Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 251:

  Your network contains an Active Directory domain named contoso.com.

  You create a new user account named Admin5.

  You need to ensure that Admin5 can create Group Policy objects (GPOs) and link the GPOs to all of the organizational units (OUs) in the domain. Admin5 must be prevented from modifying GPOs created by other administrators.

  Which two actions should you perform? (Each correct answer presents part of the solution.

  Choose two.)

  A. From Active Directory Users and Computers, modify the members of the Network Configuration Operators group.
  B. From Active Directory Users and Computers, modify the Security settings of the Admin5 user account.
  C. From Group Policy Management, click the Group Policy Objects node and modify the Delegation settings.
  D. From Group Policy Management, click the contoso.com node and modify the Delegation settings.
  E. From Active Directory Users and Computers, modify the members of the Group Policy Creator Owners group.
  C. From Group Policy Management, click the Group Policy Objects node and modify the Delegation settings.
  D. From Group Policy Management, click the contoso.com node and modify the Delegation settings.

• Question 252:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Both servers run Windows Server 2012 R2. Both servers have the File and Storage Services server role,

  the DFS Namespaces role service, and the DFS Replication role service installed.

  Server1 and Server2 are part of a Distributed File System (DFS) Replication group named Group1. Server1 and Server2 are separated by a low-speed WAN connection.

  You need to limit the amount of bandwidth that DFS can use to replicate between Server1 and Server2.

  What should you modify?

  A. The referral ordering of the namespace
  B. The staging quota of the replicated folder
  C. The cache duration of the namespace
  D. The schedule of the replication group
  D. The schedule of the replication group

  ---

  Scheduling allows less bandwidth the by limiting the time interval of the replication Does DFS Replication throttle bandwidth per schedule, per server, or per connection? If you configure bandwidth throttling when specifying the schedule, all

  connections for that replication group will use that setting for bandwidth throttling. Bandwidth throttling can be also set as a connection-level setting using DFS Management.

  To edit the schedule and bandwidth for a specific connection, use the following steps:

  In the console tree under the Replication node, select the appropriate replication group. Click the Connections tab, right-click the connection that you want to edit, and then click Properties. Click the Schedule tab, select Custom connection

  schedule and then click Edit Schedule. Use the Edit Schedule dialog box to control when replication occurs, as well as the maximum amount of bandwidth replication can consume.

  

• Question 253:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  The domain contains an organizational unit (OU) named OU1. OU1 contains an OU named OU2. OU2 contains a user named user1.

  User1 is the member of a group named Group1. Group1 is in the Users container.

  You create five Group Policy objects (GPO). The GPOs are configured as shown in the following table.

  

  The Authenticated Users group is assigned the default permissions to all of the GPOs.

  There are no site-level GPOs.

  You need to identify which three GPOs will be applied to User1 and in which order the GPOs will be applied to User1.

  Which three GPOs should you identify in sequence?

  To answer, move the appropriate three GPOs from the list of GPOs to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 254:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Access server role installed.

  You have a client named Client1 that is configured as an 802. IX supplicant.

  You need to configure Server1 to handle authentication requests from Client1. The solution must minimize the number of authentication methods enabled on Server1.

  Which authentication method should you enable? To answer, select the appropriate authentication method in the answer area.

  Hot Area:

  

  

• Question 255:

  Your network contains an Active Directory domain named contoso.com.

  You create a user account named User1. The properties of User1 are shown in the exhibit.

  

  You plan to use the User1 account as a service account. The service will forward authentication requests to other servers.

  You need to ensure that you can view the Delegation tab from the properties of the User1 account.

  What should you do first?

  A. From Active Directory Users and Computers, configure the name Mappings of User1.
  B. from Active Directory Users and Computers, enable the Advance features view option.
  C. From a command prompt, run the scts.exe command.
  D. From a command prompt. run regsvr32.exe command.
  B. from Active Directory Users and Computers, enable the Advance features view option.

• Question 256:

  Your network contains an Active Directory domain. A Group Policy object (GRO) named GPO1 is linked to the domain. GPO1 has the settings shown in the following table. Policy Policy setting Enforce password history 5 passwords remembered Minimum password length 10 characters You import the backup of a GPO named GPO named GPO2. GPO2 has the settings shown in the following table. Policy Policy setting Minimum password length 5 characters Store passwords using reversible encryption Enabled You import the backup of GPO2 into GPO1.

  You need to identify the configurations in GPO1. What should you identify?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

  References: http://www.dell.com/support/article/za/en/zabsdt1/sln283515/windows-server- how-to-import-a-group-policy-objects-settings-into-another-group-policy-object?lang=en

• Question 257:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the Network Policy Server role service installed.

  An administrator creates a Network Policy Server (NPS) network policy named Policy1. You need to ensure that Policy1 applies to L2TP connections only.

  Which condition should you modify?

  To answer, select the appropriate object in the answer area.

  Hot Area:

  

  

• Question 258:

  Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012 R2. The forest contains a single domain.

  You create a Password Settings object (PSO) named PSO1.

  You need to delegate the rights to apply PSO1 to the Active Directory objects in an organizational unit named OU1.

  What should you do?

  A. From Active Directory Users and Computers, run the Delegation of Control Wizard.
  B. From Active Directory Administrative Center, modify the security settings of PSO1.
  C. From Group Policy Management, create a Group Policy object (GPO) and link the GPO to OU1.
  D. From Active Directory Administrative Center, modify the security settings of OU1.
  B. From Active Directory Administrative Center, modify the security settings of PSO1.

  ---

  PSOs cannot be applied to organizational units (OUs) directly. If your users are organized into OUs, consider creating global security groups that contain the users from these OUs and then applying the newly defined finegrained password and account lockout policies to them. If you move a user from one OU to another, you must update user memberships in the corresponding global security groups. Go ahead and hit "OK" and then close out of all open windows. Now that you have created a password policy, we need to apply it to a user/group. In order to do so, you must have "write" permissions on the PSO object. We're doing this in a lab, so I'm Domain Admin. Write permissions are not a problem

  1.

  Open Active Directory Users and Computers (Start, point to Administrative Tools, and then click Active Directory Users and Computers).

  2.

  On the View menu, ensure that Advanced Features is checked.

  3.

  In the console tree, expand Active Directory Users and Computers\yourdomain\System\Password Settings Container

  4.

  In the details pane, right-click the PSO, and then click Properties.

  5.

  Click the Attribute Editor tab.

  6.

  Select the msDS-PsoAppliesTo attribute, and then click Edit.

• Question 259:

  Your network contains a Hyper-V host named Hyperv1. Hyperv1 runs Windows Server 2012 R2.

  Hyperv1 hosts four virtual machines named VM1, VM2, VM3, and VM4. AH of the virtual machines run Windows Server 2008 R2.

  You need to view the amount of memory resources and processor resources that VM4 currently uses.

  Which tool should you use on Hyperv1?

  A. Windows System Resource Manager (WSRM)
  B. Task Manager
  C. Hyper-V Manager
  D. Resource Monitor
  C. Hyper-V Manager

  ---

  Hyper-V Performance Monitoring Tool

  Know which resource is consuming more CPU. Find out if CPUs are running at full capacity or if they are being underutilized. Metrics tracked include Total CPU utilization, Guest CPU utilization, Hypervisor CPU utilization, idle CPU utilization,

  etc.

  WSRM is deprecated starting with Windows Server 2012

• Question 260:

  Your network contains one Active Directory forest. The forest contains a server named Server01. Server01 runs Windows Server 2012 R2.

  You need to list which global object access auditing entries apply to the files and folders on Server01.

  What command should you run? To answer, select the appropriate options in the answer area.

  Hot Area: