aiotestking uk

70-410 Exam Questions - Online Test


70-410 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Q1. - (Topic 3) 

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and corp.contoso.com. All domain controllers run Windows Server 2012 R2 and are configured as global catalog servers. The corp.contoso.com domain contains a domain controller named DC1. 

You need to disable the global catalog on DC1. 

What should you do? 

A. From Active Directory Users and Computers, modify the properties of the DC1 computer account. 

B. From Active Directory Administrative Center, modify the properties of the DC1 computer account. 

C. From Active Directory Sites and Services, modify the NTDS Settings of the DC1 server object. 

D. From Active Directory Domains and Trusts, modify the properties of the corp.contoso.com domain. 

Answer:

Explanation: 

To add or remove the global catalog 

Open Active Directory Sites and Services. To open Active Directory Sites and Services, 

click Start, click Administrative Tools, and then click Active Directory Sites and Services. 

To open Active Directory Sites and Services in Windows Server. 2012, click Start, type 

dssite.msc. 

In the console tree, click the server object to which you want to add the global catalog or 

from which you want to remove the global catalog. 

Where? 

Active Directory Sites and Services\Sites\SiteName\Servers 

In the details pane, right-click NTDS Settings of the selected server object, and then click 

Properties. 

Select the Global Catalog check box to add the global catalog, or clear the check box to 

remove the global catalog. 

Q2. - (Topic 3) 

Your network contains an Active Directory domain named contoso.com. 

All servers run Windows Server 2012 R2. 

An application named Appl.exe is installed on all client computers. Multiple versions of Appl.exe are installed on different client computers. Appl.exe is digitally signed. 

You need to ensure that only the latest version of Appl.exe can run on the client computers. 

What should you create? 

A. An application control policy packaged app rule 

B. A software restriction policy certificate rule 

C. An application control policy Windows Installer rule 

D. An application control policy executable rule 

Answer:

Explanation: 

A. A publisher rule for a Packaged app is based on publisher, name and version B. You can create a certificate rule that identifies software and then allows or does not allow the software torun, depending on the security level. 

C. For .msi or .msp 

D. Executable Rules, for .exe and can be based on Publisher, Product name, filename and version. Use Certificate Rules on Windows Executables for Software Restriction Policies This security setting determines if digital certificates are processed when a user or process attempts to run software with an .exe file name extension. This security settings is used to enable or disable certificate rules, a type of software restriction policies rule. With software restriction policies, you can create a certificate rule that will allow or disallow software that is signed by Authenticode to run, based on the digital certificate that is associated with the software. In order for certificate rules to take effect, you must enable this security setting. When certificate rules are enabled, software restriction policies will check a certificate revocation list (CRL) to make sure the software’s certificate and signature are valid. This may decrease performance when start signed programs. You can disable this feature. On Trusted Publishers Properties, clear the Publisher and Timestampcheck boxes. 

Q3. - (Topic 2) 

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.Server1 contains a virtual machine named VM1 that runs Windows Server 2012 R2. 

You need to ensure that a user named User1 can install Windows features on VM1. The solution must minimize the number of permissions assigned to User1. 

To which group should you add User1? 

A. Hyper-V Administrators on Server1 

B. Administrators on VM1 

C. Server Operators on Server1 

D. Power Users on VM1 

Answer:

Explanation: 

The user has to be an administrator on VM1 to be able to install features. 

In Windows Server 2012 R2, the Server Manager console and Windows PowerShell-cmdlets for 

Server Manager allow installation of roles and features to local or remote servers, or offline 

virtual hard disks (VHDs). 

You can install multiple roles and features on a single remote server or offline VHD in a 

single Add Roles and Features Wizard or Windows PowerShell session. You must be 

logged on to a server as an administrator to install or uninstall roles, role services, and 

features. If you are logged on to the local computer with an account that does not have 

administrator rights on your target server, right-click the target server in the Servers tile, 

and then click Manage As to provide an account that has administrator rights. The server 

on which you want to mount an offline VHD must be added to Server Manager, and you 

must have Administrator rights on that server. 

References: 

Training Guide: Installing and Configuring Windows Server 2012 R2, Chapter 10: 

Implementing Group Policy, p.539 

Q4. HOTSPOT - (Topic 3) 

Your network contains two Active Directory forests named contoso.com and adatum.com. A two-way forest trust exists between the forests. 

You have custom starter Group Policy objects (GPOs) defined in contoso.com. 

You need to ensure that the same set of custom starter GPOs are available in adatum.com. 

In the table below, identify which action must be performed for the starter GPOs container in each forest. Make only one selection in two of the rows. Each correct selection is worth one point. 

Answer:  

Q5. - (Topic 1) 

Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. 

On a server named Core1, you perform a Server Core Installation of Windows Server 2012 R2. You join Core1 to the adatum.com domain. 

You need to ensure that you can use Event Viewer on Server1 to view the event logs on Core1. 

What should you do on Core1? 

A. Run the Disable NetFirewallRule cmdlet. 

B. Install Remote Server Administration Tools (RSAT). 

C. Install Windows Management Framework. 

D. Run the Enable-Com + Network Access Firewall Rule. 

Answer:

Explanation: 

Information regarding IPsec policy changes, etc. can be found in the Event Viewer. Thus you need to enable the NetFirewallRule command. This will allow you to view the event logs. 

Q6. - (Topic 1) 

Your network contains an Active Directory domain named contoso.com. The domain contains 100 servers. The servers are contained in an organizational unit (OU) named Servers OU. 

You need to create a group named Group1 on all of the servers in the domain. You must ensure that Group1 is added only to the servers. 

What should you configure? 

A. a Local Users and Groups preferences setting in a Group Policy linked to the Domain Controllers OU 

B. a Restricted Groups setting in a Group Policy linked to the domain 

C. a Local Users and Groups preferences setting in a Group Policy linked to ServersOU 

D. a Restricted Groups setting in a Group Policy linked to Servers OU 

Answer:

Explanation: 

A. This would add the group to the wrong OU 

B. This would affect the whole domain and would effect member of the group 

C. allows you to centrally manage local users and groups on domain member computers and is this is the correct OU for the GPO change 

D. Restricted Groups defines what member or groups should exist as part of a group Why use Group Policy preferences? Unlike Group Policy settings, which App1y to both local computer policy and Active Directory policy, Group Policy preferences only App1y to Active Directory policy. You use preferences to configure many areas of the OS, including: System devices, such as USB ports, floppy drives and removable media Network shares and mapping network shares to drive letters System and user environment variables User and group accounts for the local computer VPN and dial-up networking connections Printer configuration and mapping Registry settings, schedule tasks and system services Settings for Folder Options, Internet Options and Regional and Language Options Settings for power schemes and power management Start Menu properties and menu items 

Q7. - (Topic 3) 

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed. 

On Server1, you create a virtual machine named VM1. 

When you try to add a RemoteFX 3D Video Adapter to VM1, you discover that the option is unavailable as shown in the following exhibit. (Click the Exhibit button.) 

You need to add the RemoteFX 3D Video Adapter to VM1. 

What should you do first? 

A. On Server1, run the Add-VMRemoteFx3dVideoAdapter cmdlet 

B. On Server1, install the Media Foundation feature. 

C. On Server1, run the Enable-VMRemoteFxPhysicalVideoAdaptercmdlet. 

D. On Server1, install the Remote Desktop Visualization Host (RD Visualization Host) role service. 

Answer:

Explanation: 

Remote Desktop services are not available in server core installation; you need to add the 

role. 

References: 

Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2, Chapter 1: 

Installing and Configuring servers, Objective 1.2: 

Configure servers, p. 19 

http://technet.microsoft.com/en-us/library/hh848506(v=wps.620).aspx http://technet.microsoft.com/en-us/library/hh848520(v=wps.620).aspx http://technet.microsoft.com/en-us/library/ff817586(v=ws.10).aspx 

Q8. - (Topic 3) 

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed. On Server1, you create and start a virtual machine named VM1. VM1 is configured as shown in the following table. 

You plan to create a snapshot of VM1. You need to recommend a solution to minimize the amount of disk space used for the snapshot of VM1. What should you do before you create the snapshot? 

A. Run the Stop-VM cmdlet. 

B. Run the Convert-VHD cmdlet. 

C. Decrease the Maximum RAM 

D. Decrease the Minimum RAM. 

Answer:

Explanation: 

What are virtual machine snapshots? 

Virtual machine snapshots capture the state, data, and hardware configuration of a running 

virtual machine. 

What are snapshots used for? 

Snapshots provide a fast and easy way to revert the virtual machine to a previous state. 

For this reason, virtual machine snapshots are intended mainly for use in development and 

test environments. Having an easy way to revert a virtual machine can be very useful if you 

need to recreate a specific state or condition so that you can troubleshoot a problem. 

There are certain circumstances in which it may make sense to use snapshots in a 

production environment. 

For example, you can use snapshots to provide a way to revert a potentially risky operation 

in a production environment, such as applying an update to the software running in the 

virtual machine. 

How are snapshots stored? 

Snapshot data files are stored as .avhd files. Taking multiple snapshots can quickly 

consume storage space. In the first release version of Hyper-V (KB950050) and in Hyper-V 

in Windows Server 2008 Service Pack 2, snapshot, snapshot data files usually are located 

in the same folder as the virtual machine by default. In Hyper- V in Windows Server 2008 

R2, the files usually are located in the same folder as the virtual hard disk. The following 

exceptions affect the location of the snapshot data files: If the virtual machine was imported 

with snapshots, they are stored in their own folder. If the virtual machine has no snapshots 

and you configure the virtual machine snapshot setting, all snapshots you take afterwards 

will be stored in the folder you specify. 

http://technet.microsoft.com/pt-pt/library/dd560637%28v=ws.10%29.aspx 

Reducing the available RAM for the VM would reduce the size of the snapshot, what better 

than have the machine turn off, not using any memory. 

Q9. HOTSPOT - (Topic 3) 

Your network contains an Active Directory domain named contoso.com. The network contains two subnets. The subnets are configured as shown in the following table: 

The network contains a member server named Server1 that runs Windows Server 2012 R2. Server1 has the DHCP Server server role installed. 

Server1 is configured to lease IP addresses to the two subnets. You add three new printers to the Warehouse subnet. The printers have static IP addresses. The IP addresses are consecutive. 

You need to create an exclusion range that contains the IP addresses of the printers. 

From which node should you configure the exclusion range? To answer, select the appropriate node in the answer area. 

Answer:  

Q10. - (Topic 3) 

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have Windows Server 2012 R2 installed. 

Contoso.com has a server, named ENSUREPASS-SR15, which is configured as a file server. 

You have received instructions to make sure that a user, named Mia Hamm, has the ability to generate a complete backup of ENSUREPASS-SR15 via Windows Server Backup. 

Which of the following actions should you take? 

A. You should consider making use of Computer Management to configure the local groups. 

B. You should consider making use of Computer Management to configure the domain local groups. 

C. You should consider making use of Computer Management to configure the global groups. 

D. You should consider making use of Computer Management to configure the administrator groups. 

Answer:

Explanation: 

To perform backups or recoveries by using Windows Server Backup, you must be a 

member of the Administrators or Backup Operators groups. 

You can only use Backup locally; you cannot backup a remote computer. 

You can only back up and restore System State data on a local computer. You cannot back 

up and restore System State data on a remote computer even if you are an administrator 

on the remote computer.