Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 261:

  Your network contains two servers named Server1 and Server2. Both servers run Windows Server 2012 R2.

  On Server1, you create a Data Collector Set (DCS) named Data1.

  You need to export Data1 to Server2.

  What should you do first?

  A. Right-click Data1 and click Data Manager.
  B. Right-click Data1 and click Export list.
  C. Right-click Data1 and click Properties.
  D. Right-click Data1 and click Save template.
  D. Right-click Data1 and click Save template.

• Question 262:

  Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2.

  You have a Password Settings object (PSOs) named PSO1.

  You need to view the settings of PSO1.

  Which tool should you use?

  A. Get-ADDefaultDomainPasswordPolicy
  B. Active Directory Administrative Center
  C. Local Security Policy
  D. Get-ADAccountResultantPasswordReplicationPolicy
  B. Active Directory Administrative Center

  ---

  In Windows Server 2012, fine-grained password policy management is made much easier than Windows Server 2008/2008 R2. Windows Administrators not have to use ADSI Edit and configure complicated settings to create the Password Settings Object (PSO) in the Password Settings Container. Instead we can configure fine-grained password policy directly in Active Directory Administrative Center (ADAC).

• Question 263:

  You have a server named Server 1.

  You enable BitLocker Drive Encryption (BitLocker) on Server 1.

  You need to change the password for the Trusted Platform Module (TPM) chip.

  What should you run on Server1?

  A. Manage-bde.exe
  B. Set-TpmOwnerAuth
  C. bdehdcfg.exe
  D. tpmvscmgr.exe
  B. Set-TpmOwnerAuth

  ---

  The Set-TpmOwnerAuthcmdlet changes the current owner authorization value of the Trusted Platform Module (TPM) to a new value. You can specify the current owner authorization value or specify a file that contains the current owner authorization value. If you do not specify an owner authorization value, the cmdlet attempts to read the value from the registry. Use the ConvertTo-TpmOwnerAuthcmdlet to create an owner authorization value. You can specify a new owner authorization value or specify a file that contains the new value.

• Question 264:

  The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify whether deleted objects can be recovered from the Active Directory Recyle Bin.

  Which cmdlet should you use?

  A. Get-ADGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  F. Get-ADAccountAuthorizationGroup
  G. Get-ADAuthenticationpolicySilo
  H. Get-ADAuthenticationpolicy
  E. Get-ADOptionalFeature

• Question 265:

  You have a cluster named Cluster1 that contains two nodes. Both nodes run Windows Server 2012 R2. Cluster1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2.

  You configure a custom service on VM1 named Service1. You need to ensure that VM1 will be moved to a different node if Service1 fails.

  Which cmdlet should you run on Cluster1?

  A. Add-ClusterVmMonitoredItem
  B. Add-ClusterGenericServiceRole
  C. Set-ClusterResourceDependency
  D. Enable VmResourceMetering
  A. Add-ClusterVmMonitoredItem

  ---

  The Add-ClusterVMMonitoredItem cmdlet configures monitoring for a service or an Event Tracing for Windows (ETW) event so that it is monitored on a virtual machine. If the service fails or the event occurs, then the system responds by taking an action based on the failover configuration for the virtual machine resource. For example, the configuration might specify that the virtual machine be restarted.

• Question 266:

  Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 is configured as a Network Policy Server (NPS) server and as a DHCP server.

  You need to log all DHCP clients that have windows Firewall disabled.

  Which three actions should you perform in sequence? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 267:

  Your network contains an Active Directory domain named contoso.com. All users have client computers that run Windows 8.1.

  All computer accounts reside in an organizational unit (OU) named OU1. All of the computer accounts for the marketing department are members of a group named Marketing. All of the computer accounts for the human resources department

  are members of a group named HR Computers.

  You create a Group Policy object (GPO) named GPO1. You link GPO1 to OU1. You configure the Group Policy preferences of GPO1 to add two shortcuts named Link1 and Link2 to the desktop.

  You need to ensure that Link1 only appears on the desktop of client computers that have more than 80 GB of free disk space and that Link2 only appears on the desktop of client computers that have less than 80 GB of free disk space.

  What should you configure?

  A. WMI Filtering
  B. Group Policy Inheritance
  C. Item-level targeting
  D. Security Filtering
  C. Item-level targeting

  ---

  References: https://technet.microsoft.com/en-us/library/dn789189(v=ws.11).aspx

• Question 268:

  Your network contains a DNS server named Server1 that runs Windows Server 2012 R2. Server1 has a zone namedcontoso.com. The network contains a server named Server2 that runs Windows Server 2008 R2. Server1 and Server2 are members ofan Active Directory domain named contoso.com.

  You change the IP address of Server2.

  Several hours later, some users report that they cannot connect to Server2.

  On the affected users' client computers, you flush the DNS client resolver cache, and the users successfully connect to Server2.

  You need to reduce the amount of time that the client computers cache DNS records from contoso.com.

  Which value should you modify in the Start of Authority (SOA) record?To answer, select the appropriate setting in the answer area.

  Hot Area:

  

  

• Question 269:

  Your network contains one Active Directory forest named contoso.com.

  All client computers for the sales department are in an organizational unit (OU) named Sales. All of the sales department computers run Windows 8.1.

  You plan to use Group Policy preferences to map several drives on the sales department computers.

  You need to perform the following actions:

  Create a drive mapping on all of the sales department computers for drive X. If drive X already exists, the current drive mapping should NOT be modified.

  Create a drive mapping on all of the sales department computers for drive Y. If drive Y already exists, the UNC path must be modified, but all other settings must be maintained.

  Which action should you use for each drive mapping? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  Create If a drive mapping doesn't exist for this user for the share "\shareuserDocuments", then create one. If there already is one, don't do anything! It's a kind, gentle sort of policy, it won't overwrite anything you already have, so it has a Green icon associated in the UI.

  Update If that drive mapping exists, it will be updated with the settings specified here. If there are other settings associated with the drive mapping that aren't specified here, they will be maintained. If no drive mapping exists for this share, create it.

  https://blogs.technet.microsoft.com/grouppolicy/2009/10/26/group-policy-preferences-colorful-and-mysteriously-powerful-just-like-windows-7/

• Question 270:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.

  Each time a user receives an access-denied message after attempting to access a folder on Server1, an email notification is sent to a distribution list named DL1.

  You create a folder named Folder1 on Server1, and then you configure custom NTFS permissions for Folder1.

  You need to ensure that when a user receives an access-denied message while attempting to access Folder1, an email notification is sent to a distribution list named DL2. The solution must not prevent DL1 from receiving notifications about

  other access-denied messages. What should you do?

  A. From Server Manager, run the New Share Wizard to create a share for Folder1 by selecting the SMB Share - Advanced option.
  B. From the File Server Resource Manager console, modify the Access-Denied Assistance settings.
  C. From the File Server Resource Manager console, modify the Email Notifications settings.
  D. From Server Manager, run the New Share Wizard to create a share for Folder1 by selecting the SMB Share -Applications option.
  A. From Server Manager, run the New Share Wizard to create a share for Folder1 by selecting the SMB Share - Advanced option.

  ---

  Reference: http://technet.microsoft.com/en-us/library/jj574182.aspx#BKMK_12 When using the email model each of the file shares, you can determine whether access requests to each file share will be received by the administrator, a distribution list that represents the file share owners, or both.

  The owner distribution list is configured by using the SMB Share ?Advanced file share profile in the New Share Wizard in Server Manager.