Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 381:

  You have a server named Server1 that runs Windows Server 2012 R2. You need to create a script that will create and mount a virtual hard disk. Which tool should you use?

  A. diskpart.exe
  B. vdsldr.exe
  C. fsutil.exe
  D. vds.exe
  A. diskpart.exe

• Question 382:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You plan to enable Hyper-V Network Virtualization on Server1.

  You need to install the Windows Network Visualization Filter Driver on Server1.

  Which Windows PowerShell cmdlet should you run?

  A. Set-NetVirtualizationGlobal
  B. Enable-NetAdapterBinding
  C. Add - WindowsFeature
  D. Set-NetAdapterVmq
  B. Enable-NetAdapterBinding

  ---

  Hyper-V Network Virtrtualization runs multiple virtual networks on a physical network. And each virtual network operates as if it is running as a physical network. The Set-NetAdaptercmdlet sets the basic properties of a network adapter such as virtual LAN (VLAN) identifier (ID) and MAC address. Thus if you add the binding parameter to the command then you will be able to install the Windows Network Virtualization Filter Driver. Step one: Enable Windows Network Virtualization (WNV). This is a binding that is applied to the NIC that you External Virtual Switch is bound to. This can be a physical NIC, it can be an LBFO NIC team. Either way, it is the network adapter that your External Virtual Switch uses to exit the server. This also means that if you have multiple virtual networks or multiple interfaces that you can pick and choose and it is not some global setting. If you have one External Virtual Switch this is fairly easy: $vSwitch = Get-VMSwitch -SwitchType External # Check if Network Virtualization is bound # This could be done by checking for the binding and seeing if it is enabled ForEach-Object -InputObject $vSwitch { if ((Get-NetAdapterBinding -ComponentID "ms_netwnv" -InterfaceDescription $_.NetAdapterInterfaceDescription).Enabled -eq $false){ # Lets enable it Enable-NetAdapterBinding -InterfaceDescription $_.NetAdapterInterfaceDescription -ComponentID "ms_netwnv" } }

• Question 383:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You need to configure User Account Control (UAC) in Server1 to prompt administrators for credentials. The built-in Administrator account must be prompted only for consent.

  Why should you configure?

  A. Advanced system settings in System properties
  B. User Account Control Settings in Control panel
  C. Security Options in the local Group Policy
  D. User Rights Assignment in the local Group Policy
  C. Security Options in the local Group Policy

• Question 384:

  You have a domain controller named Server1 that runs Windows Server 2012 R2 and has the DNS Server server role installed. Server1 hosts a DNS zone named contoso.com and a GlobalNames zone.

  You discover that the root hints were removed from Server1.

  You need to view the default root hints of Server1.

  What should you do?

  A. From Event Viewer, open the DNS Manager log.
  B. From Notepad, open the Cache.dns file.
  C. From Windows Powershell, run Get-DNSServerDiagnostics.
  D. From nslookup, run root server1.contoso.com
  B. From Notepad, open the Cache.dns file.

  ---

  DNS Server service implements root hints using a file, Cache.dns, stored in the systemroot\System32\Dnsfolder on the server Incorrect Answers:

  A: Allows you to troubleshoot DNS issues

  C: Gets DNS event logging details

  D: nslookup is used to query the DNS server References: https://www.microsoftpressstore.com/articles/article.aspx?p=2756482

• Question 385:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com.

  Contoso.com has a server, named ENSUREPASS-SR15, which has Windows Server 2012 R2 installed. Contoso.com also has a server, named ENSUREPASS-SR16, which has Windows Server 2008 R2 SP1 installed.

  You have been instructed to make sure that ENSUREPASS-SR16 is able to run Windows PowerShell 3.0.

  Which of the following actions should you take? (Choose two.)

  A. You should consider making sure that ENSUREPASS-SR16 has a full installation of Microsoft .NET Framework 4 installed.
  B. You should consider making sure that ENSUREPASS-SR16 has a full installation of Microsoft .NET Framework 2 installed.
  C. You should consider making sure that ENSUREPASS-SR16 has WS-Management 3.0 installed.
  D. You should consider making sure that ENSUREPASS-SR16 is upgraded to Windows Server 2012 R2.
  A. You should consider making sure that ENSUREPASS-SR16 has a full installation of Microsoft .NET Framework 4 installed.
  C. You should consider making sure that ENSUREPASS-SR16 has WS-Management 3.0 installed.

  ---

  WS-Management 3.0 ?Windows Management Framework 3.0 Includes Windows PowerShell 3.0, WMI, WinRM, Management OData IIS Extension, and Server Manager CIM Provider Windows Management Framework 3.0 requires Microsoft .NET Framework 4.0.

• Question 386:

  Your network contains an Active Directory domain named contoso.com.

  An organizational unit (OU) named OU1 contains the computer accounts for laptops and desktop computers.

  A Group Policy object (GPO) named GP1 is linked to OU1.

  You need to ensure that the configuration settings in GP1 are applied only to a user named User1.

  What should you do?

  A. Modify the security settings of OU1.
  B. Modify the GPO Status of GP1.
  C. Modify the security settings of GP1.
  D. Configure the WMI Filter of GP1.
  C. Modify the security settings of GP1.

  ---

  References: Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 10: Implementing Group Policy, p. 470, 482 http://technet.microsoft.com/en-us/library/jj134176 WMI filtering using GPMC

• Question 387:

  Your network contains one Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.

  You have a server named Server1 that has the Work Folders role services installed.

  Server1 hosts 20 Work Folders shares.

  Your company's new security policy states that all corporate files stored on client computers must be encrypted.

  You need to ensure that the corporate files stored on the client computers meet the requirement of the security policy.

  What should you do from Server1?

  A. Run the Enable-BitlockerAutoUnlock cmdlet.
  B. Install the Enhanced Storage feature.
  C. Run the Set-SyncServerSetting cmdlet.
  D. Run the Set-SyncShare cmdlet.
  E. Run the Enable-SyncShare cmdlet.
  D. Run the Set-SyncShare cmdlet.

  ---

  References: https://technet.microsoft.com/library/dn296649(v=wps.630).aspx

• Question 388:

  Your network contains an Active Directory domain named adatum.com. The network contains a member server that runs Windows Server 2012 R2.

  You log on to the member server by using the built-in domain Administrator account.

  When you run the Active Directory Administrative Center and attempt to move an organizational unit (OU) named OU-01, you receive an Access Denied message.

  The permissions for OU-01 are shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that you can move OU-01. What should you do?

  A. Take ownership of OU-01.
  B. Modify the Protect object from accidental deletion setting of OU-01.
  C. Run the Active Directory Administrative Center by using an elevated command prompt.
  D. Add the Administrator account to the Managed By property of OU-01.
  B. Modify the Protect object from accidental deletion setting of OU-01.

  ---

  Each new Organizational Unit (OU) that you create within Active Directory has the Protect object from accidental deletion setting enabled by default. This means that when you move the OU to Active Directory, you will receive an error like Windows cannot move object because: Access is denied, even if you have full AD administration rights.

  References: https://www.dtonias.com/access-denied-delete-move-ou-active-directory/

• Question 389:

  Your network contains an Active Directory forest. The forest functional level is Windows Server 2012 R2. The forest contains a single domain. The domain contains a member server named Server1. Server1 runs windows Server 2012 R2.

  You purchase a network scanner named Scanner1 that supports Web Services on Devices (WSD).

  You need to share the network scanner on Server1.

  Which server role should you install on Server1?

  A. Web Server (IIS)
  B. Fax Server
  C. Print and Document Services
  D. File and Storage Services
  C. Print and Document Services

  ---

  The Print and Document Services role allows for the configuration to share printers, scanners and fax devices.

  References:

  Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2, Chapter 1: Installing and Configuring servers, Objective 1.2: Configure servers, p. 8 http://technet.microsoft.com/en-us/library/hh831468.aspx

• Question 390:

  Your network contains an Active Directory forest that contains two domains. The forest contains five domain controllers. The domain controllers are configured as shown in the following table.

  

  You need to configure DC5 as a global catalog server. Which tool should you use?

  A. Active Directory Domains and Trusts
  B. Active Directory Users and Computers
  C. Active Directory Administrative Center
  D. Active Directory Sites and Services
  D. Active Directory Sites and Services

  ---

  If you have more than one domain in your forest and you have a significant user population in a site, you can optimize the speed and efficiency of domain logons and directory searches by adding a global catalog server to the site. If you have a single-domain forest, global catalog servers are not required for logons, but directory searches are directed to the global catalog. In this case, you can enable the global catalog on all domain controllers for faster directory searches. You can use the same user interface (UI) in the Active Directory Sites and Services snap-in to add or remove the global catalog. Enabling the global catalog can cause additional replication traffic. However, global catalog removal occurs gradually in the background and does not affect replication or performance. Membership in the Enterprise Admins group in the forest or the Domain Admins group in the forest root domain, or equivalent, is the minimum required to complete this procedure.

  To add or remove the global catalog Open Active Directory Sites and Services.

  To open Active Directory Sites and Services, click Start, click Administrative Tools, and then click Active Directory Sites and Services. To open Active Directory Sites and Services in Windows Server 2012, click Start , type dssite.msc. In the

  console tree, click the server object to which you want to add the global catalog or from which you want to remove the global catalog.

  Where?

  Active Directory Sites and Services\Sites\SiteName\Servers In the details pane, right-click NTDS Settings of the selected server object, and then click Properties. Select the Global Catalog check box to add the global catalog, or clear the

  check box to remove the global catalog.

  Global catalog servers and sites.

  To optimize network performance in a multiple-site environment, consider adding global catalog servers in sites according to the needs in the sites for fast search responses and domain logons. It is recommended to make all domain

  controllers be global catalog severs if possible. In a single-site, multiple-domain environment, a single global catalog server is usually sufficient to cover common Active Directory queries and logons.