Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 121:

  Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed. Server1 hosts 10 virtual machines. A virtual machine named VM1 runs Windows Server 2012 R2 and hosts a processor-intensive application named App1.

  Users report that App1 responds more slowly than expected.

  You need to monitor the processor usage on VM1 to identify whether changes must be made to the hardware settings of VM1.

  Which performance object should you monitor on Server1?

  A. Processor
  B. Hyper-V Hypervisor Virtual Processor
  C. Hyper-V Hypervisor Logical Processor
  D. Hyper-V Hypervisor Root Virtual Processor
  E. Process
  C. Hyper-V Hypervisor Logical Processor

  ---

  In the simplest way of thinking the virtual processor time is cycled across the available logical processors in a round-robin type of fashion. Thus all the processing power gets used over time, and technically nothing ever sits idle. To accurately measure the processor utilization of a guest operating system, use the "\Hyper-V Hypervisor Logical Processor (Total)\% Total Run Time" performance monitor counter on the Hyper-V host operating system.

• Question 122:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  You have a Group Policy object (GPO) named GPO1 that contains hundreds of settings. GPO1 is linked to an organizational unit (OU) named OU1. OU1 contains 200 client computers.

  You plan to unlink GPO1 from OU1.

  You need to identify which GPO settings will be removed from the computers after GPO1 is unlinked from OU1.

  Which two GPO settings should you identify? (Each correct answer presents part of the solution. Choose two.)

  A. The managed Administrative Template settings
  B. The unmanaged Administrative Template settings
  C. The System Services security settings
  D. The Event Log security settings
  E. The Restricted Groups security settings
  A. The managed Administrative Template settings
  D. The Event Log security settings

  ---

  There are two kinds of Administrative Template policy settings: Managed and Unmanaged . The Group Policy service governs Managed policy settings and removes a policy setting when it is no longer within scope of the user or computer.

  References:

  http: //technet. microsoft. com/en-us/library/cc778402(v=ws. 10). aspx http: //technet. microsoft. com/en-us/library/bb964258. aspx

• Question 123:

  Your network contains two DNS servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 hosts a primary zone for contoso.com. Server2 hosts a secondary zone for contoso.com.

  You need to ensure that Server2 replicates changes to the contoso.com zone every five minutes. Which setting should you modify in the start of authority (SOA) record?

  A. Retry interval
  B. Expires after
  C. Minimum (default) TTL
  D. Refresh interval
  D. Refresh interval

  ---

  By default, the refresh interval for each zone is set to 15 minutes. The refresh interval is used to determine how often other DNS servers that load and host the zone must attempt to renew the zone.

  

• Question 124:

  You have a WIM file that contains an image of Windows Server 2012 R2.

  Recently, a technician applied a Microsoft Standalone Update Package (MSU) to the image.

  You need to remove the MSU package from the image.

  Which three actions should you perform in sequence?

  To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 125:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.

  You configure a quota threshold as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that a user named User1 receives an email notification when the threshold is exceeded. What should you do?

  A. Create a performance counter alert.
  B. Create a classification rule.
  C. Modify the members of the Performance Log Users group.
  D. Configure the File Server Resource Manager Options.
  D. Configure the File Server Resource Manager Options.

  ---

  When you create quotas and file screens, you have the option of sending e-mail notifications to users when their quota limit is approaching or after they have attempted to save files that have been blocked. If you want to routinely notify certain

  administrators of quota and file screening events, you can configure one or more default recipients.

  To send these notifications, you must specify the SMTP server to be used for forwarding the e-mail messages.

  To configure e-mail options

  In the console tree, right-click File Server Resource Manager, and then click Configure options. The File Server Resource Manager Options dialog box opens.

  

  On the E-mail Notifications tab, under SMTP server name or IP address, type the host name or the IP address of the SMTP server that will forward e-mail notifications.

  If you want to routinely notify certain administrators of quota or file screening events, under Default administrator recipients, type each e-mail address.

  Use the format account@domain. Use semicolons to separate multiple accounts.

  To test your settings, click Send Test E-mail.

  

  

• Question 126:

  Your company has a main office and two branch offices. The main office is located in Seattle. The two branch offices are located in Montreal and Miami. Each office is configured as an Active Directory site.

  The network contains an Active Directory domain named contoso.com. Network traffic is not routed between the Montreal office and the Miami office.

  You implement a Distributed File System (DFS) namespace named \\contoso.com\public. The namespace contains a folder named Folder1. Folder1 has a folder target in each office.

  You need to configure DFS to ensure that users in the branch offices only receive referrals to the target in their respective office or to the target in the main office.

  Which two actions should you perform? (Each correct answer presents part of the solution.Choose two.)

  A. Set the Ordering method of \\contoso.com\public to Random order.
  B. Set the Advanced properties of the folder target in the Seattle office to Last among all targets.
  C. Set the Advanced properties of the folder target in the Seattle office to First among targets of equal cost.
  D. Set the Ordering method of \\contoso.com\public to Exclude targets outside of the client's site.
  E. Set the Advanced properties of the folder target in the Seattle office to Last among targets of equal cost.
  F. Set the Ordering method of \\contoso.com\public to Lowest cost.
  C. Set the Advanced properties of the folder target in the Seattle office to First among targets of equal cost.
  D. Set the Ordering method of \\contoso.com\public to Exclude targets outside of the client's site.

  ---

  Exclude targets outside of the client's site In this method, the referral contains only the targets that are in the same site as the client. These same-site targets are listed in random order. If no same-site targets exist, the client does not receive a referral and cannot access that portion of the namespace. Note: Targets that have target priority set to "First among all targets" or "Last among all targets" are still listed in the referral, even if the ordering method is set to Exclude targets outside of the client's site. Note 2: Set the Ordering Method for Targets in Referrals A referral is an ordered list of targets that a client computer receives from a domain controller or namespace server when the user accesses a namespace root or folder with targets. After the client receives the referral, the client attempts to access the first target in the list. If the target is not available, the client attempts to access the next target.

• Question 127:

  Your network contains an Active Directory domain named adatum.com. The domain contains a domain controller named Server1 that runs Windows Server 2012 R2.

  You obtain an English Administrative Template for an application named App1. The Administrative Template includes two files named App1.admx and App1.adml.

  You need to be able to configure App1 by using a Group Policy on Server1.

  What should you copy?

  A. App1.admx to the C:\Windows\PolicyDefinitions folder and App1.adml to the C:\Windows\PolicyDefinitions\en-US folder
  B. App1.admx and App1.adml to the C:\Windows\System32\GroupPolicy folder
  C. App1.adml to the C:\Windows\PolicyDefinitions folder and App1.admx to the C:\Windows\PolicyDefinitions\en-US folder
  D. App1.admx and App1.adml to the C:\Windows\SYSVOL\sysvol\Adatum.com\Policies folder
  A. App1.admx to the C:\Windows\PolicyDefinitions folder and App1.adml to the C:\Windows\PolicyDefinitions\en-US folder

  ---

  References: https://msdn.microsoft.com/en-us/library/bb530196.aspx

• Question 128:

  Your network contains an Active Directory domain named contoso.com.

  You need to create a certificate template for the BitLocker Drive Encryption (BitLocker) Network Unlock feature.

  Which Cryptography setting of the certificate template should you modify?

  To answer, select the appropriate setting in the answer area.

  Hot Area:

  

  

• Question 129:

  Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.

  The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify which domain controllers are authorized to be cloned by using virtual domain controller cloning.

  Which cmdlet should you use?

  A. Get-ADGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  F. Get-ADAccountAuthorizationGroup
  D. Get-ADDomain

  ---

  Explanation: One requirement for cloning a domain controller is an existing Windows Server 2012 DC that hosts the PDC emulator role. You can run the Get-ADDomain and retrieve which server has the PDC emulator role.

  Example: Command Prompt: C:\PS> Get-ADDomain Output wouldinclude a line such as: PDCEmulator : Fabrikam-DC1.Fabrikam.com Reference: Step-by-Step: Domain Controller Cloning http://blogs.technet.com/b/canitpro/archive/2013/06/12/step-by-step-domain-controller- cloning.aspx Reference: Get-ADDomain https://technet.microsoft.com/en-us/library/ee617224.aspx

• Question 130:

  Your network contains an Active Directory domain named contoso.com. The domain contains client computers that run either Windows XP or Windows 8.

  Network Policy Server (NPS) is deployed to the domain.

  You plan to create a system health validator (SHV).

  You need to identify which policy settings can be applied to all of the computers.

  Which three policy settings should you identify? (Each correct answer presents part of the solution. Choose three.)

  A. Antispyware is up to date.
  B. Automatic updating is enabled.
  C. Antivirus is up to date.
  D. A firewall is enabled for all network connections.
  E. An antispyware application is on.
  B. Automatic updating is enabled.
  C. Antivirus is up to date.
  D. A firewall is enabled for all network connections.

  ---

  The WSHA on NAP client computers running Windows XP SP3 does not monitor the status of antispyware applications.