Microsoft 70-411 Online Practice Questions and Exam Preparation

Microsoft 70-411 Online Questions & Answers

• Question 81:

  Your network contains an Active Directory domain named contoso.com.

  You have several Windows PowerShell scripts that execute when client computers start.

  When a client computer starts, you discover that it takes a long time before users are prompted to log on.

  You need to reduce the amount of time it takes for the client computers to start. The solution must not prevent scripts from completing successfully.

  Which setting should you configure?

  To answer, select the appropriate setting in the answer area.

  Hot Area:

  

  

• Question 82:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.

  You enable and configure Routing and Remote Access (RRAS) on Server1.

  You create a user account named User1.

  You need to ensure that User1 can establish VPN connections to Server1.

  What should you do?

  A. Modify the members of the Remote Management Users group.
  B. Add a RADIUS client.
  C. Modify the Dial-in setting of User1.
  D. Create a connection request policy.
  C. Modify the Dial-in setting of User1.

  ---

  Access permission is also granted or denied based on the dial-in properties of each user account. http://technet.microsoft.com/en-us/library/cc772123.aspx

• Question 83:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2.

  All client computers run Windows 8 Enterprise.

  DC1 contains a Group Policy object (GPO) named GPO1.

  You need to update the PATH variable on all of the client computers.

  Which Group Policy preference should you configure?

  A. Ini Files
  B. Services
  C. Data Sources
  D. Environment
  D. Environment

  ---

  Environment Variable preference items allow you to create, update, replace, and delete user and system environment variables or semicolon-delimited segments of the PATH variable. Before you create an Environment Variable preference item, you should review the behavior of each type of action possible with this extension.

• Question 84:

  Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.

  The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify whether deleted objects can be recovered from the Active Directory Recycle Bin.

  Which cmdlet should you use?

  A. Get-ADGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  F. Get-ADAccountAuthorizationGroup
  E. Get-ADOptionalFeature

  ---

  Explanation: The Get-ADOptionalFeature cmdlet gets an optional feature or performs a search to retrieve multiple optional features from an Active Directory.

  Example: Get-ADOptionalFeature 'Recycle Bin Feature' Get the optional feature with the name 'Recycle Bin Feature'.

  Reference: Get-ADOptionalFeature

  https://technet.microsoft.com/en-us/library/ee617218.aspx

• Question 85:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Access server role installed.

  You need to configure the ports on Server1 to ensure that client computers can establish VPN connections to Server1 by using TCP port 443.

  What should you modify? To answer, select the appropriate object in the answer area.

  Hot Area:

  

  

• Question 86:

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.

  All sales users have laptop computers that run Windows 8. The sales computers are joined to the domain. All user accounts for the sales department are in an organizational unit (OU) named Sales_OU.

  A Group Policy object (GPO) named GPO1 is linked to Sales_OU.

  You need to configure a dial-up connection for all of the sales users.

  What should you configure from User Configuration in GPO1?

  A. Policies/Administrative Templates/Network/Windows Connect Now
  B. Preferences/Control Panel Settings/Network Options
  C. Policies/Administrative Templates/Windows Components/Windows Mobility Center
  D. Policies/Administrative Templates/Network/Network Connections
  B. Preferences/Control Panel Settings/Network Options

  ---

  The Network Options extension allows you to centrally create, modify, and delete dial-up networking and virtual private network (VPN) connections. Before you create a network option preference item, you should review the behavior of each type of action possible with the extension.

  

  To create a new Dial-Up Connection preference item

  Open the Group Policy Management Console. Right-click the Group Policy object (GPO) that should contain the new preference item, and then click Edit. In the console tree under Computer Configuration or User Configuration, expand the

  Preferences folder, and then expand the Control Panel Settings folder. Right-click the Network Options node, point to New, and select Dial-Up Connection.

  References:

  http: //technet. microsoft. com/en-us/library/cc772107. aspx http: //technet. microsoft. com/en-us/library/cc772107. aspx http: //technet. microsoft. com/en-us/library/cc772449. aspx

• Question 87:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  On all of the domain controllers, Windows is installed in C:\Windows and the Active Directory database is located in D:\Windows\NTDS\.

  All of the domain controllers have a third-party application installed.

  The operating system fails to recognize that the application is compatible with domain controller cloning.

  You verify with the application vendor that the application supports domain controller cloning.

  You need to prepare a domain controller for cloning.

  What should you do?

  A. In D:\Windows\NTDS\, create an XML file named DCCloneConfig.xml and add the application information to the file.
  B. In the root of a USB flash drive, add the application information to an XML file named DefaultDCCIoneAllowList.xml.
  C. In D:\Windows\NTDS\, create an XML file named CustomDCCloneAllowList.xml and add the application information to the file.
  D. In C:\Windows\System32\Sysprep\Actionfiles\, add the application information to an XML file named Respecialize.xml.
  C. In D:\Windows\NTDS\, create an XML file named CustomDCCloneAllowList.xml and add the application information to the file.

  ---

  Place the CustomDCCloneAllowList.xml file in the same folder as the Active Directory database (ntds. dit) on the source Domain Controller.

  

  References: http: //blogs. dirteam. com/blogs/sanderberkouwer/archive/2012/09/10/new-features-in- active-directory-domain-services-in-windows-server-2012-part-13-domain-controller- cloning. aspx http: //www. thomasmaurer. ch/2012/08/windowsserver-2012-hyper-v-how-to-clone-a- virtual-domain-controller http: //technet. microsoft. com/en-us/library/hh831734. aspx

• Question 88:

  Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8.1. Group Policy objects (GPOs) are linked to the domain as shown in the exhibit. (Click the Exhibit button.)

  

  GPO2 contains computer configurations only and GPO3 contains user configurations only.

  You need to configure the GPOs to meet the following requirements:

  Ensure that GPO2 only applies to the computer accounts in OU2 that have more than one processor.

  Ensure that GPO3 only applies to the user accounts in OU3 that are members of a security group named SecureUsers.

  Which setting should you configure in each GPO?

  To answer, drag the appropriate setting to the correct GPO. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

  ---

  https://technet.microsoft.com/en-us/library/cc732796(v=ws.11).aspx https://technet.microsoft.com/en-us/library/cc752992(v=ws.11).aspx

• Question 89:

  Your company deploys a new Active Directory forest named contoso.com. The first domain controller in the forest runs Windows Server 2012 R2. The forest contains a domain controller named DC10.

  On DC10, the disk that contains the SYSVOL folder fails.

  You replace the failed disk. You stop the Distributed File System (DFS) Replication service. You restore the SYSVOL folder.

  You need to perform a non-authoritative synchronization of SYSVOL on DC10.

  Which tool should you use before you start the DFS Replication service on DC10?

  A. Dfsgui.msc
  B. Dfsmgmt.msc
  C. Adsiedit.msc
  D. Ldp
  C. Adsiedit.msc

  ---

  How to perform a non-authoritative synchronization of DFSR-replicated SYSVOL (like "D2" for FRS)

  In the ADSIEDIT. MSC tool modify the following distinguished name (DN) value and attribute on each of the domain controllers that you want to make non- authoritative: CN=SYSVOL Subscription,CN=Domain System Volume,CN=DFSR- LocalSettings,CN=,OU=Domain Controllers,DC= msDFSR-Enabled=FALSE Force Active Directory replication throughout the domain. Run the following command from an elevated command prompt on the same servers that you set as non-authoritative: DFSRDIAG POLLAD You will see Event ID 4114 in the DFSR event log indicating SYSVOL is no longer being replicated. On the same DN from Step 1, set: msDFSR-Enabled=TRUE Force Active Directory replication throughout the domain. Run the following command from an elevated command prompt on the same servers that you set as non-authoritative: DFSRDIAG POLLAD You will see Event ID 4614 and 4604 in the DFSR event log indicating SYSVOL has been initialized. That domain controller has now done a "D2" of SYSVOL. Note: Active Directory Service Interfaces Editor (ADSI Edit) is a Lightweight Directory Access Protocol (LDAP) editor that you can use to manage objects and attributes in Active Directory. ADSI Edit (adsiedit. msc) provides a view of every object and attribute in an Active Directory forest. You can use ADSI Edit to query, view, and edit attributes that are not exposed through other Active Directory Microsoft Management Console (MMC) snap- ins: Active Directory Users and Computers, Active Directory Sites and Services, Active Directory Domains and Trusts, and Active Directory Schema.

• Question 90:

  You have a DNS server named Server1.

  Server1 has a primary zone named contoso.com.

  Zone Aging/Scavenging is configured for the contoso.com zone.

  One month ago, an administrator removed a server named Server2 from the network.

  You discover that a static resource record for Server2 is present in contoso.com. Resource records for decommissioned client computers are removed automatically from contoso.com.

  You need to ensure that the static resource records for all of the servers are removed automatically from contoso.com.

  What should you modify?

  A. The Expires after value of contoso.com
  B. The Record time stamp value of the static resource records
  C. The time-to-live (TTL) value of the static resource records
  D. The Security settings of the static resource records
  B. The Record time stamp value of the static resource records

  ---

  Reset and permit them to use a current (non-zero) time stamp value. This enables these records to become aged and scavenged.

  You can use this procedure to change how a specific resource record is scavenged. A stale record is a record where both the No-Refresh Interval and Refresh Interval have passed without the time stamp updating.

  DNS->View->Advanced

  

  Depending on the how the resource record was originally added to the zone, do one of the following:

  If the record was added dynamically using dynamic update, clear the Delete this record when it becomes stale check box to prevent its aging or potential removal during the scavenging process. If dynamic updates to this record continue to

  occur, the Domain Name System (DNS) server will always reset this check box so that the dynamically updated record can be deleted. If you added the record statically, select the Delete this record when it becomes stale check box to permit

  its aging or potential removal during the scavenging process.

  

  References:

  http: //technet. microsoft. com/en-us/library/cc759204%28v=ws. 10%29. aspx http: //technet. microsoft. com/en-us/library/cc759204%28v=ws. 10%29. aspx

  Typically, stale DNS records occur when a computer is permanently removed from the network. Mobile users who abnormally disconnect from the network can also cause stale DNS records. To help manage stale records, Windows adds a

  time stamp to dynamically added resource records in primary zones where aging and scavenging are enabled. Manually added records are time stamped with a value of 0, and they are automatically excluded from the aging and scavenging

  process.

  To enable aging and scavenging, you must do the following:

  Resource records must be either dynamically added to zones or manually modified to be used in aging and scavenging operations.

  Scavenging and aging must be enabled both at the DNS server and on the zone.

  Scavenging is disabled by default.

  

  DNS scavenging depends on the following two settings:

  No-refresh interval: The time between the most recent refresh of a record time stamp and the moment when the time stamp can be refreshed again. When scavenging is enabled, this is set to 7 days by default. Refresh interval: The time

  between the earliest moment when a record time stamp can be refreshed and the earliest moment when the record can be scavenged. The refresh interval must be longer than the maximum record refresh period.

  When scavenging is enabled, this is set to 7 days by default.

  A DNS record becomes eligible for scavenging after both the no-refresh and refresh intervals have elapsed. If the default values are used, this is a total of 14 days.

  References:

  http: //technet. microsoft. com/en-us/library/cc759204%28v=ws. 10%29. aspx http: //technet. microsoft. com/en-us/library/cc759204%28v=ws. 10%29. aspx http: //technet. microsoft. com/en-us/library/cc771570.aspx http: //technet. microsoft.

  com/en-us/library/cc771677. aspx http: //technet. microsoft. com/en-us/library/cc758321(v=ws. 10). aspx