Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 101:

  You have the following Windows PowerShell Output.

  

  You need to create a Managed Service Account. What should you do?

  A. Run New-ADServiceAccount ame "service01" NSHostName service01.contoso.com AMAccountName service01.
  B. Run New-AuthenticationPolicySilo, and then run New-ADServiceAccount ame "service01" NSHostName service01.contoso.com.
  C. Run Add-KDSRootKey, and then run New-ADServiceAccount ame "service01" NSHostName service01.contoso.com.
  D. Run Set-KDSConfiguration, and then run New-ADServiceAccount ame "service01" NSHostName service01.contoso.com.
  C. Run Add-KDSRootKey, and then run New-ADServiceAccount ame "service01" NSHostName service01.contoso.com.

  ---

  Explanation: From the exhibit we see that the required key does not exist. First we create this key, then we create the managed service account. The Add-KdsRootKey cmdlet generates a new root key for the Microsoft Group Key Distribution Service (KdsSvc) within Active Directory (AD). The Microsoft Group KdsSvc generates new group keys from the new root key. The New-ADServiceAccount cmdlet creates a new Active Directory managed service account. Reference: New-ADServiceAccount https://technet.microsoft.com/en-us/library/hh852236(v=wps.630).aspx Reference: Add-KdsRootKey ttps://technet.microsoft.com/en-us/library/jj852117(v=wps.630).aspx

• Question 102:

  Your network contains two servers named Server1 and Server2. Both servers run Windows Server 2012 R2 and have the DNS Server server role installed. Server1 hosts a primary zone for contoso.com. Server2 hosts a secondary zone for

  contoso.com. The zone is not configured to notify secondary servers of changes automatically.

  You update several records on Server1.

  You need to force the replication of the contoso.com zone records from Server1 to Server2.

  What should you do from Server2?

  A. Right-click the contoso.com zone and click Reload.
  B. Right-click the contoso.com zone and click Transfer from Master.
  C. Right-click Server2 and click Update Server Data Files.
  D. Right-click Server2 and click Refresh.
  B. Right-click the contoso.com zone and click Transfer from Master.

  ---

  Initiates zone transfer from secondary server

  Open DNS; In the console tree, right-click the applicable zone and click Transfer from master.

  

  References:

  http: //technet. microsoft. com/en-us/library/cc779391%28v=ws. 10%29. aspx http: //technet. microsoft. com/en-us/library/cc779391%28v=ws. 10%29. aspx http: //technet. microsoft. com/en-us/library/cc786985(v=ws. 10). aspx http: //technet.

  microsoft. com/en-us/library/cc779391(v=ws. 10). aspx

• Question 103:

  Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8.1.

  The network contains a shared folder named FinancialData that contains five files.

  You need to ensure that the FinancialData folder and its contents are copied to all of the client computers.

  Which two Group Policy preferences should you configure? (Each correct answer presents part of the solution. Choose two.)

  A. Shortcuts
  B. Network Shares
  C. Environment
  D. Folders
  E. Files
  D. Folders
  E. Files

  ---

  Folder preference items allow you to create, update, replace, and delete folders and their contents. (To configure individual files rather than folders, see Files Extension.) Before you create a Folder preference item, you should review the

  behavior of each type of action possible with this extension.

  File preference items allow you to copy, modify the attributes of, replace, and delete files. (To configure folders rather than individual files, see Folders Extension.) Before you create a File preference item, you should review the behavior of

  each type of action possible with this extension.

• Question 104:

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. The functional level of both the domain and the forest is Windows Server 2008 R2. The domain contains a domain-based Distributed File System (DFS) namespace that is configured as shown in the exhibit. (Click the Exhibit button.)

  

  You need to enable access-based enumeration on the DFS namespace. What should you do first?

  A. Raise the domain functional level.
  B. Raise the forest functional level.
  C. Install the File Server Resource Manager role service on Server3 and Server5.
  D. Delete and recreate the namespace.
  D. Delete and recreate the namespace.

  ---

  Access-based enumeration is only supported on a Domain-based Namespace in Windows Server 2008 Mode. This type of Namespace requires a minimum Windows Server 2003 forest functional level and a minimum Windows Server 2008

  domain functional level.

  The exhibit indicates that the current namespace is a Domain-based Namespace in Windows Server 2000 Mode. To migrate a domain-based namespace from Windows 2000 Server mode to Windows Server 2008 mode, you must export the

  namespace to a file, delete the namespace, recreate it in Windows Server 2008 mode, and then import the namespace settings.

  Reference: http://msdn.microsoft.com/en-us/library/cc770287.aspx http://msdn.microsoft.com/en-us/library/cc753875.aspx

• Question 105:

  Your network is configured as shown in the exhibit. (Click the Exhibit button.)

  

  Server1 regularly accesses Server2.

  You discover that all of the connections from Server1 to Server2 are routed through Routerl.

  You need to optimize the connection path from Server1 to Server2.

  Which route command should you run on Server1?

  A. Route add -p 192.168.2.0 MASK 255.255.255.0 192.168.2.1 METRIC 50
  B. Route add -p 192.168.2.12 MASK 255.255.255.0 192.168.2.1 METRIC 100
  C. Route add -p 192.168.2.12 MASK 255.255.255.0 192.168.2.0 METRIC 50
  D. Route add -p 192.168.2.0 MASK 255.255.255.0 192.168.1.2 METRIC 100
  D. Route add -p 192.168.2.0 MASK 255.255.255.0 192.168.1.2 METRIC 100

• Question 106:

  You have two Windows Server Update Services (WSUS) servers named Server01 and Server02. Server01 synchronizes from Microsoft Update. Server02 synchronizes updates from Server01. Both servers are members of the same Active

  Directory domain.

  You configure Server01 to require SSL for all WSUS metadata by using a certificate issued by an enterprise root certification authority (CA).

  You need to ensure that Server02 synchronizes updates from Server01.

  What should you do on Server02?

  A. From a command prompt, run wsusutil.exe configuresslproxy server02 443.
  B. From a command prompt, run wsusutil.exe configuressl server01.
  C. From a command prompt, run wsusutil.exe configuresslproxy server01 443.
  D. From the Update Services console, modify the Update Source and Proxy Server options.
  C. From a command prompt, run wsusutil.exe configuresslproxy server01 443.

• Question 107:

  Your network contains an Active Directory domain named contoso.com.

  You have several Windows PowerShell scripts that execute when users log on to their client computer.

  You need to ensure that all of the scripts execute completely before the users can access their desktop.

  Which setting should you configure? To answer, select the appropriate setting in the answer area.

  Hot Area:

  

  

• Question 108:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.

  Server1 has a folder named Folder1 that is used by the human resources department.

  You need to ensure that an email notification is sent immediately to the human resources manager when a user copies an audio file or a video file to Folder1.

  What should you configure on Server1?

  A. a file screen
  B. a file group
  C. a storage report task
  D. a file screen exception
  A. a file screen

• Question 109:

  Your network contains one Active Directory domain named controso.com. The domain contains a file server named Server01 that runs Windows Server 2012 R2. Server01 has an operating system drive and a data drive. Server01 has a

  Trusted Platform Module (TPM).

  You need to enable BitLocker Drive Encryption (BitLocker) for the data drive on Server01.

  Which cmdlet should you run first?

  A. Unblock-TPM
  B. Enable-BitLocker
  C. Add-BitLockerKeyProtector
  D. Install-WindowsFeature
  D. Install-WindowsFeature

• Question 110:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. You perform a backup of DC1 each day.

  You need to view the properties of an Active Directory object that was deleted two days ago.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Reference: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc772168(v=ws.11)

  https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc754232(v%3dws.11)