Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 511:

  You have a Hyper-V host named Server1 that runs Windows Server 2012 R2.

  Server1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2.

  VM1 has several snapshots.

  You need to modify the snapshot file location of VM1.

  What should you do?

  A. Delete the existing snapshots, and then modify the settings of VM1.
  B. Right-click VM1, and then click Move.
  C. Right-click VM1, and then click Export.
  D. PauseVM1, and then modify the settings of VM1.
  A. Delete the existing snapshots, and then modify the settings of VM1.

  ---

  You will need to navigate to the Hyper-V Management snap-in (C:\ProgramData\Microsoft\Windows\Hyper-V) and from there access the Snapshot file Location tab where you can change the settings for the VM1 snapshot file location.

  However, since there are already several snapshots in existence, you will need to delete them first because you will not be able to change the location of the snapshot file while there is an existing snapshot.

  You need to modify the snapshot file location of VM1.

• Question 512:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have Windows Server 2012 R2 installed.

  Contoso.com has a server, named ENSUREPASS-SR15, which is configured as a file server.

  You have received instructions to make sure that a user, named Mia Hamm, has the ability to generate a complete backup of ENSUREPASS-SR15 via Windows Server Backup.

  Which of the following actions should you take?

  A. You should consider making use of Computer Management to configure the local groups.
  B. You should consider making use of Computer Management to configure the domain local groups.
  C. You should consider making use of Computer Management to configure the global groups.
  D. You should consider making use of Computer Management to configure the administrator groups.
  D. You should consider making use of Computer Management to configure the administrator groups.

  ---

  To perform backups or recoveries by using Windows Server Backup, you must be a member of the Administrators or Backup Operators groups.

  You can only use Backup locally; you cannot backup a remote computer.

  You can only back up and restore System State data on a local computer. You cannot back up and restore System State data on a remote computer even if you are an administrator on the remote computer.

• Question 513:

  You plan to upgrade all servers to Windows Server 2012 R2.

  You need to identify to which edition or editions of Windows Server 2012 R2 each operating system can upgrade directly.

  Which edition or editions should you identify for each operating system? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn303416(v%3dws.11)

• Question 514:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. A user named User1 attempts to log on to DC1, but receives the error message shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that User1 can log on to DC1. What should you do?

  A. Add User1 to the Remote Management Users group.
  B. Grant User1 the Allow log on locally user right.
  C. Modify the Logon Workstations setting of the User1 account.
  D. Modify the Account is sensitive and cannot be delegated setting of the User1 account.
  B. Grant User1 the Allow log on locally user right.

  ---

  Domain controllers, by default, restrict the types of user accounts that have the ability to log on locally.

  References:

  Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2, Chapter 6: Create and Manage Group Policy, Objective 6.2: Configure Security Policies, p. 321 Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2,

  Chapter 2: Configure server roles and features, Objective 2.3: Configure servers for remote management, p. 114

  http://technet.microsoft.com/en-us/library/ee957044(v=ws.10).aspx

• Question 515:

  Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 and Server2 are part of a workgroup.

  On Server1 and Server2, you create a local user account named Admin1.You add the account to the local Administrators group. On both servers, Admin1 has the same password.

  You log on to Server1 as Admin1. You open Computer Management and you.connect to Server2.

  When you attempt to create a scheduled task, view the event logs, and manage the shared folders, you receive Access Denied messages.

  You need to ensure that you can administer Server2 remotely from Server1 by using Computer Management.

  What should you configure on Server2?

  A. From Server Manager, modify the Remote Management setting.
  B. From Local Users and Groups, modify the membership of the Remote Management Users group.
  C. From Windows Firewall, modify the Windows Management Instrumentation (WMI) firewall rule.
  D. From Registry Editor, configure the LocalAccountTokenFilterPolicy registry value.
  D. From Registry Editor, configure the LocalAccountTokenFilterPolicy registry value.

  ---

  The LocalAccountTokenFilterPolicy setting affects how administrator credentials are applied to remotely administer the computer.

• Question 516:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2.

  You create a security template named Template1 by using the security template snap-in.

  You need to apply Template1 to Server2.

  Which tool should you use?

  A. Security Templates
  B. Computer Management
  C. Security Configuration and Analysis
  D. System Configuration
  C. Security Configuration and Analysis

  ---

  A security policy is a combination of security settings that affect the security on a computer. You can use your local security policy to edit account policies and local policies on your local computer. Security templates are inactive until imported into a Group Policy object or the Security Configuration and Analysis

  Incorrect Answers:

  A: The Security Template was already created ?Provide standard security option to use in security policies

  B: Template1 needs to be applied at the GP level

  D: The System Configuration tool is used to identify windows problems References: https://www.petri.com/using-windows-server-2012-security-configuration-and-analysis-tool

• Question 517:

  Your network contains multiple subnets.

  On one of the subnets, you deploy a server named Server1 that runs Windows Server 2012 R2.

  You install the DNS Server server role on Server1, and then you create a standard primary zone named contoso.com.

  You need to ensure that client computers can resolve IP addresses to host names.

  What should you do first?

  A. Create a GlobalNames zone.
  B. Convert the contoso.com zone to an Active Directory-integrated zone.
  C. Configure dynamic updates for contoso.com.
  D. Create a reverse lookup zone.
  D. Create a reverse lookup zone.

  ---

  Use a reverse lookup zone to be able to resolve IP addresses to host names.

• Question 518:

  Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.

  You promote Server1 to a domain controller.

  You discover that the SRV records for Server1 were not added to the DNS zone of adatum.com.

  You need to view which SRV records should be added by Server1.

  Which file should you open?

  A. C:\Windows\System32\drivers\etc\Imhosts
  B. C:\Windows\System32\drivers\etc\hosts
  C. C:\Windows\System32\Config\Netlogon.dns
  D. C:\Windows\System32\dns\Adatum.com.dns
  C. C:\Windows\System32\Config\Netlogon.dns

  ---

  Reference: https://support.microsoft.com/en-za/help/816587/how-to-verify-that-srv-dns-records-have-been-created-for-a-domain-cont

• Question 519:

  Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 is located on the same subnet as all of the client computers. A network technician reports that he receives a "Request timed out" error message

  when he attempts to use the ping utility to connect to Server1 from his client computer. The network technician confirms that he can access resources on Server1 from his client computer.

  You need to configure Windows Firewall with Advanced Security on Server1 to allow the ping utility to connect.

  Which rule should you enable?

  A. File and Printer Sharing (Echo Request ?ICMPv4-In)
  B. Network Discovery (WSD-In)
  C. File and Printer Sharing (NB-Session-In)
  D. Network Discovery (SSDP-In)
  A. File and Printer Sharing (Echo Request ?ICMPv4-In)

• Question 520:

  A company's network administrator needs to ensure a specific IP address is never assigned by a Windows Server 2012 R2 DHCP server to any device connecting to the network.

  Which of the following should the administrator configure on the Windows Server 2012 R2 DHCP server?

  A. Reservation
  B. Scope options
  C. NAP
  D. Scope properties
  B. Scope options

  ---

  Configuring an IP address as a reservation will restrict a DHCP server's assignment of that address unless a specific MAC address makes a request for the address.

  Exclusion is for not use the IP Address or range inside the Scope Pool, Filter is for not use the MAC Address or range.

  Quick Tip: Policies can also be defined per scope or server. Policy based assignment (PBA) allows an administrator to group DHCP clients by specific attributes based on fields contained in the DHCP client request packet. This feature allows

  for targeted administration and greater control of configuration parameters delivered to network devices.