Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 71:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the Network Policy Server role service installed.

  You need to enable trace logging for Network Policy Server (NPS) on Server1.

  Which tool should you use?

  A. The tracert.exe command
  B. The Network Policy Server console
  C. The Server Manager console
  D. The netsh.exe command
  D. The netsh.exe command

  ---

  NPS trace logging files

  You can use log files on servers running Network Policy Server (NPS) and NAP client computers to help troubleshoot NAP problems. Log files can provide the detailed information required for troubleshooting complex problems.

  You can capture detailed information in log files on servers running NPS by enabling remote access tracing. The Remote Access service does not need to be installed or running to use remote access tracing. When you enable tracing on a

  server running NPS, several log files are created in %windir%\tracing.

  The following log files contain helpful information about NAP:

  IASNAP. LOG: Contains detailed information about NAP processes, NPS authentication, and NPS authorization.

  IASSAM. LOG: Contains detailed information about user authentication and authorization.

  Membership in the local Administrators group, or equivalent, is the minimum required to enable tracing. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (http: //go. microsoft.

  com/fwlink/?LinkId=83477).

  To create tracing log files on a server running NPS

  Open a command line as an administrator.

  Type netshras set tr * en.

  Reproduce the scenario that you are troubleshooting.

  Type netshras set tr * dis.

  Close the command prompt window.

  Reference: http: //technet. microsoft. com/en-us/library/dd348461%28v=ws. 10%29. aspx

• Question 72:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You configure Network Access Protection (NAP) on Server1.

  Your company implements a new security policy stating that all client computers must have the latest updates installed. The company informs all employees that they have two weeks

  to update their computer accordingly.

  You need to ensure that if the client computers have automatic updating disabled, they are provided with full access to the network until a specific date and time.

  Which two nodes should you configure?

  To answer, select the appropriate two nodes in the answer area.

  Hot Area:

  

  

• Question 73:

  Your network contains an Active Directory domain named contoso.com.

  All DNS servers host a DNS zone named adatum.com. The adatum.com zone is not Active Directory-integrated.

  An administrator modifies the start of authority (SOA) record for the adatum.com zone.

  After the modification, you discover that when you add or modify DNS records in the adatum.com zone, the changes are not transferred to the DNS servers that host secondary copies of the adatum.com zone.

  You need to ensure that the records are transferred to all the copies of the adatum.com zone.

  What should you modify in the SOA record for the adatum.com zone?

  To answer, select the appropriate setting in the answer area.

  Hot Area:

  

  

• Question 74:

  You have a server named Server1 that runs Windows Server 2012 R2.

  An administrator creates a quota as shown in the Quota exhibit. (Click the Exhibit button.)

  

  You run the dir command as shown in the Dir exhibit. (Click the Exhibit button.)

  

  You need to ensure that D:\Folder1 can only consume 100 MB of disk space.

  What should you do?

  A. From File Server Resource Manager, create a new quota.
  B. From File Server Resource Manager, edit the existing quota.
  C. From the Services console, set the Startup Type of the Optimize drives service to Automatic.
  D. From the properties of drive D, enable quota management.
  A. From File Server Resource Manager, create a new quota.

  ---

  1.

  In Quota Management, click the Quota Templates node.

  2.

  In the Results pane, select the template on which you will base your new quota.

  3.

  Right-click the template and click Create Quota from Template (or select Create Quota from Template from the Actions pane). This opens the Create Quota dialog box with the summary properties of the quota template displayed.

  4.

  Under Quota path, type or browse to the folder that the quota will apply to.

  5.

  Click the Create quota on path option. Note that the quota properties will apply to the entire folder.

  Note: To create an auto apply quota, click the Auto apply template and create quotas on existing and new subfolders option. For more information about auto apply quotas, see Create an Auto Apply Quota.

  6.

  Under Drive properties from this quota template, the template you used in step 2 to create your new quota is preselected (or you can select another template from the list). Note that the template's properties are displayed under Summary of quota properties.

  7.

  Click Create.

  Create a new Quota on path, without using the auto apply template and create quota on existing and new subfolders.

  

  Reference: http: //technet.microsoft.com/en-us/library/cc755603(v=ws.10).aspx

• Question 75:

  Your network contains a domain controller named DC1 that runs Windows Server 2012 R2. You create a custom Data Collector Set (DCS) named DCS1.

  You need to configure DCS1 to collect the following information:

  The amount of Active Directory data replicated between DC1 and the other domain controllers

  The current values of several registry settings

  Which two should you configure in DCS1? (Each correct answer presents part of the solution. Choose two.)

  A. Event trace data
  B. A Performance Counter Alert
  C. System configuration information
  D. A performance counter
  B. A Performance Counter Alert
  C. System configuration information

  ---

  Automatically run a program when the amount of total free disk space on Server1 drops below 10 percent of capacity.

  You can also configure alerts to start applications and performance logs Log the current values of several registry settings.

  System configuration information allows you to record the state of, and changes to, registry keys.

  Total free disk space

  

  

  Registry settings

  

  Run a program on alert

  

  Reference: http: //technet. microsoft. com/en-us/library/cc766404. aspx

• Question 76:

  Your network contains an Active Directory domain named contoso.com.

  All user accounts for the marketing department reside in an organizational unit (OU) named OU1. All user accounts for the finance department reside in an organizational unit (OU) named OU2.

  You create a Group Policy object (GPO) named GPO1. You link GPO1 to OU2. You configure the Group Policy preference of GPO1 to add a shortcut named Link1 to the desktop.

  You discover that when a user signs in, the Link1 is not added to the desktop.

  You need to ensure that when a user signs in, Link1 is added to the desktop.

  What should you do?

  A. Enforce GPO1.
  B. Enable loopback processing in GPO1.
  C. Modify the Link1 shortcut preference of GPO1.
  D. Modify the Security Filtering settings of GPO1.
  D. Modify the Security Filtering settings of GPO1.

  ---

  Security filtering is a way of refining which users and computers will receive and apply the settings in a Group Policy object (GPO). Using security filtering, you can specify that only certain security principals within a container where the GPO is linked apply the GPO. Security group filtering determines whether the GPO as a whole applies to groups, users, or computers; it cannot be used selectively on different settings within a GPO.

• Question 77:

  Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.

  The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify which user accounts were authenticated by RODC1.

  Which cmdlet should you use?

  A. Get-ADGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  F. Get-ADAccountAuthorizationGroup
  B. Get-ADDomainControllerPasswordReplicationPolicy

  ---

  Explanation: Gets the Active Directory accounts that are authenticated by a read-only domain controller or that are in the revealed list of the domain controller. Reference: Get-ADDomainControllerPasswordReplicationPolicyUsage https://technet.microsoft.com/en-us/library/ee617194.aspx

• Question 78:

  Your company has a main office and a branch office. The main office is located in Seattle. The branch office is located in Montreal. Each office is configured as an Active Directory site.

  The network contains an Active Directory domain named adatum.com. The Seattle office contains a file server named Server1. The Montreal office contains a file server named Server2.

  The servers run Windows Server 2012 R2 and have the File and Storage Services server role, the DFS Namespaces role service, and the DFS Replication role service installed.

  Server1 and Server2 each have a share named Share1 that is replicated by using DFS Replication.

  You need to ensure that users connect to the replicated folder in their respective office when they connect to \\contoso.com\Share1.

  Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

  A. Create a replication connection.
  B. Create a namespace.
  C. Share and publish the replicated folder.
  D. Create a new topology.
  E. Modify the Referrals settings.
  B. Create a namespace.
  C. Share and publish the replicated folder.
  E. Modify the Referrals settings.

  ---

  To share a replicated folder and publish it to a DFS namespace Click Start, point to Administrative Tools, and then click DFS Management. In the console tree, under the Replication node, click the replication group that contains the replicated

  folder you want to share. In the details pane, on the Replicated Folders tab, right-click the replicated folder that you want to share, and then click Share and Publish in Namespace. In the Share and Publish Replicated Folder Wizard, click

  Share and publish the replicated folder in a namespace, and then follow the steps in the wizard.

  Note that: If you do not have an existing namespace, you can create one in the Namespace Path page in the Share and Publish Replicated Folder Wizard. To create the namespace, in the Namespace Path page, click Browse, and then click

  New Namespace.

  To create a namespace

  Click Start, point to Administrative Tools, and then click DFS Management. In the console tree, right-click the Namespaces node, and then click New Namespace. Follow the instructions in the New Namespace Wizard. To create a standalone namespace on a failover cluster, specify the name of a clustered file server instance on the Namespace Server page of the New Namespace Wizard.

  Important

  Do not attempt to create a domain-based namespace using the Windows Server 2008 mode unless the forest functional level is Windows Server 2003 or higher. Doing so can result in a namespace for which you cannot delete DFS folders,

  yielding the following error message: "The folder cannot be deleted. Cannot complete this function."

  To share a replicated folder and publish it to a DFS namespace

  1.

  Click Start, point to Administrative Tools, and then click DFS Management.

  2.

  In the console tree, under the Replication node, click the replication group that contains the replicated folder you want to share.

  3.

  In the details pane, on the Replicated Folders tab, right-click the replicated folder that you want to share, and then click Share and Publish in Namespace.

  4.

  In the Share and Publish Replicated Folder Wizard, click Share and publish the replicated folder in a namespace, and then follow the steps in the wizard.

  

  "You need to ensure that users connect to the replicated folder in their respective office when they connect to \\contoso.com\Share1."

  

  Reference: http: //technet. microsoft. com/en-us/library/cc731531. aspx http: //technet. microsoft. com/en-us/library/cc772778%28v=ws. 10%29. aspx http: //technet. microsoft. com/en-us/library/cc732414. aspx http: //technet. microsoft. com/en-us/library/cc772379. aspx http: //technet. microsoft. com/en-us/library/cc732863%28v=ws. 10%29. aspx http: //technet. microsoft. com/en-us/library/cc725830. aspx http: //technet. microsoft. com/en-us/library/cc771978. aspx

• Question 79:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 is configured as a VPN server.

  You need to configure Server1 to perform network address translation (NAT).

  What should you do?

  A. From Network Connections, modify the Internet Protocol Version 4 (TCP/IPv4) setting of each network adapter.
  B. From Network Connections, modify the Internet Protocol Version 6 (TCP/IPv6) setting of each network adapter.
  C. From Routing and Remote Access, add an IPv6 routing protocol.
  D. From Routing and Remote Access, add an IPv4 routing protocol.
  D. From Routing and Remote Access, add an IPv4 routing protocol.

  ---

  To configure an existing RRAS server to support both VPN remote access and NAT routing:

  1.

  Open Server Manager.

  2.

  Expand Roles, and then expand Network Policy and Access Services.

  3.

  Right-click Routing and Remote Access, and then click Properties.

  4.

  Select IPv4 Remote access Server or IPv6 Remote access server, or both.

• Question 80:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2.

  You perform a backup of DC1 each day.

  You need to view the properties of an Active Directory object that was deleted five days ago.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place: