Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 231:

  Your network contains two servers named Server1 and Server2. Both servers run Windows Server 2012 R2 and have the DNS Server server role installed.

  On Server1, you create a standard primary zone named contoso.com.

  You need to ensure that Server2 can host a secondary zone for contoso.com.

  What should you do from Server1?

  A. Add Server2 as a name server.
  B. Create a trust anchor named Server2.
  C. Convert contoso.com to an Active Directory-integrated zone.
  D. Create a zone delegation that points to Server2.
  A. Add Server2 as a name server.

  ---

  Typically, adding a secondary DNS server to a zone involves three steps:

  1.

  On the primary DNS server, add the prospective secondary DNS server to the list of name servers that are authoritative for the zone.

  2.

  On the primary DNS server, verify that the transfer settings for the zone permit the zone to be transferred to the prospective secondary DNS server.

  3.

  On the prospective secondary DNS server, add the zone as a secondary zone.

  You must add a new Name Server. To add a name server to the list of authoritative servers for the zone, you must specify both the server's IP address and its DNS name. When entering names, click Resolve to resolve the name to its IP

  address prior to adding it to the list.

  Secondary zones cannot be AD-integrated under any circumstances.

  You want to be sure Server2 can host, you do not want to delegate a zone. Secondary Domain Name System (DNS) servers help provide load balancing and fault tolerance. Secondary DNS servers maintain a read-only copy of zone data

  that is transferred periodically from the primary DNS server for the zone. You can configure DNS clients to query secondary DNS servers instead of (or in addition to) the primary DNS server for a zone, reducing demand on the primary server

  and ensuring that DNS queries for the zone will be answered even if the primary server is not available.

  How-To: Configure a secondary DNS Server in Windows Server 2012

  We need to tell our primary DNS that it is ok for this secondary DNS to pull information from it. Otherwise replication will fail and you will get this big red X.

  

  Head over to your primary DNS server, launch DNS manager, expand Forward Lookup Zones, navigate to your primary DNS zone, right-click on it and go to Properties. Go to "Zone Transfers" tab, by default, for security reasons, the "Allow zone transfers: " is un-checked to protect your DNS information. We need to allow zone transfers, if you value your DNS records, you do not want to select "To any server" but make sure you click on "Only to servers listed on the Name Servers tab".

  

  Head over to the "Name Servers" tab, click Add.

  

  You will get "New Name Server Record" window, type in the name of your secondary DNS server. it is always better to validate by name not IP address to avoid future problems in case your IP addresses change. Once done, click OK.

  

  You will see your secondary DNS server is now added to your name servers selection, click OK.

  

  Now if you head back to your secondary DNS server and refresh, the big red X will go away and your primary zone data will populate.

  

  Your secondary DNS is fully setup now. You cannot make any DNS changes from your secondary DNS. Secondary DNS is a read-only DNS, Any DNS changes have to be done from the primary DNS.

  References: http: //technet. microsoft. com/en-us/library/cc816885%28v=ws. 10%29. aspx http: //technet. microsoft. com/en-us/library/cc816814%28v=ws. 10%29. aspx http: //blog. hyperexpert. com/how-to-configure-a-secondary-dns-server-in-windowsserver- 2012/ http: //technet. microsoft. com/en-us/library/cc770984. aspx http: //support. microsoft. com/kb/816101 http: //technet. microsoft. com/en-us/library/cc753500. aspx http: //technet. microsoft. com/en-us/library/cc771640(v=ws. 10). aspx http: //technet. microsoft. com/en-us/library/ee649280(v=ws. 10). aspx

• Question 232:

  You network contains one Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers are virtual machines that run Windows Server 2012 R2. The functional level of the domain and the forest is Windows Server 2012 R2.

  You plan to decommission a domain controller that holds several operation master roles.

  In the table below, select which tool to use to transfer the domain naming master and which tool to use to transfer the infrastructure master.

  NOTE: Make only one selection in each column.

  Hot Area:

  

  

  ---

  References: https://support.microsoft.com/en-us/help/324801/how-to-view-and-transfer-fsmo-roles-in-windows-server-2003

• Question 233:

  You have a file server that has the File Server Resource Manager role service installed.

  You open the File Server Resource Manager console as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that all of the folders in Folder1 have a 100-MB quota limit. What should you do?

  A. Run the Update FsrmQuotacmdlet.
  B. Run the Update-FsrmAutoQuotacmdlet.
  C. Create a new quota for Folder1.
  D. Modify the quota properties of Folder1.
  C. Create a new quota for Folder1.

  ---

  By using auto apply quotas, you can assign a quota template to a parent volume or folder. Then File Server Resource Manager automatically generates quotas that are based on that template. Quotas are generated for each of the existing subfolders and for subfolders that you create in the future.

  

  Ref: http://technet.microsoft.com/en-us/library/cc731577.aspx

• Question 234:

  Your network contains an Active Directory domain named contoso.com. You have a standard primary zone named contoso.com.

  You need to ensure that only users who are members of a group named Group1 can create DNS records in the contoso.com zone. All other users must be prevented from creating, modifying, or deleting DNS records in the zone. What should you do first?

  A. From the properties of the zone, change the zone type.
  B. From the properties of the zone, modify the start of authority (SOA) record.
  C. Run the New Delegation wizard for the zone.
  D. Run the Zone signing Wizard for the zone.
  A. From the properties of the zone, change the zone type.

• Question 235:

  You manage a server that runs Windows Server 2012 R2. The server has the Windows Deployment Services server role installed.

  You have a desktop computer that has the following configuration:

  Computer name: Computer1

  Operating system: Windows 8

  MAC address: 20-CF-30-65-D0-87

  GUID: 979708BF-C04B-4525-9FE0-C4150BB6C618

  You need to configure a pre-staged device for Computer1 in the Windows Deployment Services console.

  Which two values should you assign to the device ID? (Each correct answer presents a complete solution. Choose two.)

  A. 20CF3065D08700000000000000000000
  B. 979708BFC04B45259FE0C4150BB6C618
  C. 979708BF-C04B-452S-9FE0-C4150BB6C618
  D. 0000000000000000000020CF306SD087
  E. 00000000-0000-0000-0000-C41S0BB6C618
  C. 979708BF-C04B-452S-9FE0-C4150BB6C618
  D. 0000000000000000000020CF306SD087

  ---

  In the text box, type the client computer's MAC address preceded with twenty zeros or the globally unique identifier (GUID) in the format: {XXXXXXXX-XXXX-XXXX-XXX- XXXXXXXXXXXX}.

  *

  To add or remove pre-staged client to/from AD DS, specify the name of the computer or the device ID, which is a GUID, media access control (MAC) address, or Dynamic Host Configuration Protocol (DHCP) identifier associated with the

  computer.

  *

  Example: Remove a device by using its ID from a specified domain This command removes the pre-staged device that has the specified ID. The cmdlet searches the domain named TSQA.contoso.com for the device.

  Windows PowerShell

  PS C:\> Remove-WdsClient -DeviceID "5a7a1def-2e1f-4a7b-a792-ae5275b6ef92" -Domain -DomainName "TSQA.contoso.com"

• Question 236:

  Your company is testing DirectAccess on Windows Server 2012 R2.

  Users report that when they connect to the corporate network by using DirectAccess, access to Internet websites and Internet hosts is slow. The users report that when they disconnect from DirectAccess, access to the Internet websites and

  the Internet hosts is much faster.

  You need to identify the most likely cause of the performance issue.

  What should you identify?

  A. DirectAccess uses a self-signed certificate.
  B. Force tunneling is enabled.
  C. The corporate firewall blocks TCP port 8080.
  D. The DNS suffix list is empty.
  B. Force tunneling is enabled.

• Question 237:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You discover that the performance of Server1 is poor. The results of a performance report generated on Server1 are shown in the following table.

  

  You need to identify the cause of the performance issue. What should you identify?

  A. Driver malfunction
  B. Insufficient RAM
  C. Excessive paging
  D. NUMA fragmentation
  A. Driver malfunction

  ---

  Processor: %DPC Time. Much like the other values, this counter shows the amount of time that the processor spends servicing DPC requests. DPC requests are more often than not associated with the network interface.

  Processor: % Interrupt Time. This is the percentage of time that the processor is spending on handling Interrupts. Generally, if this value exceeds 50% of the processor time you may have a hardware issue. Some components on the

  computer can force this issue and not really be a problem. For example a programmable I/O card like an old disk controller card, can take up to 40% of the CPU time. A NIC on a busy IIS server can likewise generate a large percentage of

  processor activity.

  Processor: % User Time. The value of this counter helps to determine the kind of processing that is affecting the system. Of course the resulting value is the total amount of non-idle time that was spent on User mode operations. This

  generally means application code.

  Processor: %Privilege Time. This is the amount of time the processor was busy with Kernel mode operations. If the processor is very busy and this mode is high, it is usually an indication of some type of NT service having difficulty, although

  user mode programs can make calls to the Kernel mode NT components to occasionally cause this type of performance issue.

  Memory: Pages/sec. This value is often confused with Page Faults/sec. The Pages/sec counter is a combination of Pages Input/sec and Pages Output/sec counters. Recall that Page Faults/sec is a combination of hard page faults and soft

  page faults. This counter, however, is a general indicator of how often the system is using the hard drive to store or retrieve memory associated data.

  References:

  http: //technet. microsoft. com/en-us/library/cc768048. aspx

• Question 238:

  Your network contains an Active Directory domain named adatum.com. The domain contains 10 domain controllers that run Windows Server 2012 R2.

  You plan to create a new Active Directory-integrated zone named contoso.com.

  You need to ensure that the new zone will be replicated to only four of the domain controllers.

  Which of following action should you do first?

  A. Create an Active Directory site link.
  B. Create an application directory partition.
  C. Change the zone replication scope.
  D. Create an Active Directory connection object.
  B. Create an application directory partition.

• Question 239:

  You have a server named WSUS1 that runs Windows Server 2012 R2. WSUS1 has the Windows Server Update Services server role installed and has one volume.

  You add a new hard disk to WSUS1 and then create a volume on the hard disk.

  You need to ensure that the Windows Server Update Services (WSUS) update files are stored on the new volume.

  What should you do?

  A. From the Update Services console, configure the Update Files and Languages option.
  B. From the Update Services console, run the Windows Server Update Services Configuration Wizard.
  C. From a command prompt, run wsusutil.exe and specify the export parameter.
  D. From a command prompt, run wsusutil.exe and specify the movecontent parameter.
  D. From a command prompt, run wsusutil.exe and specify the movecontent parameter.

  ---

  Local Storage Considerations If you decide to store update files on your server, the recommended minimum disk size is 30 GB. However, depending on the synchronization options you specify, you might need to use a larger disk. For example, when specifying advanced

  synchronization options, as in the following procedure, if you select options to download multiple languages and/or the option to download express installation files, your server disk can easily reach 30 GB. Therefore if you choose any of these

  options, install a larger disk (for example, 100 GB).

  If your disk gets full, you can install a new, larger disk and then move the update files to the new location. To do this, after you create the new disk drive, you will need to run the WSUSutil.exetool (with the movecontent command) to move the

  update files to the new disk. For this procedure, see Managing WSUS from the Command Line.

  For example, if D:\WSUS1 is the new path for local WSUS update storage, D:\move. log is the path to the log file, and you wanted to copy the old files to the new location, you would type: wsusutil.exe movecontent D:\WSUS1\ D:\move. Log.

  Note: If you do not want to use WSUSutil.exe to change the location of local WSUS update storage, you can also use NTFS functionality to add a partition to the current location of local WSUS update storage. For more information about

  NTFS, go to Help and Support Center in Windows Server 2003.

  Syntax

  At the command line %drive%\Program Files\Update Services\Tools>, type:

  wsusutilmovecontentcontentpathlogfile -skipcopy [/?]

  The parameters are defined in the following table. contentpath - the new root for content files. The path must exist. logfile - the path and file name of the log file to create. -skipcopy - indicates that only the server configuration should be

  changed, and that the content files should not be copied.

  /help or /? - displays command-line help for movecontent command.

  References:

  http: //blogs.technet.com/b/sus/archive/2008/05/19/wsus-how-to-change-the-location- where-wsus-stores-updates-locally.aspx

  http: //technet.microsoft.com/en-us/library/cc720475(v=ws.10).aspx http: //technet.microsoft.com/en-us/library/cc708480%28v=ws.10%29.aspx http: //technet.microsoft.com/en-us/library/cc720466(v=ws.10).aspx http: //technet.microsoft.com/

  en-us/library/cc708480%28v=ws.10%29.aspx

• Question 240:

  You have a server named Server 1.

  You enable BitLocker Drive Encryption (BitLocker) on Server 1.

  You need to change the password for the Trusted Platform Module (TPM) chip.

  What should you run on Server1?

  A. Initialize-Tpm
  B. Import-TpmOwnerAuth
  C. bdehdcfg.exe
  D. tpmvscmgr.exe
  B. Import-TpmOwnerAuth

  ---

  References: https://docs.microsoft.com/en-us/powershell/module/trustedplatformmodule/Import-TpmOwnerAuth?view=win10-ps