Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 301:

  Your network contains one Active Directory domain named contoso.com.

  From the Group Policy Management console, you view the details of a Group Policy object (GPO) named GPO1.

  You need to ensure that the comments field of GPO1 contains a detailed description of GPO1.

  What should you do?

  A. From Active Directory Users and Computers, edit the properties of contoso.com/System/Policies/{229DCD27-9D98-ACC2-A6AE-ED765F065FF5}.
  B. Open GPO1 in the Group Policy Management Editor, and then modify the properties of GPO1.
  C. From Notepad, edit \\contoso.com\SYSVOL\ contoso.com\Policies\{229DCD27-9D98- ACC2-A6AE-ED765F065FF5}\gpt.ini.
  D. From Group Policy Management, click View, and then click Customize.
  B. Open GPO1 in the Group Policy Management Editor, and then modify the properties of GPO1.

  ---

  Explanation: Adding a comment to a Group Policy object Open the Group Policy Management Console. Expand the Group Policy Objects node. Right-click the Group Policy object you want to comment and then click Edit . In the console tree,

  right-click the name of the Group Policy object and then click Properties .

  Click the Comment tab.

  Type your comments in the Comment box.

  Click OK

  Reference: Comment a Group Policy Object

  https://technet.microsoft.com/en-us/library/cc770974.aspx

• Question 302:

  Your network contains a Hyper-V host named Server1 that hosts 20 virtual machines.

  You need to view the amount of memory resources and processor resources each virtual machine uses currently.

  Which tool should you use on Server1?

  A. Hyper-V Manager
  B. Task Manager
  C. Windows System Resource Manager (WSRM)
  D. Resource Monitor
  A. Hyper-V Manager

• Question 303:

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.

  Client computers run either Windows 7 or Windows 8. All of the client computers have an application named App1 installed.

  The domain contains a Group Policy object (GPO) named GPO1 that is applied to all of the client computers.

  You need to add a system variable named App1Data to all of the client computers.

  Which Group Policy preference should you configure?

  A. Environment
  B. Ini Files
  C. Data Sources
  D. Services
  A. Environment

  ---

  Environment Variable preference items allow you to create, update, replace, and delete user and system environment variables or semicolon-delimited segments of the PATH variable. Before you create an Environment Variable preference item, you should review the behavior of each type of action possible with this extension.

• Question 304:

  Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2003, Windows Server 2008 R2, or Windows Server 2012 R2.

  A support technician accidentally deletes a user account named User1.

  You need to use tombstone reanimation to restore the User1 account.

  Which tool should you use?

  A. Active Directory Administrative Center
  B. Ntdsutil
  C. Ldp
  D. Esentutl
  C. Ldp

  ---

  Use Ldp.exe to restore a single, deleted Active Directory object This feature takes advantage of the fact that Active Directory keeps deleted objects in the database for a period of time before physically removing them. use Ldp.exe to restore a

  single, deleted Active Directory object

  The LPD.exe tool, included with Windows Server 2012, allows users to perform operations against any LDAP-compatible directory, including Active Directory. LDP is used to view objects stored in Active Directory along with their metadata,

  such as security descriptors and replication metadata.

  References:

  http: //www. petri. co. il/manually-undeleting-objects-windows-active-directory-ad. htm http: //www. petri. co. il/manually-undeleting-objects-windows-active-directory-ad. htm http: //technet. microsoft. com/en-us/magazine/2007. 09.

  tombstones. aspx http: //technet. microsoft. com/nl-nl/library/dd379509(v=ws.10). aspx#BKMK_2 http: //technet. microsoft. com/en-us/library/hh875546. aspx http: //technet. microsoft. com/en-us/library/dd560651(v=ws. 10). aspx

• Question 305:

  You have a server that runs Windows Server 2012 R2 and has the Network Policy Server role server role installed.

  You create two network policies named Policy1 and Policy2. You need to configure the policies to meet the following requirements:

  Apply Policy1 to client computers that connect over SSTP by using a Microsoft VPN server only.

  Apply Policy2 to client computers that connect over a wireless network and have an IPv4 address from the 192.168.10.0/24 subnet only.

  Which conditions should you add to each network policy? To answer, drag the appropriate conditions to the correct network policies. Each condition may be used once, more than once, or not at all. You may need to drag the split bar between

  panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 306:

  Your network contains an Active Directory domain named contoso.com.

  You create a user account named User1. The properties of User1 are shown in the exhibit. (Click the Exhibit button.)

  

  You plan to use the User1 account as a service account. The service will forward authentication requests to other servers.

  You need to ensure that you can view the Delegation tab from the properties of the User1 account.

  What should you do first?

  A. Configure the Name Mappings of User1.
  B. Modify the user principal name (UPN) of User1.
  C. Configure a Service Principal Name (SPN) for User1.
  D. Modify the Security settings of User1.
  C. Configure a Service Principal Name (SPN) for User1.

  ---

  If you cannot see the Delegation tab, do one or both of the following:

  Register a Service Principal Name (SPN) for the user account with the Setspn utility in the support tools on your CD. Delegation is only intended to be used by service accounts, which should have registered SPNs, as opposed to a regular

  user account which typically does not have SPNs.

  Raise the functional level of your domain to Windows Server 2003. For more information, see Related Topics.

  

  References: http: //blogs. msdn. com/b/mattlind/archive/2010/01/14/delegation-tab-in-aduc-not- available-until-a-spn-is-set. aspx http: //blogs. msdn. com/b/mattlind/archive/2010/01/14/delegation-tab-in-aduc-not- available-until-a-spn-is-set. aspx http: //technet. microsoft. com/en-us/library/cc739474(v=ws. 10). aspx http: //blogs. msdn. com/b/mattlind/archive/2010/01/14/delegation-tab-in-aduc-not- available-until-a-spn-is-set. aspx