Do you want to pass the 70-411 examsavior exam? What are the new questions of the latest 70-411 exam? Braindumps 70-411 VCE dumps and 70-411 PDF dumps will tell you all about the 70-411 examsavior exam.Here are the examsavior newest and covered all new added questions and answers, which will help you 100% passing 70-411 examsavior exam.Hurry up and get the free exam from here!
NOW FREE DOWNLOAD
QUESTION 61
Your Company is testing DirectAccess on Windows Server 2012 R2.
Users report that when they connect to the corporate network by using DirectAccess, access to Internet websites and Internet hosts is slow. The users
report that when they disconnect from DirectAccess, acces to the internet websites and the internet hosts is much faster.
You need to identify the most likely cause of the performance issue.
What should you identify?
Your Company is testing DirectAccess on Windows Server 2012 R2.
Users report that when they connect to the corporate network by using DirectAccess, access to Internet websites and Internet hosts is slow. The users
report that when they disconnect from DirectAccess, acces to the internet websites and the internet hosts is much faster.
You need to identify the most likely cause of the performance issue.
What should you identify?
A. DirectAccess uses a self-signed certificate.
B. The corporate firewall blocks TCP port 8080.
C. Force tunneling is enabled.
D. The DNS suffix list is empty.
Correct Answer: C
Section: 3. Configure network services and access
Explanation
Explanation/Reference:
Notes:
If Direct Access is configured for Force tunneling, compounds of the DirectAccess client to the internal network and the Internet via the remote access
server are routed. The “detour” via the company network, can slow down access to websites and hosts on the Internet.
QUESTION 62
Your network contains one Active Directory domain named contoso.com. The domain contains a file server named Server01 that runs Windows Server
2012 R2.
Server01 has an operating system drive and a data drive. Server01 has a trusted Platform Module (TPM).
Which cmdlet should you run first?
A. Enable-TPMAutoProvisioning
B. Unblock-TPM
C. Install-WindowsFeature
D. Lock-BitLocker
Correct Answer: C
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Notes:
The Windows feature BitLocker Drive Encryption is not installed by default. The following call installs the feature with all its components and
management tools: Install Windows feature BitLocker -IncludeAllSubFeature -IncludeManagementTools
B. The corporate firewall blocks TCP port 8080.
C. Force tunneling is enabled.
D. The DNS suffix list is empty.
Correct Answer: C
Section: 3. Configure network services and access
Explanation
Explanation/Reference:
Notes:
If Direct Access is configured for Force tunneling, compounds of the DirectAccess client to the internal network and the Internet via the remote access
server are routed. The “detour” via the company network, can slow down access to websites and hosts on the Internet.
QUESTION 62
Your network contains one Active Directory domain named contoso.com. The domain contains a file server named Server01 that runs Windows Server
2012 R2.
Server01 has an operating system drive and a data drive. Server01 has a trusted Platform Module (TPM).
Which cmdlet should you run first?
A. Enable-TPMAutoProvisioning
B. Unblock-TPM
C. Install-WindowsFeature
D. Lock-BitLocker
Correct Answer: C
Section: 2. Configure file and print services
Explanation
Explanation/Reference:
Notes:
The Windows feature BitLocker Drive Encryption is not installed by default. The following call installs the feature with all its components and
management tools: Install Windows feature BitLocker -IncludeAllSubFeature -IncludeManagementTools
google translate
QUESTION 63
You have the following Windows PowerShell output.
PS C:\Users\Administrator> New-AdServiceAccount service01 –DNSHostName service01.contoso.com New-ADServiceAccount: Key does not exist
At line : 1 char : 1
+ New-ADServicAccount service01
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo: NotSpecified: {CN=service01,CN… =contoso,DC=com:String} [New-ADServiceAccount], ADException
+FullyQualifiedErrorId:
ActiveDirectoryserver: -2146893811, Microsoft. ActiveDirectory . Management . Commands . NewADServiceAccount
You need to create a Managed service Account.
What should you do?
A. Run Set-KDSConfiguration and then run New-ADServiceAccount -Name “service01” – DNSHostName service01.contoso.com
B. Run New-AuthenticationPolicySilo, and then run New-ADServiceAccount – Name “service01” – DNSHostName
C. Run New-ADServiceAccount – Name “service01” – DNSHostName service01.contoso.com – RestrictToSingleComputer
D. Run New-ADServiceAccount – Name “service01” – DNSHostName service01.contoso.com – SAMAccountName service01.
Correct Answer: C
Section: 3. Configure network services and access
Explanation
Explanation/Reference:
!!!! TO BE APPROVED!!!
http://mcsa.freeforums.net/thread/16/create-managed-service-account
http://blogs.technet.com/b/askpfeplat/archive/2012/12/17/windows-server-2012-group-managed-service-accounts.aspx
QUESTION 64
Your network contains an Active Directory domain named contoso.com.
Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2.
You have a Password Settings object (PSOs) named PSO1.
You need to view the settings of PSO1.
Which tool should you use?
QUESTION 63
You have the following Windows PowerShell output.
PS C:\Users\Administrator> New-AdServiceAccount service01 –DNSHostName service01.contoso.com New-ADServiceAccount: Key does not exist
At line : 1 char : 1
+ New-ADServicAccount service01
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo: NotSpecified: {CN=service01,CN… =contoso,DC=com:String} [New-ADServiceAccount], ADException
+FullyQualifiedErrorId:
ActiveDirectoryserver: -2146893811, Microsoft. ActiveDirectory . Management . Commands . NewADServiceAccount
You need to create a Managed service Account.
What should you do?
A. Run Set-KDSConfiguration and then run New-ADServiceAccount -Name “service01” – DNSHostName service01.contoso.com
B. Run New-AuthenticationPolicySilo, and then run New-ADServiceAccount – Name “service01” – DNSHostName
C. Run New-ADServiceAccount – Name “service01” – DNSHostName service01.contoso.com – RestrictToSingleComputer
D. Run New-ADServiceAccount – Name “service01” – DNSHostName service01.contoso.com – SAMAccountName service01.
Correct Answer: C
Section: 3. Configure network services and access
Explanation
Explanation/Reference:
!!!! TO BE APPROVED!!!
http://mcsa.freeforums.net/thread/16/create-managed-service-account
http://blogs.technet.com/b/askpfeplat/archive/2012/12/17/windows-server-2012-group-managed-service-accounts.aspx
QUESTION 64
Your network contains an Active Directory domain named contoso.com.
Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2.
You have a Password Settings object (PSOs) named PSO1.
You need to view the settings of PSO1.
Which tool should you use?
A. Get-ADDefaultDomainPasswordPolicy
B. Active Directory Administrative Center
C. Local Security Policy
D. Get-ADAccountResultantPasswordReplicationPolicy
Correct Answer: B
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 65
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify which domain controller must be online when cloning a domain controller.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: D
Section: 5. Configure and manage Active Directory
Explanation
B. Active Directory Administrative Center
C. Local Security Policy
D. Get-ADAccountResultantPasswordReplicationPolicy
Correct Answer: B
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 65
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify which domain controller must be online when cloning a domain controller.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: D
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 66
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify whether deleted objects can be recovered from the Active Directory Recycle Bin.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: E
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 67
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
QUESTION 66
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify whether deleted objects can be recovered from the Active Directory Recycle Bin.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: E
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 67
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify which domain controllers are authorized to be cloned using virtual domain controller cloning.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: A
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 68
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify whether the members of the protected Users group will be prevented from authenticating by using NTLM.
Which cmdlet should you use?
A. Get-ADGroupMember
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify which domain controllers are authorized to be cloned using virtual domain controller cloning.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: A
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 68
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify whether the members of the protected Users group will be prevented from authenticating by using NTLM.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: D
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 69
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify which user accounts were authenticated by RODC1.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: C
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: D
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 69
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify which user accounts were authenticated by RODC1.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: C
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 70
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify which security principals are authorized to have their password cached on RODC1?
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: B
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 71
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
Explanation
Explanation/Reference:
QUESTION 70
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify which security principals are authorized to have their password cached on RODC1?
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: B
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 71
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
Determine what domain controller needs to be online to promote a RODC.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: D
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 72
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
What accounts are allowed to replicate their password with the RODC?
Which cmdlet should you use?
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
Determine what domain controller needs to be online to promote a RODC.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: D
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 72
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
What accounts are allowed to replicate their password with the RODC?
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: B
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 73
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify whose passwords can be stored, view stored passwords.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: B
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 73
Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one
question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to
that question.
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows
Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted
on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify whose passwords can be stored, view stored passwords.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Correct Answer: C
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 74
You have a DNS server that runs Windows Server 2012 R2. The server hosts the zone for contoso.com and is accessible from the internet.
You need to create a DNS record for the Sender Policy Framework (SPF) to list that are authorized ti send email for contoso.com
Which type of record should you create?
A. Name Server (NS)
B. Mail.exchanger (MX)
C. Resource record signature (RRSIG)
D. Text (TXT)
Correct Answer: D
Section: 3. Configure network services and access
Explanation
Explanation/Reference:
mediatemple.net/community/products/dv/204404314/how-can-i-create-an-spf-record-for-my-domain
en.wikipedia.org/wiki/Sender_Policy_Framework
QUESTION 75
You have a windows Server update services (WSUS) server01 and Server02. Server01 synchronizes from Microsoft Update.
Server02 Synchronizes updates from Server01. Both Servers are members of the same Active Directory domain.
You configure Server01 to require SSL for all WSUS metadata by using certificate issued by an enterprise root certification authority (CA)
You need to ensure that server02 synchronizes updates from Server01
What should you do?
A. From the update Services console, modify the Automatic Approvals options.
Correct Answer: C
Section: 5. Configure and manage Active Directory
Explanation
Explanation/Reference:
QUESTION 74
You have a DNS server that runs Windows Server 2012 R2. The server hosts the zone for contoso.com and is accessible from the internet.
You need to create a DNS record for the Sender Policy Framework (SPF) to list that are authorized ti send email for contoso.com
Which type of record should you create?
A. Name Server (NS)
B. Mail.exchanger (MX)
C. Resource record signature (RRSIG)
D. Text (TXT)
Correct Answer: D
Section: 3. Configure network services and access
Explanation
Explanation/Reference:
mediatemple.net/community/products/dv/204404314/how-can-i-create-an-spf-record-for-my-domain
en.wikipedia.org/wiki/Sender_Policy_Framework
QUESTION 75
You have a windows Server update services (WSUS) server01 and Server02. Server01 synchronizes from Microsoft Update.
Server02 Synchronizes updates from Server01. Both Servers are members of the same Active Directory domain.
You configure Server01 to require SSL for all WSUS metadata by using certificate issued by an enterprise root certification authority (CA)
You need to ensure that server02 synchronizes updates from Server01
What should you do?
A. From the update Services console, modify the Automatic Approvals options.
B. From command prompt run wsusutil.exe configuredns server02.
C. From Internet Information Services (IIS) Manager, import certificate.
D. From the update services console, modify the Update Source and Proxy Server Options.
Correct Answer: D
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
QUESTION 76
You have two Windows Server Update Services (WSUS) servers named Server1 and Server2. Server01 synchronizes from Microsoft Update. Server2
synchronizes updates from Server1.Both servers are members of the same Active Directory domain.
You configure Server1 to require SSL for all WSUS metadata by using a certificate issued by an enterprise root certification authority (CA).
You need to ensure that Server2 synchronizes updates from Server1.
What should you do on Server2?
A. From the Update Services console, modify the Update Source and Proxy Server options.
B. From a command prompt, run wsusutil.exe configuresslproxy server2 443.
C. From a command prompt, run wsusutil.exe configuressl server1.
D. From a command prompt, run wsusutil.exe configuresslproxy server1 443.
Correct Answer: A
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
Explanation:
Following this oficial Blog
blogs.technet.com/b/wemd_ua_-_sms_writing_team/archive/2008/09/03/clarifying-how-to-configure-the-wsus-web-site-to-use-ssl.aspx
The answer is C. From a command prompt, run wsusutil.exe configuressl server1
Although this topic was updated for the August 2008 documentation update to include instructions for IIS 7.0, the instructions for running the command
are WSUSUtil.exe configuressl <subject name in the signing certificate>. This should more accurately say WSUSUtil.exe configuressl <intranet FQDN
of the software update point site system>.
C. From Internet Information Services (IIS) Manager, import certificate.
D. From the update services console, modify the Update Source and Proxy Server Options.
Correct Answer: D
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
QUESTION 76
You have two Windows Server Update Services (WSUS) servers named Server1 and Server2. Server01 synchronizes from Microsoft Update. Server2
synchronizes updates from Server1.Both servers are members of the same Active Directory domain.
You configure Server1 to require SSL for all WSUS metadata by using a certificate issued by an enterprise root certification authority (CA).
You need to ensure that Server2 synchronizes updates from Server1.
What should you do on Server2?
A. From the Update Services console, modify the Update Source and Proxy Server options.
B. From a command prompt, run wsusutil.exe configuresslproxy server2 443.
C. From a command prompt, run wsusutil.exe configuressl server1.
D. From a command prompt, run wsusutil.exe configuresslproxy server1 443.
Correct Answer: A
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
Explanation:
Following this oficial Blog
blogs.technet.com/b/wemd_ua_-_sms_writing_team/archive/2008/09/03/clarifying-how-to-configure-the-wsus-web-site-to-use-ssl.aspx
The answer is C. From a command prompt, run wsusutil.exe configuressl server1
Although this topic was updated for the August 2008 documentation update to include instructions for IIS 7.0, the instructions for running the command
are WSUSUtil.exe configuressl <subject name in the signing certificate>. This should more accurately say WSUSUtil.exe configuressl <intranet FQDN
of the software update point site system>.
Update October 6th 2008: If you are running an NLB software update point, the WSUSUtil.exe configuressl command must be run on each node, using
the intranet FQDN of the respective software update point site system – and not the FQDN of the NLB software update point.
QUESTION 77
You have three Windows Server Update Services (WSUS) Servers named Server01 Server02 and Server03.
Server01 synchronizes form Microsoft Update.
You need to ensure that only Server02 and Server03 can Synchronize updates from Server01.
What should you do?
A. Modify %ProgramFiles%\Update Services\WebServices\Serversyncgwevservice\SimpleAuth.asmx.
B. From the Update Services console, modify the Update Source and Proxy Server options.
C. From the Update Services console, modify the Automatic Approvals Options.
D. Modify %ProgramFiles%\Update Services\WebServices\Serversyncgwevservice\Web.config.
Correct Answer: D
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
“The question is asking how to harden WSUS, i.e. limit the servers that can get updates from Server01 to only Server02 and Server03. This is done by
modifying the web.config. “
https://technet.microsoft.com/en-us/library/Cc708550(v=WS.10).aspx
the intranet FQDN of the respective software update point site system – and not the FQDN of the NLB software update point.
QUESTION 77
You have three Windows Server Update Services (WSUS) Servers named Server01 Server02 and Server03.
Server01 synchronizes form Microsoft Update.
You need to ensure that only Server02 and Server03 can Synchronize updates from Server01.
What should you do?
A. Modify %ProgramFiles%\Update Services\WebServices\Serversyncgwevservice\SimpleAuth.asmx.
B. From the Update Services console, modify the Update Source and Proxy Server options.
C. From the Update Services console, modify the Automatic Approvals Options.
D. Modify %ProgramFiles%\Update Services\WebServices\Serversyncgwevservice\Web.config.
Correct Answer: D
Section: 1. Deploy and manage server images
Explanation
Explanation/Reference:
“The question is asking how to harden WSUS, i.e. limit the servers that can get updates from Server01 to only Server02 and Server03. This is done by
modifying the web.config. “
https://technet.microsoft.com/en-us/library/Cc708550(v=WS.10).aspx
Latest online browsing the 70-411 exam!
70-411 PDF dumps & 70-411 VCE dumps: http://examsavior.com/70-411
 |  |  |  |  | |
|---|---|---|---|---|---|
Test King
|
Pass4sure
|
Actual Tests
|
Other Brands
| ||
| Customer Reviews |  |  |  |  |  |
$89.99
|
$124.99
|
$125.99
|
$189.00
|
$29.99~$49.99
| |
| Up-To-Dated |  |  |  |  |  |
| Real Questions & Answers |  |  |  |  |  |
| Correct All Error |  |  |  |  |  |
| Premium VCE Dumps |  |  |  |  |  |
| Free VCE Simulator |  |  |  |  |  |
| Unlimited After One Time Purchasing |  |  |  |  |  |
| Instant Download |  |  |  |  |  |
| Printable PDF Dumps |  |  |  |  |  |
| 100% Pass Guarantee |  |  |  |  |  |
| 100% Money Back |  |  |  |  |  |
100% Pass:http://examsavior.com/
No comments:
Post a Comment