[2021-New] Microsoft 70-411 Dumps With Update Exam Questions (21-30)

70-411 Dumps

70-411 Exam Questions - Online Test

70-411 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Q1. Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8 Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1.

You make a change to GPO1.

You need to force all of the computers in OU1 to refresh their Group Policy settings immediately. The solution must minimize administrative effort.

Which tool should you use?

A. The Secedit command

B. Group Policy Management Console (GPMC)

C. Server Manager

D. The Gpupdate command

Answer: B

Explanation:

In the previous versions of Windows, this was accomplished by having the user run GPUpdate.exe on their computer.

Starting with Windows Server. 2012 and Windows. 8, you can now remotely refresh Group Policy settings for all computers in an OU from one central location through the Group Policy Management Console (GPMC). Or you can use the Invoke-GPUpdatecmdlet to refresh Group Policy for a set of computers, not limited to the OU structure, for example, if the computers are located in the default computers container.

http: //technet. microsoft. com/en-us//library/jj134201. aspx

http: //blogs. technet. com/b/grouppolicy/archive/2012/11/27/group-policy-in-windows-server-2012-using-remote-gpupdate. aspx

Q2. You have Windows Server 2012 R2 installation media that contains a file named Install.wim. You need to identify the permissions of the mounted images in Install.wim.

What should you do?

A. Run dism.exe and specify the /get-mountedwiminfo parameter.

B. Run imagex.exe and specify the /verify parameter.

C. Run imagex.exe and specify the /ref parameter.

D. Run dism.exe and specify the/get-imageinfo parameter.

Answer: A

Explanation:

/Get-MountedWimInfo Lists the images that are currently mounted and information about the mounted image such as read/write permissions, mount location, mounted file path, and mounted image index.

References:

http: //technet. microsoft. com/en-us/library/cc749447(v=ws. 10). aspx

http: //technet. microsoft. com/en-us/library/dd744382(v=ws. 10). aspx

http: //technet. microsoft. com/en-us/library/hh825224. aspx

Q3. Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. You plan to use fine-grained password policies to customize the password policy settings ofcontoso.com.

You need to identify to which Active Directory object types you can directly apply the fine-grained password policies.

Which two object types should you identify? (Each correct answer presents part of the solution. Choose two.)

A. Users

B. Global groups

C. computers

D. Universal groups

E. Domain local groups

Answer: A,B

Explanation:

First off, your domain functional level must be at Windows Server 2008. Second, Fine-grained password policies ONLY apply to user objects, and global security groups. Linking them to universal or domain local groups is ineffective. I know what you’re thinking, what about OU’s? Nope, Fine-grained password policy cannot be applied to an organizational unit (OU) directly. The third thing to keep in mind is, by default only members of the Domain Admins group can set fine-grained password policies. However, you can delegate this ability to other users if needed.

Fine-grained password policies apply only to user objects (or inetOrgPerson objects if they are used instead of user objects) and global security groups.

You can apply Password Settings objects (PSOs) to users or global security groups:

References:

http: //technet. microsoft. com/en-us/library/cc731589%28v=ws. 10%29. aspx

http: //technet. microsoft. com/en-us/library/cc770848%28v=ws. 10%29. aspx

http: //www. brandonlawson. com/active-directory/creating-fine-grained-password-policies/

Q4. You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.

Each time a user receives an access-denied message after attempting to access a folder on Server1, an email notification is sent to a distribution list named DLL.

You create a folder named Folder1 on Server1, and then you configure custom NTFS permissions for Folder1.

You need to ensure that when a user receives an access-denied message while attempting to access Folder1, an email notification is sent to a distribution list named DL2. The solution must not prevent DL1 from receiving notifications about other access-denied messages.

What should you do?

A. From the File Server Resource Manager console, create a local classification property.

B. From Server Manager, run the New Share Wizard to create a share for Folder1 by selecting the SMB Share - Applications option.

C. From the File Server Resource Manager console, modify the Access-Denied Assistance settings.

D. From the File Server Resource Manager console, set a folder management property.

Answer: D

Q5. HOTSPOT

Your network contains an Active Directory domain named contoso.com. You implement DirectAccess.

You need to view the properties of the DirectAccess connection.

Which connection properties should you view? To answer, select the appropriate connection properties in the answer area.

Answer:

Q6. Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named IT and an OU named Sales.

All of the help desk user accounts are located in the IT OU. All of the sales user accounts are located in the Sales OU. The Sales OU contains a global security group named G_Sales. The IT OU contains a global security group named G_HelpDesk.

You need to ensure that members of G_HelpDesk can perform the following tasks:

. Reset the passwords of the sales users.

. Force the sales users to change their password at their next logon.

What should you do?

A. Run the Set-ADAccountPasswordcmdlet and specify the -identity parameter.

B. Right-click the Sales OU and select Delegate Control.

C. Right-click the IT OU and select Delegate Control.

D. Run the Set-ADFineGrainedPasswordPolicycmdlet and specify the -identity parameter.

Answer: B

Explanation:

G_HelpDesk members need to be allowed to delegate control on the Sales OU as it contains the sales users (G_Sales)

You can use the Delegation of Control Wizard to delegate the Reset Password permission to the delegated user.

References: http: //support. microsoft. com/kb/296999/en-us

http: //support. microsoft. com/kb/296999/en-us

http: //technet. microsoft. com/en-us/library/cc732524. aspx

Q7. HOTSPOT

You have a server named Server1 that has the Web Server (IIS) server role installed. You obtain a Web Server certificate.

You need to configure a website on Server1 to use Secure Sockets Layer (SSL).

To which store should you import the certificate? To answer, select the appropriate store in the answer area.

Answer:

Q8. Your network contains an Active Directory domain named contoso.com.

You need to install and configure the Web Application Proxy role service.

What should you do?

A. Install the Active Directory Federation Services server role and the Remote Access server role on different servers.

B. Install the Active Directory Federation Services server role and the Remote Access server role on the same server.

C. Install the Web Server (IIS) server role and the Application Server server role on the same server.

D. Install the Web Server (IIS) server role and the Application Server server role on different servers.

Answer: A

Explanation:

Web Application Proxy is a new Remote Access role service in Windows Server. 2012 R2.

Q9. DRAG DROP

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1.

You need to create an Active Directory snapshot on DC1.

Which four commands should you run?

To answer, move the four appropriate commands from the list of commands to the answer

area and arrange them in the correct order.

Answer:

Q10. Your network contains a Hyper-V host named Server1 that hosts 20 virtual machines.

You need to view the amount of memory resources and processor resources each virtual machine uses currently.

Which tool should you use on Server1?

A. Hyper-V Manager

B. Task Manager

C. Windows System Resource Manager (WSRM)

D. Resource Monitor

Answer: A