70 - 410 QUIZ 2 - VOLUME 3

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2008 R2. One of the domain controllers is named DC1. The network contains a member server named Server1 that runs Windows Server 2012 R2. You need to promote Server1 to a domain controller by using install from media (IFM). What should you do first?

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 installed. Contoso.com has its headquarters in London, and several widespread satellite offices. When Contoso.com releases a new written policy stating that the graphical user interface (GUI) should not be installed on any servers deployed to Contoso.com’s satellite offices. It is reported that a server in one of the satellite offices are not compliant with the new written policy. You are required to remedy the situation, while using the least amount of user interaction. Which of the following actions should you take?

Your network contains a server named Server1 that runs Windows Server 2012 R2. App1 has the Print and Document Services server role installed. All client computers run Windows 8. The network contains a network-attached print device named Printer1. From App1, you share Printer1. You need to ensure that users who have connected to Printer1 previously can print to Printer1 if App1 fails. What should you configure? To answer, select the appropriate option in the answer area.

Your network contains an Active Directory domain named contoso.com. You need to prevent users from installing a Windows Store app named App1. What should you create?

Server 1 and Server2 host a load-balanced Application pool named AppPool1. You need to ensure thatAppPool1 uses a group Managed Service Account as its identity. Which 3 actions should you perform?

Your network contains an Active Directory domain named contoso.com. The domain contains a file server named File1. All servers in the domain run Windows Server 2012 R2. You need to create a new volume on File1. The new volume must have the following configurations: Have the drive letter T Have the FAT32 file system Be stored on a new virtual hard disk In which order should you run the Diskpart commands? To answer, move all the Diskpart commands from the list of commands to the answer area and arrange them in the correct order.

Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. The domain contains an administrator account named Admin1. You need to prevent Admin1 from creating more than 100 objects in the domain partition. Which tool should you use?

Your network contains an Active Directory domain named contoso.com. You create a software restriction policy to allow an application named App1 by using a certificate rule. You need to prevent the software restriction policy from applying to users that are members of the local Administrators group.

Your network contains an Active Directory domain named contoso.com. You have a Group Policy object (GPO) named GPO1 that contains several user settings. GPO1 is linked to an organizational unit (OU) named OU1. The help desk reports that GPO1 applies to only some of the users in OU1. You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.) You need to configure GPO1 to apply to all of the users in OU1. What should you do?

You have three servers named Server1, Server2, and DC1 that run Windows Server 2012 R2. IPv6 addresses and configurations are assigned to all of the servers by using DHCPv6. The IPv6 routing on Server1 is shown in the following table.

Your network contains one Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 R2. You need to modify the membership of a group named Group1 to include two users named User1 and User2. What command should you run? To answer, select the appropriate options in the answer area. Select three.

You plan to deploy a DHCP server that will support four subnets. The subnets will be configured as shown in the following table: You need to identify which network ID you should use for each subnet. What should you identify? To answer, drag the appropriate network ID to the each subnet in the answer area. Answer:

You work as an administrator at ABC.com. The ABC.com network consists of a single domain named ABC.com. All servers in the ABC.com domain, including domain controllers, have Windows Server 2012 R2 installed. ABC.com’s user accounts are located in an organizational unit (OU), named ABCStaff. ABC.com’s managers belong to a group, named ABCManagers. You have been instructed to create a new Group Policy object (GPO) that should be linked to the ABCStaffOU, but not affect ABC.com’s managers. Which of the following actions should you take?

Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. You need to install the Remote Desktop Services server role on Server2 remotely from Server1. Which tool should you use?

You run a Windows 2012 R2 Hyper-V Role Server, you need to shrink the size of files.vhd (200GB). Using the Edit Virtual Disk Wizard what option should you choose?

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain have Windows Server 2012 R2 installed. You have logged on to a server, named ENSUREPASS-SR07, and would like to obtain the IP configurations of a server, named ENSUREPASS-SR13.

Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2. You install Windows Server 2012 on a new computer named DC3. You need to manually configure DC3 as a domain controller. Which tool should you use?

You have a DNS server named Server 1. Server1 runs Windows Server 2012 R2. The network ID is 10.1.1.0/24. An administrator creates several reverse lookup zones. You need to identify which reverse lookup zone is configured correctly. Which zone should you identify? To answer, select the appropriate zone in the answer area.

Your company has a main office that contains 225 client computers. The client computers are located on a subnet that uses the network ID of 10.10.1.0/24. The company plans to open two branch offices. The offices will be configured as shown in the following table. You need to select a network prefix for each office to ensure that there are enough IPv4 addresses for each client computer. The solution must minimize the number of unused IP addresses. Which network prefixes should you select? To answer, drag the appropriate network prefix to the correct branch office in the answer area.

What should you do for server core so it can be managed from another server 2012 R2?

Your network contains one Active Directory domain named contoso.com. The domain contains 2,000 client computers used by students. You recently discover an increase in calls to the helpdesk that relate to security policy to meet the following requirement: Modify the UserName of the built-in account named Administrator Support a time mismatch between client computers and domain controllers of up to three minutes. Which Two security settings should you modify?

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC5. DC5 has a Server Core Installation of Windows Server 2012 R2. You need to uninstall Active Directory from DC5 manually. Which tool should you use?

Server1 hosts several virtual machines. Each virtual machine has two network adapters. Server1 contains several virtual switches. On Server1, you create a NIC team that has two network adapters. You discover that the NIC team is set to Static Teaming mode. You need to modify the NIC teaming mode to Switch Independent. Which cmdlet should you use?

Your network contains an Active Directory domain named contoso.com. An organizational unit (OU) named OU1 contains user accounts and computer accounts. A Group Policy object (GPO) named GP1 is linked to the domain. GP1 contains Computer Configuration settings and User Configuration settings. You need to prevent the User Configuration settings in GP1 from being applied to users. The solution must ensure that the Computer Configuration settings in GP1 are applied to all client computers. What should you configure?

You work as a senior administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2 installed, and all workstations have Windows 8 installed. You are running a training exercise for junior administrators. You are currently discussing a Windows PowerShell cmdlet that activates previously de-activated firewall rules. Which of the following is the cmdlet being discussed?

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Server1 runs Windows Server 2012 R2. Server2 runs Windows Server 2008 R2 Service Pack 1 (SP1) and has the DHCP Server server role installed. You need to manage DHCP on Server2 by using the DHCP console on Server1. What should you do first?

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. You need to ensure that the local administrator account on all computers is renamed to L.Admin. Which Group Policy settings should you modify?

Your network contains an Active Directory domain named fabrikam.com. You implement DirectAccess and an IKEv2 VPN. You need to view the properties of the VPN connection. Which connection properties should you view? To answer, select the appropriate connection properties in the answer area.

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2 installed. Contoso.com has a server, named ENSUREPASS-SR07, which has the ADDS, DHCP, and DNS server roles installed. Contoso.com also has a server, named ENSUREPASSSR08, which has the DHCP, and Remote Access server roles installed. You have configured a server, which has the File and Storage Services server role installed, to automatically acquire an IP address. The server is named ENSUREPASSSR09. You then create reservation on ENSUREPASS-SR07, and a filter on ENSUREPASSSR08. Which of the following is a reason for this configuration?

Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the Hyper-V server role installed. Server2 has the Windows Deployment Services server role installed. On Server1, you have a virtual machine named VM1. You plan to deploy an image to VM1 by using Windows Deployment Services (WDS). You need to ensure that VM1 can connect to Server1 by using PXE. Which settings should you configure on VM1? To answer, select the appropriate settings in the answer area.

Which of the following group scope modifications are never permitted? (Choose all answers that are correct.)

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2 installed. Contoso.com has a server, named ENSUREPASS-SR13. ENSUREPASS-SR13 hosts a shared folder, named ENSUREPASSShare, which has been shared as ENSUREPASSShare$. Which of the following is TRUE with regards to sharing the folder in this manner?

Your network contains an Active Directory domain named contoso.com. The domain contains a member server named HVServer1. HVServer1 runs Windows Server 2012 and has the Hyper-V server role installed. HVServer1 hosts 10 virtual machines. All of the virtual machines connect to a virtual switch named Switch1. Switch1 is configured as a private network. All of the virtual machines have the DHCP guard and the router guard settings enabled. You install the DHCP server role on a virtual machine named Server 1. You authorize Server1 as a DHCP server in contoso.com. You create an IP scope. You discover that the virtual machines connected to Switch1 do not receive IP settings from Server1. You need to ensure that the virtual machines can use Server1 as a DHCP server. What should you do?

Your network contains an Active Directory forest named contoso.com. The forest contains a child domain named europe.contoso.com. The europe.contoso.com child domain contains a server named Server1 that runs Windows Server 2012 R2. You install the DHCP Server server role on Server1. You have access to the administrative accounts shown in the following table.

You work as a senior administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2 installed. You are running a training exercise for junior administrators. You are currently discussing Group Policy preference. Which of the following is TRUE with regards to Group Policy preference?

You have a server named Server1 that runs a Server Core installation of Windows Server 2012 R2 Standard. You establish a Remote Desktop session to Server1. You need to identify which task can be performed on Server1 from within the Remote Desktop session. What should you identify?

Your company has a main office and four branch offices. The main office contains a server named Server1 that runs Windows Server 2012 R2. The IP configuration of each office is configured as shown in the following table. You need to add a single static route on Server1 to ensure that Server1 can communicate with the hosts on all of the subnets. Which command should you run?

A laptop with server 2012 R2 OS, you need to ensure that server 2012 R2 can use wireless network adapter. What should you do first?

RODC comes with a number of features that focus on heightened security with limited functionality to remote office users. Which of the following are features of RODC?

A company’s network administrator needs to ensure a specific IP address is never assigned by a Windows Server 2012 R2 DHCP server to any device connecting to the network. Which of the following should the administrator configure on the Windows Server 2012 R2 DHCP server?

Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. You plan to deploy a child domain for contoso.com in Microsoft Azure. To the Azure subscription, you add several virtual machines that have a Server Core installation of Windows Server 2012 R2. You need to create the new domain on one of the virtual machines. Which tool should you use?

You have a server named Server1 that has the Print and Document Services server role installed. You need to provide users with the ability to manage print jobs on Server1 by using a web browser. What should you do?

Your network contains two subnets. The subnets are configured as shown in the following table. You have a server named Server2 that runs Windows Server 2012 R2. Server2 is connected to LAN1. You run the route print command as shown in the exhibit. You need to ensure that Server2 can communicate with the client computers on LAN2. What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains 500 servers that run Windows Server 2012 R2. You have a written security policy that states the following: Only required ports must be open on the servers. All of the servers must have Windows Firewall enabled. Client computers used by administrators must be allowed to access all of the ports on all of the servers. Client computers used by the administrators must be authenticated before the client computers can access the servers. You have a client computer named Computer1 that runs Windows 8. You need to ensure that you can use Computer1 to access all of the ports on all of the servers successfully. The solution must adhere to the security policy. Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

Your network contains an Active Directory domain named adatum.com. The computer accounts for all member servers are located in an organizational unit (OU) named Servers. You link a Group Policy object (GPO) to the Servers OU. You need to ensure that the domain’s Backup Operators group is a member of the local Backup Operators group on each member server. The solution must not remove any groups from the local Backup Operators groups. What should you do?

You have a server named Server1 that runs Windows Server 2012 R2. You plan to enable Hyper-V Network Virtualization on Server1. You need to install the Windows Network Visualization Filter Driver on Server1. Which Windows PowerShell cmdlet should you run?

You have a Hyper-V host named HYPERV1. HYPERV1 hosts a virtual machine named DC1. You need to prevent the clock on DC1 from synchronizing from the clock on HYPERV1. What should you configure? To answer, select the appropriate object in the answer area.

You have a file server named Server1 that runs Windows Server 2012 R2. You need to ensure that a user named User1 can use Windows Server Backup to create a complete backup of Server1. What should you configure?

Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. On a server named Core1, you perform a Server Core Installation of Windows Server 2012 R2.You join Core1 to the adatum.com domain. You need to ensure that you can use Event Viewer on Server1 to view the event logs on Core1. What should you do on Core1?

Your network contains an Active Directory domain named contoso.com. All user accounts in the sales department reside in an organizational unit (OU) named OU1. You have a Group Policy object (GPO) named GPO1. GPO1 is used to deploy a logon script to all of the users in the sales department. You discover that the logon script does not run when the sales users log on to their computers. You open Group Policy Management as shown in the exhibit. You need to ensure that the logon script in GPO1 is applied to the sales users. What should you do?