Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 501:

  Your network contains an Active Directory domain named contoso.com.

  You log on to a domain controller by using an account named Admin1. Admin1 is a member of the Domain Admins group.

  You view the properties of a group named Group1 as shown in the exhibit. (Click the Exhibit button.)

  

  Group1 is located in an organizational unit (OU) named OU1.

  You need to ensure that you can modify the Security settings of Group1 by using Active Directory Users and Computers.

  What should you do from Active Directory Users and Computers?

  A. From the View menu, select Users, Contacts, Groups, and Computers as containers.
  B. Right-click OU1 and select Delegate Control
  C. From the View menu, select Advanced Features
  D. Right-click contoso.com and select Delegate Control.
  C. From the View menu, select Advanced Features

  ---

  From ADUC select view toolbar then select advanced features. When you open up the ADUC in a default installation of Active Directory, you are only presented with the basic containers. These basic containers include the only organizational unit (OU), which is the Domain Controllers OU, as wellas the other containers such as Users and Computers. To see more in-depth containers, you need to configure the ADUC by going to the View option on the toolbar, then selecting Advanced Features. This will refresh the view within the ADUC and add some new containers. There are no hidden (or Advanced) OUs that will show up when you configure the ADUC in this way.

• Question 502:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You plan to use Windows PowerShell Desired State Configuration (DSC) to confirm that the Application Identity service is running on all file servers.

  You define the following configuration in the Windows PowerShell Integrated Scripting Environment (ISE):

  

  You need to use DSC to configure Server1 as defined in the configuration. What should you run first?

  A. Service1
  B. Configuration1
  C. Start DscConfiguration
  D. Test-DscConfigu ration
  B. Configuration1

• Question 503:

  Your network contains an Active Directory domain named contoso.com.

  You need to prevent users from installing a Windows Store app named App1.

  What should you create?

  A. An application control policy executable rule
  B. An application control policy packaged app rule
  C. A software restriction policy certificate rule
  D. An application control policy Windows Installer rule
  B. An application control policy packaged app rule

  ---

  Windows 8 is coming REALLY SOON and of course one of the big new things to computer with that is the new Packaged Apps that run in the start screen. However, these apps are very different and do not install like traditional apps to a path or have a true "executable" file to launch the program. Of course enterprises need a way to control these packaged apps and therefore Microsoft has added a new feature Packaged Apps option to the App1ocker feature.

  Packaged apps (also known as Windows 8 apps) are new to Windows Server 2012 R2 and Windows 8. They are based on the new app model that ensures that all the files within an app package share the same identity. Therefore, it is possible to control the entire Application using a single App1ocker rule as opposed to the non-packaged apps where each file within the app could have a unique identity. Windows does not support unsigned packaged apps which implies all packaged apps must be signed. App1ocker supports only publisher rules for Packaged apps. A publisher rule for a packaged app is based on the following information: Publisher of the package Package name Package version Therefore, an App1ocker rule for a Packaged app controls both the installation as well as the running of the app. Otherwise, the publisher rules for Packaged apps are no different than the rest of the rule collections; they support exceptions, can be increased or decreased in scope, and can be assigned to users and groups.

• Question 504:

  A company has a forest with 4 sites. Subnets are as follows:

  Main Office 172.16.1.0 Subnet: 255.255.255.0 Gateway 172.16.1.254

  

  Site1 192.168.12.0 Subnet: 255.255.255.0

  

  Site 2 192.168.13.0 Subnet: 255.255.255.0

  

  Site 3 192.168.14.0 Subnet: 255.255.255.0

  

  Site 4 192.168.15.0 Subnet: 255.255.255.0

  

  You add a new server to the Main Office and it needs to be able to communicate to all sites. Which route command would you run?

  A. route add -p 192.168.8.0 netmask 255.255.252.0 172.16.1.254
  B. route add -p 192.168.0.0 netmask 255.255.248.0 172.16.1.254
  C. route add -p 192.168.12.0 netmask 255.255.252.0 172.16.1.254
  D. route add -p 192.168.12.0 netmask 255.255.240.0 172.16.1.254
  C. route add -p 192.168.12.0 netmask 255.255.252.0 172.16.1.254

• Question 505:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named CONT1 and CONT2. Both servers run Windows Server 2012 R2.

  CONT1 has a shared printer named Printer1. CONT2 connects to Printer1 on CONT1.

  When you attempt to remove Printer1 from CONT2, you receive the error message shown in the exhibit. (Click the Exhibit button.)

  

  You successfully delete the other printers installed on CONT2.

  You need to identify what prevents you from deleting Printer1 on CONT2.

  What should you identify?

  A. Printer1 is deployed as part of a mandatory profile.
  B. Printer1 is deployed by using a Group Policy object (GPO).
  C. Your user account is not a member of the Print Operators group on CONT2.
  D. Your user account is not a member of the Print Operators group on CONT1.
  B. Printer1 is deployed by using a Group Policy object (GPO).

• Question 506:

  You have a server named Server1 that runs Windows Server 2012 R2. You need to create a new volume on Server1. The new volume must have the following configurations:

  -

  Be stored on a new virtual hard disk

  -

  Be assigned the drive letter G

  -Have the NTFS file system

  In which order should you run the Diskpart commands?

  To answer, move all the Diskpart commands from the list of commands to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Note: Example: createvdisk file="C:\vdisks\disk1.vhd" maximum=16000 attachvdisk create partition primary assignletter=g format References: http://technet.microsoft.com/en-us/library/gg252576.aspx http://technet.microsoft.com/en-us/library/hh831487.aspx https://support.ca.com/cadocs/0/CA%20ARCserve%20Replication%20and%20High%20Availability%20r16%205-ENU/Bookshelf_Files/HTML/VMS/index.htm?toc.htm?2069258.html

• Question 507:

  Your network contains an Active Directory domain named contoso.com. The DNS zone for contoso.com is Active-Directory integrated.

  The domain contains 500 client computers. There are an additional 20 computers in a workgroup.

  You discover that every client computer on the network can add its record to the contoso.com zone.

  You need to ensure that only the client computers in the Active Directory domain can register records in the contoso.com zone.

  What should you do?

  A. Sign the contoso.com zone by using DNSSEC.
  B. Configure the Dynamic updates settings of the contoso.com zone.
  C. Configure the Security settings of the contoso.com zone.
  D. Move the contoso.com zone to a domain controller that is configured as a DNS server.
  B. Configure the Dynamic updates settings of the contoso.com zone.

• Question 508:

  You work as a senior administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2 installed.

  You are running a training exercise for junior administrators. You are currently discussing what happens when you run the Remove-NetLbfoTeam Windows PowerShell cmdlet.

  Which of the following describes the results of running this cmdlet?

  A. It removes one or more network adapters from a specified NIC team.
  B. It removes a team interface from a NIC team.
  C. It removes a specified NIC team from the host.
  D. It removes a network adapter member from a switch team.
  C. It removes a specified NIC team from the host.

  ---

  Remove-NetLbfoTeam removes the specified NIC team from the host.

  The Remove-NetLbfoTeam cmdlet removes the specified NIC team from the host. This cmdlet disconnects all associated team members and providers from the team. You can specify the team to remove by using either a team object

  retrieved by Get-NetLbfoTeam, or by specifying a team name.

  You can use Remove-NetLbfoTeam to remove all NIC teams from the server.

  You need administrator privileges to use Remove-NetLbfoTeam.

• Question 509:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2.

  You plan to create a shared folder. The shared folder will have a quota limit.

  You discover that when you run the New Share Wizard, you cannot select the SMB Share ?Advanced option.

  You need to ensure that you can use SMB Share ?Advanced to create the new share.

  What should you do on Server1 before you run the New Share Wizard?

  A. Run the Set-SmbShare cmdlet.
  B. Install the File Server Resource Manager role service.
  C. Configure Dynamic Access Control and Apply a central access policy.
  D. Configure the Advanced system settings.
  E. Run the Set-SmbServerConfiguration cmdlet.
  F. Install the Share and Storage Management tool.
  G. Run the Unblock-SmbShareAccess cmdlet.
  B. Install the File Server Resource Manager role service.

  ---

  To share folders in Windows Server 2012, the File Server Role has to be installed first.

  References: https://techiemaster.wordpress.com/2016/06/15/how-to-configure-file-servershares-in-windows-2012-r2-step-by-step/

• Question 510:

  Your network contains an Active Directory domain named contoso.com. The domain contains a member server named HVServer1. HVServer1 runs Windows Server 2012 R2 and has the Hyper-V server role installed.

  HVServer1 hosts 10 generation 1 virtual machines. All of the virtual machines connect to a virtual switch named Switch1. Switch1 is configured as a private network. All of the virtual machines have the DHCP guard and the router guard

  settings enabled.

  You install the DHCP server role on a virtual machine named Server1. You authorize Server1 as a DHCP server in contoso.com. You create an IP scope.

  You discover that the virtual machines connected to Switch1 do not receive IP settings from Server1.

  You need to ensure that the virtual machines can use Server1 as a DHCP server.

  What should you do?

  A. Enable MAC address spoofing on Server1.
  B. Enable single-root I/O visualization (SR-IOV) on Server1.
  C. Disable the DHCP guard on Server1.
  D. Disable the DHCP guard on all of the virtual machines that are DHCP clients.
  C. Disable the DHCP guard on Server1.

  ---

  DHCP guard setting

  This setting stops the virtual machine from making DHCP offers over this network interface.

  To be clear ?this does not affect the ability to receive a DHCP offer (i.e. if you need to use DHCP to acquire an IP address that will work) it only blocks the ability for the virtual machine to act as a DHCP server.