QUESTION 61
Do you want to pass the 70-411 examsavior exam? What are the new questions of the latest 70-411 exam? Braindumps 70-411 VCE dumps and 70-411 PDF dumps will tell you all about the 70-411 examsavior exam.Here are the examsavior newest and covered all new added questions and answers, which will help you 100% passing 70-411 examsavior exam.Hurry up and get the free exam from here!
NOW FREE DOWNLOAD
QUESTION 61
Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Server1 that runs Windows Server 2008 R2.
You plan to test Windows Server 2012 R2 by using native-boot virtual hard disks (VHDs). You have a
Windows image file named file1.wim.
You need to add an image of a volume to file1.wim. What should you do?
A. Run dism.exe and specify the /image parameter.
B. Run dism.exe and specify the /append-image parameter.
C. Run imagex.exe and specify the /append parameter.
D. Run imagex.exe and specify the /export parameter.
Correct Answer: B
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
Explanation:
You can use DISM with .wim files to:
– Capture and apply Windows images.
– Append and delete images in a .wim file.
– Split .wim files into several smaller files.
technet.microsoft.com/en-us/library/hh825236.aspx
technet.microsoft.com/en-us/library/Hh824916.aspx
QUESTION 62
You have Windows Server 2012 R2 installation media that contains a file named Install.wim.
You need to identify which images are present in Install.wim.
What should you do?
A. Run imagex.exe and specify the /ref parameter.
B. Run dism.exe and specify the /get-mountedwiminfo parameter.
C. Run dism.exe and specify the /get-imageinfo parameter.
D. Run imagex.exe and specify the /verify parameter.
Correct Answer: C
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
Last update: 14/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Option:
/Get-ImageInfo
Arguments:
/ImageFile: <path_to_image.wim>
[{/Index: <Image_index> | /Name: <Image_name>}]
Displays information about the images that are contained in the .wim, vhd or .vhdx file. When used with the
Index or /Name argument, information about the specified image is displayed, which includes if an image is
a WIMBoot image, if the image is Windows 8.1 Update, see Take Inventory of an Image or Component
Using DISM. The /Name argument does not apply to VHD files. You must specify /Index: 1 for VHD files.
Note 2 :
We can either ImageX.exe with the parameter info / or Dism.exe with the parameters Get-Info Image / use
to list the images contained in the image file.
imagex /info D:\WIM\Install.wim
Dism /Get-ImageInfo /ImageFile: D:\WIM\Install.wim
http://technet.microsoft.com/en-us/library/cc749447(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/dd744382(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/hh825224.aspx
QUESTION 63
Your network contains an Active Directory domain named contoso.com. The domain contains a server
named Server1 that runs Windows Server 2008 R2.
You plan to test Windows Server 2012 R2 by using native-boot virtual hard disks (VHDs).
You attach a new VHD to Server1.
You need to install Windows Server 2012 R2 in the VHD.
What should you do?
A. Run imagex.exe and specify the /append parameter.
B. Run dism.exe and specify the /apply-image parameter.
C. Run imagex.exe and specify the /export parameter.
D. Run dism.exe and specify the /append-image parameter.
Correct Answer: B
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
Last update: 14/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
On the destination computer, you will create a structure for the partitions where you apply your images.
The partition structure on the destination computer must match the partition structure of the reference
computer. If you apply an image to a volume with an existing Windows installation, files from the previous
installation may not be deleted. Format the volume by using a tool such as DiskPart before applying the
new image.
QUESTION 64
Your network contains an Active Directory domain named contoso.com. The domain contains a member
server named Server1. All servers run Windows Server 2012 R2.
You need to collect the error events from all of the servers on Server1.
The solution must ensure that when new servers are added to the domain, their error events are
collected automatically on Server1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. On Server1, create a collector initiated subscription.
B. On Server1, create a source computer initiated subscription.
C. From a Group Policy object (GPO), configure the Configure target Subscription Manager setting.
D. From a Group Policy object (GPO), configure the Configure forwarder resource usage setting.
Correct Answer: BC
Section: 6. Configure and manage Group Policy
Explanation
Explanation/Reference:
Last update: 14/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
To set up a Source-Initiated Subscription with Windows Server 2003/2008 so that events of interest from
the Security event log of several domain controllers can be forwarded to an administrative workstation
* Group Policy
The forwarding computer needs to be configured with the address of the server to which the events are
forwarded. This can be done with the following group policy setting:
Computer configuration-Administrative templates-Windows components-Event forwarding- Configure the
server address, refresh interval, and issue certificate authority of a target subscription manager.
* Edit the GPO and browse to Computer Configuration | Policies | Administrative Templates | Windows
Components | Event Forwarding – Configure the server address, refresh interval, and issuer certificate
authority of a target Subscription Manager
Note 2:
We can create and the source computer via Group Policy Object (GPO) to configure for event forwarding
to Server1 a source computer-initiated event subscription.
Policy: Configuring target Subscription Manager
This policy setting allows the server address, the refresh interval and the exhibitors certification body of a
target Subscription Manager .
Configuring If you enable this policy setting, you can configure the source computer so that it connects to a
certain FQDN (Fully Qualified Domain Name, FQDN) or an IP address manufactures and subscription
details requests.
Use the HTTPS protocol, the following syntax:
server = https: // ‘FQDN of the Collection ": 5986 / wsman / SubscriptionManager / WEC, Refresh ="
refresh interval in seconds ", IssuerCA =" fingerprint of the client authentication certificate "
Use for the HTTP protocol port 5985.
QUESTION 65
Your network contains a Hyper-V host named Server1 that hosts 20 virtual machines.
You need to view the amount of memory resources and processor resources each virtual machine
uses currently.
Which tool should you use on Server1?
A. Hyper-V Manager
B. Task Manager
C. Windows System Resource Manager (WSRM)
D. Resource Monitor
Correct Answer: A
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
QUESTION 66
You have a server named WSUS1 that runs Windows Server 2012 R2. WSUS1 has the Windows Server
Update Services server role installed and has one volume.
You add a new hard disk to WSUS1 and then create a volume on the hard disk.
You need to ensure that the Windows Server Update Services (WSUS) update files are stored on
the new volume.
What should you do?
A. From the Update Services console, configure the Update Files and Languages option.
B. From the Update Services console, run the Windows Server Update Services Configuration Wizard.
C. From a command prompt, run wsusutil.exe and specify the export parameter.
D. From a command prompt, run wsusutil.exe and specify the movecontent parameter.
Correct Answer: D
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
Last update: 14/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Local Storage Considerations
If you decide to store update files on your server, the recommended minimum disk size is 30 GB. However,
depending on the synchronization options you specify, you might need to use a larger disk. For example,
when specifying advanced synchronization options, as in the following procedure, if you select options to
download multiple languages and/or the option to download express installation files, your server disk can
easily reach 30 GB. Therefore if you choose any of these options, install a larger disk (for example, 100
GB).
If your disk gets full, you can install a new, larger disk and then move the update files to the new location.
To do this, after you create the new disk drive, you will need to run the WSUSutil.exetool (with the
movecontent command) to move the update files to the new disk. For this procedure, see Managing
WSUS from the Command Line.
For example, if D:\WSUS1 is the new path for local WSUS update storage, D:\move. log is the path to the
log file, and you wanted to copy the old files to the new location, you would type: wsusutil.exe movecontent
D:\WSUS1\ D:\move. log
Note: If you do not want to use WSUSutil.exe to change the location of local WSUS update storage, you
can also use NTFS functionality to add a partition to the current location of local WSUS update storage.
For more information about NTFS, go to Help and Support Center in Windows Server 2003.
Syntax
At the command line %drive%\Program Files\Update Services\Tools>, type:
wsusutilmovecontentcontentpathlogfile -skipcopy [/?]
The parameters are defined in the following table. contentpath – the new root for content files. The path
must exist. logfile – the path and file name of the log file to create. -skipcopy – indicates that only the server
configuration should be changed, and that the content files should not be copied.
/help or /? – displays command-line help for movecontent command.
http://blogs.technet.com/b/sus/archive/2008/05/19/wsus-how-to-change-the-location-where-wsus-storesupdates-
locally.aspx
http://technet.microsoft.com/en-us/library/cc720475(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc708480%28v=ws.10%29.aspx
http://technet.microsoft.com/en-us/library/cc720466(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc708480%28v=ws.10%29.aspx
QUESTION 67
Your company has a main office and two branch offices. The main office is located in Seattle. The two
branch offices are located in Montreal and Miami. Each office is configured as an Active Directory site.
The network contains an Active Directory domain named contoso.com. Network traffic is not routed
between the Montreal office and the Miami office.
You implement a Distributed File System (DFS) namespace named \\contoso.com\public. The namespace
contains a folder named Folder1. Folder1 has a folder target in each office.
You need to configure DFS to ensure that users in the branch offices only receive referrals to the
target in their respective office or to the target in the main office.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Set the Ordering method of \\contoso.com\public to Random order.
B. Set the Advanced properties of the folder target in the Seattle office to Last among all targets.
C. Set the Advanced properties of the folder target in the Seattle office to First among targets of equal
cost.
D. Set the Ordering method of \\contoso.com\public to Exclude targets outside of the client’s site.
E. Set the Advanced properties of the folder target in the Seattle office to Last among targets of equal
cost.
F. Set the Ordering method of \\contoso.com\public to Lowest cost.
Correct Answer: BD
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
I change the "C" for the B : Based on the actual exam and checked with an Premium account.
Explanation:
Exclude targets outside of the client’s site
In this method, the referral contains only the targets that are in the same site as the client. These same-site
targets are listed in random order. If no same-site targets exist, the client does not receive a referral and
cannot access that portion of the namespace. Note: Targets that have target priority set to "First among all
targets" or "Last among all targets" are still listed in the referral, even if the ordering method is set to
Exclude targets outside of the client’s site .
Note 2: Set the Ordering Method for Targets in Referrals A referral is an ordered list of targets that a client
computer receives from a domain controller or namespace server when the user accesses a namespace
root or folder with targets. After the client receives the referral, the client attempts to access the first target
in the list. If the target is not available, the client attempts to access the next target.
QUESTION 68
You have a server named Server 1.
You enable BitLocker Drive Encryption (BitLocker) on Server 1.
You need to change the password for the Trusted Platform Module (TPM) chip.
What should you run on Server1?
A. Manage-bde.exe
B. Set-TpmOwnerAuth
C. bdehdcfg.exe
D. tpmvscmgr.exe
Correct Answer: B
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
The Set-TpmOwnerAuthcmdlet changes the current owner authorization value of the Trusted Platform
Module (TPM) to a new value. You can specify the current owner authorization value or specify a file that
contains the current owner authorization value. If you do not specify an owner authorization value, the
cmdlet attempts to read the value from the registry.
Use the ConvertTo-TpmOwnerAuthcmdlet to create an owner authorization value. You can specify a new
owner authorization value or specify a file that contains the new value.
QUESTION 69
You have a file server that has the File Server Resource Manager role service installed.
You open the File Server Resource Manager console as shown in the exhibit. (Click the Exhibit button.)
The domain contains a server named Server1 that runs Windows Server 2008 R2.
You plan to test Windows Server 2012 R2 by using native-boot virtual hard disks (VHDs). You have a
Windows image file named file1.wim.
You need to add an image of a volume to file1.wim. What should you do?
A. Run dism.exe and specify the /image parameter.
B. Run dism.exe and specify the /append-image parameter.
C. Run imagex.exe and specify the /append parameter.
D. Run imagex.exe and specify the /export parameter.
Correct Answer: B
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
Explanation:
You can use DISM with .wim files to:
– Capture and apply Windows images.
– Append and delete images in a .wim file.
– Split .wim files into several smaller files.
technet.microsoft.com/en-us/library/hh825236.aspx
technet.microsoft.com/en-us/library/Hh824916.aspx
QUESTION 62
You have Windows Server 2012 R2 installation media that contains a file named Install.wim.
You need to identify which images are present in Install.wim.
What should you do?
A. Run imagex.exe and specify the /ref parameter.
B. Run dism.exe and specify the /get-mountedwiminfo parameter.
C. Run dism.exe and specify the /get-imageinfo parameter.
D. Run imagex.exe and specify the /verify parameter.
Correct Answer: C
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
Last update: 14/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Option:
/Get-ImageInfo
Arguments:
/ImageFile: <path_to_image.wim>
[{/Index: <Image_index> | /Name: <Image_name>}]
Displays information about the images that are contained in the .wim, vhd or .vhdx file. When used with the
Index or /Name argument, information about the specified image is displayed, which includes if an image is
a WIMBoot image, if the image is Windows 8.1 Update, see Take Inventory of an Image or Component
Using DISM. The /Name argument does not apply to VHD files. You must specify /Index: 1 for VHD files.
Note 2 :
We can either ImageX.exe with the parameter info / or Dism.exe with the parameters Get-Info Image / use
to list the images contained in the image file.
imagex /info D:\WIM\Install.wim
Dism /Get-ImageInfo /ImageFile: D:\WIM\Install.wim
http://technet.microsoft.com/en-us/library/cc749447(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/dd744382(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/hh825224.aspx
QUESTION 63
Your network contains an Active Directory domain named contoso.com. The domain contains a server
named Server1 that runs Windows Server 2008 R2.
You plan to test Windows Server 2012 R2 by using native-boot virtual hard disks (VHDs).
You attach a new VHD to Server1.
You need to install Windows Server 2012 R2 in the VHD.
What should you do?
A. Run imagex.exe and specify the /append parameter.
B. Run dism.exe and specify the /apply-image parameter.
C. Run imagex.exe and specify the /export parameter.
D. Run dism.exe and specify the /append-image parameter.
Correct Answer: B
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
Last update: 14/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
On the destination computer, you will create a structure for the partitions where you apply your images.
The partition structure on the destination computer must match the partition structure of the reference
computer. If you apply an image to a volume with an existing Windows installation, files from the previous
installation may not be deleted. Format the volume by using a tool such as DiskPart before applying the
new image.
QUESTION 64
Your network contains an Active Directory domain named contoso.com. The domain contains a member
server named Server1. All servers run Windows Server 2012 R2.
You need to collect the error events from all of the servers on Server1.
The solution must ensure that when new servers are added to the domain, their error events are
collected automatically on Server1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. On Server1, create a collector initiated subscription.
B. On Server1, create a source computer initiated subscription.
C. From a Group Policy object (GPO), configure the Configure target Subscription Manager setting.
D. From a Group Policy object (GPO), configure the Configure forwarder resource usage setting.
Correct Answer: BC
Section: 6. Configure and manage Group Policy
Explanation
Explanation/Reference:
Last update: 14/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
To set up a Source-Initiated Subscription with Windows Server 2003/2008 so that events of interest from
the Security event log of several domain controllers can be forwarded to an administrative workstation
* Group Policy
The forwarding computer needs to be configured with the address of the server to which the events are
forwarded. This can be done with the following group policy setting:
Computer configuration-Administrative templates-Windows components-Event forwarding- Configure the
server address, refresh interval, and issue certificate authority of a target subscription manager.
* Edit the GPO and browse to Computer Configuration | Policies | Administrative Templates | Windows
Components | Event Forwarding – Configure the server address, refresh interval, and issuer certificate
authority of a target Subscription Manager
Note 2:
We can create and the source computer via Group Policy Object (GPO) to configure for event forwarding
to Server1 a source computer-initiated event subscription.
Policy: Configuring target Subscription Manager
This policy setting allows the server address, the refresh interval and the exhibitors certification body of a
target Subscription Manager .
Configuring If you enable this policy setting, you can configure the source computer so that it connects to a
certain FQDN (Fully Qualified Domain Name, FQDN) or an IP address manufactures and subscription
details requests.
Use the HTTPS protocol, the following syntax:
server = https: // ‘FQDN of the Collection ": 5986 / wsman / SubscriptionManager / WEC, Refresh ="
refresh interval in seconds ", IssuerCA =" fingerprint of the client authentication certificate "
Use for the HTTP protocol port 5985.
QUESTION 65
Your network contains a Hyper-V host named Server1 that hosts 20 virtual machines.
You need to view the amount of memory resources and processor resources each virtual machine
uses currently.
Which tool should you use on Server1?
A. Hyper-V Manager
B. Task Manager
C. Windows System Resource Manager (WSRM)
D. Resource Monitor
Correct Answer: A
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
QUESTION 66
You have a server named WSUS1 that runs Windows Server 2012 R2. WSUS1 has the Windows Server
Update Services server role installed and has one volume.
You add a new hard disk to WSUS1 and then create a volume on the hard disk.
You need to ensure that the Windows Server Update Services (WSUS) update files are stored on
the new volume.
What should you do?
A. From the Update Services console, configure the Update Files and Languages option.
B. From the Update Services console, run the Windows Server Update Services Configuration Wizard.
C. From a command prompt, run wsusutil.exe and specify the export parameter.
D. From a command prompt, run wsusutil.exe and specify the movecontent parameter.
Correct Answer: D
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
Last update: 14/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Local Storage Considerations
If you decide to store update files on your server, the recommended minimum disk size is 30 GB. However,
depending on the synchronization options you specify, you might need to use a larger disk. For example,
when specifying advanced synchronization options, as in the following procedure, if you select options to
download multiple languages and/or the option to download express installation files, your server disk can
easily reach 30 GB. Therefore if you choose any of these options, install a larger disk (for example, 100
GB).
If your disk gets full, you can install a new, larger disk and then move the update files to the new location.
To do this, after you create the new disk drive, you will need to run the WSUSutil.exetool (with the
movecontent command) to move the update files to the new disk. For this procedure, see Managing
WSUS from the Command Line.
For example, if D:\WSUS1 is the new path for local WSUS update storage, D:\move. log is the path to the
log file, and you wanted to copy the old files to the new location, you would type: wsusutil.exe movecontent
D:\WSUS1\ D:\move. log
Note: If you do not want to use WSUSutil.exe to change the location of local WSUS update storage, you
can also use NTFS functionality to add a partition to the current location of local WSUS update storage.
For more information about NTFS, go to Help and Support Center in Windows Server 2003.
Syntax
At the command line %drive%\Program Files\Update Services\Tools>, type:
wsusutilmovecontentcontentpathlogfile -skipcopy [/?]
The parameters are defined in the following table. contentpath – the new root for content files. The path
must exist. logfile – the path and file name of the log file to create. -skipcopy – indicates that only the server
configuration should be changed, and that the content files should not be copied.
/help or /? – displays command-line help for movecontent command.
http://blogs.technet.com/b/sus/archive/2008/05/19/wsus-how-to-change-the-location-where-wsus-storesupdates-
locally.aspx
http://technet.microsoft.com/en-us/library/cc720475(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc708480%28v=ws.10%29.aspx
http://technet.microsoft.com/en-us/library/cc720466(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc708480%28v=ws.10%29.aspx
QUESTION 67
Your company has a main office and two branch offices. The main office is located in Seattle. The two
branch offices are located in Montreal and Miami. Each office is configured as an Active Directory site.
The network contains an Active Directory domain named contoso.com. Network traffic is not routed
between the Montreal office and the Miami office.
You implement a Distributed File System (DFS) namespace named \\contoso.com\public. The namespace
contains a folder named Folder1. Folder1 has a folder target in each office.
You need to configure DFS to ensure that users in the branch offices only receive referrals to the
target in their respective office or to the target in the main office.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Set the Ordering method of \\contoso.com\public to Random order.
B. Set the Advanced properties of the folder target in the Seattle office to Last among all targets.
C. Set the Advanced properties of the folder target in the Seattle office to First among targets of equal
cost.
D. Set the Ordering method of \\contoso.com\public to Exclude targets outside of the client’s site.
E. Set the Advanced properties of the folder target in the Seattle office to Last among targets of equal
cost.
F. Set the Ordering method of \\contoso.com\public to Lowest cost.
Correct Answer: BD
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
I change the "C" for the B : Based on the actual exam and checked with an Premium account.
Explanation:
Exclude targets outside of the client’s site
In this method, the referral contains only the targets that are in the same site as the client. These same-site
targets are listed in random order. If no same-site targets exist, the client does not receive a referral and
cannot access that portion of the namespace. Note: Targets that have target priority set to "First among all
targets" or "Last among all targets" are still listed in the referral, even if the ordering method is set to
Exclude targets outside of the client’s site .
Note 2: Set the Ordering Method for Targets in Referrals A referral is an ordered list of targets that a client
computer receives from a domain controller or namespace server when the user accesses a namespace
root or folder with targets. After the client receives the referral, the client attempts to access the first target
in the list. If the target is not available, the client attempts to access the next target.
QUESTION 68
You have a server named Server 1.
You enable BitLocker Drive Encryption (BitLocker) on Server 1.
You need to change the password for the Trusted Platform Module (TPM) chip.
What should you run on Server1?
A. Manage-bde.exe
B. Set-TpmOwnerAuth
C. bdehdcfg.exe
D. tpmvscmgr.exe
Correct Answer: B
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
The Set-TpmOwnerAuthcmdlet changes the current owner authorization value of the Trusted Platform
Module (TPM) to a new value. You can specify the current owner authorization value or specify a file that
contains the current owner authorization value. If you do not specify an owner authorization value, the
cmdlet attempts to read the value from the registry.
Use the ConvertTo-TpmOwnerAuthcmdlet to create an owner authorization value. You can specify a new
owner authorization value or specify a file that contains the new value.
QUESTION 69
You have a file server that has the File Server Resource Manager role service installed.
You open the File Server Resource Manager console as shown in the exhibit. (Click the Exhibit button.)
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-375.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
You need to ensure that all of the folders in Folder1 have a 100-MB quota limit.
What should you do?
A. Run the Updatecmdlet.
B. Run the Update-FsrmAutoQuotacmdlet.
C. Create a new quota for Folder1.
D. Modify the quota properties of Folder1.
Correct Answer: C
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
By using auto apply quotas, you can assign a quota template to a parent volume or folder. Then File
Server Resource Manager automatically generates quotas that are based on that template. Quotas are
generated for each of the existing subfolders and for subfolders that you create in the future.
What should you do?
A. Run the Updatecmdlet.
B. Run the Update-FsrmAutoQuotacmdlet.
C. Create a new quota for Folder1.
D. Modify the quota properties of Folder1.
Correct Answer: C
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
By using auto apply quotas, you can assign a quota template to a parent volume or folder. Then File
Server Resource Manager automatically generates quotas that are based on that template. Quotas are
generated for each of the existing subfolders and for subfolders that you create in the future.
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-376.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
QUESTION 70
Your network contains an Active Directory forest named contoso.com.
The domain contains three servers. The servers are configured as shown in the following table.
Your network contains an Active Directory forest named contoso.com.
The domain contains three servers. The servers are configured as shown in the following table.
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-377.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
You need to identify which server role must be deployed to the network to support the planned
implementation.
Which role should you identify?
A. Network Policy and Access Services
B. Volume Activation Services
C. Windows Deployment Services
D. Active Directory Rights Management Services
Correct Answer: C
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Windows Deployment Services (WDS) is a server role that enables you to remotely deploy Windows
operating systems. You can use it to set up new computers by using a network- based installation. This
means that you do not have to install each operating system directly from a CD, USB drive or DVD. To use
Windows Deployment Services, you should have a working knowledge of common desktop deployment
technologies and networking components, including Dynamic Host Configuration Protocol (DHCP),
Domain Name System (DNS), and Active Directory Domain Services (AD DS). It is also helpful to
understand the Preboot execution Environment (also known as Pre-Execution Environment).
QUESTION 71
Your network contains an Active Directory domain named contoso.com. The domain contains five servers.
The servers are configured as shown in the following table.
implementation.
Which role should you identify?
A. Network Policy and Access Services
B. Volume Activation Services
C. Windows Deployment Services
D. Active Directory Rights Management Services
Correct Answer: C
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Windows Deployment Services (WDS) is a server role that enables you to remotely deploy Windows
operating systems. You can use it to set up new computers by using a network- based installation. This
means that you do not have to install each operating system directly from a CD, USB drive or DVD. To use
Windows Deployment Services, you should have a working knowledge of common desktop deployment
technologies and networking components, including Dynamic Host Configuration Protocol (DHCP),
Domain Name System (DNS), and Active Directory Domain Services (AD DS). It is also helpful to
understand the Preboot execution Environment (also known as Pre-Execution Environment).
QUESTION 71
Your network contains an Active Directory domain named contoso.com. The domain contains five servers.
The servers are configured as shown in the following table.
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-378.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
All desktop computers in contoso.com run Windows 8 and are configured to use BitLocker Drive
Encryption (BitLocker) on all local disk drives.
You need to deploy the Network Unlock feature. The solution must minimize the number of features
and server roles installed on the network.
To which server should you deploy the feature?
A. Server1
B. Server2
C. Server3
D. Server4
E. Server5
Correct Answer: E
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
Explanation:
The BitLocker Network Unlock feature will install the WDS role if it is not already installed. If you want to
install it separately before you install BitLocker Network Unlock you can use Server Manager or Windows
PowerShell. To install the role using Server Manager, select the Windows Deployment Services role in
Server Manager.
Last update: 13/09/2015
QUESTION 72
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server
Resource Manager role service installed.
Server1 has a folder named Folder1 that is used by the human resources department.
You need to ensure that an email notification is sent immediately to the human resources manager
when a user copies an audio file or a video file to Folder1.
What should you configure on Server1?
A. a storage report task
B. a file screen exception
C. a file screen
D. a file group
Correct Answer: C
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Create file screens to control the types of files that users can save, and generate notifications when users
attempt to save unauthorized files. With File Server Resource Manager (FSRM) you can create file
screens that prevent users from saving unauthorized files on volumes or folders.
File Screen Enforcement:
You can create file screens to prevent users from saving unauthorized files on volumes or folders. There
are two types of file screen enforcement: active and passive enforcement. Active file screen enforcement
does not allow the user to save an unauthorized file. Passive file screen enforcement allows the user to
save the file, but notifies the user that the file is not an authorized file. You can configure notifications, such
as events logged to the event log or e-mails sent to users and administrators, as part of active and passive
file screen enforcement.
QUESTION 73
Your network contains an Active Directory domain named contoso.com. The domain contains a domain
controller named DC1.
You run ntdsutil as shown in the exhibit. (Click the Exhibit button.)
Encryption (BitLocker) on all local disk drives.
You need to deploy the Network Unlock feature. The solution must minimize the number of features
and server roles installed on the network.
To which server should you deploy the feature?
A. Server1
B. Server2
C. Server3
D. Server4
E. Server5
Correct Answer: E
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
Explanation:
The BitLocker Network Unlock feature will install the WDS role if it is not already installed. If you want to
install it separately before you install BitLocker Network Unlock you can use Server Manager or Windows
PowerShell. To install the role using Server Manager, select the Windows Deployment Services role in
Server Manager.
Last update: 13/09/2015
QUESTION 72
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server
Resource Manager role service installed.
Server1 has a folder named Folder1 that is used by the human resources department.
You need to ensure that an email notification is sent immediately to the human resources manager
when a user copies an audio file or a video file to Folder1.
What should you configure on Server1?
A. a storage report task
B. a file screen exception
C. a file screen
D. a file group
Correct Answer: C
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Create file screens to control the types of files that users can save, and generate notifications when users
attempt to save unauthorized files. With File Server Resource Manager (FSRM) you can create file
screens that prevent users from saving unauthorized files on volumes or folders.
File Screen Enforcement:
You can create file screens to prevent users from saving unauthorized files on volumes or folders. There
are two types of file screen enforcement: active and passive enforcement. Active file screen enforcement
does not allow the user to save an unauthorized file. Passive file screen enforcement allows the user to
save the file, but notifies the user that the file is not an authorized file. You can configure notifications, such
as events logged to the event log or e-mails sent to users and administrators, as part of active and passive
file screen enforcement.
QUESTION 73
Your network contains an Active Directory domain named contoso.com. The domain contains a domain
controller named DC1.
You run ntdsutil as shown in the exhibit. (Click the Exhibit button.)
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-379.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
You need to ensure that you can access the contents of the mounted snapshot.
What should you do?
A. From the snapshot context of ntdsutil, run activate instance "NTDS".
B. From a command prompt, run dsamain.exe -dbpath
c:\$snap_201204131056_volumec$\windows\ntds\ntds. dit -Idapport 389.
C. From the snapshot context of ntdsutil, run mount {79f94f82-5926-4f44-8af0-2f56d827a57d}.
D. From a command prompt, run dsamain.exe -dbpath
c:\$snap_201204131056_volumec$\windows\ntds\ntds. dit -Idapport 33389.
Correct Answer: D
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
Last update: 16/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
By default, only members of the Domain Admins group and the Enterprise Admins group are allowed to
view the snapshots because they contain sensitive AD DS data.
If you want to access snapshot data from an old domain or forest that has been deleted, you can allow
nonadministrators to access the data when you run Dsamain.exe.
If you plan to view the snapshot data on a domain controller, specify ports that are different from the ports
that the domain controller will use. A client starts an LDAP session by connecting to an LDAP server,
called a Directory System Agent (DSA), by default on TCP port and UDP [7] port 389.
The client then sends an operation request to the server, and the server sends responses in return. With
some exceptions, the client does not need to wait for a response before sending the next request, and the
server may send the responses in any order. All information is transmitted using Basic Encoding Rules
(BER).
What should you do?
A. From the snapshot context of ntdsutil, run activate instance "NTDS".
B. From a command prompt, run dsamain.exe -dbpath
c:\$snap_201204131056_volumec$\windows\ntds\ntds. dit -Idapport 389.
C. From the snapshot context of ntdsutil, run mount {79f94f82-5926-4f44-8af0-2f56d827a57d}.
D. From a command prompt, run dsamain.exe -dbpath
c:\$snap_201204131056_volumec$\windows\ntds\ntds. dit -Idapport 33389.
Correct Answer: D
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
Last update: 16/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
By default, only members of the Domain Admins group and the Enterprise Admins group are allowed to
view the snapshots because they contain sensitive AD DS data.
If you want to access snapshot data from an old domain or forest that has been deleted, you can allow
nonadministrators to access the data when you run Dsamain.exe.
If you plan to view the snapshot data on a domain controller, specify ports that are different from the ports
that the domain controller will use. A client starts an LDAP session by connecting to an LDAP server,
called a Directory System Agent (DSA), by default on TCP port and UDP [7] port 389.
The client then sends an operation request to the server, and the server sends responses in return. With
some exceptions, the client does not need to wait for a response before sending the next request, and the
server may send the responses in any order. All information is transmitted using Basic Encoding Rules
(BER).
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-380.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
QUESTION 74
Your network contains an Active Directory domain named contoso.com. The domain contains a read-only
domain controller (RODC) named R0DC1.
You create a global group named RODC_Admins.
You need to provide the members of RODC_Admins with the ability to manage the hardware and the
software on R0DC1.
The solution must not provide RODC_Admins with the ability to manage Active Directory objects.
What should you do?
A. From Active Directory Sites and Services, run the Delegation of Control Wizard.
B. From a command prompt, run the dsadd computer command.
C. From Active Directory Site and Services, configure the Security settings of the R0DC1 server object.
D. From a command prompt, run the dsmgmt local roles command.
Correct Answer: D
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
Explanation:
RODC: using the dsmgmt.exe utility to manage local administrators One of the benefits of of RODC is that
you can add local administrators who do not have full access to the domain administration. This gives them
the abiltiy to manage the server but not add or change active directory objects unless those roles are
delegated. Adding this type of user is done using the dsmdmt.exe utility at the command prompt.
Last update: 13/09/2015
QUESTION 75
Your network contains an Active Directory domain named contoso.com. The domain contains a virtual
machine named Server1 that runs Windows Server 2012 R2.
Server1 has a dynamically expanding virtual hard disk that is mounted to drive E.
You need to ensure that you can enable BitLocker Drive Encryption (BitLocker) on drive E.
Which command should you run?
A. manage-bde -protectors -add c: -startup e:
B. manage-bde -lock e:
C. manage-bde -protectors -add e: -startupkey c:
D. manage-bde -on e:
Correct Answer: D
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Manage-bde: on
Encrypts the drive and turns on BitLocker.
Example:
The following example illustrates using the -on command to turn on BitLocker for drive C and add a
recovery password to the drive.
manage-bde -on C: -recoverypassword
QUESTION 76
Your network contains an Active Directory domain named contoso.com. The domain contains a file server
named Server1 that runs Windows Server 2012 R2.
You view the effective policy settings of Server1 as shown in the exhibit. (Click the Exhibit button.)
Your network contains an Active Directory domain named contoso.com. The domain contains a read-only
domain controller (RODC) named R0DC1.
You create a global group named RODC_Admins.
You need to provide the members of RODC_Admins with the ability to manage the hardware and the
software on R0DC1.
The solution must not provide RODC_Admins with the ability to manage Active Directory objects.
What should you do?
A. From Active Directory Sites and Services, run the Delegation of Control Wizard.
B. From a command prompt, run the dsadd computer command.
C. From Active Directory Site and Services, configure the Security settings of the R0DC1 server object.
D. From a command prompt, run the dsmgmt local roles command.
Correct Answer: D
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
Explanation:
RODC: using the dsmgmt.exe utility to manage local administrators One of the benefits of of RODC is that
you can add local administrators who do not have full access to the domain administration. This gives them
the abiltiy to manage the server but not add or change active directory objects unless those roles are
delegated. Adding this type of user is done using the dsmdmt.exe utility at the command prompt.
Last update: 13/09/2015
QUESTION 75
Your network contains an Active Directory domain named contoso.com. The domain contains a virtual
machine named Server1 that runs Windows Server 2012 R2.
Server1 has a dynamically expanding virtual hard disk that is mounted to drive E.
You need to ensure that you can enable BitLocker Drive Encryption (BitLocker) on drive E.
Which command should you run?
A. manage-bde -protectors -add c: -startup e:
B. manage-bde -lock e:
C. manage-bde -protectors -add e: -startupkey c:
D. manage-bde -on e:
Correct Answer: D
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Manage-bde: on
Encrypts the drive and turns on BitLocker.
Example:
The following example illustrates using the -on command to turn on BitLocker for drive C and add a
recovery password to the drive.
manage-bde -on C: -recoverypassword
QUESTION 76
Your network contains an Active Directory domain named contoso.com. The domain contains a file server
named Server1 that runs Windows Server 2012 R2.
You view the effective policy settings of Server1 as shown in the exhibit. (Click the Exhibit button.)
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-381.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
On Server1, you have a folder named C:\Share1 that is shared as Share1. Share1 contains confidential
data. A group named Group1 has full control of the content in Share1.
You need to ensure that an entry is added to the event log whenever a member of Group1 deletes a
file in Share1.
What should you configure?
A. the Audit File Share setting of Servers GPO
B. the Sharing settings of C:\Share1
C. the Audit File System setting of Servers GPO
D. the Security settings of C:\Share1
Correct Answer: D
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
You can use Computer Management to track all connections to shared resources on a Windows Server
2008 R2 system.
Whenever a user or computer connects to a shared resource, Windows Server 2008 R2 lists a connection
in the Sessions node.
File access, modification and deletion can only be tracked, if the object access auditing is enabled you can
see the entries in event log.
To view connections to shared resources, type net session at a command prompt or follow these steps:
In Computer Management, connect to the computer on which you created the shared resource.
In the console tree, expand System Tools, expand Shared Folders, and then select Sessions. You can
now view connections to shares for users and computers.
To enable folder permission auditing, you can follow the below steps:
Click start and run "secpol. msc" without quotes.
Open the Local Policies\Audit Policy
Enable the Audit object access for "Success" and "Failure".
Go to target files and folders, right click the folder and select properties.
Go to Security Page and click Advanced.
data. A group named Group1 has full control of the content in Share1.
You need to ensure that an entry is added to the event log whenever a member of Group1 deletes a
file in Share1.
What should you configure?
A. the Audit File Share setting of Servers GPO
B. the Sharing settings of C:\Share1
C. the Audit File System setting of Servers GPO
D. the Security settings of C:\Share1
Correct Answer: D
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
You can use Computer Management to track all connections to shared resources on a Windows Server
2008 R2 system.
Whenever a user or computer connects to a shared resource, Windows Server 2008 R2 lists a connection
in the Sessions node.
File access, modification and deletion can only be tracked, if the object access auditing is enabled you can
see the entries in event log.
To view connections to shared resources, type net session at a command prompt or follow these steps:
In Computer Management, connect to the computer on which you created the shared resource.
In the console tree, expand System Tools, expand Shared Folders, and then select Sessions. You can
now view connections to shares for users and computers.
To enable folder permission auditing, you can follow the below steps:
Click start and run "secpol. msc" without quotes.
Open the Local Policies\Audit Policy
Enable the Audit object access for "Success" and "Failure".
Go to target files and folders, right click the folder and select properties.
Go to Security Page and click Advanced.
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-382.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
Click Auditing and Edit.
Click add, type everyone in the Select User, Computer, or Group. Choose Apply onto: This folder,
subfolders and files.
Tick on the box "Change permissions"
Click OK.
Click add, type everyone in the Select User, Computer, or Group. Choose Apply onto: This folder,
subfolders and files.
Tick on the box "Change permissions"
Click OK.
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-383.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
After you enable security auditing on the folders, you should be able to see the folder permission changes
in the server’s Security event log. Task Category is File System.
http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/13779c78-0c73-4477-8014-
f2eb10f3f10f/
http://technet.microsoft.com/en-us/library/cc753927(v=ws.10).aspx
http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/13779c78-0c73-4477-8014-
f2eb10f3f10f/
http://support.microsoft.com/kb/300549
http://www.windowsitpro.com/article/permissions/auditing-folder-permission-changes
http://www.windowsitpro.com/article/permissions/auditing-permission-changes-on-a-folder
QUESTION 77
You have a failover cluster that contains five nodes. All of the nodes run Windows Server 2012 R2. All of
the nodes have BitLocker Drive Encryption (BitLocker) enabled.
You enable BitLocker on a Cluster Shared Volume (CSV).
You need to ensure that all of the cluster nodes can access the CSV.
Which cmdlet should you run next?
A. Unblock-Tpm
B. Add-BitLockerKeyProtector
C. Remove-BitLockerKeyProtector
D. Enable BitLockerAutoUnlock
Correct Answer: B
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Add an Active Directory Security Identifier (SID) to the CSV disk using the Cluster Name Object (CNO) The
Active Directory protector is a domain security identifier (SID) based protector for protecting clustered
volumes held within the Active Directory infrastructure. It can be bound to a user account, machine account
or group. When an unlock request is made for a protected volume, the BitLocker service interrupts the
request and uses the BitLocker protect/unprotect APIs to unlock or deny the request. For the cluster
service to selfmanage.
BitLocker enabled disk volumes, an administrator must add the Cluster Name Object (CNO), which is the
Active Directory identity associated with the Cluster Network name, as a BitLocker protector to the target
disk volumes. Add-BitLockerKeyProtector <drive letter or CSV mount point> –
ADAccountOrGroupProtector ?ADAccountOrGroup $cno
QUESTION 78
Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
The domain contains an Edge Server named Server1. Server1 is configured as a DirectAccess server.
Server1 has the following settings:
in the server’s Security event log. Task Category is File System.
http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/13779c78-0c73-4477-8014-
f2eb10f3f10f/
http://technet.microsoft.com/en-us/library/cc753927(v=ws.10).aspx
http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/13779c78-0c73-4477-8014-
f2eb10f3f10f/
http://support.microsoft.com/kb/300549
http://www.windowsitpro.com/article/permissions/auditing-folder-permission-changes
http://www.windowsitpro.com/article/permissions/auditing-permission-changes-on-a-folder
QUESTION 77
You have a failover cluster that contains five nodes. All of the nodes run Windows Server 2012 R2. All of
the nodes have BitLocker Drive Encryption (BitLocker) enabled.
You enable BitLocker on a Cluster Shared Volume (CSV).
You need to ensure that all of the cluster nodes can access the CSV.
Which cmdlet should you run next?
A. Unblock-Tpm
B. Add-BitLockerKeyProtector
C. Remove-BitLockerKeyProtector
D. Enable BitLockerAutoUnlock
Correct Answer: B
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Add an Active Directory Security Identifier (SID) to the CSV disk using the Cluster Name Object (CNO) The
Active Directory protector is a domain security identifier (SID) based protector for protecting clustered
volumes held within the Active Directory infrastructure. It can be bound to a user account, machine account
or group. When an unlock request is made for a protected volume, the BitLocker service interrupts the
request and uses the BitLocker protect/unprotect APIs to unlock or deny the request. For the cluster
service to selfmanage.
BitLocker enabled disk volumes, an administrator must add the Cluster Name Object (CNO), which is the
Active Directory identity associated with the Cluster Network name, as a BitLocker protector to the target
disk volumes. Add-BitLockerKeyProtector <drive letter or CSV mount point> –
ADAccountOrGroupProtector ?ADAccountOrGroup $cno
QUESTION 78
Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
The domain contains an Edge Server named Server1. Server1 is configured as a DirectAccess server.
Server1 has the following settings:
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-384.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
You run the Remote Access Setup wizard as shown in the following exhibit. (Click the Exhibit button.)
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-385.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
You need to ensure that client computers on the Internet can establish DirectAccess connections
to Server1.
Which additional name suffix entry should you add from the Remote Access Setup wizard?
A. A Name Suffix value of dal.contoso.com and a blank DNS Server Address value
B. A Name Suffix value of Server1.contoso.com and a DNS Server Address value of 65.55.37.62
C. A Name Suffix value of da1.contoso.com and a DNS Server Address value of 65.55.37.62
D. A Name Suffix value of Server1.contoso.com and a blank DNS Server Address value
Correct Answer: A
Section: 3. Configure network services and access
Explanation
Explanation/Reference:
Last update: 16/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Split-brain DNS is the use of the same DNS domain for both Internet and intranet resources. For example,
the Contoso Corporation is using split brain DNS; contoso.com is the domain name for intranet resources
and Internet resources. Internet users use http://www.contoso.com to access Contoso’s public Web site
and Contoso employees on the Contoso intranet use http://www.contoso.com to access Contoso’s intranet
Web site. A Contoso employee with their laptop that is not a DirectAccess client on the intranet that
accesses http: //www.contoso.com sees the intranet Contoso Web site. When they take their laptop to the
local coffee shop and access that same URL, they will see the public Contoso Web site.
When a DirectAccess client is on the Internet, the Name Resolution Policy Table (NRPT) sends DNS name
queries for intranet resources to intranet DNS servers. A typical NRPT for DirectAccess will have a rule for
the namespace of the organization, such as contoso.com for the Contoso Corporation, with the Internet
Protocol version 6 (IPv6) addresses of intranet DNS servers. With just this rule in the NRPT, when a user
on a DirectAccess client on the Internet attempts to access the uniform resource locator (URL) for their
Web site (such as http: //www.contoso.com), they will see the intranet version. Because of this rule, they
will never see the public version of this URL when they are on the Internet.
For split-brain DNS deployments, you must list the FQDNs that are duplicated on the Internet and intranet
and decide which resources the DirectAccess client should reach, the intranet version or the public
(Internet) version. For each name that corresponds to a resource for which you want DirectAccess clients
to reach the public version, you must add the corresponding FQDN as an exemption rule to the NRPT for
your DirectAccess clients. Name suffixes that do not have corresponding DNS servers are treated as
exemptions.
http://technet.microsoft.com/en-us/library/ee382323(v=ws.10).aspx
QUESTION 79
Your network contains an Active Directory domain named contoso.com. The domain contains a server
named Server1 that runs Windows Server 2012 R2.
You enable and configure Routing and Remote Access (RRAS) on Server1.
You create a user account named User1.
You need to ensure that User1 can establish VPN connections to Server1.
What should you do?
A. Create a network policy.
B. Create a connection request policy.
C. Add a RADIUS client.
D. Modify the members of the Remote Management Users group.
Correct Answer: A
Section: 3. Configure network services and access
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Network policies are sets of conditions, constraints, and settings that allow you to designate who is
authorized to connect to the network and the circumstances under which they can or cannot connect.
Network policies can be viewed as rules. Each rule has a set of conditions and settings. Configure your
VPN server to use Network Access Protection (NAP) to enforce health requirement policies
to Server1.
Which additional name suffix entry should you add from the Remote Access Setup wizard?
A. A Name Suffix value of dal.contoso.com and a blank DNS Server Address value
B. A Name Suffix value of Server1.contoso.com and a DNS Server Address value of 65.55.37.62
C. A Name Suffix value of da1.contoso.com and a DNS Server Address value of 65.55.37.62
D. A Name Suffix value of Server1.contoso.com and a blank DNS Server Address value
Correct Answer: A
Section: 3. Configure network services and access
Explanation
Explanation/Reference:
Last update: 16/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Split-brain DNS is the use of the same DNS domain for both Internet and intranet resources. For example,
the Contoso Corporation is using split brain DNS; contoso.com is the domain name for intranet resources
and Internet resources. Internet users use http://www.contoso.com to access Contoso’s public Web site
and Contoso employees on the Contoso intranet use http://www.contoso.com to access Contoso’s intranet
Web site. A Contoso employee with their laptop that is not a DirectAccess client on the intranet that
accesses http: //www.contoso.com sees the intranet Contoso Web site. When they take their laptop to the
local coffee shop and access that same URL, they will see the public Contoso Web site.
When a DirectAccess client is on the Internet, the Name Resolution Policy Table (NRPT) sends DNS name
queries for intranet resources to intranet DNS servers. A typical NRPT for DirectAccess will have a rule for
the namespace of the organization, such as contoso.com for the Contoso Corporation, with the Internet
Protocol version 6 (IPv6) addresses of intranet DNS servers. With just this rule in the NRPT, when a user
on a DirectAccess client on the Internet attempts to access the uniform resource locator (URL) for their
Web site (such as http: //www.contoso.com), they will see the intranet version. Because of this rule, they
will never see the public version of this URL when they are on the Internet.
For split-brain DNS deployments, you must list the FQDNs that are duplicated on the Internet and intranet
and decide which resources the DirectAccess client should reach, the intranet version or the public
(Internet) version. For each name that corresponds to a resource for which you want DirectAccess clients
to reach the public version, you must add the corresponding FQDN as an exemption rule to the NRPT for
your DirectAccess clients. Name suffixes that do not have corresponding DNS servers are treated as
exemptions.
http://technet.microsoft.com/en-us/library/ee382323(v=ws.10).aspx
QUESTION 79
Your network contains an Active Directory domain named contoso.com. The domain contains a server
named Server1 that runs Windows Server 2012 R2.
You enable and configure Routing and Remote Access (RRAS) on Server1.
You create a user account named User1.
You need to ensure that User1 can establish VPN connections to Server1.
What should you do?
A. Create a network policy.
B. Create a connection request policy.
C. Add a RADIUS client.
D. Modify the members of the Remote Management Users group.
Correct Answer: A
Section: 3. Configure network services and access
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Network policies are sets of conditions, constraints, and settings that allow you to designate who is
authorized to connect to the network and the circumstances under which they can or cannot connect.
Network policies can be viewed as rules. Each rule has a set of conditions and settings. Configure your
VPN server to use Network Access Protection (NAP) to enforce health requirement policies
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-404.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
http://technet.microsoft.com/en-us/library/hh831683.aspx
http://technet.microsoft.com/en-us/library/cc754107.aspx
http://technet.microsoft.com/en-us/library/dd314165%28v=ws.10%29.aspx
http://technet.microsoft.com/en-us/windowsserver/dd448603.aspx
http://technet.microsoft.com/en-us/library/dd314165(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/dd469733.aspx
http://technet.microsoft.com/en-us/library/dd469660.aspx
http://technet.microsoft.com/en-us/library/cc753603.aspx
http://technet.microsoft.com/en-us/library/cc754033.aspx
http://technet.microsoft.com/en-us/windowsserver/dd448603.aspx
QUESTION 80
You have a DNS server named Server1.
Server1 has a primary zone named contoso.com.
Zone Aging/Scavenging is configured for the contoso.com zone.
One month ago, an administrator removed a server named Server2 from the network.
You discover that a static resource record for Server2 is present in contoso.com. Resource records for
decommissioned client computers are removed automatically from contoso.com.
You need to ensure that the static resource records for all of the servers are removed automatically
from contoso.com.
What should you modify?
A. The Expires after value of contoso.com
B. The Record time stamp value of the static resource records
C. The time-to-live (TTL) value of the static resource records
D. The Security settings of the static resource records
Correct Answer: B
Section: 3. Configure network services and access
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Reset and permit them to use a current (non-zero) time stamp value. This enables these records to
become aged and scavenged.
You can use this procedure to change how a specific resource record is scavenged. A stale record is a
record where both the No-Refresh Interval and Refresh Interval have passed without the time stamp
updating.
DNS->View->Advanced
http://technet.microsoft.com/en-us/library/cc754107.aspx
http://technet.microsoft.com/en-us/library/dd314165%28v=ws.10%29.aspx
http://technet.microsoft.com/en-us/windowsserver/dd448603.aspx
http://technet.microsoft.com/en-us/library/dd314165(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/dd469733.aspx
http://technet.microsoft.com/en-us/library/dd469660.aspx
http://technet.microsoft.com/en-us/library/cc753603.aspx
http://technet.microsoft.com/en-us/library/cc754033.aspx
http://technet.microsoft.com/en-us/windowsserver/dd448603.aspx
QUESTION 80
You have a DNS server named Server1.
Server1 has a primary zone named contoso.com.
Zone Aging/Scavenging is configured for the contoso.com zone.
One month ago, an administrator removed a server named Server2 from the network.
You discover that a static resource record for Server2 is present in contoso.com. Resource records for
decommissioned client computers are removed automatically from contoso.com.
You need to ensure that the static resource records for all of the servers are removed automatically
from contoso.com.
What should you modify?
A. The Expires after value of contoso.com
B. The Record time stamp value of the static resource records
C. The time-to-live (TTL) value of the static resource records
D. The Security settings of the static resource records
Correct Answer: B
Section: 3. Configure network services and access
Explanation
Explanation/Reference:
Last update: 15/09/2015
Based on the actual exam and checked with an Premium account.
Explanation:
Reset and permit them to use a current (non-zero) time stamp value. This enables these records to
become aged and scavenged.
You can use this procedure to change how a specific resource record is scavenged. A stale record is a
record where both the No-Refresh Interval and Refresh Interval have passed without the time stamp
updating.
DNS->View->Advanced
![[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure](http://www.pdf4exam.com/wp-content/uploads/2016/07/image-405.png "[2016 NEW! 70-411 Exam] Microsoft Braindumps Microsoft.70-411 by.Sacriestory&PP_PP.366q part4(61-80) Exam VCE Dumps For free download with 100%pass ensure")
Depending on the how the resource record was originally added to the zone, do one of the following:
If the record was added dynamically using dynamic update, clear the Delete this record when it becomes
stale check box to prevent its aging or potential removal during the scavenging process. If dynamic
updates to this record continue to occur, the Domain Name System (DNS) server will always reset this
check box so that the dynamically updated record can be deleted.
If you added the record statically, select the Delete this record when it becomes stale check box to permit
its aging or potential removal during the scavenging process.
If the record was added dynamically using dynamic update, clear the Delete this record when it becomes
stale check box to prevent its aging or potential removal during the scavenging process. If dynamic
updates to this record continue to occur, the Domain Name System (DNS) server will always reset this
check box so that the dynamically updated record can be deleted.
If you added the record statically, select the Delete this record when it becomes stale check box to permit
its aging or potential removal during the scavenging process.
http://technet.microsoft.com/en-us/library/cc759204%28v=ws.10%29.aspx
http://technet.microsoft.com/en-us/library/cc759204%28v=ws.10%29.aspx
Typically, stale DNS records occur when a computer is permanently removed from the network. Mobile
users who abnormally disconnect from the network can also cause stale DNS records. To help manage
stale records, Windows adds a time stamp to dynamically added resource records in primary zones where
aging and scavenging are enabled. Manually added records are time stamped with a value of 0, and they
are automatically excluded from the aging and scavenging process.
To enable aging and scavenging, you must do the following:
Resource records must be either dynamically added to zones or manually modified to be used in aging
and scavenging operations.
Scavenging and aging must be enabled both at the DNS server and on the zone.
Scavenging is disabled by default.
http://technet.microsoft.com/en-us/library/cc759204%28v=ws.10%29.aspx
Typically, stale DNS records occur when a computer is permanently removed from the network. Mobile
users who abnormally disconnect from the network can also cause stale DNS records. To help manage
stale records, Windows adds a time stamp to dynamically added resource records in primary zones where
aging and scavenging are enabled. Manually added records are time stamped with a value of 0, and they
are automatically excluded from the aging and scavenging process.
To enable aging and scavenging, you must do the following:
Resource records must be either dynamically added to zones or manually modified to be used in aging
and scavenging operations.
Scavenging and aging must be enabled both at the DNS server and on the zone.
Scavenging is disabled by default.
DNS scavenging depends on the following two settings:
No-refresh interval: The time between the most recent refresh of a record time stamp and the moment
when the time stamp can be refreshed again. When scavenging is enabled, this is set to 7 days by default.
Refresh interval: The time between the earliest moment when a record time stamp can be refreshed and
the earliest moment when the record can be scavenged. The refresh interval must be longer than the
maximum record refresh period. When scavenging is enabled, this is set to 7 days by default.
A DNS record becomes eligible for scavenging after both the no-refresh and refresh intervals have
elapsed. If the default values are used, this is a total of 14 days.
http://technet.microsoft.com/en-us/library/cc759204%28v=ws.10%29.aspx
http://technet.microsoft.com/en-us/library/cc771570.aspx
http://technet.microsoft.com/en-us/library/cc771677.aspx
http://technet.microsoft.com/en-us/library/cc758321(v=ws.10).aspx
No-refresh interval: The time between the most recent refresh of a record time stamp and the moment
when the time stamp can be refreshed again. When scavenging is enabled, this is set to 7 days by default.
Refresh interval: The time between the earliest moment when a record time stamp can be refreshed and
the earliest moment when the record can be scavenged. The refresh interval must be longer than the
maximum record refresh period. When scavenging is enabled, this is set to 7 days by default.
A DNS record becomes eligible for scavenging after both the no-refresh and refresh intervals have
elapsed. If the default values are used, this is a total of 14 days.
http://technet.microsoft.com/en-us/library/cc759204%28v=ws.10%29.aspx
http://technet.microsoft.com/en-us/library/cc771570.aspx
http://technet.microsoft.com/en-us/library/cc771677.aspx
http://technet.microsoft.com/en-us/library/cc758321(v=ws.10).aspx
Latest online browsing the 70-411 exam!
70-411 PDF dumps & 70-411 VCE dumps: http://examsavior.com/70-411
 |  |  |  |  | |
|---|---|---|---|---|---|
Test King
|
Pass4sure
|
Actual Tests
|
Other Brands
| ||
| Customer Reviews |  |  |  |  |  |
$89.99
|
$124.99
|
$125.99
|
$189.00
|
$29.99~$49.99
| |
| Up-To-Dated |  |  |  |  |  |
| Real Questions & Answers |  |  |  |  |  |
| Correct All Error |  |  |  |  |  |
| Premium VCE Dumps |  |  |  |  |  |
| Free VCE Simulator |  |  |  |  |  |
| Unlimited After One Time Purchasing |  |  |  |  |  |
| Instant Download |  |  |  |  |  |
| Printable PDF Dumps |  |  |  |  |  |
| 100% Pass Guarantee |  |  |  |  |  |
| 100% Money Back |  |  |  |  |  |
100% Pass:http://examsavior.com/
No comments:
Post a Comment