Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 351:

  Your network contains one Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 R2.

  The domain contains an organizational unit (OU) named Groups that contains a universal security group named Group1.

  You run the following command from Windows PowerShell.

  Get-ADGroup Group1 –properties managedby | New-ADGroup –name “Group2” –SamAccountName group2 –groupcategory distribution –groupscope global

  You need to identify which properties of Group1 will be copied to Group2.

  Hot Area:

  

  

• Question 352:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You need to enable access-based enumeration for a file share on Server1.

  Which tool should you use?

  A. File Server Resource Manager (FSRM)
  B. Share and Storage Management
  C. Server Manager
  D. File Explorer
  C. Server Manager

  ---

  Access-based enumeration displays only the files and folders that a user has permissions to access. It is a feature that was previously available as a downloadable package for the Windows Server?2003 operating system (it was also included in Windows Server 2003 Service Pack 1). Access-based enumeration is now included in the Windows Server 2008 operating system, and you can enable it by using Share and Storage Management.

  

• Question 353:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed. On Server1, you create a virtual machine named VM1. VM1 has a legacy network adapter.

  You need to assign a specific amount of available network bandwidth to VM1.

  What should you do first?

  A. Remove the legacy network adapter, and then run the Set-VMNetworkAdapter cmdlet.
  B. Add a second legacy network adapter, and then run the Set-VMNetworkAdapter cmdlet.
  C. Add a second legacy network adapter, and then configure network adapter teaming.
  D. Remove the legacy network adapter, and then add a network adapter.
  D. Remove the legacy network adapter, and then add a network adapter.

  ---

  Add a New network adapter. The legacy network adapter doesn't support bandwidth management.

• Question 354:

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. A server named Server1 is configured to encrypt all traffic by using IPSec.

  You need to ensure that Server1 can respond to ping requests from computers that do not support IPSec.

  What should you do?

  A. From a command prompt, run netsh set global autotuninglevel = highlyrestrictedcongestionprovider=none.
  B. From a command prompt, run netsh set global autotuninglevel = restricted congestionprovider = ctcp.
  C. From Windows Firewall with Advanced Security, allow unicast responses for the Domain Profile.
  D. From Windows Firewall with Advanced Security, exempt ICMP from IPSec.
  D. From Windows Firewall with Advanced Security, exempt ICMP from IPSec.

• Question 355:

  You have a print server named Server1. Server1 runs Windows Server 2008 R2. You have a file server named Server2. Server2 runs Windows Server 2012 R2. You need to migrate all of the printers on Server1 to Server2. Which actions should you perform on the servers2?

  Select and Place:

  

  

• Question 356:

  Your network contains an Active Directory forest named contoso.com. All domain controllers currently run Windows Server 2008 R2.

  You plan to install a new domain controller named DC4 that runs Windows Server 2012 R2.

  The new domain controller will have the following configurations:

  Schema master

  

  Global catalog server

  

  Active Directory Federation Services server role

  

  Active Directory Certificate Services server role

  

  You need to identify which configuration can be fulfilled by using the Active Directory Domain Services Configuration Wizard. Which configuration should you identify?

  A. Enable the global catalog server.
  B. Install the DNS Server role.
  C. Install the Active Directory Certificate Services role.
  D. Transfer the schema master.
  A. Enable the global catalog server.

• Question 357:

  Your network contains an Active Directory domain. You deploy two servers named Server1 and Server2 that run Windows Server 2012 R2 to the domain.

  You sign in to Server1.

  From Server1, you need to add the DNS Server role to Server2 by using the Server Manager console.

  What should you do first?

  A. On Server2, add Server1 to Server Manager.
  B. On Server1, add Server2 to Server Manager.
  C. On Server1, run Enable-PSRemoting in Windows PowerShell.
  D. On Server2, run Enable-PSRemoting in Windows PowerShell.
  B. On Server1, add Server2 to Server Manager.

  ---

  References: https://docs.microsoft.com/en-us/windows-server/administration/server-manager/add-servers-to-server-manager

  http://www.tomsitpro.com/articles/configure-dns-windows-server-2012,2-793.html

• Question 358:

  Your network contains an Active Directory forest. The forest contains two domains named Domain1 and Domain2.

  Domain1 contains a file server named Server1. Server1 has a shared folder named Share1. Domain2 contains 50 users who require access to Share1. You need to create groups in each domain to meet the following requirements:

  - In Domain1, create a group named Group1. Group1 must be granted access to Share1.

  - In Domain2, create a group named Group2. Group2 must contain the user accounts of the 50 users.

  - Permission to Share1 must only be assigned directly to Group1.

  Which type of groups should you create and which group nesting strategy should you use? To answer, drag'n'drop the correct answers on the fields above.

  Hot Area:

  

  

  ---

  Any group, whether it is a security group or a distribution group, is characterized by a scope that identifies the extent to which the group is applied in the domain tree or forest. The boundary, or reach, of a group scope is also determined by the domain functional level setting of the domain in which it resides. There are three group scopes:

  universal, global, and domain local.

  Security groups in a nesting strategy with global scope can have only accounts as their members. And Security groups with domain local scope can have other groups with global scope and accounts as their members.

• Question 359:

  You have a server named Server2 that runs Windows Server 2012 R2. Server2 has the Hyper-V server role installed.

  The disks on Server2 are configured as shown in the exhibit. (Click the Exhibit button.)

  

  You create a virtual machine on Server2 named VM1.

  You need to ensure that you can configure a pass-through disk for VM1.

  What should you do?

  A. Convert Disk 1 to a basic disk.
  B. Take Disk 1 offline.
  C. Create a partition on Disk 1.
  D. Convert Disk 1 to a MBR disk.
  B. Take Disk 1 offline.

  ---

  Pass-through Disk Configuration Hyper-V allows virtual machines to access storage mapped directly to the Hyper-V server without requiring the volume be configured. The storage can either be a physical disk internal to the Hyper-V server or it can be a Storage Area Network (SAN) Logical Unit (LUN) mapped to the Hyper-V server. To ensure the Guest has exclusive access to the storage, it must be placed in an Offline state from the Hyper-V server perspective

• Question 360:

  Your network contains the following Active Directory forests: contoso.com and adatum.com. A two-way trust exists between the forests.

  Each forest contains multiple domains. The adatum.com domain contains a domain local security group named Group1. Group1 contains the users adatum\user1 and contoso\user1.

  You need to create a local group named Group1 on all member servers in the domain. You must ensure that Group1 is added only to member servers.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place: