Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 341:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012 R2.

  You log on to Server1.

  You need to retrieve a list of the active TCP connections on Server2.

  Which command should you run from Server1?

  A. winrm get server2
  B. netstat> server2
  C. dsquery * -scope base -attrip, server2
  D. winrs -r:server2 netstat
  D. winrs -r:server2 netstat

  ---

  This command line tool enables administrators to remotely execute most Cmd.exe commands using the WSManagement protocol.

  

• Question 342:

  Your network contains an Active Directory domain named contoso.com. The domain contains 500 servers that run Windows Server 2012 R2.

  You have a written security policy that states the following:

  Only required ports must be open on the servers.

  All of the servers must have Windows Firewall enabled.

  Client computers used by administrators must be allowed to access all of the ports on all of the servers.

  Client computers used by the administrators must be authenticated before the client computers can access the servers.

  You have a client computer named Computer1 that runs Windows 8.1.

  You need to ensure that you can use Computer1 to access all of the ports on all of the servers successfully. The solution must adhere to the security policy.

  Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

  A. On Computer1, create a connection security rule.
  B. On all of the servers, create an outbound rule and select the Allow the connection if it is secure option.
  C. On all of the servers, create an inbound rule and select the Allow the connection if it is secure option.
  D. On Computer1, create an inbound rule and select the Allow the connection if it is secure option.
  E. On Computer1, create an outbound rule and select the Allow the connection if it is secure option.
  F. On all of the servers, create a connection security rule.
  A. On Computer1, create a connection security rule.
  C. On all of the servers, create an inbound rule and select the Allow the connection if it is secure option.
  F. On all of the servers, create a connection security rule.

  ---

  Unlike firewall rules, which operate unilaterally, connection security rules require that both communicating computers have a policy with connection security rules or another compatible IPsec policy. Traffic that matches a firewall rule that uses the Allow connection if it is secure setting bypasses Windows Firewall. The rule can filter the traffic by IP address, port, or protocol. This method is supported on Windows Vista or Windows Server 2008.

  References: http://technet.microsoft.com/en-us/library/cc772017.aspx http://technet.microsoft.com/en-us/library/cc753463.aspx

• Question 343:

  Your network contains one Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.

  You have a server named Server1 that has the Work Folders role services installed.

  Server1 hosts 20 Work Folders shares.

  Your company's new security policy states that all corporate files stored on client computers must be encrypted.

  You need to ensure that the corporate files stored on the client computers meet the requirement of the security policy.

  What should you do from Server1?

  A. Run the Enable-SyncShare cmdlet.
  B. Install the Enhanced Storage feature.
  C. Modify the local security policy.
  D. Run the Set-SyncShare cmdlet.
  D. Run the Set-SyncShare cmdlet.

• Question 344:

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.

  You need to add a user named User1 to a group named ServerAdmins.

  What command should you run?

  To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

• Question 345:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2.

  An administrator creates a security template named Template1.

  You need to apply Template1 to Server1.

  Which snap-in should you use?

  A. Resultant Set of Policy
  B. Security Configuration and Analysis
  C. Authorization Manager
  D. Security Templates
  B. Security Configuration and Analysis

  ---

  The Security Configuration and Analysis tool contains the Local Security Policy snap-in that is used to apply templates.

  References: http://technet.microsoft.com/en-us/library/bb742512.aspx http://technet.microsoft.com/en-us/library/cc739442%28v=WS.10%29.aspx

• Question 346:

  Your network contains an Active Directory domain named contoso.com. The network contains a server named Server1 that runs Windows Server 2012 R2 and a server named Server2 that runs Windows Server 2008 R2 Service Pack 1

  (SP1). Server1 and Server2 are member servers.

  You need to ensure that you can manage Server2 from Server1 by using Server Manager.

  Which two tasks should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Install Remote Server Administration Tools on Server1.
  B. Install Windows Management Framework 3.0 on Server2.
  C. Install the Windows PowerShell 2.0 engine on Server1.
  D. Install Microsoft .NET Framework 4 on Server2.
  E. Install Remote Server Administration Tools on Server2.
  B. Install Windows Management Framework 3.0 on Server2.
  D. Install Microsoft .NET Framework 4 on Server2.

  ---

  To be able to fully manage remote servers that run Windows Server 2008 or the R2 Service Pack 1 operating system, you should install the .NET Framework 4 on Server2 first followed by the Windows Management Framework 3.0.

• Question 347:

  Your network contains an active directory forest. The forest functional level is Windows server 2012. The forest contains a single domain. The domain contains a member server named Server1 that runs Windows server 2012. You purchase a network scanner named Scanner1 that supports Web Services on Devices (WDS). You need to share the network scanner on Server1.

  Which server role should you install on Server1?

  A. Web Server (IIS)
  B. Fax Server
  C. File and Storage Services
  D. Print and Document Services
  D. Print and Document Services

  ---

  Print and Document Services enables you to centralize print server and network printer tasks. With this role, you can also receive scanned documents from network scanners and route the documents to a shared network resource, Windows SharePoint Services site, or email addresses. Windows Server 2012 uses Web Services on Devices (WSD) technologies to integrate scanning devices into the system.

• Question 348:

  You have a server named Server1 that runs a Server Core installation of Windows Server 2012 R2 Standard. You establish a Remote Desktop session to Server1.

  You need to identify which task can be performed on Server1 from within the Remote Desktop session.

  What should you identify?

  A. Install a feature by using Server Manager.
  B. Modify the network settings by using Sconfig.
  C. Disable services by using Msconfig.
  D. Join a domain by using the System Properties.
  B. Modify the network settings by using Sconfig.

  ---

  In Windows Server 2012 R2, you can use the Server Configuration tool (Sconfig.cmd) to configure and manage several common aspects of Server Core installations. You must be a member of the Administrators group to use the tool.

  Sconfig.cmd is available in the Minimal Server Interface and in Server with a GUI mode.

  References:

  http://technet.microsoft.com/en-us/library/jj647766.aspx

  Training Guide: Installing and Configuring Windows Server 2012 R2, Chapter 2: Deploying servers, p. 80.

• Question 349:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed. On Server1, you create and start a

  virtual machine named VM1. VM1 is configured as shown in the following table.

  

  You plan to create a snapshot of VM1. You need to recommend a solution to minimize the amount of disk space used for the snapshot of VM1. What should you do before you create the snapshot?

  A. Run the Stop-VM cmdlet.
  B. Run the Convert-VHD cmdlet.
  C. Decrease the Maximum RAM
  D. Decrease the Minimum RAM.
  A. Run the Stop-VM cmdlet.

  ---

  What are virtual machine snapshots?

  Virtual machine snapshots capture the state, data, and hardware configuration of a running virtual machine.

  What are snapshots used for?

  Snapshots provide a fast and easy way to revert the virtual machine to a previous state. For this reason, virtual machine snapshots are intended mainly for use in development and test environments. Having an easy way to revert a virtual

  machine can be very useful if you need to recreate a specific state or condition so that you can troubleshoot a problem.

  There are certain circumstances in which it may make sense to use snapshots in a production environment.

  For example, you can use snapshots to provide a way to revert a potentially risky operation in a production environment, such as applying an update to the software running in the virtual machine.

  How are snapshots stored?

  Snapshot data files are stored as .avhd files. Taking multiple snapshots can quickly consume storage space. In the first release version of Hyper-V (KB950050) and in Hyper-V in Windows Server 2008 Service Pack 2, snapshot, snapshot

  data files usually are located in the same folder as the virtual machine by default. In Hyper- V in Windows Server 2008 R2, the files usually are located in the same folder as the virtual hard disk. The following exceptions affect the location of

  the snapshot data files: If the virtual machine was imported with snapshots, they are stored in their own folder. If the virtual machine has no snapshots and you configure the virtual machine snapshot setting, all snapshots you take afterwards

  will be stored in the folder you specify.

  http://technet.microsoft.com/pt-pt/library/dd560637%28v=ws.10%29.aspx

  Reducing the available RAM for the VM would reduce the size of the snapshot, what better than have the machine turn off, not using any memory.

• Question 350:

  Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers that run Windows Server 2012 R2.

  You need to prevent several members of the Domain Admins group from logging on the domain controllers.

  Which two objects should you create and configure? Each correct answer presents part of the solution.

  A. an authentication policy
  B. a user certificate
  C. a central access policy
  D. a Group Policy object (GPO) linked to the domain
  E. an authentication policy silo
  A. an authentication policy
  E. an authentication policy silo

  ---

  References: https://dirteam.com/sander/2014/12/23/new-features-in-active-directory-domain-services-in-windows-server-2012-r2-part-3-authentication-policies-and-authentication-policy-silos/