  C. On Server2, modify the Windows Management Instrumentation (WMI) firewall rule.
  D. On DC1, run the New-ADComputer cmdlet.
  C. On Server2, modify the Windows Management Instrumentation (WMI) firewall rule.

  ---

  References: https://docs.microsoft.com/en-us/windows/desktop/wmisdk/wmi-troubleshooting#access-denied

• Question 298:

  You have two servers that run Windows Server 2012 R2. The servers are configured as shown in the following table.

  

  You need to ensure that Server2 can be managed by using Server Manager from Server1. In the table below, identify which actions must be performed on Server1 and Server2. Make only one selection in each row. Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  On the computer that is running Server Manager, add the workgroup server name to the TrustedHosts list.

  Reference: http://technet.microsoft.com/en-us/library/hh831453.aspx

• Question 299:

  Your network contains one Active Directory forest named contoso.com. The forest contains a single domain. A user named User5 has the required permissions to link Group Policy (GPOs) to any container in the domain. You need to assign permissions to User5 to meet the following requirements:

  1. User5 must be able to edit the GPO settings for all of the GPOs linked to the contoso.com domain.

  2. User5 must be able to edit the GPO settings for all of the unlinked GPOs in the domain.

  3. User5 must use the principle of least priviledge.

  What command should you run? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  The Set-GPPermissions command grants a level of permissions to a security principal for one GPO or all the GPOs in a domain.

  The parameter -All

  specifies that the permission level is set for the specified security principal for all GPOs in the domain.

  The parameter -PermissionLevel

  specifies the permission level to set for the security principal. The valid permission levels are: GpoRead, GpoApply, GpoEdit, GpoEditDeleteModifySecurity or None.

  Reference: Set-GPPermissions https://technet.microsoft.com/en-us/library/ee461038.aspx

• Question 300:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and a server named Server2 that runs Windows Server 2008 R2 Service Pack 1 (SP1).Both servers are member servers.

  On Server2, you install all of the software required to ensure that Server2 can be managed remotely from Server Manager.

  You need to ensure that you can manage Server2 from Server1 by using Server Manager.

  Which two tasks should you perform on Server2? (Each correct answer presents part of the solution.Choose two.)

  A. Run the systempropertiesremote. execommand.
  B. Run the Fnable-PsRemoting cmdlet.
  C. Run the Enable-PsSessionConfigurationcmdlet.
  D. Run the Confiqure-SMRemoting.ps1script.
  E. Run the Set-ExecutionPolicycmdlet.
  D. Run the Confiqure-SMRemoting.ps1script.
  E. Run the Set-ExecutionPolicycmdlet.

  ---

  The output of this command indicates whether Server Manager Remoting is enabled or disabled on the server. To configure Server Manager remote management by using Windows PowerShell On the computer that you want to manage

  remotely, open a Windows PowerShell session with elevated user rights.To do this, click Start, click All Programs, click Accessories, click Windows PowerShell, right-click the Windows PowerShell shortcut, and then click Run as

  administrator.

  In the Windows PowerShell session, type the following, and then press Enter.

  Set-ExecutionPolicy -ExecutionPolicyRemoteSigned

  Type the following, and then press Enter to enable all required firewall rule exceptions.

  Configure-SMRemoting.ps1 -force -Enable.