Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 471:

  You have a Hyper-V host named Server1. Server1 hosts a virtual machine named VM1. You view the properties of VM1 as shown in the following exhibit. (Click the Exhibit button.)

  

  You need to configure bandwidth management for VM1. Which three actions should you perform in sequence? (To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order.)

  Select and Place:

  

  

  ---

  Incorrect answers:

  The legacy adapter doesn't support bandwidth management

  Resource Metering in Hyper-V. Resource Metering provides the ability to track and report the amount of data that is transferred per IP address or virtual machine — helping to ensure accurate showback and chargeback.

• Question 472:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have Windows Server 2012 installed.

  You have been instructed to modify the name of the local Administrator account on all Contoso.com workstations. You want to achieve this using as little administrative effort as possible.

  Which of the following actions should you take?

  A. You should consider configuring the Security Options settings via the Group Policy Management Console (GPMC).
  B. You should consider navigating to Local Users and Groups via Computer
  C. You should consider configuring the replication settings.
  D. You should consider navigating to Local Users and Groups via Computer Management on each workstation.
  A. You should consider configuring the Security Options settings via the Group Policy Management Console (GPMC).

  ---

  Rename administrator account policy setting determines whether a different account name is associated with the security identifier (SID) for the Administrator account. Because the Administrator account exists on all Windows server versions, renaming the account makes it slightly more difficult for attackers to guess this user name and password combination. By default, the built-in Administrator account cannot be locked out no matter how many times a malicious user might use a bad password. This makes the Administrator account a popular target for brute-force password-guessing attacks. The value of this countermeasure is lessened because this account has a well-known SID and there are non-Microsoft tools that allow you to initiate a brute-force attack over the network by specifying the SID rather than the account name. This means that even if you have renamed the Administrator account, a malicious user could start a brute-force attack by using the SID. Rename the Administrator account by specifying a value for the Accounts: Rename administrator account policy setting. Location: GPO_name\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

• Question 473:

  Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed.

  Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4.

  Server1 is configured as shown in the following table.

  

  You need to ensure that VM1 can use more CPU time than the other virtual machines when the CPUs on Server1 are under a heavy load. What should you configure?

  A. NUMA topology
  B. Resource control
  C. resource metering
  D. virtual Machine Chimney
  E. The VLAN ID
  F. Processor Compatibility
  G. The startup order
  H. Automatic Start Action
  I. Integration Services
  J. Port mirroring
  B. Resource control

  ---

  Resource controls provide you with several ways to control the way that Hyper-V allocates resources to virtual machine. Resource control in used in the event where you need to adjust the computing resources of a virtual machine, you can reconfigure the resources to meet the changing needs. You can also specify resource controls to automate how resources are allocated to virtual machines.

  References: http://technet.microsoft.com/en-us/library/cc766320(v=ws.10).aspx http://technet.microsoft.com/en-us/library/hh831410.aspx http://technet.microsoft.com/en-us/library/cc742470.aspx Exam Ref 70-410, Installing and Configuring Windows Server 2012 R2, Chapter 3: Configure Hyper-V, Objective 3.1: Create and Configure virtual machine settings, p.144 Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 7: Hyper-V Virtualization, Lesson 2: Deploying and configuring virtual machines, p.335

• Question 474:

  Your network contains an Active Directory domain named contoso.com. The network contains 500 client computers that run Windows 8. All of the client computers connect to the Internet by using a web proxy.

  You deploy a server named Server1 that runs Windows Server 2012 R2. Server1 has the DNS Server server role installed.

  You configure all of the client computers to use Server1 as their primary DNS server. You need to prevent Server1 from attempting to resolve Internet host names for the client computers.

  What should you do on Server1?

  A. Create a primary zone named "GlobalNames".
  B. Create a primary zone named "root".
  C. Remove all root hints.
  D. Configure the Security settings of the contoso.com zone.
  C. Remove all root hints.

• Question 475:

  Your network contains an Active Directory domain named contoso.com.

  All client computers run Windows 8.

  You deploy a server named Server1 that runs Windows Server 2012 R2.

  You install a new client-server application named App1 on Server1 and on the client computers. The client computers must use TCP port 6444 to connect to App1 on Server1.Server1 publishes the information of App1 to an intranet server

  named Server2 by using TCP port 3080.

  You need to ensure that all of the client computers can connect to App1. The solution must ensure that the application can connect to Server2.

  Which Windows Firewall rule should you create on Server1?

  A. an inbound rule to allow a connection to TCP port 3080
  B. an outbound rule to allow a connection to TCP port 3080
  C. an outbound rule to allow a connection to TCP port 6444
  D. an inbound rule to allow a connection to TCP port 6444
  D. an inbound rule to allow a connection to TCP port 6444

  ---

  Server1 gets request from Client PC's it needs an inbound rule for 6444.

  By default, Windows Firewall with Advanced Security blocks all unsolicited inbound network traffic, and allows all outbound network traffic. For unsolicited inbound network traffic to reach your computer, you must create an allow rule to permit that type of network traffic. If a network program cannot get access, verify that in the Windows Firewall with Advanced Security snap-in there is an active allow rule for the current profile. To verify that there is an active allow rule, double-click Monitoring and then click Firewall.

  If there is no active allow rule for the program, go to the Inbound Rules node and create a new rule for that program. Create either a program rule, or a service rule, or search for a group that applies to the feature and make sure all the rules in the group are enabled. To permit the traffic, you must create a rule for the program that needs to listen for that traffic. If you know the TCP or UDP port numbers required by the program, you can additionally restrict the rule to only those ports, reducing the vulnerability of opening up all ports for the program.

• Question 476:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You promote Server1 to a domain controller.

  You need to view the service location (SRV) records that Server1 registers in DNS.

  What should you do on Server1?

  A. Open the Srv.sys file.
  B. Open the Netlogon.dns file.
  C. Run ipconfig /displaydns.
  D. Run Get-DnsServerDiagnostics.
  B. Open the Netlogon.dns file.

  ---

  Netlogon service creates a log file that contains all the locator resource records stored in netlogon.

  Incorrect Answers:

  A: The Srv.sys file is the Timestamp server driver

  C: ipconfig /displaydns is used to display current DNS resolver cache content

  D: The Get-DnsServerDiagnostics cmdlet displays DNS event logging details

  

• Question 477:

  You perform a Server Core Installation of Windows Server 2012 R2 on a server named Server1. You need to add a graphical user interface (GUI) to Server1.

  Which tool should you use?

  A. the dism.exe command
  B. the Install-WindowsFeature cmdlet
  C. the imagex.exe command
  D. the setup.exe command
  E. the ocsetup.exe command
  F. the Add-WindowsPackage cmdlet
  G. the Install-Module cmdlet
  H. the Install-RoleService cmdlet
  A. the dism.exe command
  B. the Install-WindowsFeature cmdlet

  ---

  Install-WindowsFeature -Installs one or more Windows Server roles, role services, or features on either the local or a specified remote server that is running Windows Server 2012 R2. This cmdlet is equivalent to and replaces Add-WindowsFeature, the cmdlet that was used to install roles, role services, and features in Windows Server 2008 R2. dism /online /get-features PS C:\> Install-WindowsFeature -Name Web-Server ?IncludeAllSubFeature -ComputerName Server1 璚hatIf

  References: https://docs.microsoft.com/en-us/powershell/module/servermanager/install-windowsfeature?view=winserver2012r2-ps https://blogs.technet.microsoft.com/john_taylor/2013/01/08/converting-from-server-2012-core-install-to-full-gui/

• Question 478:

  You have a Group Policy object (GPO) named Server Audit Policy. The settings of the GPO are shown in the Settings exhibit. (Click the Exhibit button.)

  

  The scope of the GPO is shown in the Scope exhibit. (Click the Exhibit button.)

  

  The domain contains a group named Group1. The membership of Group1 is shown in the Group1 exhibit. (Click the Exhibit button.)

  Select Yes if the statement can be shown to be true based on the available information; otherwise select No. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 479:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 contains a single virtual machine named VM1.

  You need to ensure that a user named User1 can manage the virtual machine settings of VM1. The solution must minimize the number of permissions assigned to User1.

  To which group should you add User1?

  A. Server Operators
  B. Hyper-V Administrators
  C. Administrators
  D. Power Users
  B. Hyper-V Administrators

  ---

  References: https://blogs.msdn.microsoft.com/virtual_pc_guy/2008/01/17/allowing-non-administrators-to-control-hyper-v/

• Question 480:

  Which of the following group scope modifications are never permitted? (Choose all answers that are correct.)

  A. Global to universal
  B. Global to domain local
  C. Universal to global
  D. Domain local to universal
  B. Global to domain local

  ---

  Global to domain local group conversions are never permitted.

  Incorrect Answers:

  A: Global to universal group conversions are sometimes permitted.

  C: Universal to global group conversions are sometimes permitted.

  D: Domain local to universal group conversions are sometimes permitted.