Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 11:

  You are a network administrator of an Active Directory domain named contoso.com.

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Web Server (IIS) server role installed.

  Server1 will host a web site at URL https: //secure.contoso.com. The application pool identity account of the web site will be set to a domain user account named AppPool1.

  You need to identify the setspn.exe command that you must run to configure the appropriate Service Principal Name (SPN) for the web site.

  What should you run?

  To answer, drag the appropriate objects to the correct location. Each object may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

• Question 12:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1.

  You need to create an Active Directory snapshot on DC1.

  Which four commands should you run?

  To answer, move the four appropriate commands from the list of commands to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 13:

  Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1.

  Your company implements DirectAccess.

  A user named User1 works at a customer's office. The customer's office contains a server named Server1.

  When User1 attempts to connect to Server1, User1 connects to Server1 in adatum.com.

  You need to provide User1 with the ability to connect to Server1 in the customer's office.

  Which Group Policy option should you configure?

  To answer, select the appropriate option in the answer area.

  Hot Area:

  

  

• Question 14:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that has the Network Policy Server server role installed.

  The domain contains a server named Server2 that is configured for RADIUS accounting.

  Server1 is configured as a VPN server and is configured to forward authentication requests to Server2.

  You need to ensure that only Server2 contains event information about authentication requests from connections to Server1.

  Which two nodes should you configure from the Network Policy Server console?

  To answer, select the appropriate two nodes in the answer area.

  Hot Area:

  

  

• Question 15:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.

  A local account named Admin1 is a member of the Administrators group on Server1.

  You need to generate an audit event whenever Admin1 is denied access to a file or folder.

  What should you run?

  A. auditpol.exe /set /userradmin1 /failure: enable
  B. auditpol.exe /set /user: admin1 /category: "detailed tracking" /failure: enable
  C. auditpol.exe /resourcesacl /set /type: file /user: admin1 /failure
  D. auditpol.exe /resourcesacl /set /type: key /user: admin1 /failure /access: ga
  C. auditpol.exe /resourcesacl /set /type: file /user: admin1 /failure

  ---

  http: //technet. microsoft. com/en-us/library/ff625687. aspx To set a global resource SACL to audit successful and failed attempts by a user to perform generic read and write functions on files or folders: auditpol /resourceSACL /set /type: File /user: MYDOMAINmyuser /success /failure /access: FRFW http: //technet.microsoft.com/en-us/library/ff625687%28v=ws.10%29.aspx Syntax auditpol /resourceSACL [/set /type: [/success] [/failure] /user: [/access: ]] [/remove /type: /user: [/type: ]] [/clear [/type: ]] [/view [/user: ] [/type: ]] References: http: //technet. microsoft. com/en-us/library/ff625687%28v=ws.10%29. aspx http: //technet. microsoft. com/en-us/library/ff625687%28v=ws.10%29. aspx http: //technet. microsoft. com/en-us/library/ff625687.aspx http: //technet. microsoft. com/en-us/library/ff625687%28v=ws.10%29.aspx

• Question 16:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2008 R2.

  You plan to test Windows Server 2012 R2 by using native-boot virtual hard disks (VHDs).

  You attach a new VHD to Server1.

  You need to install Windows Server 2012 R2 in the VHD.

  What should you do?

  A. Run imagex.exe and specify the /append parameter.
  B. Run dism.exe and specify the /apply-image parameter.
  C. Run imagex.exe and specify the /export parameter.
  D. Run dism.exe and specify the /append-image parameter.
  B. Run dism.exe and specify the /apply-image parameter.

  ---

  On the destination computer, you will create a structure for the partitions where you apply your images. The partition structure on the destination computer must match the partition structure of the reference computer. If you apply an image to a volume with an existing Windows installation, files from the previous installation may not be deleted. Format the volume by using a tool such as DiskPart before applying the new image.

• Question 17:

  Your network contains an Active Directory forest named contoso.com.

  The domain contains three servers. The servers are configured as shown in the following table.

  

  You plan to implement the Bitlocker Drive Encryption (Bitlocker) Network Unlock feature

  You need to identify which server role must be deployed to the network to support the planned implementation.

  Which role should you identify?

  A. Network Policy and Access Services
  B. Volume Activation Services
  C. Windows Deployment Services
  D. Active Directory Rights Management Services
  C. Windows Deployment Services

  ---

  Windows Deployment Services (WDS) is a server role that enables you to remotely deploy Windows operating systems. You can use it to set up new computers by using a network- based installation. This means that you do not have to install each operating system directly from a CD, USB drive or DVD. To use Windows Deployment Services, you should have a working knowledge of common desktop deployment technologies and networking components, including Dynamic Host Configuration Protocol (DHCP), Domain Name System (DNS), and Active Directory Domain Services (AD DS). It is also helpful to understand the Preboot execution Environment (also known as Pre-Execution Environment).

• Question 18:

  Your network contains an Active Directory domain named contoso.com. The domain contains six domain controllers. The domain controllers are configured as shown in the following table.

  

  The network contains a server named Server1 that has the Hyper-V server role installed. DC6 is a virtual machine that is hosted on Server1.

  You need to ensure that you can clone DC6.

  What should you do?

  A. Transfer the schema master to DC6.
  B. Transfer the PDC emulator to DC5.
  C. Transfer the schema master to DC4.
  D. Transfer the PDC emulator to DC2.
  D. Transfer the PDC emulator to DC2.

  ---

  A deployed Windows Server 2012 domain controller (virtualized or physical) that hosts the PDC emulator role (DC1). To verify whether the PDC emulator role is hosted on a Windows Server 2012 domain controller, run the following Windows PowerShell command: Get-ADComputer (Get-ADDomainController iscover ervice "PrimaryDC").name ropertyoperatingsystemversion|fl

  Reference: http: //technet. microsoft. com/en-us/library/hh831734. aspx#steps_deploy_vdc

• Question 19:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  You create a central store for Group Policy.

  You receive a custom administrative template named Template1.admx.

  You need to ensure that the settings in Template1.admx appear in all new Group Policy objects (GPOs).

  What should you do?

  A. From the Default Domain Controllers Policy, add Template1.admx to the Administrative Templates.
  B. From the Default Domain Policy, add Template1.admx to the Administrative Templates.
  C. Copy Template1.admx to \\Contoso.com\SYSVOL\Contoso.com\Policies\PolicyDefinitions\.
  D. Copy Template1.admx to \\Contoso.com\NETLOGON.
  C. Copy Template1.admx to \\Contoso.com\SYSVOL\Contoso.com\Policies\PolicyDefinitions\.

  ---

  Unlike ADM files, ADMX files are not stored in individual GPOs. For domain-based enterprises, administrators can create a central store location of ADMX files that is accessible by anyone with permission to create or edit GPOs.

  

• Question 20:

  Your network contains an Active Directory domain named contoso.com. The domain contains 30 user accounts that are used for network administration. The user accounts are members of a domain global group named Group1.

  You identify the security requirements for the 30 user accounts as shown in the following table.

  

  You need to identify which settings must be implemented by using a Password Settings object (PSO) and which settings must be implemented by modifying the properties of the user accounts.

  What should you identify?

  To answer, configure the appropriate settings in the dialog box in the answer area.

  Hot Area: