Quiz
70 - 411 QUIZ 3 - VOLUME 2
Questions in this quiz (34)
1You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Remote Access server role installed.
On Server1, you create a network policy named Policy1.
You need to configure Policy1 to ensure that users are added to a VLAN.
Which attributes should you add to Policy1?- ATunnel-Tag, Tunnel-Password, Tunnel-Medium-Type, and Tunnel-Preference
- BTunnel-Tag, Tunnel-Server-Auth-ID, Tunnel-Preference, and Tunnel-Pvt-Group-ID
- CTunnel-Type, Tunnel-Tag, Tunnel-Medium-Type, and Tunnel-Pvt-Group-ID
- DTunnel-Type, Tunnel-Password, Tunnel-Server-Auth-ID, and Tunnel-Pvt-Group-ID
2Your network contains a single Active Directory domain named contoso.com. The domain
contains a member server named Server1 that runs Windows Server 2012 R2.
Server1 has the Windows Server updates Services server role installed and is configured
to download updates from the Microsoft Update servers.
You need to ensure that Server1 downloads express installation files from the Microsoft
Update servers.
What should you do from the Update Services console?- AFrom the Update Files and Languages options, configure the Update Files settings.
- BFrom the Automatic Approvals options, configure the Update Rules settings.
- CFrom the Products and Classifications options, configure the Products settings.
- DFrom the Products and Classifications options, configure the Classifications settings.
3Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1.
You need to create an Active Directory snapshot on DC1.
Which four commands should you run?
To answer, move the four appropriate commands from the list of commands to the answer
area and arrange them in the correct order.
- AAnswer in image
- B...
4You have a group Managed Service Account named Service01. Three servers named
Server01, Server02, and Server03 currently use the Service01 service account.
You plan to decommission Server01.
You need to remove the cached password of the Service01 service account from Server01.
The solution must ensure that Server02 and Server 03 continue to use Service01.
Which cmdlet should you run?- ASet-ADServiceAccount
- BRemove-ADServiceAccount
- CUninstall-ADServiceAccount
- DReset-ADServiceAccountPassword
5Your network contains one Active Directory domain named contoso.com. The forest
functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All
client computers run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC)
named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that
runs Windows Server 2012 R2.
You need to identify which user accounts were authenticated by RODC1.
Which cmdlet should you use?- AGet-ADGroupMember
- BGet-ADDomainControllerPasswordReplicationPolicy
- CGet-ADDomainControllerPasswordReplicationPolicyUsage
- DGet-ADDomain
- EGet-ADOptionalFeature
- FGet-ADAccountAuthorizationGroup
6Your network contains an Active Directory domain named contoso.com. All domain
controllers run Windows Server 2012 R2.
You create a central store for Group Policy.
You receive a custom administrative template named Template1.admx.
You need to ensure that the settings in Template1.admx appear in all new Group Policy
objects (GPOs).
What should you do?- AFrom the Default Domain Controllers Policy, add Template1.admx to the Administrative
Templates. - BFrom the Default Domain Policy, add Template1.admx to the Administrative Templates
- CCopy Template1.admx to
\\Contoso.com\SYSVOL\Contoso.com\Policies\PolicyDefinitions\. - DCopy Template1.admx to \\Contoso.com\NETLOGON.
- AFrom the Default Domain Controllers Policy, add Template1.admx to the Administrative
7Your network contains an Active Directory domain named contoso.com. The domain
contains a virtual machine named Server1 that runs Windows Server 2012 R2.
Server1 has a dynamically expanding virtual hard disk that is mounted to drive E.
You need to ensure that you can enable BitLocker Drive Encryption (BitLocker) on drive E.
Which command should you run?- Amanage-bde -protectors -add c: -startup e:
- Bmanage-bde -lock e:
- Cmanage-bde -protectors -add e: -startupkey c:
- Dmanage-bde -on e:
8Your network contains an Active Directory domain named contoso.com. Domain controllers
run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2.
You have a Password Settings object (PSOs) named PSO1.
You need to view the settings of PSO1.
Which tool should you use?- AGet-ADDefaultDomainPasswordPolicy
- BActive Directory Administrative Center
- CLocal Security Policy
- DGet-ADAccountResultantPasswordReplicationPolicy
9You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the
File Server Resource Manager role service installed.
Each time a user receives an access-denied message after attempting to access a folder
on Server1, an email notification is sent to a distribution list named DLL.
You create a folder named Folder1 on Server1, and then you configure custom NTFS
permissions for Folder1.
You need to ensure that when a user receives an access-denied message while attempting
to access Folder1, an email notification is sent to a distribution list named DL2. The
solution must not prevent DL1 from receiving notifications about other access-denied
messages.
What should you do?- AFrom the File Server Resource Manager console, create a local classification property.
- BFrom Server Manager, run the New Share Wizard to create a share for Folder1 by
selecting the SMB Share - Applications option. - CFrom the File Server Resource Manager console, modify the Access-Denied Assistance
settings. - DFrom the File Server Resource Manager console, set a folder management property
10You have a cluster named Cluster1 that contains two nodes. Both nodes run Windows
Server 2012 R2. Cluster1 hosts a virtual machine named VM1 that runs Windows Server
2012 R2.
You configure a custom service on VM1 named Service1.
You need to ensure that VM1 will be moved to a different node if Service1 fails.
Which cmdlet should you run on Cluster1?- AAdd-ClusterVmMonitoredItem
- BAdd-ClusterGenericServiceRole
- CSet-ClusterResourceDependency
- DEnable VmResourceMetering
11You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Windows Server Update Services server role installed.
You need to configure Windows Server Update Services (WSUS) to support Secure
Sockets Layer (SSL).
Which three actions should you perform? (Each correct answer presents part of the
solution. Choose three.)- AFrom Internet Information Services (IIS) Manager, modify the connection strings of the
WSUS website - BInstall a server certificate
- CRun the wsusutil.exe command.
- DRun the iisreset.exe command
- EFrom Internet Information Services (IIS) Manager, modify the bindings of the WSUS
website.
- AFrom Internet Information Services (IIS) Manager, modify the connection strings of the
12Your company has a main office and a branch office. The main office is located in Seattle.
The branch office is located in Montreal. Each office is configured as an Active Directory
site.
The network contains an Active Directory domain named adatum.com. The Seattle office
contains a file server named Server1. The Montreal office contains a file server named
Server2.
The servers run Windows Server 2012 R2 and have the File and Storage Services server
role, the DFS Namespaces role service, and the DFS Replication role service installed.
Server1 and Server2 each have a share named Share1 that is replicated by using DFS
Replication.
You need to ensure that users connect to the replicated folder in their respective office
when they connect to \\contoso.com\Share1.
Which three actions should you perform? (Each correct answer presents part of the
solution. Choose three.)- ACreate a replication connection
- BCreate a namespace
- CShare and publish the replicated folder.
- DCreate a new topology
- EModify the Referrals settings
13Your network contains an Active Directory domain named contoso.com. Network Access
Protection (NAP) is deployed to the domain.
You need to create NAP event trace log files on a client computer.
What should you run?- Alogman
- BRegister-ObjectEvent
- Ctracert
- DRegister-EngineEvent
14You have a server named Server1 that runs Windows Server 2012 R2.
You create a custom Data Collector Set (DCS) named DCS1.
You need to configure Server1 to start DCS1 automatically when the network usage
exceeds 70 percent.
Which type of data collector should you create?- AA performance counter alert
- BA configuration data collector
- CA performance counter data collector
- DAn event trace data collector
15Your network contains an Active Directory forest named contoso.com. The forest contains
a single domain. The forest contains two Active Directory sites named Site1 and Site2.
You plan to deploy a read-only domain controller (RODC) named DC10 to Site2. You precreate
the DC10 domain controller account by using Active Directory Users and
Computers.
You need to identify which domain controller will be used for initial replication during the
promotion of the RODC.
Which tab should you use to identify the domain controller?
To answer, select the appropriate tab in the answer area.
- AGeneral
- BOS
- CMember of
- DDelegation
- EPassword Replication Policy
- FLocation
16Your network contains an Active Directory domain named adatum.com. The domain
contains a server named Server1.
Your company implements DirectAccess.
A user named User1 works at a customer's office. The customer's office contains a server
named Server1.
When User1 attempts to connect to Server1, User1 connects to Server1 in adatum.com.
You need to provide User1 with the ability to connect to Server1 in the customer's office.
Which Group Policy option should you configure? To answer, select the appropriate option
in the answer area.
- ACorporate
- BCustom Commands
- CIPSec Tunnel Endpoints
- DFriendly name
- EPrefer Local names Allowed
- FDirect access passive mode
- GUser interface
- HSupport email address
17You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Windows Server Update Services server role installed.
Server1 stores update files locally in C:\Updates.
You need to change the location in which the update files are stored to D:\Updates.
What should you do?- AFrom the Update Services console, run the Windows Server Update Services
Configuration Wizard - BFrom a command prompt, run wsusutil.exe and specify the movecontent parameter
- CFrom the Update Services console, configure the Update Files and Languages option
- DFrom a command prompt, run wsusutil.exe and specify the export parameter.
- AFrom the Update Services console, run the Windows Server Update Services
18You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the
File Server Resource Manager role service installed.
Server1 has a folder named Folder1 that is used by the sales department.
You need to ensure that an email notification is sent to the sales manager when a File
Screening Audit report is generated.
What should you configure on Server1?- Aa file group
- Ba file screen
- Ca file screen exception
- Da storage report task
19Your network contains an Active Directory domain named contoso.com. The domain
contains two servers named Server1 and Server2. Both servers run Windows Server 2012
R2. Both servers have the File and Storage Services server role, the DFS Namespaces
role service, and the DFS Replication role service installed.
Server1 and Server2 are part of a Distributed File System (DFS) Replication group named
Group1. Server1 and Server2 are separated by a low-speed WAN connection.
You need to limit the amount of bandwidth that DFS can use to replicate between Server1
and Server2.
What should you modify?- AThe referral ordering of the namespace
- BThe staging quota of the replicated folder
- CThe cache duration of the namespace
- DThe schedule of the replication group
20Your network contains an Active Directory domain named contoso.com. The domain
contains a RADIUS server named Server1 that runs Windows Server 2012 R2.
You add a VPN server named Server2 to the network.
On Server1, you create several network policies.
You need to configure Server1 to accept authentication requests from Server2.
Which tool should you use on Server1?- AServer Manager
- BRouting and Remote Access
- CNew-NpsRadiusClient
- DConnection Manager Administration Kit (CMAK)
21You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Network Policy and Access Services server role installed.
All of the VPN servers on your network use Server1 for RADIUS authentication.
You create a security group named Group1.
You need to configure Network Policy and Access Services (NPAS) to meet the following
requirements:
Ensure that only the members of Group1 can establish a VPN connection to the
VPN servers.
Allow only the members of Group1 to establish a VPN connection to the VPN
servers if the members are using client computers that run Windows 8 or later.
Which type of policy should you create for each requirement?
To answer, drag the appropriate policy types to the correct requirements. Each policy type
may be used once, more than once, or not at all. You may need to drag the split bar
between panes or scroll to view content.
- AConnection Request Policies
- BHealth Policies
- CNetwork Policies
22Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the File
Server Resource Manager role service installed.
You need to configure Server1 to meet the following requirements:
Ensure that old files in a folder named Folder1 are archived automatically to a
folder named Archive1.
Ensure that JPG files can always be saved to a local computer, even when a file
screen exists.
Which two nodes should you configure? To answer, select the appropriate two nodes in the
answer area.
- AQuota Management
- BFile screening Management
- CStorage reports management
- DClassification management
- EFile management tasks
23Your network contains a Network Policy Server (NPS) server named Server1. The network
contains a server named SQL1 that has Microsoft SQL Server 2008 R2 installed. All
servers run Windows Server 2012 R2.
You configure NPS on Server1 to log accounting data to a database on SQL1.
You need to ensure that the accounting data is captured if SQL1 fails. The solution must
minimize cost.
What should you do?- AImplement Failover Clustering.
- BImplement database mirroring.
- CRun the Accounting Configuration Wizard.
- DModify the SQL Server Logging properties
24Your network contains an Active Directory domain named contoso.com. The domain
contains a file server named Server1 that runs Windows Server 2012 R2.
You view the effective policy settings of Server1 as shown in the exhibit. (Click the Exhibit
button.)
You need to ensure that an entry is added to the event log whenever a local user account
is created or deleted on Server1.
What should you do?
- AIn Servers GPO, modify the Advanced Audit Configuration settings.
- BOn Server1, attach a task to the security log.
- CIn Servers GPO, modify the Audit Policy settings.
- DOn Server1, attach a task to the system log.
25Your network contains a single Active Directory domain named contoso.com. The domain
contains a domain controller named DC1 that hosts the primary DNS zone for
contoso.com.
All servers dynamically register their host names.
You install three new Web servers that host identical copies of your company's intranet
website. The servers are configured as shown in the following table.
You need to use DNS records to load balance name resolution queries for
intranet.contoso.com between the three Web servers.
What is the minimum number of DNS records that you should create manually?
- A1
- B3
- C4
- D6
26Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the File
Server Resource Manager role service installed.
You configure a quota threshold as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that a user named User1 receives an email notification when the
threshold is exceeded.
What should you do?
- ACreate a performance counter alert.
- BCreate a classification rule.
- CModify the members of the Performance Log Users group.
- DConfigure the File Server Resource Manager Options.
27Your network contains one Active Directory domain named contoso.com. The forest
functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All
client computers run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC)
named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that
runs Windows Server 2012 R2.
You need to identify which domain controllers are authorized to be cloned by using virtual
domain controller cloning.
Which cmdlet should you use?- AGet-ADGroupMember
- BGet-ADDomainControllerPasswordReplicationPolicy
- CGet-ADDomainControllerPasswordReplicationPolicyUsage
- DGet-ADDomain
- EGet-ADOptionalFeature
- FGet-ADAccountAuthorizationGroup
28Your network contains an Active Directory domain named contoso.com. The domain
contains domain controllers that run Windows Server 2008, Windows Server 2008 R2
Windows Server 2012, and Windows Server 2012 R2.
A domain controller named DC1 runs Windows Server 2012 R2. DC1 is backed up daily.
During routine maintenance, you delete a group named Group1.
You need to recover Group1 and identify the names of the users who were members of
Group1 prior to its deletion. You want to achieve this goal by using the minimum amount of
administrative effort.
What should you do first?- APerform an authoritative restore of Group1.
- BMount the most recent Active Directory backup.
- CUse the Recycle Bin to restore Group1
- DReactivate the tombstone of Group1.
29You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Remote Access server role installed.
You need to configure the ports on Server1 to ensure that client computers can establish
VPN connections to Server1. The solution must NOT require the use of certificates or preshared
keys.
What should you modify?
To answer, select the appropriate object in the answer area.
- AIKEv2
- BPPPOE
- CL2TP
- DPPTP
- ESSTP
30Your network contains a single Active Directory domain named contoso.com. All domain
controllers run Windows Server 2012 R2.
The domain contains 400 desktop computers that run Windows 8 and 10 desktop
computers that run Windows XP Service Pack 3 (SP3). All new desktop computers that are
added to the domain run Windows 8.
All of the desktop computers are located in an organizational unit (OU) named OU1.
You create a Group Policy object (GPO) named GPO1. GPO1 contains startup script
settings. You link GPO1 to OU1.
You need to ensure that GPO1 is applied only to computers that run Windows XP SP3.
What should you do?- ACreate and link a WML filter to GPO1
- BRun the Set-GPInheritance cmdlet and specify the -target parameter.
- CRun the Set-GPLink cmdlet and specify the -target parameter.
- DModify the Security settings of OU1.
31Your network contains an Active Directory domain named contoso.com. All servers run
Windows Server 2012 R2.
An organizational unit (OU) named ResearchServers contains the computer accounts of all
research servers.
All domain users are configured to have a minimum password length of eight characters.
You need to ensure that the minimum password length of the local user accounts on the
research servers in the ResearchServers OU is 10 characters.
What should you do?- AConfigure a local Group Policy object (GPO) on each research server
- BCreate and link a Group Policy object (GPO) to the ResearchServers OU.
- CCreate a universal group that contains the research servers. Create a Password
Settings object (PSO) and assign the PSO to the group. - DCreate a global group that contains the research servers. Create a Password Settings
object (PSO) and assign the PSO to the group.
32Your network contains an Active Directory domain named adatum.com.
You have a standard primary zone named adatum.com.
You need to provide a user named User1 the ability to modify records in the zone. Other
users must be prevented from modifying records in the zone.
What should you do first?- ARun the Zone Signing Wizard for the zone
- BFrom the properties of the zone, modify the start of authority (SOA) record.
- CFrom the properties of the zone, change the zone type
- DRun the New Delegation Wizard for the zone.
33Your network contains two servers named Served and Server 2. Both servers run Windows
Server 2012 R2 and have the DNS Server server role installed.
On Server1, you create a standard primary zone named contoso.com.
You plan to create a standard primary zone for ad.contoso.com on Server2.
You need to ensure that Server1 forwards all queries for ad.contoso.com to Server2.
What should you do from Server1?- ACreate a trust anchor named Server2.
- BCreate a conditional forward that points to Server2.
- CAdd Server2 as a name server.
- DCreate a zone delegation that points to Server2.
34Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that has the Network Policy Server server role installed.
The domain contains a server named Server2 that is configured for RADIUS accounting.
Server1 is configured as a VPN server and is configured to forward authentication requests
to Server2.
You need to ensure that only Server2 contains event information about authentication
requests from connections to Server1.
Which two nodes should you configure from the Network Policy Server console?
To answer, select the appropriate two nodes in the answer area.- ANPS (Local)
- BConnection policies
- CNetwork access protection
- DPolicies
- ERadius clients and servers
- FSystem health validators
- Gtemplates management
- HShared secrets
Information
- Description
- 70-411 70-411 Quiz on 70 - 411 QUIZ 3 - VOLUME 2, created by saheed Tijani on 01/02/2016.
- Author
- saheed Tijani
- Language
- English
- Views
- 67
- Tags
- Rating
- No ratings yet Rate this quiz