Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 361:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed.

  On Server1, an administrator creates a virtual machine named VM1.

  A user named User1 is the member of the local Administrators group on Server1.

  User1 attempts to modify the settings of VM1 as shown in the following exhibit. (Click the Exhibit button.)

  

  You need to ensure that User1 can modify the settings of VM1 by running the Set-Vm cmdlet. What should you instruct User1 to do?

  A. Import the Hyper-V module.
  B. Install the Integration Services on VM1.
  C. Run Windows PowerShell with elevated privileges.
  D. Modify the membership of the local Hyper-V Administrators group.
  C. Run Windows PowerShell with elevated privileges.

  ---

  You can only use the PowerShell snap-in to modify the VM settings with the vm cmdlets when you are an Administrator. Thus best practices dictate that User1 run the PowerShell with elevated privileges.

• Question 362:

  You have a Hyper-V host named Server1. A technician creates a virtual machine named VM1 on Server1 by using the New Virtual Machine Wizard. You start VM1 and you discover that there is no option to start by using PXE. You need to ensure that you can start VM1 by using PXE. Which three actions should you perform in sequence? (To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

  ---

  Note:

  Step 1: The VM need to be shutdown first.

  Step 2:

  You need to create a virtual switch. This is needed for the Virtual Machine to be able to communicate with the network. If you already have created a virtual machine for your network, you can skip this step. Start by right-clicking the Hyper-V

  host in Hyper-V Manager and selecting “Virtual Switch Manager”.

  Create a new Virtual Switch. Select “External”, which is similar to “Bridged” if you’re used to other virtualization software.

  Give the new Virtual Switch a name.

  By default, there is only a “Standard Network Adapter” installed on the Virtual Machine, but for PXE functionality you will need to add a “Legacy Network Adapter”.

  Go to the “Legacy Network Adapter” that you just added and specify that it should use the Virtual Switch that you just created.

  Step 3: you should change the BIOS boot priority to make sure that the Virtual Machine always tries to boot first using the “Legacy Network Adapter”. Just select the “Legacy Network Adapter” and move it to the top using the buttons.

  Step 4: Start your Virtual Machine and now PXE boot should work.

  Reference: Guide: How to get PXE boot to work in Hyper-V

• Question 363:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have Windows Server 2012 R2 installed.

  When you recently added new workstations to the Contoso.com manually, you found that that the computer accounts were created in the default container.

  You want to make sure that the default container for newly created computers is redirected to a specified, target organizational unit (OU).

  Which of the following actions should you take?

  A. You should consider making use of the replace.exe command-line tool.
  B. You should consider making use of the redircmp.exe command-line tool.
  C. You should consider making use of the redirusr.exe command-line tool.
  D. You should consider making use of the rexec.exe command-line tool.
  B. You should consider making use of the redircmp.exe command-line tool.

  ---

  redircmp.exe redirects the default container for newly created computers to a specified, target organizational unit (OU) so that newly created computer objects are created in the specific target OU instead of in CN=Computers.

  

• Question 364:

  Your network contains an Active Directory domain named contoso.com.

  All client devices run Windows 8.1. You deploy a server named Server1 that runs Windows Server 2012 R2.

  You install a new client-server application named App1 on Server1 and on the client devices.

  The client devices must use TCP port 6444 to connect to App1. Server1 must publish information from App1 to an intranet server named Server2 by using TCP port 3080.

  You need to ensure that all of the client devices can connect to App1.

  On Server1, which Windows Firewall rule should you create?

  A. an outbound rule to allow a connection to TCP port 6444
  B. an outbound rule to allow a connection to TCP port 3080
  C. an inbound rule to allow a connection to TCP port 3080
  D. an inbound rule to allow a connection to TCP port 6444
  D. an inbound rule to allow a connection to TCP port 6444

  ---

  References: https://technet.microsoft.com/en-us/library/ee806447(v=ocs.14).aspx

• Question 365:

  Your network contains two Active Directory forests named contoso.com and adatum.com. All servers run Windows Server 2012 R2. A one-way external trust exists between contoso.com and adatum.com.

  Adatum.com contains a universal group named Group1. You need to prevent Group1 from being used to provide access to the resources in contoso.com.

  What should you do?

  A. Change the scope of Group1 to domain local.
  B. Modify the Allowed to Authenticate permissions in adatum.com.
  C. Enable SID quarantine on the trust between contoso.com and adatum.com.
  D. Modify the Allowed to Authenticate permissions in contoso.com.
  D. Modify the Allowed to Authenticate permissions in contoso.com.

  ---

  *

  Accounts that require access to the customer Active Directory will be granted a special right called Allowed to Authenticate. This right is then applied to computer objects (Active Directory domain controllers and AD RMS servers) within the customer Active Directory to which the account needs access.

  *

  For users in a trusted Windows Server 2008 or Windows Server 2003 domain or forest to be able to access resources in a trusting Windows Server 2008 or Windows Server 2003 domain or forest where the trust authentication setting has been set to selective authentication, each user must be explicitly granted the Allowed to Authenticate permission on the security descriptor of the computer objects (resource computers) that reside in the trusting domain or forest.

• Question 366:

  You only want to share a printer with Group1, administrators, central owner and operators (pick 2 answers).

  A. Add permissions to Group1
  B. Remove permissions from administrators
  C. Add permissions to operators
  D. Add permissions to Central Owner
  E. Remove permissions from everyone.
  A. Add permissions to Group1
  D. Add permissions to Central Owner

• Question 367:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have Windows Server 2012 installed.

  Contoso.com has a server, named ENSUREPASS-SR07, which has four network adapters. Contoso.com has two SR07's network adapters are connected to the one LAN, local area networks (LANs). Two of ENSUREPASS ?while the other

  two are connected to the other LAN.

  You are required to configure one of the network adapter pairs into a network adapter team.

  Which of the following actions should you take?

  A. You should consider accessing the Group Policy Management Console (GPMC) on ENSUREPASS-SR07.
  B. You should consider accessing the TS Manager console on ENSUREPASS-SR07.
  C. You should consider accessing the Server Manager console on ENSUREPASS-SR07.
  D. You should consider accessing the Remote Desktop Gateway Manager console on ENSUREPASS-SR07.
  C. You should consider accessing the Server Manager console on ENSUREPASS-SR07.

• Question 368:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You need to remove Windows Explorer, Windows Internet Explorer, and all related components and files from Server1.

  What should you run on Server1?

  A. Uninstall-WindowsFeature Server-Gui-Shell -Remove
  B. msiexec.exe /uninstall iexplore.exe /x
  C. msiexec.exe /uninstall explorer.exe /x
  D. Uninstall-WindowsFeature Desktop-Experience -Remove
  A. Uninstall-WindowsFeature Server-Gui-Shell -Remove

  ---

  In Windows Server 2012 R2, you can remove the Server Graphical Shell, resulting in the "Minimal Server Interface".

  This is similar to a Server with a GUI installation, but InternetExplorer 10, Windows Explorer, the desktop, and the Start screen are not installed.

  Microsoft Management Console (MMC), Server Manager, and a subset of Control Panel are still present.

  If the server has a full installation of Windows Server, and I need to bring the server down to minimal server interface, I only need to remove the Server-GUI-Shell.

• Question 369:

  Your network contains a domain controller that is configured as a DNS server. The server hosts an Active Directory-integrated zone for the domain.

  You need to reduce how long it takes until stale records are deleted from the zone. What should you do?

  A. From the configuration directory partition of the forest, modify the tombstone lifetime.
  B. From the configuration directory partition of the forest, modify the garbage collection interval.
  C. From the aging properties of the zone, modify the no-refresh interval and the refresh interval.
  D. From the start of authority (SOA) record of the zone, modify the refresh interval and the expire interval.
  C. From the aging properties of the zone, modify the no-refresh interval and the refresh interval.

  ---

  Scavenging automates the deletion of old records. When scavenging is enabled, then you should also change the no-refresh and refresh intervals of the aging properties of the zone else it may take too long for stale records to be deleted and the size of the DNS database can become large and have an adverse effect on performance.

• Question 370:

  You have a server named Server1 that runs Windows Server 2012 R2.

  Server1 contains a folder named Folder1. Folder1 is shared as Share1. Share1 contains the documents of multiple users.

  Several users report that they get an Access Denied error message when they try open the document of another user. You need to ensure that the users can see only the files that they can open in Share1.

  What should you use?

  A. the Server Manager console
  B. the Shared Folders console
  C. the Set-SmbServerConfiguration cmdlet
  D. the File Explorer application
  A. the Server Manager console

  ---

  Reference: https://jocha.se/blog/tech/enable-access-based-enumeration-in-windows-server-2012