Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 521:

  You run a Windows 2012 R2 Hyper-V Role Server, you need to shrink the size of files.vhd (200GB).

  Using the Edit Virtual Disk Wizard what option should you choose?

  A. Compact
  B. Shrink
  C. Resize
  D. Convert
  D. Convert

  ---

  After converting a dynamically expanding VHD to the VHDX format, a new Shrink menu option becomes available in the Hyper-V UI as shown. VHDX format VHDs only expose the Shrink option when there is free space in the VHDX file to reclaim.

• Question 522:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2.

  You need to create 3-TB virtual hard disk (VHD) on Server1.

  Which tool should you use?

  A. New-StorageSubsytemVirtualDisk
  B. File Server Resource Manager (FSRM)
  C. Server Manager
  D. Computer Management
  A. New-StorageSubsytemVirtualDisk

  ---

  For other questions to create a VHD (file) you can use computer management.

  -Share and storage management (2008 only)

  -

  New-storagesubsystemVirtualDisk (this is a virtual disk, NOT a virtual hard disk)

  -

  Server Manager (you would use this to create virtual disks, not virtual hard disks)

• Question 523:

  You have a laptop named Computer1. Computer1 runs Windows 8.1 Enterprise.

  Computer1 has a wired network adapter and a wireless network adapter. Computer1 connects to a wireless network named Network1.

  For testing purposes, you install Windows Server 2012 R2 on Computer1 as a second operating system. You install the drivers for the wireless network adapter.

  You need to ensure that you can connect to Network1 from Windows Server 2012 R2.

  What should you do?

  A. Restart the WLAN AutoConfig service.
  B. From a local Group Policy object (GPO), configure the Wireless Network (IEEE 802.11) Policies settings.
  C. From a local Group Policy object (GPO), configure the settings of Windows Connection Manager.
  D. From Server Manager, install the Wireless LAN Service feature.
  D. From Server Manager, install the Wireless LAN Service feature.

  ---

  The Wireless LAN service is a feature in Windows Server?2012 R2 that you can use to enable the wireless WLAN AutoConfig service, and to configure the WLAN AutoConfig service for automatic startup. Once enabled, the WLAN

  AutoConfig service dynamically selects which wireless network the computer automatically connects to, and configures the necessary settings on the wireless network adapter. This includes automatically selecting and connecting to a more

  preferred wireless network when one becomes available.

  To enable the Wireless LAN Service

  In Server Manager Dashboard, click Manage, and then click Add Roles and Features. The Add Roles and Features Wizard opens.

  Click Next. In Select installation type, select Role-based or feature-based installation, and then click Next.

  In Select destination server, enable Select a server from the server pool, and in Server Pool, select the server for which you want to enable the Wireless LAN Service, and then click Next.

  In Select server roles, click Next.

  In Select Server features, in Features, select Wireless LAN Service, and then click Next.

  Reference: http://technet.microsoft.com/en-us/library/hh994698.aspx

• Question 524:

  Your network contains an Active Directory domain named contoso.com.

  The password policy for the domain is set to require a minimum password length of 10 characters.

  A user named User1 and a user named User2 work for the sales department.

  User1 is forced to create a domain password that has a minimum of 12 characters. User2 is forced to create a domain password that has a minimum of eight characters.

  You need to identify what forces the two users to have different password lengths.

  Which tool should you use?

  A. Credential Manager
  B. Security Configuration Wizard (SCW)
  C. Group Policy Management
  D. Active Directory Administrative Center
  D. Active Directory Administrative Center

  ---

  In Windows Server 2008, you can use fine-grained password policies to specify multiple password policies and apply different password restrictions and account lockout policies to different sets of users within a single domain. For example, to increase the security of privileged accounts, you can apply stricter settings to the privileged accounts and then apply less strict settings to the accounts of other users. Or in some cases, you may want to apply a special password policy for accounts whose passwords are synchronized with other data sources.

  This is found in the Active Directory Administrative Center. You can use Active Directory Administrative Center to perform the following Active Directory administrative tasks:

  Create new user accounts or manage existing user accounts Create new groups or manage existing groups Create new computer accounts or manage existing computer accounts Create new organizational units (OUs) and containers or manage existing OUs Connect to one or several domains or domain controllers in the same instance of Active Directory Administrative Center, and view or manage the directory information for those domains or domain controllers Filter Active Directory data by using query-building search

• Question 525:

  You have a server named Server2 that runs Windows Server 2012 R2.

  A network technician installs a new disk on Server2 and creates a new volume.

  The properties of the new volume are shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that you can enable NTFS disk quotas for volume D. What should you do first?

  A. Format volume D
  B. Install the File Server Resource Manager role service
  C. Run the convert.exe command
  D. Convert the disk to a dynamic disk
  A. Format volume D

  ---

  To be able to use a NEW disk so that you can enable NTFS disk quotas, in other word REFS to NTFS, it requires formatting first.

• Question 526:

  You work as a senior administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2 installed.

  You are running a training exercise for junior administrators. You are currently discussing Group Policy preference.

  Which of the following is TRUE with regards to Group Policy preference?

  A. It supports applications and operating system features that are not compatible with Group Policy
  B. It does not support item-level targeting.
  C. It is the same as Group Policy filtering.
  D. It does not cause the application or operating system feature to disable the user interface for the settings they configure.
  A. It supports applications and operating system features that are not compatible with Group Policy
  D. It does not cause the application or operating system feature to disable the user interface for the settings they configure.

• Question 527:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2008 R2 Service Pack 1 (SP1). One of the domain controllers is named DC1.

  The network contains a member server named Server1 that runs Windows Server 2012 R2.

  You need to promote Server1 to a domain controller by using install from media (IFM).

  What should you do first?

  A. Create a system state backup of DC1.
  B. Create IFM media on DC1.
  C. Upgrade DC1 to Windows Server 2012 R2.
  D. Run the Active Directory Domain Services Configuration Wizard on Server1.
  E. Run the Active Directory Domain Services Installation Wizard on DC1.
  C. Upgrade DC1 to Windows Server 2012 R2.

  ---

  Installation from media does not work across different operating system versions. In other words, you must use a Windows Server 2012 R2 domain controller to generate installation media to use for another Windows Server 2012 R2 domain

  controller installation. We can use the Install from media (IFM) option to install an Additional Domain Controller in an existing domain is the best option such as a branch office scenario where network is slow, unreliable and costly. IFM will

  minimize replication traffic during the installation because it uses restored backup files to populate the AD DS database. This will significantly reduce the amount of traffic copied over the WAN link.

  Things to remember:

  If you are deploying your first Domain Controller in the domain, you cannot use IFM.

  The OS will need to match the IFM media. (If you create a 2008 R2 IFM, promote a 2008 R2 DC) If you are creating a DC that will be a Global Catalog Server, create your IFM on a Global Catalog Server. If you are creating a DC that will be a

  DNS Server, create your IFM on a DNS Server. If you want to copy the SYSVOL, the DC on which you generate the installation media and the new DC must be at least running Windows Server 2008 with Service Pack 2 or Windows Server

  2008 R2. Membership of the Domain Admins group is the minimum required to complete IFM.

• Question 528:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

  Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01.

  You need to ensure that when administrators create users in contoso.com, the default user principal name (UPN) suffix is litwareinc.com.

  Which command should you use?

  A. the ntdsutil command
  B. the Set-ADDomain Windows PowerShell cmdlet
  C. the Install-ADDSDomain Windows PowerShell cmdlet
  D. the dsadd command
  E. the dsamain command
  F. the dsmgmt command
  G. the net user command
  H. the Set-ADForest Windows PowerShell cmdlet
  H. the Set-ADForest Windows PowerShell cmdlet

  ---

  The following example demonstrates how to create a new UPN suffix for the users in the Fabrikam.com forest: Set-ADForest -UPNSuffixes @{Add="headquarters.fabrikam.com"}

  References: https://docs.microsoft.com/en-us/powershell/module/addsadministration/set-adforest?view=win10-ps

• Question 529:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  All server are configured to enforce AppLocker policies.

  You install a server named Server1.

  On Server1, you install an application named appl.exe in a folder located on C:\App1.

  You have two domain groups named Group1 and Group2. A user named User1 is a member of Group1 and Group2.

  You create a Group Policy object (GPO) named GPO1. You link GPO1 to contoso.com.

  You create the executable rules as shown in the exhibit by using the Create Executable Rules wizard. (Click the Exhibit button.)

  

  To answer, complete each statement according to the information presented in the exhibit. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 530:

  Your network contains an Active Directory domain named contoso.com.

  All of the AppLocker policy settings for the member servers are configured in a Group Policy object (GPO) named GPO1.

  A member server named Server1 runs Windows Server 2012 R2.

  On Server1, you test a new set of AppLocker policy settings by using a local computer policy.

  You need to merge the local AppLocker policy settings from Server1 into the AppLocker policy settings of GPO1.

  What should you do?

  A. From Local Group Policy Editor on Server1, export an .inf file. Import the .inf file by using Group Policy Management Editor.
  B. From Server1, run the Set-ApplockerPolicy cmdlet.
  C. From Local Group Policy Editor on Server1, export an .xml file. Import the .xml file by using Group Policy Management Editor.
  D. From Server1, run the New-ApplockerPolicy cmdlet.
  B. From Server1, run the Set-ApplockerPolicy cmdlet.

  ---

  The Set-AppLockerPolicy cmdlet sets the specified Group Policy Object (GPO) to contain the specified AppLocker policy. If no Lightweight Directory Access Protocol (LDAP) is specified, the local GPO is the default. When the Merge parameter is used, rules in the specified AppLocker policy will be merged with the AppLocker rules in the target GPO specified in the LDAP path. The merging of policies will remove rules with duplicate rule IDs, and the enforcement setting specified by the AppLocker policy in the target GPO will be preserved. If the Merge parameter is not specified, then the new policy will overwrite the existing policy.

  References: http://technet.microsoft.com/en-us/library/ee791816(v=ws.10).aspx Exam Ref 70-410: Installing and configuring Windows Server 2012 R2, Chapter 10: Implementing Group Policy, Lesson1: Planning, Implementing and managing Group Policy, p. 479