Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 111:

  Your network contains an Active Directory domain named contoso.com.

  You create an organizational unit (OU) named OU1 and a Group Policy object (GPO) named GPO1. You link GPO1 to OU1.

  You move several file servers that store sensitive company documents to OU1. Each file server contains more than 40 shared folders.

  You need to audit all of the failed attempts to access the files on the file servers in OU1. The solution must minimize administrative effort.

  Which two audit policies should you configure in GPO1?

  To answer, select the appropriate two objects in the answer area.

  Hot Area:

  

  

• Question 112:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8 Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1.

  You make a change to GPO1.

  You need to force all of the computers in OU1 to refresh their Group Policy settings immediately. The solution must minimize administrative effort.

  Which tool should you use?

  A. Server Manager
  B. Active Directory Users and Computers
  C. The Gpupdate command
  D. Group Policy Management Console (GPMC)
  D. Group Policy Management Console (GPMC)

  ---

  Starting with Windows Server?2012 and Windows?8, you can now remotely refresh Group Policy settings for all computers in an OU from one central location through the Group Policy Management Console (GPMC). Or you can use the Invoke-GPUpdatecmdlet to refresh Group Policy for a set of computers, not limited to the OU structure, for example, if the computers are located in the default computers container.

  

  

  References:

  http: //technet. microsoft. com/en-us//library/jj134201. aspx http: //blogs. technet. com/b/grouppolicy/archive/2012/11/27/group-policy-in-windows- server-2012-using-remote-gpupdate. aspx

• Question 113:

  You have two Windows Server Update Services (WSUS) servers named Server01 and Server02. Server01 synchronizes from Microsoft Update. Server02 synchronizes updates from Server01. Both servers are members of the same Active

  Directory domain.

  You configure Server01 to require SSL for all WSUS metadata by using a certificate issued by an enterprise root certification authority (CA).

  You need to ensure that Server02 synchronizes updates from Server01.

  What should you do on Server02?

  A. From a command prompt, runwsusutil.exe configuressl server01.
  B. From a command prompt, run wsusutil.exe configuresslproxy server02 443.
  C. From a command prompt, run wsusutil.exe configuressl server02.
  D. From the Update Services console, modify the Update Source and Proxy Server options.
  C. From a command prompt, run wsusutil.exe configuressl server02.

• Question 114:

  Your network contains a single Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2012 R2.

  Server1 has the Windows Server updates Services server role installed and is configured to download updates from the Microsoft Update servers.

  You need to ensure that Server1 downloads express installation files from the Microsoft Update servers.

  What should you do from the Update Services console?

  A. From the Update Files and Languages options, configure the Update Files settings.
  B. From the Automatic Approvals options, configure the Update Rules settings.
  C. From the Products and Classifications options, configure the Products settings.
  D. From the Products and Classifications options, configure the Classifications settings.
  A. From the Update Files and Languages options, configure the Update Files settings.

  ---

  To specify whether express installation files are downloaded during synchronization

  In the left pane of the WSUS Administration console, click Options.

  In Update Files and Languages, click the Update Files tab.

  If you want to download express installation files, select the Download express installation files check box. If you do not want to download express installation files, clear the check box.

  

  Reference: http: //technet. microsoft. com/en-us/library/cc708431. aspx http: //technet. microsoft. com/en-us/library/cc708431. aspx

• Question 115:

  Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs.

  You have two GPOs linked to an organizational unit (OU) named OU1.

  You need to change the precedence order of the GPOs.

  What should you use?

  A. Dcgpofix
  B. Get-GPOReport
  C. Gpfixup
  D. Gpresult
  E. Gpedit. msc
  F. Import-GPO
  G. Restore-GPO
  H. Set-GPInheritance
  I. Set-GPLink
  J. Set-GPPermission
  I. Set-GPLink

  ---

  The Set-GPLinkcmdlet sets the properties of a GPO link.

  You can set the following properties:

  Enabled. If the GPO link is enabled, the settings of the GPO are applied when Group Policy is processed for the site, domain or OU. Enforced. If the GPO link is enforced, it cannot be blocked at a lower-level (in the Group Policy processing

  hierarchy) container.

  Order. The order specifies the precedence that the settings of the GPO take over conflicting settings in other GPOs that are linked (and enabled) to the same site, domain, or OU.

  Reference: http: //technet. microsoft. com/en-us/library/ee461022. aspx

• Question 116:

  You have a DNS server that runs Windows Server 2012 R2. The server hosts the zone for contoso.com and is accessible from the Internet. You need to create a DNS record for the Sender Policy Framework (SPF) to list the hosts that are authorized to send email for contoso.com. Which type of record should you create?

  A. mail exchanger (MX)
  B. resource record signature (RRSIG)
  C. text (TXT)
  D. name server (NS)
  C. text (TXT)

• Question 117:

  Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. All of the DNS servers in both of the domains run Windows Server 2012 R2.

  The network contains two servers named Server1 and Server2. Server1 hosts an Active Directory-integrated zone for contoso.com. Server2 hosts an Active Directory-integrated zone for fabrikam.com. Server1 and Server2 connect to each other by using a WAN link.

  Client computers that connect to Server1 for name resolution cannot resolve names in fabnkam.com.

  You need to configure Server1 to support the resolution of names in fabnkam.com. The solution must ensure that users in contoso.com can resolve names in fabrikam.com if the WAN link fails.

  What should you do on Server1?

  A. Create a stub zone.
  B. Add a forwarder.
  C. Create a secondary zone.
  D. Create a conditional forwarder.
  C. Create a secondary zone.

  ---

  http: //technet. microsoft. com/en-us/library/cc771898. aspx When a zone that this DNS server hosts is a secondary zone, this DNS server is a secondary source for information about this zone. The zone at this server must be obtained from

  another remote DNS server computer that also hosts the zone. With secondary, you have ability to resolve records from the other domain even if its DNS servers are temporarily unavailable. While secondary zones contain copies of all the

  resource records in the corresponding zone on the master name server, stub zones contain only three kinds of resource records:

  A copy of the SOA record for the zone.

  Copies of NS records for all name servers authoritative for the zone. Copies of A records for all name servers authoritative for the zone.

  References:

  http: //www. windowsnetworking. com/articles-tutorials/windows-2003/DNS_Stub_Zones.

  html

  http: //technet. microsoft. com/en-us/library/cc771898. aspx http: //redmondmag. com/Articles/2004/01/01/The-Long-and-Short-of-Stub-Zones.

  aspx?Page=2

• Question 118:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has two network adapters and is located in a perimeter network.

  You need to install the RIP version 2 routing protocol on Server1.

  Which node should you use to add the RIP version 2 routing protocol?

  To answer, select the appropriate node in the answer area.

  Hot Area:

  

  

• Question 119:

  Your network contains an Active Directory domain named contoso.com. The domain contains three member servers named Server1, Server2, and Server3. All servers run Windows Server 2012 R2 and have the Windows Server Update Services (WSUS) server role installed.

  Server1 and Server2 are configured as replica servers that use Server3 as an upstream server.

  You remove Servers from the network.

  You need to ensure that WSUS on Server2 retrieves updates from Server1. The solution must ensure that Server1 and Server2 have the latest updates from Microsoft.

  Which command should you run on each server? To answer, select the appropriate command to run on each server in the answer area.

  Hot Area:

  

  

• Question 120:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named NPS1 that has the Network Policy Server server role installed. All servers run Windows Server 2012 R2.

  You install the Remote Access server role on 10 servers.

  You need to ensure that all of the Remote Access servers use the same network policies.

  Which two actions should you perform? (Each correct answer presents part of the solution.

  Choose two.)

  A. Configure each Remote Access server to use the Routing and Remote Access service (RRAS) to authenticate connection requests.
  B. On NPS1, create a remote RADIUS server group. Add all of the Remote Access servers to the remote RADIUS server group.
  C. On NPS1, create a new connection request policy and add a Tunnel-Type and a Service-Type condition.
  D. Configure each Remote Access server to use a RADIUS server named NPS1.
  E. On NPS1, create a RADIUS client template and use the template to create RADIUS clients.
  C. On NPS1, create a new connection request policy and add a Tunnel-Type and a Service-Type condition.
  D. Configure each Remote Access server to use a RADIUS server named NPS1.

  ---

  Connection request policies are sets of conditions and settings that allow network administrators to designate which RADIUS servers perform the authentication and authorization of connection requests that the server running Network Policy Server (NPS) receives from RADIUS clients. Connection request policies can be configured to designate which RADIUS servers are used for RADIUS accounting. When you configure Network Policy Server (NPS) as a Remote Authentication Dial-In User Service (RADIUS) proxy, you use NPS to forward connection requests to RADIUS servers that are capable of processing the connection requests because they can perform authentication and authorization in the domain where the user or computer account is located. For example, if you want to forward connection requests to one or more RADIUS servers in untrusted domains, you can configure NPS as a RADIUS proxy to forward the requests to the remote RADIUS servers in the untrusted domain. To configure NPS as a RADIUS proxy, you must create a connection request policy that contains all of the information required for NPS to evaluate which messages to forward and where to send the messages.

  Reference: http://technet.microsoft.com/en-us/library/cc730866(v=ws.10).aspx