GoConqr has a new look! Let us know what you think.

Quiz

70 - 411 QUIZ 2 VOLUME 2

saheed Tijani 47 questions

Take the quiz

Questions in this quiz (47)

  1. 1Your network contains 25 Web servers that run Windows Server 2012 R2.
    You need to configure auditing policies that meet the following requirements:
    Generate an event each time a new process is created.
    Generate an event each time a user attempts to access a file share.
    Which two auditing policies should you configure? To answer, select the appropriate two
    auditing policies in the answer area.
    1. AAudit access management (Not Defined)
    2. BAudit directory service access (Not Defined)
    3. CAudit logon events (Not Defined)
    4. DAudit Object (Not Defined)
    5. EAudit policy change(Not Defined)
    6. FAudit privilege use (Not Defined)
    7. GAudit process tracking (Not Defined)
    8. HAudit system events(Not Defined)
  2. 2Your network contains an Active Directory domain named contoso.com. All domain
    controllers run Windows Server 2012 R2.
    Administrators use client computers that run Windows 8 to perform all management tasks.
    A central store is configured on a domain controller named DC1.
    You have a custom administrative template file named App1.admx. App1.admx contains
    application settings for an application named Appl.
    From a client computer named Computer1, you create a new Group Policy object (GPO)
    named GPO1.
    You discover that the application settings for App1 fail to appear in GPO1.
    You need to ensure that the App1 settings appear in all of the new GPOs that you create.
    What should you do?
    1. AFrom the Default Domain Controllers Policy, add App1.admx to the Administrative
      Templates.
    2. BCopy App1.admx to \\Contoso.com\SYSVOL\Contoso.com\Policies\PolicyDefinitions\.
    3. CFrom the Default Domain Policy, add App1.admx to the Administrative Templates.
    4. DCopy App1.admx to \\Contoso.com\SYSVOL\Contoso.com\StarterGPOs.
  3. 3Your network contains an Active Directory domain named contoso.com. The domain
    contains a domain controller named DC1 that runs Windows Server 2012 R2.
    You mount an Active Directory snapshot on DC1.
    You need to expose the snapshot as an LDAP server.
    Which tool should you use?
    1. ALdp
    2. BADSI Edit
    3. CDsamain
    4. DNtdsutil
  4. 4Your network contains an Active Directory domain named contoso.com. You create a user account named User1. The properties of User1 are shown in the exhibit.
    (Click the Exhibit button.)

    You plan to use the User1 account as a service account. The service will forward
    authentication requests to other servers.
    You need to ensure that you can view the Delegation tab from the properties of the User1
    account.
    What should you do first?
    Image for question 4
    1. AConfigure the Name Mappings of User1.
    2. BModify the user principal name (UPN) of User1.
    3. CConfigure a Service Principal Name (SPN) for User1.
    4. DModify the Security settings of User1.
  5. 5Your network contains one Active Directory domain named contoso.com. The forest
    functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All
    client computers run Windows 8.1.
    The domain contains 10 domain controllers and a read-only domain controller (RODC)
    named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that
    runs Windows Server 2012 R2.
    You need to identify whether deleted objects can be recovered from the Active Directory
    Recycle Bin.
    Which cmdlet should you use?
    1. AGet-ADGroupMember
    2. BGet-ADDomainControllerPasswordReplicationPolicy
    3. CGet-ADDomainControllerPasswordReplicationPolicyUsage
    4. DGet-ADDomain
    5. EGet-ADOptionalFeature
    6. FGet-ADAccountAuthorizationGroup
  6. 6Your network contains an Active Directory domain named contoso.com. The domain
    contains a server named Server1 that runs Windows Server 2012 P.2. Server1 has the
    Network Policy and Access Services server role installed.
    Your company's security policy requires that certificate-based authentication must be used
    by some network services.
    You need to identify which Network Policy Server (NPS) authentication methods comply
    with the security policy.
    Which two authentication methods should you identify? (Each correct answer presents part
    of the solution. Choose two.)
    1. AMS-CHAP
    2. BPEAP-MS-CHAP v2
    3. CChap
    4. DEAP-TLS
    5. EMS-CHAP v2
  7. 7Your network contains an Active Directory domain named contoso.com. The domain
    contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the
    Network Policy Server server role installed.
    You need to allow connections that use 802.1x.
    What should you create?
    1. AA network policy that uses Microsoft Protected EAP (PEAP) authentication
    2. BA network policy that uses EAP-MSCHAP v2 authentication
    3. CA connection request policy that uses EAP-MSCHAP v2 authentication
    4. DA connection request policy that uses MS-CHAP v2 authentication
  8. 8Your network contains two Active Directory forests named contoso.com and adatum.com.
    The contoso.com forest contains a server named Server1.contoso.com. The adatum.com
    forest contains a server named server2. adatum.com. Both servers have the Network
    Policy Server role service installed.
    The network contains a server named Server3. Server3 is located in the perimeter network
    and has the Network Policy Server role service installed.
    You plan to configure Server3 as an authentication provider for several VPN servers.
    You need to ensure that RADIUS requests received by Server3 for a specific VPN server
    are always forwarded to Server1.contoso.com.
    Which two should you configure on Server3? (Each correct answer presents part of the
    solution. Choose two.)
    1. ARemediation server groups
    2. BRemote RADIUS server groups
    3. CConnection request policies
    4. DNetwork policies
    5. EConnection authorization policies
  9. 9Your network contains an Active Directory domain named contoso.com. The domain
    contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the
    Remote Desktop Session Host role service installed. The computer account of Server1
    resides in an organizational unit (OU) named OU1.
    You create and link a Group Policy object (GPO) named GPO1 to OU1.
    You need to prevent GPO1 from applying to your user account when you log on to Server1.
    GPO1 must apply to every other user who logs on to Server1.

    What should you configure?
    1. ASecurity Filtering.
    2. BWMI Filtering.
    3. CBlock Inheritance.
    4. DItem-level targeting.
  10. 10Your network contains an Active Directory domain named contoso.com. All domain
    controllers run Windows Server 2012 R2.
    An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8
    Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1.
    You make a change to GPO1.
    You need to force all of the computers in OU1 to refresh their Group Policy settings
    immediately. The solution must minimize administrative effort.
    Which tool should you use?
    1. AThe Secedit command
    2. BThe Invoke-GpUpdate cmdlet
    3. CGroup Policy Object Editor
    4. DServer Manager

Information

Description
70-411 70-411 Quiz on 70 - 411 QUIZ 2 VOLUME 2, created by saheed Tijani on 29/01/2016.
Language
English
Views
86
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?