[2021-New] Microsoft 70-411 Dumps With Update Exam Questions (11-20)

70-411 Dumps

70-411 Exam Questions - Online Test

70-411 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Q1. You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.

Each time a user receives an access-denied message after attempting to access a folder on Server1, an email notification is sent to a distribution list named DLL.

You create a folder named Folder1 on Server1, and then you configure custom NTFS permissions for Folder1.

You need to ensure that when a user receives an access-denied message while attempting to access Folder1, an email notification is sent to a distribution list named DL2. The solution must not prevent DL1 from receiving notifications about other access-denied messages.

What should you do?

A. From the File Server Resource Manager console, create a local classification property.

B. From Server Manager, run the New Share Wizard to create a share for Folder1 by selecting the SMB Share - Applications option.

C. From the File Server Resource Manager console, modify the Access-Denied Assistance settings.

D. From the File Server Resource Manager console, set a folder management property.

Answer: D

Q2. Your network contains a domain controller named DC1 that runs Windows Server 2012 R2. You create a custom Data Collector Set (DCS) named DCS1.

You need to configure DCS1 to collect the following information:

. The amount of Active Directory data replicated between DC1 and the other domain controllers

. The current values of several registry settings

Which two should you configure in DCS1? (Each correct answer presents part of the solution. Choose two.)

A. Event trace data

B. A Performance Counter Alert

C. System configuration information

D. A performance counter

Answer: B,C

Explanation:

Automatically run a program when the amount of total free disk space on Server1 drops below 10 percent of capacity.

You can also configure alerts to start applications and performance logs Log the current values of several registry settings.

System configuration information allows you to record the state of, and changes to, registry keys.

Total free disk space

Registry settings

Run a program on alert

Reference: http: //technet. microsoft. com/en-us/library/cc766404. aspx

Q3. Your network contains three Network Policy Server (NPS) servers named NPS1, NPS2, and NPS3.

NP51 is configured as a RADIUS proxy that forwards connection requests to a remote RADIUS server group named Group1.

You need to ensure that NPS2 receives connection requests. NPS3 must only receive connection requests if NPS2 is unavailable.

How should you configure Group1?

A. Change the Priority of NPS3 to 10.

B. Change the Weight of NPS2 to 10.

C. Change the Weight of NPS3 to 10.

D. Change the Priority of NPS2 to 10.

Answer: A

Explanation:

Priority. Priority specifies the order of importance of the RADIUS server to the NPS proxy server. Priority level must be assigned a value that is an integer, such as 1, 2, or 3. The lower the number, the higher priority the NPS proxy gives to the RADIUS server. For example, if the RADIUS server is assigned the highest priority of 1, the NPS proxy sends connection requests to the RADIUS server first; if servers with priority 1 are not available, NPS then sends connection requests to RADIUS servers with priority 2, and so on. You can assign the same priority to multiple RADIUS servers, and then use the Weight setting to load balance between them.

Q4. Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012.

You pre-create a read-only domain controller (P.QDC) account named RODC1.

You export the settings of RODC1 to a file named Filel.txt.

You need to promote RODC1 by using File1.txt.

Which tool should you use?

A. The Install-WindowsFeature cmdlet

B. The Add-WindowsFeature cmdlet

C. The Dism command

D. The Install-ADDSDomainController cmdlet

E. the Dcpromo command

Answer: E

Q5. Your network contains an Active Directory domain named contoso.com.

You need to install and configure the Web Application Proxy role service.

What should you do?

A. Install the Active Directory Federation Services server role and the Remote Access server role on different servers.

B. Install the Active Directory Federation Services server role and the Remote Access server role on the same server.

C. Install the Web Server (IIS) server role and the Application Server server role on the same server.

D. Install the Web Server (IIS) server role and the Application Server server role on different servers.

Answer: A

Explanation:

Web Application Proxy is a new Remote Access role service in Windows Server. 2012 R2.

Q6. Your network contains an Active Directory domain named contoso.com. The domain

contains a domain controller named DC1 that runs Windows Server 2012 R2.

All client computers run Windows 8 Enterprise.

DC1 contains a Group Policy object (GPO) named GPO1.

You need to update the PATH variable on all of the client computers.

Which Group Policy preference should you configure?

A. Ini Files

B. Services

C. Data Sources

D. Environment

Answer: D

Explanation:

Environment Variable preference items allow you to create, update, replace, and delete user and system environment variables or semicolon-delimited segments of the PATH variable. Before you create an Environment Variable preference item, you should review the behavior of each type of action possible with this extension.

Q7. You are a network administrator of an Active Directory domain named contoso.com.

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the DHCP Server server role and the Network Policy Server role service installed.

You enable Network Access Protection (NAP) on all of the DHCP scopes on Server1.

You need to create a DHCP policy that will apply to all of the NAP non-compliant DHCP clients.

Which criteria should you specify when you create the DHCP policy?

A. The client identifier

B. The user class

C. The vendor class

D. The relay agent information

Answer: B

Explanation:

To configure a NAP-enabled DHCP server

On the DHCP server, click Start, click Run, in Open, type dhcpmgmt. smc, and then press ENTER.

In the DHCP console, open <servername>\IPv4.

Right-click the name of the DHCP scope that you will use for NAP client computers, and then click Properties.

On the Network Access Protection tab, under Network Access Protection Settings, choose Enable for this scope, verify that Use default Network Access Protection profile is selected, and then click OK.

In the DHCP console tree, under the DHCP scope that you have selected, right-click Scope Options, and then click Configure Options.

On the Advanced tab, verify that Default User Class is selected next to User class.

Select the 003 Router check box, and in IP Address, under Data entry, type the IP address for the default gateway used by compliant NAP client computers, and then click Add. Select the 006 DNS Servers check box, and in IP Address, under Data entry, type the IP address for each router to be used by compliant NAP client computers, and then click Add. Select the 015 DNS Domain Name check box, and in String value, under Data entry, type your organization's domain name (for example, woodgrovebank. local), and then click Apply. This domain is a full-access network assigned to compliant NAP clients. On the Advanced tab, next to User class, choose Default Network Access Protection Class. Select the 003 Router check box, and in IP Address, under Data entry, type the IP address for the default gateway used by noncompliant NAP client computers, and then click Add. This can be the same default gateway that is used by compliant NAP clients. Select the 006 DNS Servers check box, and in IP Address, under Data entry, type the IP address for each DNS server to be used by noncompliant NAP client computers, and then click Add. These can be the same DNS servers used by compliant NAP clients. Select the 015 DNS Domain Name check box, and in String value, under Data entry, type a name to identify the restricted domain (for example, restricted. Woodgrovebank. local), and then click OK. This domain is a restricted-access network assigned to noncompliant NAP clients. Click OK to close the Scope Options dialog box. Close the DHCP console.

Reference: http: //technet.microsoft.com/en-us/library/dd296905%28v=ws.10%29.aspx

Q8. Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.

The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

You need to identify which domain controller must be online when cloning a domain controller.

Which cmdlet should you use?

A. Get-ADGroupMember

B. Get-ADDomainControllerPasswordReplicationPolicy

C. Get-ADDomainControllerPasswordReplicationPolicyUsage

D. Get-ADDomain

E. Get-ADOptionalFeature

F. Get-ADAccountAuthorizationGroup

Answer: D

Explanation: One requirement for cloning a domain controller is an existing Windows Server 2012 DC that hosts the PDC emulator role. You can run the Get-ADDomain and retrieve which server has the PDC emulator role.

Example: Command Prompt: C:\PS>

Get-ADDomain

Output wouldinclude a line such as: PDCEmulator : Fabrikam-DC1.Fabrikam.com

Incorrect:

Not A: The Get-ADGroupMember cmdlet gets the members of an Active Directory group.

Members can be users, groups, and computers.

Not E: The Get-ADOptionalFeature cmdlet gets an optional feature or performs a search to retrieve multiple optional features from an Active Directory.

Not F: The Get-ADAuthorizationGroup cmdlet gets the security groups from the specified user, computer or service accounts token.

Reference: Step-by-Step: Domain Controller Cloning

http://blogs.technet.com/b/canitpro/archive/2013/06/12/step-by-step-domain-controller-cloning.aspx

Reference: Get-ADDomain https://technet.microsoft.com/en-us/library/ee617224.aspx

Q9. HOTSPOT

Your network contains an Active Directory domain named contoso.com. The domain contains 30 user accounts that are used for network administration. The user accounts are members of a domain global group named Group1.

You identify the security requirements for the 30 user accounts as shown in the following table.

You need to identify which settings must be implemented by using a Password Settings object (PSO) and which settings must be implemented by modifying the properties of the user accounts.

What should you identify? To answer, configure the appropriate settings in the dialog box in the answer area.

Answer:

Q10. Your network contains an Active Directory domain named contoso.com. The domain

contains a server named Server1 that runs Windows Server 2012 R2.

You enable and configure Routing and Remote Access (RRAS) on Server1.

You create a user account named User1.

You need to ensure that User1 can establish VPN connections to Server1.

What should you do?

A. Modify the members of the Remote Management Users group.

B. Add a RADIUS client.

C. Modify the Dial-in setting of User1.

D. Create a connection request policy.

Answer: C

Explanation:

Access permission is also granted or denied based on the dial-in properties of each user account.

http://technet.microsoft.com/en-us/library/cc772123.aspx