Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 161:

  Your network contains a Network Policy Server (NPS) server named Server1. The network contains a server named SQL1 that has Microsoft SQL Server 2008 R2 installed. All servers run Windows Server 2012 R2.

  You configure NPS on Server1 to log accounting data to a database on SQL1.

  You need to ensure that the accounting data is captured if SQL1 fails. The solution must minimize cost.

  What should you do?

  A. Implement Failover Clustering.
  B. Implement database mirroring.
  C. Run the Accounting Configuration Wizard.
  D. Modify the SQL Server Logging properties.
  C. Run the Accounting Configuration Wizard.

  ---

  In Windows Server 2008 R2, an accounting configuration wizard is added to the Accounting node in the NPS console. By using the Accounting Configuration wizard, you can configure the following four accounting settings: SQL logging only. By using this setting, you can configure a data link to a SQL Server that allows NPS to connect to and send accounting data to the SQL server. In addition, the wizard can configure the database on the SQL Server to ensure that the database is compatible with NPS SQL server logging. Text logging only. By using this setting, you can configure NPS to log accounting data to a text file. Parallel logging. By using this setting, you can configure the SQL Server data link and database. You can also configure text file logging so that NPS logs simultaneously to the text file and the SQL Server database. SQL logging with backup. By using this setting, you can configure the SQL Server data link and database. In addition, you can configure text file logging that NPS uses if SQL Server logging fails.

• Question 162:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. DC1 is a DNS server for contoso.com. The properties of the contoso.com zone are configured as shown in the exhibit. (Click the Exhibit button.)

  

  The domain contains a server named Server1 that is part of a workgroup named Workgroup. Server1 is configured to use DC1 as a DNS server.

  You need to ensure that Server1 dynamically registers a host (A) record in the contoso.com zone.

  What should you configure?

  A. The workgroup name of Server1
  B. The Security settings of the contoso.com zone
  C. The Dynamic updates setting of the contoso.com zone
  D. The primary DNS suffix of Server1
  D. The primary DNS suffix of Server1

  ---

  When any computer or a standalone server is added to a domain as a member, the network identifies that computer with its Fully Qualified Domain Name or FQDN. A Fully Qualified Domain Name consist of a hostname and the DNs suffix

  separated by a ". " called period. An example for this can be server01. msftdomain.com where "server01 is the hostname of the computer and "msftdomain.com" is the DNS suffix which follows the hostname. A complete FQDN of a client

  computer or a member server uniquely identifies that computer in the entire domain.

  Primary DNS suffix must manually be added in Windows 8 computer to change its hostname to Fully Qualified Domain Name so that it becomes eligible to send queries and receive responses from the DNS server. Following are the steps

  which can be implemented to add primary DNS suffix to a Windows 8 computer hostname:

  Log on to Windows 8 computer with administrator account. From the options available on the screen click Control Panel. On the opened window click More Settings from the left pane. On the next window click System and Security category

  and on the appeared window click System.

  On View basic information about your computer window click Change settings under Computer name, domain, and workgroup settings section. On System Properties box make sure that Computer Name tab is selected and click Change

  button.

  On Computer Name/Domain Changes box click More button. On DNS Suffix and NetBIOS Computer Name box type in the DNS domain name as the DNS suffix to the Windows 8 computer under Primary DNS suffix of this computer field.

  Click Ok button on all the boxes and restart the computer to allow changes to take effect.

  

  For years, Windows DNS has supported dynamic updates, whereas a DNS client host registers and dynamically updates the resource records with a DNS server. If a host's IP address changes, the resource record (particularly the A record) for the host is automatically updated, while the host utilizes the DHCP server to dynamically update its Pointer (PTR) resource record. Therefore, when a user or service needs to contact a client PC, it can look up the IP address of the host. With larger organizations, this becomes an essential feature, especially for clients that frequently move or change locations and use DHCP to automatically obtain an IP address. For dynamic DNS updates to succeed, the zone must be configured to accept dynamic updates:

  

  References:

  http: //technet. microsoft. com/en-us/library/cc778792%28v=ws. 10%29. aspx http: //technet. microsoft.com/en-us/library/cc778792%28v=ws. 10%29. aspx http: //www. advicehow. com/adding-primary-dns-suffix-in-microsoft-windows-8/

  http: // technet. microsoft. com/en-us/library/cc959611. aspx

• Question 163:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  Administrators use client computers that run Windows 8 to perform all management tasks.

  A central store is configured on a domain controller named DC1.

  You have a custom administrative template file named App1.admx. App1.admx contains application settings for an application named Appl.

  From a client computer named Computer1, you create a new Group Policy object (GPO) named GPO1.

  You discover that the application settings for App1 fail to appear in GPO1.

  You need to ensure that the App1 settings appear in all of the new GPOs that you create.

  What should you do?

  A. From the Default Domain Controllers Policy, add App1.admx to the Administrative Templates.
  B. Copy App1.admx to \\Contoso.com\SYSVOL\Contoso.com\Policies\PolicyDefinitions\.
  C. From the Default Domain Policy, add App1.admx to the Administrative Templates.
  D. Copy App1.admx to \\Contoso.com\SYSVOL\Contoso.com\StarterGPOs.
  B. Copy App1.admx to \\Contoso.com\SYSVOL\Contoso.com\Policies\PolicyDefinitions\.

  ---

  To take advantage of the benefits of .admx files, you must create a Central Store in the SYSVOL folder on a domain controller. The Central Store is a file location that is checked by the Group Policy tools. The Group Policy tools use any .admx files that are in the Central Store. The files that are in the Central Store are later replicated to all domain controllers in the domain.

• Question 164:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Desktop Session Host role service installed. The computer

  account of Server1 resides in an organizational unit (OU) named OU1.

  You create and link a Group Policy object (GPO) named GPO1 to OU1.

  You need to prevent GPO1 from applying to your user account when you log on to Server1. GPO1 must apply to every other user who logs on to Server1.

  What should you configure?

  A. Security Filtering.
  B. WMI Filtering.
  C. Block Inheritance.
  D. Item-level targeting.
  D. Item-level targeting.

  ---

  You can use item-level targeting to change the scope of individual preference items, so they apply only to selected users or computers. Within a single Group Policy object (GPO), you can include multiple preference items, each customized for selected users or computers and each targeted to apply settings only to the relevant users or computers.

  Reference: https://technet.microsoft.com/en-us/library/cc733022.aspx

• Question 165:

  Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 R2 and are configured as DNS servers. All DNS zones are Active Directory.

  integrated. Active Directory Recycle Bin is enabled.

  You need to modify the amount of time deleted objects are retained in the Active Directory Recycle Bin.

  Which naming context should you use?

  To answer, select the appropriate naming context in the answer area.

  Hot Area:

  

  

• Question 166:

  Your network contains multiple Active Directory sites.

  You have a Distributed File System (DFS) namespace that has a folder target in each site.

  You discover that some client computers connect to DFS targets in other sites.

  You need to ensure that the client computers only connect to a DFS target in their respective site.

  What should you modify?

  A. The properties of the Active Directory sites
  B. The properties of the Active Directory site links
  C. The delegation settings of the namespace
  D. The referral settings of the namespace
  D. The referral settings of the namespace

  ---

  Reference: http://www.windowsnetworking.com/articles_tutorials/Configuring-DFS-Namespaces.html

• Question 167:

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.

  An organizational unit (OU) named ResearchServers contains the computer accounts of all research servers.

  All domain users are configured to have a minimum password length of eight characters.

  You need to ensure that the minimum password length of the local user accounts on the research servers in the ResearchServers OU is 10 characters.

  What should you do?

  A. Configure a local Group Policy object (GPO) on each research server.
  B. Create and link a Group Policy object (GPO) to the ResearchServers OU.
  C. Create a universal group that contains the research servers. Create a Password Settings object (PSO) and assign the PSO to the group.
  D. Create a global group that contains the research servers. Create a Password Settings object (PSO) and assign the PSO to the group.
  B. Create and link a Group Policy object (GPO) to the ResearchServers OU.

  ---

  For a domain, and you are on a member server or a workstation that is joined to the domain

  1.

  Open Microsoft Management Console (MMC).

  2.

  On the File menu, click Add/Remove Snap-in, and then click Add.

  3.

  Click Group Policy Object Editor, and then click Add.

  4.

  In Select Group Policy Object, click Browse.

  5.

  In Browse for a Group Policy Object, select a Group Policy object (GPO) in the appropriate domain, site, or organizational unit--or create a new one, click OK, and then click Finish.

  6.

  Click Close, and then click OK.

  7.

  In the console tree, click Password Policy.

  Where?

  Group Policy Object [computer name] Policy/Computer Configuration/Windows Settings/Security Settings/Account Policies/Password Policy

  8.

  In the details pane, right-click the policy setting that you want, and then click Properties.

  9.

  If you are defining this policy setting for the first time, select the Define this policy setting check box.

  10.

  Select the options that you want, and then click OK.

• Question 168:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 P.2. Server1 has the Network Policy and Access Services server role installed.

  Your company's security policy requires that certificate-based authentication must be used by some network services.

  You need to identify which Network Policy Server (NPS) authentication methods comply with the security policy.

  Which two authentication methods should you identify? (Each correct answer presents part of the solution. Choose two.)

  A. MS-CHAP
  B. PEAP-MS-CHAP v2
  C. Chap
  D. EAP-TLS
  E. MS-CHAP v2
  B. PEAP-MS-CHAP v2
  D. EAP-TLS

  ---

  PEAP is similar in design to EAP-TTLS, requiring only a server-side PKI certificate to create a secure TLS tunnel to protect user authentication, and uses server-side public key certificates to authenticate the server. When you use EAP with a strong EAP type, such as TLS with smart cards or TLS with certificates, both the client and the server use certificates to verify their identities to each other.

• Question 169:

  Your company has a main office and two branch offices. The main office is located in New York. The branch offices are located in Seattle and Chicago.

  The network contains an Active Directory domain named contoso.com. An Active Directory site exists for each office. Active Directory site links exist between the main office and the branch offices. All servers run Windows Server 2012 R2.

  The domain contains three file servers. The file servers are configured as shown in the following table.

  

  You implement a Distributed File System (DFS) replication group named ReplGroup.

  ReplGroup is used to replicate a folder on each file server. ReplGroup uses a hub and spoke topology. NYC-SVR1 is configured as the hub server.

  You need to ensure that replication can occur if NYC-SVR1 fails.

  What should you do?

  A. Create an Active Directory site link bridge.
  B. Create an Active Directory site link.
  C. Modify the properties of Rep1Group.
  D. Create a connection in Rep1Group.
  D. Create a connection in Rep1Group.

  ---

  Unsure about this answer.

  D:

  

  A: The Bridge all site links option in Active Directory must be enabled. (This option is available in the Active Directory Sites and Services snap-in.) Turning off Bridge all site links can affect the ability of DFS to refer client computers to target computers that have the least expensive connection cost. An Intersite Topology Generator that is running Windows Server 2003 relies on the Bridge all site links option being enabled to generate the intersite cost matrix that DFS requires for its site-costing functionality. If you turn off this option, you must create site links between the Active Directory sites for which you want DFS to calculate accurate site costs. Any sites that are not connected by site links will have the maximum possible cost. For more information about site link bridging, see "Active Directory Replication Topology Technical Reference."

  

  Reference:

  http: //faultbucket. ca/2012/08/fixing-a-dfsr-connection-problem/

  http: //faultbucket. ca/2012/08/fixing-a-dfsr-connection-problem/

  http: //technet. microsoft. com/en-us/library/cc771941. aspx

• Question 170:

  You deploy a Windows Server Update Services (WSUS) server named Server01.

  You plan to use a Group Policy object (GPO) to configure all client computers to use Server01 as a Microsoft Update server and to assign the client computers to computer groups.

  You need to ensure that the computers are assigned to the correct computer groups automatically when the GPO is deployed.

  Which two actions should you perform before you deploy the GPO? Each correct answer presents part of the solution.

  A. From Windows PowerShell, run the Approve-WSUSUpdate cmdlet.
  B. From the Update Services console, modify the Computers option.
  C. From Windows PowerShell, run the Add-WSUSUComputer cmdlet.
  D. From the Update Services console, manually create the computer groups.
  E. From the Update Services console, modify the Products and Classifications options.
  B. From the Update Services console, modify the Computers option.
  D. From the Update Services console, manually create the computer groups.

  ---

  References: https://technet.microsoft.com/en-us/library/dd939829(v=ws.10).aspx