Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 291:

  Your network contains one Active Directory domain named contoso.com. The domain contains two servers named Server01 and Server02 that run Windows Server 2012 R2.

  Server01 is a member of a Distributed File System (DFS) replication group named RG01 that replicates to a folder named RF01.

  You plan to replicate RF01 to Server02. RF01 will be pre-staged on Server02.

  You need export the DFS files and the DFS database from Server01.

  Which tools should you use? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  References: https://technet.microsoft.com/en-us/library/dn495044(v=ws.11).aspx https://technet.microsoft.com/en-us/library/dn482443(v=ws.11).aspx

• Question 292:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  In a remote site, a support technician installs a server named DC10 that runs Windows Server 2012 R2. DC10 is currently a member of a workgroup.

  You plan to promote DC10 to a read-only domain controller (RODC).

  You need to ensure that a user named Contoso\User1 can promote DC10 to a RODC in the contoso.com domain. The solution must minimize the number of permissions assigned to User1.

  What should you do?

  A. From Active Directory Users and Computers, run the Delegation of Control Wizard on the contoso.com domain object.
  B. From Active Directory Administrative Center, pre-create an RODC computer account.
  C. From Ntdsutil, run the local roles command.
  D. Join DC10 to the domain. Run dsmod and specify the /server switch.
  B. From Active Directory Administrative Center, pre-create an RODC computer account.

  ---

  A staged read only domain controller (RODC) installation works in two discrete phases:

  1.

  Staging an unoccupied computer account

  2.

  Attaching an RODC to that account during promotion Reference: Install a Windows Server 2012 R2 Active Directory Read-Only Domain Controller (RODC)

• Question 293:

  You have a server named Server4 that runs Windows Server 2012 R2. Server4 has the Windows Deployment Services server role installed. Server4 is configured as shown in the exhibit. (Click the Exhibit button.)

  

  To answer, complete each statement according to the information presented in the exhibit. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 294:

  You have a file server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.

  Files created by users in the human resources department are assigned the Department classification property automatically.

  You are configuring a file management task named Task1 to remove user files that have not been accessed for 60 days or more.

  You need to ensure that Task1 only removes files that have a Department classification property of human resources. The solution must minimize administrative effort.

  What should you configure on Task1?

  A. Configure a file screen
  B. Create a condition
  C. Create a classification rule
  D. Create a custom action
  B. Create a condition

  ---

  Create a File Expiration Task The following procedure guides you through the process of creating a file management task for expiring files. File expiration tasks are used to automatically move all files that match certain criteria to a specified expiration directory, where an administrator can then back those files up and delete them. Property conditions. Click Add to create a new condition based on the file's classification. This will open the Property Condition dialog box, which allows you to select a property, an operator to perform on the property, and the value to compare the property against. After clicking OK, you can then create additional conditions, or edit or remove an existing condition.

• Question 295:

  Your network contains one Active Directory domain named contoso.com.

  You pilot DirectAccess on the network.

  During the pilot deployment, you enable DirectAccess only for a group named Contoso\Test Computers.

  Once the pilot is complete, you need to enable DirectAccess for all of the client computers in the domain.

  What should you do?

  A. From Windows PowerShell, run the Set-DAClient cmdlet.
  B. From Group Policy Management, modify the security filtering of an object named Direct Access Client Settings Group Policy.
  C. From Active Directory Users and Computers, modify the membership of the Windows Authorization Access Group.
  D. From Windows PowerShell, run the Set-DirectAccess cmdlet.
  E. From Group Policy Management, modify the security filtering of an object named Direct Access Server Settings Group Policy.
  F. From the Remote Access Management Console, run the Remote Access Server Setup wizard.
  G. From Windows PowerShell, run the Set-DAServer cmdlet.
  B. From Group Policy Management, modify the security filtering of an object named Direct Access Client Settings Group Policy.

  ---

  References: https://technet.microsoft.com/en-GB/library/jj134239.aspx

• Question 296:

  Your network contains a DNS server named Server1. Server1 hosts a DNS zone for contoso.com.

  You need to ensure that DNS clients cache records from contoso.com for a maximum of one hour.

  Which value should you modify in the Start of Authority (SOA) record? To answer, select the appropriate setting in the answer area.

  Hot Area:

  

  

  ---

  Minimum TTL - The minimum time-to-live value applies to all resource records in the zone file. This value is supplied in query responses to inform other servers how long they should keep the data in cache. The default value is 3,600.

  Reference: The Structure of a DNS SOA Record https://support.microsoft.com/en-us/kb/163971

• Question 297:

  You have three Windows Server Update Services (WSUS) servers named Server01, Server02, Server03. Server01 synchronizes from Microsoft Update.

  You need to ensure that only Server02 and Server03 can synchronize from Server01.

  What should you do on Server01?

  A. Modify %ProgramFiles%\Update Services\ WebServices\serversyncwebservice\Web.config.
  B. From the Update Services console, modify the Automatic Approvals options.
  C. Modify %ProgramFiles%\Update Services\ WebServices\serversyncwebservice\SimpleAuth.asmx.
  D. From the Update Services console, modify the Update Source and Proxy Server options.
  D. From the Update Services console, modify the Update Source and Proxy Server options.

  ---

  References: https://technet.microsoft.com/en-us/library/hh852346(v=ws.11).aspx

• Question 298:

  Your network contains two Active Directory forests named contoso.com and adatum.com. The contoso.com forest contains a server named Server1.contoso.com. The adatum.com forest contains a server named server2. adatum.com. Both

  servers have the Network Policy Server role service installed.

  The network contains a server named Server3. Server3 is located in the perimeter network and has the Network Policy Server role service installed.

  You plan to configure Server3 as an authentication provider for several VPN servers.

  You need to ensure that RADIUS requests received by Server3 for a specific VPN server are always forwarded to Server1.contoso.com.

  Which two should you configure on Server3? (Each correct answer presents part of the solution. Choose two.)

  A. Remediation server groups
  B. Remote RADIUS server groups
  C. Connection request policies
  D. Network policies
  E. Connection authorization policies
  B. Remote RADIUS server groups
  C. Connection request policies

  ---

  To configure NPS as a RADIUS proxy, you must create a connection request policy that contains all of the information required for NPS to evaluate which messages to forward and where to send the messages.

  When you configure Network Policy Server (NPS) as a Remote Authentication Dial-In User Service (RADIUS) proxy, you use NPS to forward connection requests to RADIUS servers that are capable of processing the connection requests because they can perform authentication and authorization in the domain where the user or computer account is located. For example, if you want to forward connection requests to one or more RADIUS servers in untrusted domains, you can configure NPS as a RADIUS proxy to forward the requests to the remote RADIUS servers in the untrusted domain. To configure NPS as a RADIUS proxy, you must create a connection request policy that contains all of the information required for NPS to evaluate which messages to forward and where to send the messages.

  When you configure a remote RADIUS server group in NPS and you configure a connection request policy with the group, you are designating the location where NPS is to forward connection requests.

  

  References:

  http: //technet. microsoft. com/en-us/library/cc754518. aspx http: //technet. microsoft. com/en-us/library/cc754518. aspx http: //technet. microsoft. com/en-us/library/cc754518. aspx

• Question 299:

  Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2.

  You discover that client computers authenticate to both domain controllers.

  You need to ensure that client computers only authenticate to DC2 if DC1 fails. The solution must be persistent.

  What should you do?

  A. From Registry Editor, create the LdapSrvPriority value.
  B. From Registry Editor, create the LdapSrvWeight value.
  C. From DNS Manager, modify the priority value of the service location (SRV) records.
  D. From DNS Manager, modify the weight value of the service location (SRV) records.
  C. From DNS Manager, modify the priority value of the service location (SRV) records.

• Question 300:

  Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 is configured as a Network Policy Server (NPS) server and as a DHCP

  server.

  You need to ensure that only computers that send a statement of health are checked for Network Access Protection (NAP) health requirements.

  Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)

  A. The Called Station ID constraints
  B. The MS-Service Class conditions
  C. The Health Policies conditions
  D. The NAS Port Type constraints
  E. The NAP-Capable Computers conditions
  C. The Health Policies conditions
  E. The NAP-Capable Computers conditions

  ---

  Reference: http://technet.microsoft.com/en-us/library/cc753603.aspx http://technet.microsoft.com/en-us/library/cc731220(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc731560.aspx