Microsoft 70-410 Online Practice Questions and Exam Preparation

Microsoft 70-410 Online Questions & Answers

• Question 51:

  Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1 that runs Windows Server 2012 R2. Server1 contains a shared folder named Share1. Share1 contains the home folder

  of each user.

  All users have the necessary permissions to access only their home folder.

  The users report that when they access Share1, they can see the home folders of all the users.

  You need to ensure that the users see only their home folder when they access Share1.

  What should you do from Server1?

  A. From Windows Explorer, modify the properties of the volume that contains Share1.
  B. From Server Manager, modify the properties of the volume that contains Share1.
  C. From Server Manager, modify the properties of Share1.
  D. From Windows Explorer, modify the properties of Share1.
  C. From Server Manager, modify the properties of Share1.

• Question 52:

  Your network contains an Active Directory domain named contoso.com. The network contains 500 client computers that run Windows 8. All of the client computers connect to the Internet by using a web proxy.

  You deploy a server named Server1 that runs Windows Server 2012 R2. Server1 has the DNS Server server role installed.

  You configure all of the client computers to use Server1 as their primary DNS server. You need to prevent Server1 from attempting to resolve Internet host names for the client computers.

  What should you do on Server1?

  A. Create a primary zone named ".".
  B. Configure the Security settings of the contoso.com zone.
  C. Create a zone delegation for GlobalNames.contoso.com.
  D. Create a stub zone named "root".
  A. Create a primary zone named ".".

  ---

  When you install DNS on a Windows server that does not have a connection to the Internet, the zone for the domain is created and a root zone, also known as a dot zone, is also created. This root zone may prevent access to the Internet for DNS and for clients of the DNS. If there is a root zone, there are no other zones other than those that are listed with DNS, and you cannot configure forwarders or root hint servers.

  Root domain This is the top of the tree, representing an unnamed level; it is sometimes shown as two empty quotation marks (""), indicating a null value. When used in a DNS domain name, it is stated by a trailing period (.) to designate that the name is located at the root or highest level of the domain hierarchy. In this instance, the DNS domain name is considered to be complete and points to an exact location in the tree of names. Names stated this way are called fully qualified domain names (FQDNs).

  DNS Domain Name Hierarchy:

  

• Question 53:

  You run a Windows Server 2012 R2and implementing 3 new printers in a warehouse. You need to makean exclusion forthese IP addresses within DHCP server. Select the location where would configure at the DHCP console?

  Hot Area:

  

  

  ---

  http://technet.microsoft.com/en-us/library/cc737978%28v=ws.10%29.aspx

• Question 54:

  Your network contains a Hyper-V host named Server1 that runs Windows Server 2012 R2.

  Server1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2.

  You create a checkpoint of VM1, and then you install an application on VM1. You verify that the application runs properly.

  You need to ensure that the current state of VM1 is contained in a single virtual hard disk file.

  The solution must minimize the amount of downtime on VM1.

  What should you do?

  A. From a command prompt, run dism.exe and specify the /delete-image parameter.
  B. From a command prompt, run dism.exe and specify the /commit-image parameter.
  C. From Hyper-V Manager, delete the checkpoint.
  D. From Hyper-V Manager, inspect the virtual hard disk.
  C. From Hyper-V Manager, delete the checkpoint.

• Question 55:

  Your network contains an Active Directory domain named contoso.com. The domain contains three servers named Server1, Server2, and Server3.

  You create a server group named ServerGroup1.

  You discover the error message shown in the following exhibit. (Click the Exhibit button.)

  

  You need to ensure that Server2 can be managed remotely by using Server Manager.

  What should you do?

  A. On DC1, run the Enable-PSSessionConfiguration cmdlet.
  B. On Server2, run the Add-Computer cmdlet.
  C. On Server2 modify the membership of the Remote Management Users group.
  D. From Active Directory Users and Computers, add a computer account named Server2, and then restart Server2.
  C. On Server2 modify the membership of the Remote Management Users group.

  ---

  This is a security issue. To be able to access Server2 remotely through Server Manager the user need to be a member of the Remote Management Users group. Note:

  *

  Name: BUILTIN\Remote Management Users

  Description: A Builtin Local group. Members of this group can access WMI resources over management protocols (such as WS-Management via the Windows Remote Management service). This applies only to WMI namespaces that grant

  access to the user.

  *

  Enable-ServerManagerStandardUserRemoting

  Provides one or more standard, non-Administrator users access to event, service, performance counter, and role and feature inventory data for a server that you are managing by using Server Manager.

  Syntax:

  Parameter Set: Default

  Enable-ServerManagerStandardUserRemoting [-User] [-Force] [-Confirm] [-WhatIf]

  [ ]

  Detailed Description

  Provides one or more standard, non-Administrator users access to event, service, performance counter, and role and feature inventory data for a server that you are managing, either locally or remotely, by using Server Manager. The cmdlet

  must be run locally on the server that you are managing by using Server Manager. The cmdlet works by performing the following actions:

  Adds access rights for specified standard users to the root\cimv2 namespace on the local server (for access to role and feature inventory information).

  Adds specified standard users to required user groups (Remote Management Users, Event Log Readers, and Performance Log Readers) that allow remote access to event and performance counter logs on the managed server.

  Changes access rights in the Service Control Manager to allow specified standard users remote access to the status of services on the managed server.

  Incorrect:

  Not A: the Enable-PSSessionConfiguration.This is an advanced cmdlet that is designed to be used by system administrators to manage customized session configurations for their users.

• Question 56:

  You have a file server named Server1 that runs Windows Server 2012 R2. Server1 contains a folder named Folder1.

  

  A user named User1 is a member of Group1 and Group2. A user named User2 is a member of Group2 and Group3. You need to identify which actions the users can perform when they access the files in Share1. What should you identify? To answer, select the appropriate actions for each user in the answer area.

  Hot Area:

  

  

• Question 57:

  Your network contains an Active Directory forest. The forest contains a single domain named contoso.com.

  AppLocker policies are enforced on all member servers.

  You view the AppLocker policy applied to the member servers as shown in the exhibit. (Click the Exhibit button.)

  

  To answer, complete each statement according to the information presented in the exhibit. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 58:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. You need to ensure that the local administrator account on all computers is renamed to L_Admin.

  Which Group Policy settings should you modify?

  A. Restricted Groups
  B. Security Options
  C. User Rights Assignment
  D. Preferences
  B. Security Options

  ---

  In Group Policy Object Editor, click Computer Configuration, click Windows Settings, click Security Settings, click Local Policies, and then click Security Options.

  In the details pane, double-click Accounts: Rename administrator account.

  The Security Options node includes security settings regarding interactive logon, digital signing of data, restrictions of access to floppy and CD-ROM drives, unsigned driver installations as well as logon dialog box behavior. This category also

  includes options to configure authentication and communication security within Active Directory.

• Question 59:

  A network technician installs Windows Server 2012 R2 Standard on a server named Server1.

  A corporate policy states that all servers must run Windows Server 2012 R2 Datacenter.

  You need to ensure that Server1 complies with the corporate policy. You want to achieve this goal by using the minimum amount of administrative effort.

  What should you perform?

  A. a clean installation of Windows Server 2012 R2
  B. an upgrade installation of Windows Server 2012 R2
  C. online servicing by using Dism
  D. offline servicing by using Dism
  C. online servicing by using Dism

  ---

  For Windows Server 2012 Standard, you can convert the system to Windows Server 2012 Datacenter as follows: From an elevated command prompt, determine the current edition name with the command DISM /online /Get-CurrentEdition. Make note of the edition ID, an abbreviated form of the edition name. Then run DISM /online /Set-Edition: /ProductKey:XXXXX-XXXXX-XXXXX-XXXXX-XXXXX /AcceptEula, providing the edition ID and a retail product key.

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj574204(v=ws.11)

• Question 60:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01.

  You need to add an RODC to the domain by using the Install From Media (IFM) option.

  Which tool should you use to create the media?

  A. the ntdsutil command
  B. the Set-ADDomainWindows PowerShell cmdlet
  C. the Install-ADDSDomain Windows PowerShell cmdlet
  D. the dsadd command
  E. the dsamain command
  F. the dsmgmt command
  G. the net user command
  H. the Set-ADForest Windows PowerShell cmdlet
  A. the ntdsutil command

  ---

  You can use the Ntdsutil.exe tool to create installation media for additional domain controllers that you are creating in a domain. By using the Install from Media (IFM) option, you can minimize the replication of directory dataover the network. This helps you install additional domain controllers in remote sites more efficiently.