Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 51:

  Your network contains two Active Directory forests named contoso.com and dev.contoso.com. The contoso.com forest contains a domain controller named DC1. The dev.contoso.com forest contains a domain controller named DC2. Each domain contains an organizational unit (OU) named OU1.

  Dev.contoso.com has a Group Policy object (GPO) named GPO1. GPO1 contains 200 settings, including several settings that have network paths. GPO1 is linked to OU1.

  You need to copy GPO1 from dev.contoso.com to contoso.com. What should you do first on DC2?

  A. From the Group Policy Management console, right-click GPO1 and select Copy.
  B. Run the mtedit.exe command and specify the /Domaintcontoso.com /DC: DC 1 parameter.
  C. Run the Save-NetGpocmdlet.
  D. Run the Backup-Gpocmdlet.
  A. From the Group Policy Management console, right-click GPO1 and select Copy.

  ---

  To copy a Group Policy object:

  In the GPMC console tree, right-click the GPO that you want to copy, and then click Copy. To create a copy of the GPO in the same domain as the source GPO, right-click Group Policy objects, click Paste, specify permissions for the new

  GPO in the Copy GPO box, and then click OK.

  For copy operations to another domain, you may need to specify a migration table.

  The Migration Table Editor (MTE) is provided with Group Policy Management Console (GPMC) to facilitate the editing of migration tables. Migration tables are used for copying or importing Group Policy objects (GPOs) from one domain to

  another, in cases where the GPOs include domain-specific information that must be updated during copy or import. Source WS2008R2: Backup the existing GPOs from the GPMC, you need to ensure that the "Group Policy Objects" container

  is selected for the "Backup Up All" option to be available.

  Copy a Group Policy Object with the Group Policy Management Console (GPMC) You can copy a Group Policy object (GPO) either by using the drag-and-drop method or right-click method.

  Applies To: Windows 8, Windows Server 2008 R2, Windows Server 2012

  References:

  http://technet.microsoft.com/en-us/library/cc785343(v=WS.10).aspx http://technet.microsoft.com/en-us/library/cc733107.aspx

• Question 52:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Access server role installed.

  You need to configure the ports on Server1 to ensure that client computers can establish VPN connections to Server1. The solution must NOT require the use of certificates or preshared keys.

  What should you modify?

  To answer, select the appropriate object in the answer area.

  Hot Area:

  

  

• Question 53:

  You have a server named LON-SVR1 that runs Windows Server 2012 R2. LON-SVR1 has the Remote Access server role installed. LON-SVRl is located in the perimeter network. The IPv4 routing table on LON-SVR1 is configured as shown in the following exhibit. (Click the Exhibit button.)

  

  Your company purchases an additional router named Router1. Router1 has an interface that connects to the perimeter network and an interface that connects to the Internet. The IP address of the interface that connects to the perimeter network is 172.16.0.2.

  You need to ensure that LON-SVR1 will route traffic to the Internet by using Router1 if the current default gateway is unavailable.

  How should you configure the static route on LON-SVR1?

  To answer, select the appropriate static route in the answer area.

  Hot Area:

  

  

• Question 54:

  You have a server that runs Windows Server 2012 R2.

  You have an offline image named Windows2012.vhd that contains an installation of Windows Server 2012 R2.

  You plan to apply several updates to Windows2012.vhd.

  You need to mount Wmdows2012.vhd to D:\Mount.

  Which tool should you use?

  A. Server Manager
  B. Device Manager
  C. Mountvol
  D. Dism
  D. Dism

  ---

  You can use the Deployment Image Servicing and Management (DISM) tool to mount a Windows image from a WIM or VHD file. Mounting an image maps the contents of the image to a directory so that you can service the image using DISM without booting into the image. You can also perform common file operations, such as copying, pasting, and editing on a mounted image.

  To apply packages and updates to a Windows Embedded Standard 7 image, we recommend creating a configuration set and then using Deployment Imaging Servicing and Management (DISM) to install that configuration set. Although DISM can be used to install individual updates to an image, this method carries some additional risks and is not recommended.

• Question 55:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  A domain controller named DO has the ADMX Migrator tool installed. You have a custom Administrative Template file on DC1 named Template1.adm.

  You need to add a custom registry entry to Template1.adm by using the ADMX Migrator tool.

  Which action should you run first?

  A. Load Template
  B. New Policy Setting
  C. Generate ADMX from ADM
  D. New Category
  C. Generate ADMX from ADM

  ---

  The ADMX Migrator provides two conversion methods -- through the editor or through a command-line program. From the ADMX Editor, choose the option to Generate ADMX from ADM. Browse to your ADM file, and the tool quickly and automatically converts it. You then can open the converted file in the editor to examine its values and properties and modify it if you wish. The ADMX Migrator Command Window is a little more complicated; it requires you to type a lengthy command string at a prompt to perform the conversions. However, it includes some options and flexibility not available in the graphical editor.

  

  References:

  http: //technet. microsoft. com/pt-pt/magazine/2008. 02.utilityspotlight%28en-us%29. aspx http: //technet. microsoft. com/pt-pt/magazine/2008. 02. utilityspotlight%28en-us%29. aspx

• Question 56:

  A technician installs a new server that runs Windows Server 2012 R2.

  During the installation of Windows Server Update Services (WSUS) on the new server, the technician reports that on the Choose Languages page of the Windows Server Update Services Configuration Wizard, the only available language is

  English.

  The technician needs to download updates in French and English.

  What should you tell the network technician to do to ensure that the required updates are available?

  A. Complete the Windows Server Update Services Configuration Wizard, and then modify the update language on the server.
  B. Uninstall all instances of the Windows Internal Database.
  C. Change the update languages on the upstream server.
  D. Change the System Local of the server to French.
  C. Change the update languages on the upstream server.

  ---

  Explanation: Configure upstream servers to synchronize updates in all languages that are required by downstream replica servers. You will not be notified of needed updates in the unsynchronized languages. The Choose Languages page of the WSUS Configuration Wizard allows you to get updates from all languages or from a subset of languages. Selecting a subset of languages saves disk space, but it is important to choose all the languages that are needed by all the downstream servers and client computers of a WSUS server. Downstream servers and client computers will not receive all the updates they need if you have not selected all the necessary languages for the upstream server. Make sure you select all the languages that will be needed by all the client computers of all the downstream servers. You should generally download updates in all languages on the root WSUS server that synchronizes to Microsoft Update. This selection guarantees that all downstream servers and client computers will receive updates in the languages that they require. To choose update languages for a downstream server: If the upstream server has been configured to download update files in a subset of languages: In the WSUS Configuration Wizard, click Download updates only in these languages (only languages marked with an asterisk are supported by the upstream server), and then select the languages for which you want updates. https://technet.microsoft.com/en-us/library/hh328568(v=ws.10).aspx

• Question 57:

  You are a network administrator of an Active Directory domain named contoso.com.

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the DHCP Server server role and the Network Policy Server role service installed.

  You enable Network Access Protection (NAP) on all of the DHCP scopes on Server1.

  You need to create a DHCP policy that will apply to all of the NAP non-compliant DHCP clients.

  Which criteria should you specify when you create the DHCP policy?

  A. The client identifier
  B. The user class
  C. The vendor class
  D. The relay agent information
  B. The user class

  ---

  

  To configure a NAP-enabled DHCP server

  On the DHCP server, click Start, click Run, in Open, type dhcpmgmt. smc, and then press ENTER.

  In the DHCP console, open \IPv4.

  Right-click the name of the DHCP scope that you will use for NAP client computers, and then click Properties.

  On the Network Access Protection tab, under Network Access Protection Settings, choose Enable for this scope, verify that Use default Network Access Protection profile is selected, and then click OK. In the DHCP console tree, under the

  DHCP scope that you have selected, right- click Scope Options, and then click Configure Options. On the Advanced tab, verify that Default User Class is selected next to User class. Select the 003 Router check box, and in IP Address, under

  Data entry, type the IP address for the default gateway used by compliant NAP client computers, and then click Add. Select the 006 DNS Servers check box, and in IP Address, under Data entry, type the IP address for each router to be used

  by compliant NAP client computers, and then click Add. Select the 015 DNS Domain Name check box, and in String value, under Data entry, type your organization's domain name (for example, woodgrovebank. local), and then click Apply.

  This domain is a full-access network assigned to compliant NAP clients.

  On the Advanced tab, next to User class, choose Default Network Access Protection Class.

  Select the 003 Router check box, and in IP Address, under Data entry, type the IP address for the default gateway used by noncompliant NAP client computers, and then click Add. This can be the same default gateway that is used by

  compliant NAP clients.

  Select the 006 DNS Servers check box, and in IP Address, under Data entry, type the IP address for each DNS server to be used by noncompliant NAP client computers, and then click Add. These can be the same DNS servers used by

  compliant NAP clients.

  Select the 015 DNS Domain Name check box, and in String value, under Data entry, type a name to identify the restricted domain (for example, restricted. Woodgrovebank. local), and then click OK. This domain is a restricted-access network

  assigned to noncompliant NAP clients.

  Click OK to close the Scope Options dialog box.

  Close the DHCP console.

  Reference: http: //technet.microsoft.com/en-us/library/dd296905%28v=ws.10%29.aspx

• Question 58:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 has the DHCP Server server role and the Network Policy Server role service installed.

  Server1 contains three non-overlapping scopes named Scope1, Scope2, and Scope3. Server1 currently provides the same Network Access Protection (NAP) settings to the three scopes.

  You modify the settings of Scope1 as shown in the exhibit. (Click the Exhibit button.)

  

  You need to configure Server1 to provide unique NAP enforcement settings to the NAP non-compliant DHCP clients from Scope1. What should you create?

  A. A connection request policy that has the Service Type condition
  B. A connection request policy that has the Identity Type condition
  C. A network policy that has the Identity Type condition
  D. A network policy that has the MS-Service Class condition
  D. A network policy that has the MS-Service Class condition

  ---

  MS-Service Class

  Restricts the policy to clients that have received an IP address from a DHCP scope that matches the specified DHCP profile name. This condition is used only when you are deploying NAP with the DHCP enforcement method. To use the MS-

  Service Class attribute, in Specify the profile name that identifies your DHCP scope, type the name of an existing DHCP profile.

  Open the NPS console, double-click Policies, click Network Policies, and then double-click the policy you want to configure.

  In policy Properties, click the Conditions tab, and then click Add. In Select condition, scroll to the Network Access Protection group of conditions. If you want to configure the Identity Type condition, click Identity Type, and then click Add. In

  Specify the method in which clients are identified in this policy, select the items appropriate for your deployment, and then click OK.

  The Identity Type condition is used for the DHCP and Internet Protocol security (IPsec) enforcement methods to allow client health checks when NPS does not receive an Access- Request message that contains a value for the User-Name

  attribute; in this case, client health checks are performed, but authentication and authorization are not performed.

  If you want to configure the MS-Service Class condition, click MS-Service Class, and then click Add. In Specify the profile name that identifies your DHCP scope, type the name of an existing DHCP profile, and then click Add.

  

  The MS-Service Class condition restricts the policy to clients that have received an IP address from a DHCP scope that matches the specified DHCP profile name. This condition is used only when you are deploying NAP with the DHCP

  enforcement method.

  References:

  http: //technet. microsoft. com/en-us/library/cc731560(v=ws. 10). aspx http: //technet. microsoft. com/en-us/library/cc731220(v=ws. 10). aspx

• Question 59:

  You have Windows Server 2012 R2 installation media that contains a file named Install.wim.

  You need to identify which images are present in Install.wim.

  What should you do?

  A. Run imagex.exe and specify the /ref parameter.
  B. Run dism.exe and specify the /get-mountedwiminfo parameter.
  C. Run dism.exe and specify the /get-imageinfo parameter.
  D. Run imagex.exe and specify the /verify parameter.
  C. Run dism.exe and specify the /get-imageinfo parameter.

  ---

  Option:

  /Get-ImageInfo

  Arguments:

  /ImageFile:

  [{/Index: | /Name: }]

  Displays information about the images that are contained in the .wim, vhd or .vhdx file. When used with the Index or /Name argument, information about the specified image is displayed, which includes if an image is a WIMBoot image, if the

  image is Windows 8.1 Update, see Take Inventory of an Image or Component Using DISM. The /Name argument does not apply to VHD files. You must specify /Index: 1 for VHD files.

  References:

  http: //technet.microsoft.com/en-us/library/cc749447(v=ws.10).aspx http: //technet.microsoft.com/en-us/library/dd744382(v=ws.10).aspx http: //technet.microsoft.com/en-us/library/hh825224.aspx

• Question 60:

  Your network contains an Active Directory domain named contoso.com. The domain contains a RADIUS server named Server1 that runs Windows Server 2012 R2.

  You add a VPN server named Server2 to the network.

  On Server1, you create several network policies.

  You need to configure Server1 to accept authentication requests from Server2.

  Which tool should you use on Server1?

  A. Server Manager
  B. Routing and Remote Access
  C. New-NpsRadiusClient
  D. Connection Manager Administration Kit (CMAK)
  C. New-NpsRadiusClient

  ---

  New-NpsRadiusClient -Name "NameOfMyClientGroup" -Address "10.1.0.0/16" - AuthAttributeRequired 0 -NapCompatible 0 -SharedSecret "SuperSharedSecretxyz" - VendorName "RADIUS Standard"

  

  Reference:

  http: //technet. microsoft. com/en-us/library/hh918425(v=wps. 620). aspx

  http: //technet. microsoft. com/en-us/library/jj872740(v=wps. 620). aspx http: //technet. microsoft. com/en-us/library/dd469790. aspx