Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 451:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have Windows Server 2012 R2 installed.

  You have just executed the Uninstall-WindowsFeature Server-Gui-Shell Contoso.com server, named ENSUREPASS-SR13.

  Which of the following is the reason for doing this?

  A. To only remove Windows Explorer from ENSUREPASS-SR13.
  B. To only remove the Windows Internet Explorer from ENSUREPASS-SR13.
  C. To only remove the components and files related to Windows Explorer from ENSUREPASSSR13.
  D. To remove Windows Explorer, Windows Internet Explorer, and all associated components and files from ENSUREPASS-SR13.
  D. To remove Windows Explorer, Windows Internet Explorer, and all associated components and files from ENSUREPASS-SR13.

  ---

  Minimal Server Interface

  If the server has a full installation of Windows Server, and I need to bring the server down to minimal server interface, I only need to remove the Server-GUI-Shell. The command is shown here. Get-WindowsFeature Server-Gui-Shell |

  Uninstall-WindowsFeature ?restart Minimal Server Interface is situated between the Server Core and Server with a GUI modes, you can either install features on Server Core or remove features from Server with a GUI to reach the Minimal

  Server Interface installation state.

• Question 452:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have Windows Server 2012 R2 installed.

  Contoso.com has a domain controller, named ENSUREPASS-DC01.

  You have been instructed to make sure that the Group Policy Administrative Templates are available centrally.

  Which of the following actions should you take?

  A. You should consider copying the policies folder to the PolicyDefinitions folder in the Contoso.com domain's SYSVOL folder.
  B. You should consider copying the PolicyDefinitions folder to the policies folder in the Contoso.com domain's SYSVOL folder.
  C. You should consider copying the PolicyDefinitions folder to the policies folder in the Contoso.com domain's systemroot folder.
  D. You should consider copying the PolicyDefinitions folder to the policies folder in the Contoso.com domain's logonserver folder.
  B. You should consider copying the PolicyDefinitions folder to the policies folder in the Contoso.com domain's SYSVOL folder.

  ---

  PolicyDefinitions folder within the SYSVOL folder hierarchy.

  By placing the ADMX files in this directory, they are replicated to every DC in the domain; by extension, the ADMX-aware Group Policy Management Console in Windows Vista, Windows 7, Windows Server 2008 and R2 can check this folder

  as an additional source of ADMX files, and will report them accordingly when setting your policies.

  By default, the folder is not created. Whether you are a single DC or several thousand, I would strongly recommend you create a Central Store and start using it for all your ADMX file storage. It really does work well.

  The Central Store

  To take advantage of the benefits of .admx files, you must create a Central Store in the SYSVOL folder on a domain controller. The Central Store is a file location that is checked by the Group Policy tools. The Group Policy tools use any

  .admx files that are in the Central Store. The files that are in the Central Store are later replicated to all domain controllers in the domain. To create a Central Store for .admx and .adml files, create a folder that is named PolicyDefinitions in the

  following location: \\FQDN\SYSVOL\FQDN\policies.

  Note: FQDN is a fully qualified domain name.

• Question 453:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.

  On a server named Server2, you perform a Server Core Installation of Windows Server 2012 R2. You join Server2 to the contoso.com domain.

  You need to ensure that you can manage Server2 by using the Computer Management console on Server1.

  What should you do on Server2?

  A. Install Windows Management Framework.
  B. Run sconfig.exe and configure Remote Server Administration Tools (RSAT).
  C. Install Remote Server Administration Tools (RSAT).
  D. Run sconfig.exe and configure remote management.
  D. Run sconfig.exe and configure remote management.

  ---

  In Windows Server 2012 R2, you can use the Server Configuration tool (Sconfig.cmd) to configure and manage several common aspects of Server Core installations. You must be a member of the Administrators group to use the tool. Sconfig.cmd is available in the Minimal Server Interface and in Server with a GUI mode.

  References: http://technet.microsoft.com/en-us/library/jj647766.aspx Training Guide: Installing and Configuring Windows Server 2012 R2, Chapter 2: Deploying servers, p. 80

• Question 454:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2.

  Server2 establishes an IPSec connection to Server1.

  You need to view which authentication method was used to establish the initial IPSec connection.

  What should you do?

  A. From Windows Firewall with Advanced Security, view the quick mode security association.
  B. From Event Viewer, search the Application Log for events that have an ID of 1704.
  C. From Event Viewer, search the Security Log for events that have an ID of 4672.
  D. From Windows Firewall with Advanced Security, view the main mode security association.
  D. From Windows Firewall with Advanced Security, view the main mode security association.

  ---

  Main mode negotiation establishes a secure channel between two computers by determining a set of cryptographic protection suites, exchanging keying material to establish a shared secret key, and authenticating computer and user

  identities. A security association (SA) is the information maintained about that secure channel on the local computer so that it can use the information for future network traffic to the remote computer. You can monitor main mode SAs for

  information like which peers are currently connected to this computer and which protection suite was used to form the SA.

  To get to this view

  In the Windows Firewall with Advanced Security MMC snap-in, expand Monitoring, expand Security Associations, and then click Main Mode. The following information is available in the table view of all main mode SAs. To see the information

  for a single main mode SA, double-click the SA in the list.

  Main mode SA information

  You can add, remove, reorder, and sort by these columns in the Results pane:

  Local Address: The local computer IP address.

  Remote Address: The remote computer or peer IP address.

  1st Authentication Method: The authentication method used to create the SA.

  1st Authentication Local ID: The authenticated identity of the local computer used in first authentication.

  1st Authentication Remote ID: The authenticated identity of the remote computer used in first authentication.

  2nd Authentication Method: The authentication method used in the SA.

  2nd Authentication Local ID: The authenticated identity of the local computer used in second authentication.

  2nd Authentication Remote ID: The authenticated identity of the remote computer used in second authentication.

  Encryption: The encryption method used by the SA to secure quick mode key exchanges.

  Integrity: The data integrity method used by the SA to secure quick mode key exchanges.

  Key Exchange: The Diffie-Hellman group used to create the main mode SA.

  Reference: http://technet.microsoft.com/en-us/library/dd448497(v=ws.10).aspx

• Question 455:

  Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named OU1 as shown in the OU1 exhibit. (Click the Exhibit button.)

  The membership of Group1 is shown in the Group1 exhibit. (Click the Exhibit button.)

  

  

  You configure GPO1 to prohibit access to Control Panel. GPO1 is linked to OU1 as shown in the GPO1 exhibit. (Click the Exhibit button.)

  

  Select Yes if the statement can be shown to be true based on the available information; otherwise select No. Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  Group Policy does NOT APPLY TO SECURITY GROUPS, only users and computers in an OU. Consequently, the only users in the OU are User2 and User4. Since the Security Filtering specifies that the policy will only apply to users/ computers in the OU who are members of Group1 or User3, User4 will not have the policy applied. Since User2 is, in fact, a member of Group1, the policy will be applied to user 2. Thus, the only user who will not be able to access the control panel is User2.

• Question 456:

  You have a server named Server1 that runs Windows Server 2012 R2.

  Your network has IPSec policies configured.

  You need to exempt ICMP and router discovery traffic from the IPSec rules in Windows Firewall with Advanced Security.

  Which cmdlet should you use?

  A. Remove-NetFirewallRule
  B. Disable-NetAdapterBinding
  C. Set-NetFirewallSetting
  D. Update-NetIPSecRule
  C. Set-NetFirewallSetting

  ---

  The Set-NetFirewallSetting cmdlet configures properties that apply to the firewall and IPsec settings, regardless of which network profile is currently in use. This cmdlet allows the administrator to specify global firewall behavior.

  Reference: Set-NetFirewallSetting https://technet.microsoft.com/en-us/library/jj554878(v=wps.630).aspx

• Question 457:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2 installed.

  You have received instructions to convert a basic disk to a GPT disk.

  Which of the following is TRUE with regards to GPT disks? (Choose all that apply.)

  A. To convert a basic disk to a GPT disk, the disk must not contain any partitions or volumes.
  B. You can convert a basic disk to a GPT disk, regardless of partitions or volumes.
  C. GPT is required for disks larger than 2 TB.
  D. GPT is required for disks smaller than 2 TB.
  E. The GPT partition style can be used on removable media.
  F. GPT disks make use of the standard BIOS partition table.
  A. To convert a basic disk to a GPT disk, the disk must not contain any partitions or volumes.
  C. GPT is required for disks larger than 2 TB.

  ---

  A. For a drive to be eligible for conversion to dynamic, all basic data partitions on the drive must be contiguous.

  C. GPT allows a much larger partition size greater than 2 terabytes (TB) D. 2 terabytes is the limit for MBR disks.

  E. Dynamic disks are not supported on portable computers, removable disks, detachable disks that use USB or IEEE 1394 interfaces. F. Windows only supports booting from a GPT disk on systems that contain Unified Extensible Firmware

  Interface (UEFI) boot firmware. Master boot record (MBR) disks use the standard BIOS partition table. GUID partition table (GPT) disks use unified extensible firmware interface (UEFI). One advantage of GPT disks is that you can have more

  than four partitions on each disk. GPT is also required for disks larger than 2 terabytes.

  Portable computers and removable media.

  Dynamic disks are not supported on portable computers, removable disks, detachable disks that use Universal Serial Bus (USB) or IEEE 1394 (also called FireWire) interfaces, or on disks connected to shared SCSI buses. If you are using a

  portable computer and right-click a disk in the graphical or list view in Disk Management, you will not see the option to convert the disk to dynamic. Dynamic disks are a separate form of volume management that allows volumes to have

  noncontiguous extents on one or more physical disks. Dynamic disks and volumes rely on the Logical Disk Manager (LDM) and Virtual Disk Service (VDS) and their associated features. These features enable you to perform tasks such as

  converting basic disks into dynamic disks, and creating fault-tolerant volumes. To encourage the use of dynamic disks, multi-partition volume support was removed from basic disks, and is now exclusively supported on dynamic disks. GPT

  disks can be converted to MBR disks only if all existing partitioning is first deleted, with associated loss of data.

  Q. What happens when a basic disk is converted to dynamic?

  A. For a drive to be eligible for conversion to dynamic, all basic data partitions on the drive must be contiguous.

  If other unrecognized partitions separate basic data partitions, the disk cannot be converted. This is one of the reasons that the MSR must be created before any basic data partitions. The first step in conversion is to separate a portion of the

  MSR to create the configuration database partition. All non-bootable basic partitions are then combined into a single data container partition. Boot partitions are retained as separate data container partitions. This is analogous to conversion of

  primary partitions.

  Windows XP and later versions of the Windows operating system differs from Windows 2000 in that basic and extended partitions are preferentially converted to a single 0x42 partition, rather than being retained as multiple distinct 0x42

  partitions as on Windows 2000.

• Question 458:

  Your network contains one Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 R2.

  You need to modify the membership of a group named Group1 to include two users named User1 and User2.

  What command should you run? To answer, select the appropriate options in the answer area

  Hot Area:

  

  

  ---

  https://technet.microsoft.com/en-gb/library/ee617210.aspx

• Question 459:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2 installed.

  Contoso.com has a server, named ENSUREPASS-SR13. ENSUREPASS-SR13 hosts a shared folder, named ENSUREPASSShare, which has been shared as ENSUREPASSShare$.

  Which of the following is TRUE with regards to sharing the folder in this manner?

  A. It allows all users to view ENSUREPASSShare when browsing the network.
  B. It prevents users from viewing ENSUREPASSShare when browsing the network.
  C. It only allows ENSUREPASS-SR13's users to view ENSUREPASSShare.
  D. It removes the permissions configured for ENSUREPASSShare.
  B. It prevents users from viewing ENSUREPASSShare when browsing the network.

• Question 460:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has following storage spaces:

  Data Users Backups Primordial

  You add an additional hard disk to Server1.

  You need to identify which storage space contains the new hard disk.

  Which storage space contains the new disk?

  A. Primordial
  B. Data
  C. Users
  D. Backups
  A. Primordial

  ---

  All storage that meets acceptable criteria for Storage Spaces will be placed in the Primordial Pool. This can be considered the default pool for devices from which any other pools will be created. Notice that there are no other virtual disks or pools at this point. The Primordial Pool will only consist of physical storage devices that do not belong to any other pools.