Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 441:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain have Windows Server 2012 R2 installed, while domain controllers have

  Windows Server 2008 R2 installed.

  You are then tasked with deploying a new Windows Server 2012 R2 domain controller. You are preparing to install the DNS Server role, and enable the global catalog server option.

  Which of the following actions should you take?

  A. You should consider making use of Server Manager.
  B. You should consider making use of the Active Directory Installation Wizard.
  C. You should consider making use of the DHCP Installation Wizard
  D. You should consider making use of TS Manager
  A. You should consider making use of Server Manager.

• Question 442:

  You have a Hyper-V host named Server1 that runs Windows Server 2012 R2. Server1 hosts 40 virtual machines that run Windows Server 2008 R2. The virtual machines connect to a private virtual switch.

  You have a file that you want to copy to all of the virtual machines.

  You need to identify to which servers you can copy files by using the Copy-VmFile cmdlet.

  What command should you run?

  To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

• Question 443:

  You have a server named Server1 that runs Windows Server 2012 R2 and has the DNS Server server role installed.

  You need to view the DNS server cache from DNS Manager.

  What should you do first?

  A. From the View menu, click Advanced.
  B. From the View menu, click Filter...
  C. From the Action menu, click Configure a DNS Server...
  D. From the Action menu, click Properties.
  A. From the View menu, click Advanced.

• Question 444:

  Your network contains an Active Directory domain. The domain contains three domain controllers named Server1, Server2, and Server3. All three domain controllers have the DNS Server role installed.

  You create an Active-Directory-integrated zone named Zone1.com.

  You need to configure Zone1.com to replicate only between Server1 and Server2.

  What should you do?

  A. Modify the Security settings of Zone1.com and specify Server1 and Server2.
  B. Modify the Zone Transfers settings of Zone1.com and specify Server1 and Server2.
  C. Create an Active Directory application partition and store Zone1.com in the partition.
  D. Create a conditional forwarder for Zone1.com and specify Server1 and Server2 as the master servers.
  D. Create a conditional forwarder for Zone1.com and specify Server1 and Server2 as the master servers.

  ---

  References: https://www.microsoftpressstore.com/articles/article.aspx?p=2756482andseqNum=2

• Question 445:

  Your network contains an Active Directory domain named contoso.com.

  You create a software restriction policy to allow an application named App1 by using a certificate rule.

  You need to ensure that when users attempt to execute App1, the certificate for App1 is verified against a certificate revocation list (CRL).

  What should you do?

  A. Modify the rule for App1.
  B. Modify the Trusted Publishers Properties.
  C. Create a new certificate rule for App1.
  D. Modify the Enforcement Properties.
  B. Modify the Trusted Publishers Properties.

• Question 446:

  Your network contains one Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.

  You have a server named Server1 that has the Work Folders role services installed.

  Server1 hosts 20 Work Folders shares.

  Your company's new security policy states that all corporate files stored on client computers must be encrypted.

  You need to ensure that the corporate files stored on the client computers meet the requirement of the security policy.

  What should you do from Server1?

  A. Modify the local security policy.
  B. Run the Enable-SyncShare cmdlet.
  C. Modify the properties of all the Work Folders shares.
  D. Run the Set-SyncServerSetting cmdlet.
  C. Modify the properties of all the Work Folders shares.

  ---

  References: https://www.itprotoday.com/windows-8/windows-server-2012-r2-work-folders

• Question 447:

  Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012 R2.

  The domain contains a user named User1 and a global security group named Group1.

  You need to ensure that User1 can manage the group membership of Group1. The solution must minimize the number of permissions assigned to User1.

  Which cmdlet should you run?

  A. Add-AdPrincipalGroupMembership
  B. Install-AddsDomainController
  C. Install-WindowsFeature
  D. Install-AddsDomain
  E. Rename-AdObject
  F. Set-AdAccountControl
  G. Set-AdGroup
  H. Set-User
  G. Set-AdGroup

  ---

  The Set-ADGroup cmdlet modifies the properties of an Active Directory group. You can modify commonly used property values by using the cmdlet parameters. For example, the 璏anagedBy parameter allows you to specify a user or group of users who can manage the specified AD group.

• Question 448:

  Your network contains an Active Directory domain named contoso.com. The domain contains hundreds of groups, many of which are nested in other groups.

  The domain contains a user account named user1. User1 is a direct member of 15 groups.

  You need to identify of which Active Directory groups User1 is a member, including the nested groups. The solution must minimize administrative effort.

  Which tool should you use?

  A. Active Directory Users and Computers
  B. ADSI Edit
  C. Get-ADUser
  D. Dsget
  D. Dsget

  ---

  Reference: http://technet.microsoft.com/en-us/library/cc732535.aspx

• Question 449:

  Your network contains an Active Directory domain named contoso.com.

  You create a software restriction policy to allow an application named App1 by using a certificate rule.

  You need to prevent the software restriction policy from applying to users that are members of the local Administrators group.

  What should you do?

  A. Modify the rule for App1
  B. Modify the Enforcement Properties
  C. Modify the Security Levels.
  D. Modify the Trusted Publishers Properties
  B. Modify the Enforcement Properties

• Question 450:

  Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012 R2.

  The domain contains a user named User1 and a global security group named Group1.

  You need to prevent User1 from changing his password. The solution must minimize administrative effort.

  Which cmdlet should you run?

  A. Add-AdPrincipalGroupMembership
  B. Install-AddsDomainController
  C. Install-WindowsFeature
  D. Install-AddsDomain
  E. Rename-AdObject
  F. Set-AdAccountControl
  G. Set-AdGroup
  H. Set-User
  F. Set-AdAccountControl

  ---

  The Set-ADAccountControl cmdlet modifies the user account control (UAC) values for an Active Directory user or computer account. UAC values are represented by cmdlet parameters.

  CannotChangePassword

  Modifies the ability of an account to change its password. To disallow password change by the account set this to $true. This parameter changes the Boolean value of the CannotChangePassword property of an account.

  The following example shows how to specify the PasswordCannotChange parameter.

  -CannotChangePassword $false

  References:

  http://technet.microsoft.com/en-us/library/ee617249.aspx

  http://technet.microsoft.com/en-us/library/hh974723.aspx

  http://technet.microsoft.com/en-us/library/hh974722.aspx