Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 531:

  You have a virtual machine named VM1.

  You install Windows Server 2012 R2 on VM1.

  You plan to use VM1 as an image that will be distributed to sales users to demonstrate the features of a custom application. The custom application only requires the Web Server (IIS) server role to be installed.

  You need to ensure that the VHD file for VM1 only contains the required Windows Server 2012 R2 source files.

  Which tool should you use?

  A. servermanagercmd.exe
  B. dism.exe
  C. ocsetup.exe
  D. imagex.exe
  B. dism.exe

  ---

  You can use DISM to:

  Add, remove, and enumerate packages and drivers.

  Enable or disable Windows features.

  Apply changes based on the offline servicing section of an unattend.xml answer file.

  Configure international settings.

  Upgrade a Windows image to a different edition.

  Prepare a Windows PE image.

  Take advantage of better logging.

  Service down-level operating systems like Windows Vista with SP1 and Windows Server 2008.

  Service all platforms (32-bit, 64-bit, and Itanium).

  Service a 32-bit image from a 64-bit host and service a 64-bit image from a 32-bit host.

  Make use of old Package Manager scripts.

  This command will mount the image before making any changes. This will ensure that only the required Windows Server 2012 R2 source files are contained.

• Question 532:

  You have a server named Server1 that runs Windows Server 2012 R2.

  On Server1, you open Computer Management as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that you can create a 3-TB volume on Disk 1. What should you do first?

  A. Create a storage pool.
  B. Convert the disk to a GPT disk.
  C. Create a VHD, and then attach the VHD.
  D. Convert the disk to a dynamic disk.
  B. Convert the disk to a GPT disk.

• Question 533:

  Your network contains an Active Directory domain named contoso.com.

  All servers run Windows Server 2012 R2.

  An application named Appl.exe is installed on all client computers. Multiple versions of Appl.exe are installed on different client computers. Appl.exe is digitally signed.

  You need to ensure that only the latest version of Appl.exe can run on the client computers.

  What should you create?

  A. An application control policy packaged app rule
  B. A software restriction policy certificate rule
  C. An application control policy Windows Installer rule
  D. An application control policy executable rule
  D. An application control policy executable rule

  ---

  Executable Rules, for .exe and can be based on Publisher, Product name, filename and version. Use Certificate Rules on Windows Executables for Software Restriction Policies This security setting determines if digital certificates are processed when a user or process attempts to run software with an .exe file name extension. This security setting is used to enable or disable certificate rules, a type of software restriction policies rule. With software restriction policies, you can create a certificate rule that will allow or disallow software that is signed by Authenticode to run, based on the digital certificate that is associated with the software. In order for certificate rules to take effect, you must enable this security setting. When certificate rules are enabled, software restriction policies will check a certificate revocation list (CRL) to make sure the software's certificate and signature are valid. This may decrease performance when start signed programs. You can disable this feature. On Trusted Publishers Properties, clear the Publisher and Timestamp check boxes.

• Question 534:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2.

  You create a group Managed Service Account named gservice1.

  You need to configure a service named Service1 to run as the gservice1 account.

  How should you configure Service1?

  A. From the Services console, configure the Log On settings.
  B. From a command prompt, run sc.exe and specify the privs parameter.
  C. From a command prompt, run sc.exe and specify the sdset parameter.
  D. From Windows PowerShell, run Set-Service and specify the -StartupType parameter.
  C. From a command prompt, run sc.exe and specify the sdset parameter.

  ---

  Setting permissions on specific services can be achieved by using the sc command.

  The sc command has two parameters for this task:

  sdshow ?Displays the security descriptor for a specific service

  sdset ?Changes the security descriptor for a service

  To set permissions use the following syntax:

  sc sdset

  Reference: SET PERMISSIONS ON A SPECIFIC SERVICE (WINDOWS)

  http://blogs.msmvps.com/erikr/2007/09/26/set-permissions-on-a-specific-service-windows/

• Question 535:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 does not have Internet connectivity.

  All roles are removed completely from Server1.

  You mount a Windows Server 2012 R2 installation image to the C:\Source folder.

  You need to install the DNS Server server role on Server1.

  Which folder should you use as the source?To answer, select the appropriate folder in the answer area.

  Hot Area:

  

  

  ---

  WinSxS, the side-by-side component store enables administrators to activate any of the features included with Windows Server 2012 R2 without having to supply an installation medium.

  References: http://blogs.technet.com/b/askpfeplat/archive/2013/02/24/how-to-reduce-the-size-of-the-winsxs-directory-andfree-up-disk-space-on-windows-server-2012-using-features-on-demand.aspx

  Exam Ref 70-410: Installing and configuring Windows Server 2012 R2, Chapter 1: Installing and configuring servers, Objective 1.1: Install servers, p. 10.

• Question 536:

  You are configuring a test network. The test network contains a subnet named LAN1. LAN1 uses the network ID of 10.10.1.0/27.

  You plan to add a new subnet named LAN2 to the test network.

  LAN1 and LAN2 will be connected by a router.

  You need to identify a valid network ID for LAN2 that meets the following requirements:

  - Ensures that hosts on LAN2 can communicate with hosts on LAN1.

  -Supports at least 100 IPv4 hosts.

  -Uses only private IP addresses.

  Which network ID should you use?

  To answer, drag the appropriate network ID and subnet mask to the correct location in the answer area.

  Select and Place:

  

  

  ---

  The Subnet Mask specifies which bits of the IP address identify the host system and which bits identify the network where the host system resides.

  

  References:

  Exam Ref: 70-410: Installing and Configuring Windows Server 2012 R2, Chapter4: Deploying and configuring core network services, Objective 4.1: Configure IPv4 and IPv6 addressing, p.192, 196

• Question 537:

  You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have Windows Server 2012 installed.

  You have been instructed to modify an Active Directory computer object.

  Which of the following actions should you take?

  A. You should consider making use of the Get-ADComputer Windows PowerShell cmdlet.
  B. You should consider making use of the Set-ADComputer Windows PowerShell cmdlet
  C. You should consider making use of the New-ADComputer Windows PowerShell cmdlet
  D. You should consider making use of the Get-ADComputerServiceAccount Windows PowerShell cmdlet
  B. You should consider making use of the Set-ADComputer Windows PowerShell cmdlet

  ---

  Set-ADComputer ?Modifies an Active Directory computer object.