Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 41:

  You deploy a Windows Server Update Services (WSUS) server named Server01.

  You need to ensure that you can view update reports and computer reports on Server01.

  Which two components should you install? Each correct answer presents part of the solution.

  A. Microsoft XPS Viewer
  B. Microsoft Report Viewer 2008 Redistributable Package
  C. Microsoft SQL Server 2008 R2 Report Builder 3.0
  D. Microsoft.NET Framework 2.0
  E. Microsoft SQL server 2012 Reporting Services (SSRS)
  B. Microsoft Report Viewer 2008 Redistributable Package
  D. Microsoft.NET Framework 2.0

• Question 42:

  You have a server named Server1 that has the Web Server (IIS) server role installed.

  You obtain a Web Server certificate.

  You need to configure a website on Server1 to use Secure Sockets Layer (SSL).

  To which store should you import the certificate?

  To answer, select the appropriate store in the answer area.

  Hot Area:

  

  

• Question 43:

  Your network contains an Active Directory domain named contoso.com. The domain contains a Web server named www.contoso.com. The Web server is available on the Internet.

  You implement DirectAccess by using the default configuration.

  You need to ensure that users never attempt to connect to www.contoso.com by using DirectAccess. The solution must not prevent the users from using DirectAccess to access other resources in contoso.com.

  Which settings should you configure in a Group Policy object (GPO)?

  A. DirectAccess Client Experience Settings
  B. DNS Client
  C. Name Resolution Policy
  D. Network Connections
  C. Name Resolution Policy

  ---

  For DirectAccess, the NRPT must be configured with the namespaces of your intranet with a leading dot (for example, internal.contoso.com or . corp.contoso.com). For a DirectAccess client, any name request that matches one of these namespaces will be sent to the specified intranet Domain Name System (DNS) servers. Include all intranet DNS namespaces that you want DirectAccess client computers to access. There are no command line methods for configuring NRPT rules. You must use Group Policy settings. To configure the NRPT through Group Policy, use the Group Policy add-in at Computer Configuration \Policies\Windows Settings\Name Resolution Policy in the Group Policy object for DirectAccess clients. You can create a new NRPT rule and edit or delete existing rules. For more information, see Configure the NRPT with Group Policy.

• Question 44:

  Your network contains an Active Directory domain named contoso.com. The network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Network Policy and Access Services server role installed.

  You plan to deploy additional servers that have the Network Policy and Access Services server role installed. You must standardize as many settings on the new servers as possible.

  You need to identify which settings can be standardized by using Network Policy Server (NPS) templates.

  Which three settings should you identify? (Each correct answer presents part of the solution. Choose three.)

  A. IP filters
  B. shared secrets
  C. health policies
  D. network policies
  E. connection request policies
  A. IP filters
  B. shared secrets
  C. health policies

• Question 45:

  Your network contains two servers named Served and Server 2. Both servers run Windows Server 2012 R2 and have the DNS Server server role installed.

  On Server1, you create a standard primary zone named contoso.com.

  You plan to create a standard primary zone for ad.contoso.com on Server2.

  You need to ensure that Server1 forwards all queries for ad.contoso.com to Server2.

  What should you do from Server1?

  A. Create a trust anchor named Server2.
  B. Create a conditional forward that points to Server2.
  C. Add Server2 as a name server.
  D. Create a zone delegation that points to Server2.
  D. Create a zone delegation that points to Server2.

  ---

  You can divide your Domain Name System (DNS) namespace into one or more zones. You can delegate management of part of your namespace to another location or department in your organization by delegating the management of the corresponding zone. For more information, see Understanding Zone Delegation.

  

• Question 46:

  Your network contains an Active Directory domain named adatum.com. The domain contains a member server named Server1 and 10 web servers. All of the web servers are in an organizational unit (OU) named WebServers_OU. All of the servers run Windows Server 2012 R2.

  On Server1, you need to collect the error events from all of the web servers. The solution must ensure that when new web servers are added to WebServers_OU, their error events are collected automatically on Server1.

  What should you do?

  A. On Server1, create a source computer initiated subscription. From a Group Policy object (GPO), configure the Configure target Subscription Manager setting.
  B. On Server1, create a source computer initiated subscription. From a Group Policy object (GPO), configure the Configure forwarder resource usage setting.
  C. On Server1, create a collector initiated subscription. From a Group Policy object (GPO), configure the Configure forwarder resource usage setting.
  D. On Server1, create a collector initiated subscription. From a Group Policy object (GPO), configure the Configure target Subscription Manager setting.
  A. On Server1, create a source computer initiated subscription. From a Group Policy object (GPO), configure the Configure target Subscription Manager setting.

  ---

  Source-initiated subscriptions allow you to define a subscription on an event collector computer without defining the event source computers, and then multiple remote event source computers can be set up (using a group policy setting) to forward events to the event collector computer. This differs from a collector initiated subscription because in the collector initiated subscription model, the event collector must define all the event sources in the event subscription.

  1.

  Run the following command from an elevated privilege command prompt on the Windows Server domain controller to configure Windows Remote Management: winrm qc .

  2.

  Start group policy by running the following command: %SYSTEMROOT%\System32\gpedit. msc.

  3.

  Under the Computer Configuration node, expand the Administrative Templates node, then expand the Windows Components node, then select the Event Forwarding node.

  4.

  Right-click the SubscriptionManager setting, and select Properties. Enable the SubscriptionManager setting, and click the Show button to add a server address to the setting. Add at least one setting that specifies the event collector computer. The SubscriptionManager Properties window contains an Explain tab that describes the syntax for the setting.

  5.

  After the SubscriptionManager setting has been added, run the following command to ensure the policy is applied: gpupdate /force.

  If you want to configure a source computer-initiated subscription, you need to configure the following group policies on the computers that will act as the event forwarders:

  * (A) Configure Target Subscription Manager This policy enables you to set the location of the collector computer.

• Question 47:

  Your network contains two services named Server1 and Server2. Both servers run Windows Server 2012 R2. Server1 is a VPN server and Server2 is a Network Policy Server (NPS) server.

  Server1 is configured to assign IP address to VPN clients by using a static IP address pool of 192.168.10.220.

  On Server1, you configure Server2 as an authentication provider.

  You need to ensure that users can establish VPN connections to Server1. Which two should you configure on Server2? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. a connection request policy
  B. a RADIUS client for Server1
  C. a RADIUS client for each VPN client
  D. a network policy
  E. a remote RADIUS server group that contains Server1
  A. a connection request policy
  B. a RADIUS client for Server1

  ---

  References: https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-crp- configure https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-radius- clients-configure

• Question 48:

  Your network contains one Active Directory domain named contoso.com.

  You pilot DirectAccess on the network.

  During the pilot deployment, you enable DirectAccess only (or a group named Contoso\Test Computers.

  Once the pilot is complete, you need to enable DirectAccess for all of the client computers in the domain.

  What should you do?

  A. From Windows PowerShell, run the Set-DAServer cmdlet.
  B. From Remote Access Management Console, run the remote access Server Setup wizard.
  C. From Group Policy Management, modify the security filtering of an object named Direct Access Server Setting Group Policy
  D. From Group Policy Management, modify the security filtering of an object named Direct Access Client Setting Group Policy.
  D. From Group Policy Management, modify the security filtering of an object named Direct Access Client Setting Group Policy.

  ---

  The simplified Direct Access wizard creates two GPOs and liks them to the domain:

  "DirectAccess Server Settings" contains Connection Security Settings and Firewall inboud rules for Direct Access. "DirectAccess Clients Settings" sets name resolution policy for NLS validation. Both GPOs have security filtering applied, with

  DirectAccess Clients Settings applied only to the DirectAccess enabled clients.

  http://www.windowsecurity.com/articles-tutorials/Windows_Server_2012_Security/windows- server-2012-simplified-directaccess-wizard-overview-Part1.html

• Question 49:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1 is backed up daily.

  The domain has the Active Directory Recycle Bin enabled.

  During routine maintenance, you delete 500 inactive user accounts and 100 inactive groups. One of the deleted groups is named Group1. Some of the deleted user accounts are members of some of the deleted groups.

  For documentation purposes, you must provide a list of the members of Group1 before the group was deleted.

  You need to identify the names of the users who were members of Group1 prior to its deletion.

  You want to achieve this goal by using the minimum amount of administrative effort.

  What should you do first?

  A. Mount the most recent Active Directory backup.
  B. Reactivate the tombstone of Group1.
  C. Perform an authoritative restore of Group1.
  D. Use the Recycle Bin to restore Group1.
  A. Mount the most recent Active Directory backup.

  ---

  The Active Directory Recycle Bin does not have the ability to track simple changes to objects.

  If the object itself is not deleted, no element is moved to the Recycle Bin for possible recovery in the future. In other words, there is no rollback capacity for changes to object properties, or, in other words, to the values of these properties.

• Question 50:

  You have a server that runs Windows Server 2012 R2.

  You have an offline image named Windows2012.vhd that contains an installation of Windows Server 2012 R2.

  You plan to apply several updates to Windows2012.vhd.

  You need to mount Windows2012.vhd to H:\.

  Which tool should you use?

  A. Device Manager
  B. Server Manager
  C. Mountvol
  D. Diskpart
  D. Diskpart

  ---

  References: https://www.top-password.com/blog/mount-and-unmount-vhd-vhdx-from- command-line/