Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 241:

  Your network contains a single Active Directory Domain named contoso.com. The domain contains a member server named server 1 that runs Windows Server 2012 R2.

  Server 1 has the windows Server Updates server role installed and is configured download updates from the Microsoft Update servers.

  You need to ensure that Server 1 only downloads critical Updates from the Microsoft Update servers.

  What should you do from the update Services console?

  A. from the Automatic Approvals option, configure the Update Rules settings.
  B. from the products and Classifications options, configure the products settings.
  C. From the Update File and languages options, configure the Update Files settings
  D. from the products and classifications option, configure the classifications settings.
  C. From the Update File and languages options, configure the Update Files settings

• Question 242:

  Your network contains an Active Directory domain named contoso.com.

  You need to install and configure the Web Application Proxy role service. What should you do?

  A. Install the Active Directory Federation Services server role and the Remote Access server role on different servers.
  B. Install the Active Directory Federation Services server role and the Remote Access server role on the same server.
  C. Install the Web Server (IIS) server role and the Application Server server role on the same server.
  D. Install the Web Server (IIS) server role and the Application Server server role on different servers.
  A. Install the Active Directory Federation Services server role and the Remote Access server role on different servers.

  ---

  Web Application Proxy is a new Remote Access role service in Windows Server?2012 R2.

  

• Question 243:

  Your network contains an Active Directory domain named contoso.com. The domain contains the users shown in the following table.

  

  You have a Network Policy Server (NPS) server that has the network policies shown in the following table.

  User1, User2, and User3 plan to connect to the network by using a VPN. You need to identify which network policy will apply to each user.

  What should you identify?

  To answer, select the appropriate policy for each user in the answer area.

  Hot Area:

  

  

• Question 244:

  Your network contains an Active Directory named contoso.com.

  You have users named User1 and user2.

  The Network Access Permission for User1 is set to Control access through NPS Network Policy. The Network Access Permission for User2 is set to Allow access.

  A policy named Policy1 is shown in the Policy1 exhibit. (Click the Exhibit button.)

  

  A policy named Policy2 is shown in the Policy2 exhibit. (Click the Exhibit button.)

  

  A policy named Policy3 is shown in the Policy3 exhibit. (Click the Exhibit button.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 245:

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.

  You need to audit successful and failed attempts to read data from USB drives on the servers.

  Which two objects should you configure?

  To answer, select the appropriate two objects in the answer area.

  Hot Area:

  

  

• Question 246:

  Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.

  The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify which security principals are authorized to have their password cached on RODC1.

  Which cmdlet should you use?

  A. Get-ADGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  F. Get-ADAccountAuthorizationGroup
  G. Get-ADythenticationpolicysilo
  H. Get-ADAuthenticationpolicy
  B. Get-ADDomainControllerPasswordReplicationPolicy

• Question 247:

  You have a file server named Server1 that runs Windows Server 2012 R2.

  A user named User1 is assigned the modify NTFS permission to a folder named C:\shares and all of the subfolders of C:\shares.

  On Server1, you open File Server Resource Manager as shown in the exhibit. (Click the Exhibit button.)

  

  To answer, complete each statement according to the information presented in the exhibit. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 248:

  Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers. The domain controllers are configured as shown in the following table.

  

  Active Directory Recycle Bin is enabled.

  You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago.

  You need to restore the membership of Group1.

  What should you do?

  A. Modify the isRecycledattribute of Group1.
  B. Perform tombstone reanimation.
  C. Perform a non-authoritative restore.
  D. Perform an authoritative restore.
  D. Perform an authoritative restore.

• Question 249:

  Your network contains an Active Directory domain named adatum.com. The domain contains 10 domain controllers that run Windows Server 2012 R2.

  You plan to create a new Active Directory-integrated zone named contoso.com.

  You need to ensure that the new zone will be replicated to only four of the domain controllers.

  What should you do first?

  A. Create an application directory partition.
  B. Create an Active Directory connection object.
  C. Create an Active Directory site link.
  D. Change the zone replication scope.
  A. Create an application directory partition.

  ---

  Application directory partitions An application directory partition is a directory partition that is replicated only to specific domain controllers. A domain controller that participates in the replication of a particular application directory partition hosts a replica of that partition. Only domain controllers running Windows Server 2003 can host a replica of an application directory partition.

• Question 250:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8 Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1.

  You make a change to GPO1.

  You need to force all of the computers in OU1 to refresh their Group Policy settings immediately. The solution must minimize administrative effort.

  Which tool should you use?

  A. The Secedit command
  B. The Invoke-GpUpdate cmdlet
  C. Group Policy Object Editor
  D. Server Manager
  B. The Invoke-GpUpdate cmdlet

  ---

  Invoke-GPUpdate

  Schedule a remote Group Policy refresh (gpupdate) on the specified computer.

  Applies To: Windows Server 2012 R2

  The Invoke-GPUpdate cmdlet refreshes Group Policy settings, including security settings that are set on remote computers by scheduling the running of the Gpupdate command on a remote computer. You can combine this cmdlet in a

  scripted fashion to schedule the Gpupdate command on a group of computers.

  The refresh can be scheduled to immediately start a refresh of policy settings or wait for a specified period of time, up to a maximum of 31 days. To avoid putting a load on the network, the refresh times will be offset by a random delay.

  Note:

  Group Policy is a complicated infrastructure that enables you to apply policy settings to remotely configure a computer and user experience within a domain. When the Resultant Set of Policy settings does not conform to your expectations, a

  best practice is to first verify that the computer or user has received the latest policy settings. In previous versions of Windows, this was accomplished by having the user run GPUpdate.exe on their computer. With Windows Server 2012 R2

  and Windows 8, you can remotely refresh Group Policy settings for all computers in an organizational unit (OU) from one central location by using the Group Policy Management Console (GPMC). Or you can use the Invoke-GPUpdate

  Windows PowerShell cmdlet to refresh Group Policy for a set of computers, including computers that are not within the OU structure--for example, if the computers are located in the default computers container. The remote Group Policy

  refresh updates all Group Policy settings, including security settings that are set on a group of remote computers, by using the functionality that is added to the context menu for an OU in the Group Policy Management Console (GPMC).

  When you select an OU to remotely refresh the Group Policy settings on all the computers in that OU, the following operations happen:

  An Active Directory query returns a list of all computers that belong to that OU. For each computer that belongs to the selected OU, a WMI call retrieves the list of signed in users. A remote scheduled task is created to run GPUpdate.exe /

  force for each signed in user and once for the computer Group Policy refresh. The task is scheduled to run with a random delay of up to 10 minutes to decrease the load on the network traffic. This random delay cannot be configured when

  you use the GPMC, but you can configure the random delay for the scheduled task or set the scheduled task to run immediately when you use the Invoke-GPUpdate cmdlet.

  Reference: Force a Remote Group Policy Refresh (GPUpdate)