MUWwr0Tm

1http://www.gratisexam.com/
270-411_Microsoft
3Number: 000-000
4Passing Score: 800
5Time Limit: 120 min
6File Version: 1.0
7http://www.gratisexam.com/
870-411
9Exam 70-411
10Title Administering Windows Server 2012
11Updated Version: 21.0
12Mouratov
1370-411
14http://www.gratisexam.com/
15??????? A
16QUESTION 1
17You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
18domain have Microsoft Windows Server 2012 R2 installed.
19You want to clone a domain controller to create another domain controller. Which two of the following steps should you perform first? (Choose two).
20A. You should run the Install-ADDSDomainController PowerShell cmdlet.
21B. You should run the New-ADDCCloneConfigFile PowerShell cmdlet.
22C. You should run the sysprep.exe /oobe command.
23D. You should run the dcpromo.exe /adv command.
24E. You should place a DCCloneConfig.xml file in the %Systemroot%\NTDS folder.
25F. You should place an Unattend.xml file in the %Systemroot%\SYSVOL folder.
26Correct Answer: BE
27Section: (none)
28Explanation
29Explanation/Reference:
30Reference:
31http://technet.microsoft.com/en-us/library/jj574223.aspx
32QUESTION 2
33You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. The Site.com network has
34a Windows Server 2012 R2 domain controller named Site-DC10 which hosts the Web Server, DNS and DHCP services.
35You create a snapshot backup of Site-DC10 using the Ntdsutil utility and mount the snapshot.
36How would you access the contents of the snapshot?
37A. You should run the Ntdsutil.exe utility with the partition management parameter.
38B. You should run the Dsamain.exe utility with the /allowupgrade parameter.
39C. You should run the Dsamain.exe /dbpath command from the command prompt.
40D. You should run the Ntdsutil.exe utility with the files parameter.
41Correct Answer: C
42Section: (none)
43Explanation
44Explanation/Reference:
45Explanation:
46http://www.gratisexam.com/
47QUESTION 3
48You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All domain controllers in
49the Site.com domain have Microsoft Windows Server 2012 R2 installed. Several Sales users spend most of their time away from the office. You implement
50DirectAccess to enable the Sales users to connect to the network when they are away from the office. All computers used by the Sales users are joined to the
51domain. You create a DirectAccess client group named SalesDirectAccess and add all the computer accounts for the Sales users' computers to the
52SalesDirectAccess group. Some Sales users report that they are unable to access the network using DirectAccess. Other Sales report that they can connect
53successfully.
54You discover that only users using laptop computers can connect using DirectAccess. Sales users are unable to connect when they use desktop computers. How
55can you enable all Sales users to access the network using DirectAccess?
56A. You should add the computer accounts for the Sales user computers to the RAS and IAS Servers group.
57B. You should add the user accounts for the Sales users to the SalesDirectAccess group.
58C. You should modify the group that the Direct Access Client Settings GPO applies to.
59D. You should modify the WMI filter that the Direct Access Client Settings GPO is linked to.
60Correct Answer: D
61Section: (none)
62Explanation
63Explanation/Reference:
64Explanation:
65QUESTION 4
66You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
67domain have Microsoft Windows Server 2012 R2 installed.
68Sales users often work away from the office. The Sales users have portable computers that have Windows 7, Windows Vista or Windows XP installed. All client
69computers are members of the Site.com domain.
70You have been asked to implement a remote access solution to enable the Sales users to connect to the network when they are working away from the office. The
71remote access solution must ensure that all Sales users can connect to the network.
72Which VPN solution should you implement?
73A. Point-to-Point Tunneling Protocol (PPTP).
74B. Layer 2 Tunneling Protocol (L2TP).
75C. Secure Socket Tunneling Protocol (SSTP).
76D. DirectAccess.
77Correct Answer: B
78Section: (none)
79Explanation
80http://www.gratisexam.com/
81Explanation/Reference:
82Explanation:
83QUESTION 5
84You are hired by Site.com to administrate a DNS server named Site-SR08 which is currently equipped with a Server Core Installation on Windows Server 2012.
85Which of the following commands will need to be run if you are required to have the time-to-live (TTL) value of a name server (NS) record displayed, taking into
86account that the time-to-live (TTL) value is currently being cached by the DNS Server service on Site-SR08?
87http://www.gratisexam.com/
88A. You will need to run the Show-DNSServerCache command.
89B. You will need to run the ipconfig.exe /display command.
90C. You will need to run the nslookup.exe command.
91D. You will need to run the ipconfig.exe/register command.
92Correct Answer: A
93Section: (none)
94Explanation
95Explanation/Reference:
96Explanation:
97QUESTION 6
98You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
99domain have Microsoft Windows Server 2012 R2 installed.
100Site.com has a main office and a branch office. The two offices are connected by a slow WAN link.
101A server in the main office named Site-SR21 runs the File and Storage Services and Distributed File System roles. A server in the branch office named Site-SR22
102also runs the File and Storage Services and Distributed File System roles. Shared folders on Site-SR21 and Site-SR22 are replicated to each other using DFS
103Replication (DFSR).
104You discover that DFS replication between the two servers is using too much bandwidth over the WAN link.
105How can you limit the amount of bandwidth used by DFS replication?
106A. You should run the Set-DfsrConnectionSchedule cmdlet.
107http://www.gratisexam.com/
108B. You should run the Set-DfsrGroupSchedule cmdlet.
109C. You should run the Set-DfsReplicatedFolder cmdlet.
110D. You should run the Set-DfsReplicationGroup cmdlet.
111Correct Answer: B
112Section: (none)
113Explanation
114Explanation/Reference:
115Explanation:
116QUESTION 7
117You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
118domain have Microsoft Windows Server 2012 R2 installed.
119Site.com has a Research department.
120A server in the Research department named Site-SR25 runs the File and Storage Services role and the File Server Resource Manager role service. Sensitive
121information is stored in shared folders on Site-SR25. You want to be notified by e-mail when an executable file is stored in a shared folder on Site-SR25. The
122notification must include information about the user who stored the file and the exact location of the file.
123What should you do?
124A. You should enable Encrypted File System (EFS) on Site-SR25.
125B. You should modify the permissions of the shared folders on Site-SR25.
126C. You should configure a File Screen Exception on Site-SR25.
127D. You should configure a File Screen on Site-SR25.
128Correct Answer: D
129Section: (none)
130Explanation
131Explanation/Reference:
132Explanation:
133QUESTION 8
134You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
135domain have Microsoft Windows Server 2012 R2 installed.
136Site.com has a Research department. All user and computer accounts in the Research department are located in an organizational unit (OU) named ResearchOU.
137A server in the Research department named Site-SR23 runs the File and Storage Services role and the File Server Resource Manager role service. Sensitive
138information is stored in shared folders on Site-SR23.
139All users in the Research department are members of a global security group named ResearchUsers.
140The ResearchUsers group has full control access to a folder named D:\Data which is shared as \\Site-SR23\Data.
141http://www.gratisexam.com/
142You link a group policy object (GPO) to the ResearchOU. The GPO configures the Audit File System and Audit File Share settings to Success and Failure. You
143need to ensure that all file deletions in \\Site-SR23\Data by members of the ResearchUsers group are logged.
144You delete a test file in the shared folder and verify that an event log entry is added. You discover that when a user in the ResearchUsers group deletes a file, no
145event log entry is
146added.
147What should you modify?
148A. You should modify the share permissions of \\Site-SR23\Data.
149B. You should modify the audit settings in the GPO.
150C. You should modify the discretionary access control list (DACL) D:\Data.
151D. You should modify the system access control list (SACL) of D:\Data.
152Correct Answer: D
153Section: (none)
154Explanation
155Explanation/Reference:
156Explanation:
157QUESTION 9
158Your role of Network Administrator at Site.com includes the management of the Active Directory Domain Services (AD DS) domain named Site.com. All servers in
159the Site.com domain have Microsoft Windows Server 2012 R2 installed. Site.com has a Sales department and a Production department. An OU exists for each
160department. The OUs contain the user and computer accounts for the respective departments. A shadow group named SalesSG is configured for the Sales OU and
161contains all objects within the Sales OU. A password settings object (PSO) named SalesPSO is applied to the SalesSG group and applies a minimum password
162length of 6 characters.
163You want to modify the PSO to require a minimum password length of 8 characters.
164Which of the following cmdlets should you use?
165A. You should use the Get-ADAccountResultantPasswordReplicationPolicy cmdlet.
166B. You should use the Set-ADDefaultDomainPasswordPolicy cmdlet.
167C. You should use the Set-ADFineGrainedPasswordPolicy cmdlet.
168D. You should use the Set-ADAccountPassword cmdlet.
169E. You should use the Set-ADDefaultDomainPasswordPolicy cmdlet.
170Correct Answer: C
171Section: (none)
172Explanation
173Explanation/Reference:
174http://www.gratisexam.com/
175Explanation:
176QUESTION 10
177You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All domain controllers in
178the Site.com domain have Microsoft Windows Server 2012 R2 installed. You implement DirectAccess. You leave the connection name as the default when you run
179the DirectAccess wizard.
180You want to view the properties of a DirectAccess connection. In the Networks window, what is the name of the DirectAccess connection?
181A. VPN Connection.
182B. Remote Access Connection.
183C. Local Area Connection.
184D. CertKingdom.com.
185E. Workplace Connection.
186Correct Answer: E
187Section: (none)
188Explanation
189Explanation/Reference:
190Explanation:
191QUESTION 11
192You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
193domain have Microsoft Windows Server 2012 R2 installed.
194Site.com has a main office and a branch office. The two offices are connected by a WAN link.
195A server in the main office named Site-SR21 runs the DNS Server role and hosts an Active Directory Integrated primary zone for Site.com. You install a server
196named Site-SR22 in the branch office. Site-SR22 runs the DNS Server role. You plan to configure a secondary zone for Site.com on Site-SR22.
197What do you need to do first?
198A. You should modify the Site.com zone on Site-SR21 to be a non-Active Directory Integrated primary zone.
199B. You should log in to Site-SR21 and configure an MX record for Site-SR22.
200C. You should log in to Site-SR21 and configure a zone delegation for Site-SR22.
201D. You should log in to Site-SR21 and in the properties of the Site.com zone, add Site-SR22 as a name server.
202Correct Answer: D
203Section: (none)
204Explanation
205Explanation/Reference:
206http://www.gratisexam.com/
207Explanation:
208QUESTION 12
209You are hired by Site.com to administrate an Active Directory domain named Site.com which encompasses a RADIUS server by the name of Site-SR08 running an
210installation of Windows Server 2012.
211Your senior network administrator has provisioned a VPN server added to the network named Site-VPN05 and thereafter orders the creation of numerous network
212policies on Site-SR08.
213Which of the following actions need to be taken if you are assigned the task of having Site configured to accept appeals for authentication from Site-VPN05?
214http://www.gratisexam.com/
215A. You will need to run the Add-RemoteAccessRadius command on Site-SR08.
216B. You will need to run the Get-NpsRadiusClient command on Site-SR08.
217C. You will need to run the Set-RemoteAccessRadius command on Site-SR08.
218D. You will need to configure the Routing and Remote Access Service (RRAS) role service on Site-SR08.
219Correct Answer: B
220Section: (none)
221Explanation
222Explanation/Reference:
223Explanation:
224QUESTION 13
225You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
226domain have Microsoft Windows Server 2012 R2 installed.
227All user and computer accounts for the company's Sales department are located in an organizational unit named Sales.
228You must configure group policy object (GPO) for the Sales OU. You download updated administrative template files. You then configure a Central Store on a
229domain controller. However, when you open a new GPO for editing using the Group Policy Editor console, you discover that no administrative templates are listed
230under Computer Configuration \ Administrative Templates.
231How can you view the administrative templates in the GPO?
232http://www.gratisexam.com/
233A. You should enable the Computer settings of the GPO.
234B. You should copy the .admx and .adml files from %Windir%\Policydefinitions to the central store.
235C. You should link the GPO to the Sales OU.
236D. You should modify the Security Filtering of the GPO.
237Correct Answer: B
238Section: (none)
239Explanation
240Explanation/Reference:
241Explanation:
242QUESTION 14
243You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
244domain have Microsoft Windows Server 2012 R2 installed.
245A group policy object (GPO) is assigned to an organizational unit (OU) named Sales. The GPO assigns several settings to the computers in the Sales department.
246You unlink the GPO from the Sales OU.
247You discover that some of the settings applied by the GPO are still in effect on the Sales computers while other setting applied by the GPO have been removed.
248Which of the following statements is true?
249A. The Restricted Groups security settings still in effect.
250B. The unmanaged Administrative Template settings are still in effect.
251C. The managed Administrative Template settings are still in effect.
252D. The System Services security settings have been removed.
253Correct Answer: B
254Section: (none)
255Explanation
256Explanation/Reference:
257Explanation:
258QUESTION 15
259You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
260domain have Microsoft Windows Server 2012 R2 installed.
261Site.com has a Production department and a Research department. Each department has a separate subnet in the network.
262A server named Site-SR11 and is configured as a Network Policy Server (NPS) server. Site-SR11 also runs the DHCP server role and has a DHCP scope for the
263Production subnet and the Research subnet.
264You need to configure NPS to ensure that computers on the Production subnet that do not comply with the NPS requirements receive a restrictive set of network
265policies. You also need to ensure that computers on the Research subnet that do not comply with the NPS requirements receive a more restrictive set of network
266http://www.gratisexam.com/
267policies than the non-compliant Production computers. You configure policies to apply to NAP-Capable Computers. How can you apply different restrictions to
268computer based on their subnet?
269A. You should configure Connection Properties conditions.
270B. You should configure NAS Port Type constraints.
271C. You should configure MS-Service Class conditions.
272D. You should configure Authentication Methods constraints.
273Correct Answer: C
274Section: (none)
275Explanation
276Explanation/Reference:
277Explanation:
278QUESTION 16
279You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
280domain have Microsoft Windows Server 2012 R2 installed.
281A technician has created a vhdx file containing Windows Server 2012 R2 installation images. You need to view information about the images contained in the vhdx
282file. You plan to use Deployment Image Servicing and Management (DISM.exe).
283Which parameter should you use with DISM.exe?
284A. You should use the get-imageinfo parameter.
285B. You should use the get-mountedwiminfo parameter.
286C. You should use the list-image parameter.
287D. You should use the mount-image parameter.
288Correct Answer: A
289Section: (none)
290Explanation
291Explanation/Reference:
292Explanation:
293QUESTION 17
294You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
295domain have Microsoft Windows Server 2012 R2 installed and all client computers have either Windows 7 Professional or Windows 8 Pro installed.
296A group policy object (GPO) is assigned to an organizational unit (OU) named Sales. The GPO assigns several settings to the computers in the Sales department.
297Some users complain that it takes a long time for their computers to start up or shut down. You suspect that group policy processing may be the cause of the issue.
298You want to configure the computers in the Sales department to display status messages that reflect each step in the process of starting, shutting down, logging on,
299http://www.gratisexam.com/
300or logging off the system. How can you configure the computers to display the required information?
301A. You should enable the "Activate Shutdown Event Tracker System State Data feature" setting in the GPO.
302B. You should enable the "Display Shutdown Event Tracker" setting in the GPO.
303C. You should disable the "Remove Boot / Shutdown / Logon / Logoff status messages" setting in the GPO.
304D. You should enable the "Display Highly Detailed Status Messages" setting in the GPO.
305Correct Answer: D
306Section: (none)
307Explanation
308Explanation/Reference:
309Explanation:
310QUESTION 18
311You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
312domain have Microsoft Windows Server 2012 R2 installed.
313You need to configure a remote access solution to enable client computers to access network resources.
314You install a Windows Server 2012 R2 server named Site-SR09. You install the Remote Access server role on Site-SR09.
315You need to configure Site-SR09 to accept authentication requests from computers using 802.1X.
316Which authentication method should you configure Site-SR09 to use?
317A. EAP
318B. MS-CHAP v2
319C. CHAP
320D. PAP
321E. Machine certificate authentication for IKEv2
322Correct Answer: A
323Section: (none)
324Explanation
325Explanation/Reference:
326Explanation:
327QUESTION 19
328You are hired by Site.com to administrate an Active Directory domain on which the domain controllers are all running an installation of Windows Server 2012. A
329Site.com domain controller named Site-DC03 is equipped with the ADMX Migrator tool and houses an Administrative Template file by the name of SiteTemp08.adm.
330Which of the following actions need to be run if you are assigned the task of having a custom entry added to Site-Temp08.adm by utilizing the ADMX
331http://www.gratisexam.com/
332Migrator tool? You will need to run a Load Template from within ADMX.
333You will need to run New Policy Definitions from within ADM.
334You will need to run a New Category from within ADMX.
335You will need to have ADMX generated from within ADM.
336A.
337B.
338C.
339D.
340Correct Answer:
341Section: (none)
342Explanation
343Explanation/Reference:
344QUESTION 20
345You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
346domain have Microsoft Windows Server 2012 R2 installed.
347Mia works as an IT Technician at Site.com. Mia is not a member of the Domain Admins group.
348You need to enable Mia to link existing Group Policy objects (GPOs) in the domain. Mia must not be able to modify existing GPOs.
349Your solution must minimize the administrative privileges assigned to Mia. Which two of the following actions would achieve the desired result? (Choose two
350possible answers).
351A. Click the Group Policy Objects node in Group Policy Management and add Mia under the Delegation tab.
352B. Click the domain node in Group Policy Management and add Mia under the Delegation tab.
353C. Right-click the domain node in Active Directory Users and Computers and select Delegate Control.
354D. Add Mia to the Group Policy Creator Owners group in Active Directory Users and Computers.
355E. In Active Directory Users and Computers, add Mia to the Managed By tab in the properties of the Domain Controllers group.
356Correct Answer: BC
357Section: (none)
358Explanation
359Explanation/Reference:
360Explanation:
361http://www.gratisexam.com/
362QUESTION 21
363You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
364domain have Microsoft Windows Server 2012 R2 installed.
365Site.com has a main office and a branch office. The two offices are connected by a WAN link.
366Site.com has five domain controllers named Site-DC01, Site-DC02, Site-DC03, Site-DC04 and Site-DC05. All domain controllers are configured as DNS servers
367and host an Active Directory integrated zone for Site.com. Site-DC01, Site-DC03 and Site-DC05 are located in the main office. Site-DC02 and Site-DC04 are
368located in the branch office. Site.com has a Development department located in the main office. The manager of the Development department has asked you to
369configure a new Active Directory integrated zone named SiteDev.com.
370You need to ensure that the SiteDev.com zone is replicated to only the domain controllers in the main office.
371What should you do?
372A. You should create the SiteDev.com zone and add the main office domain controllers on the Zone Transfers tab.
373B. You should create the SiteDev.com zone and modify the replication scope.
374C. You should create an application directory partition that contains the main office domain controllers before creating the SiteDev.com.
375D. You should create a global security group that contains the main office domain controllers before creating the SiteDev.com.
376Correct Answer: C
377Section: (none)
378Explanation
379Explanation/Reference:
380Explanation:
381QUESTION 22
382You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
383domain have Microsoft Windows Server 2012 R2 installed and all client computers have Windows 8 Pro installed.
384Site.com has users that often work away from the office at customer sites or from home. You have been asked to implement a remote access solution to enable
385remote users to connect to the network when they are working away from the office. The remote access solution must ensure that users can connect to the network
386using TCP port 443.
387You install the Routing and Remote Access role on a Windows Server 2012 R2 server.
388Which VPN solution should you implement?
389A. Point-to-Point Tunneling Protocol (PPTP).
390B. Layer 2 Tunneling Protocol (L2TP).
391C. Secure Socket Tunneling Protocol (SSTP).
392D. DirectAccess.
393Correct Answer: C
394http://www.gratisexam.com/
395Section: (none)
396Explanation
397Explanation/Reference:
398Explanation:
399QUESTION 23
400You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
401domain have Microsoft Windows Server 2012 R2 installed and all client computers have Windows 8 Pro
402installed.
403Site.com has a Sales department. An organizational unit (OU) exists for the Sales department and contains the user and computer accounts for the department. A
404group policy object (GPO) named SalesGPO is linked to the Sales OU and applies settings to the Sales users and their computers.
405You modify some settings in SalesGPO. You need to apply the new settings to the users and computers in the Sales OU as quickly as possible.
406Which two of the following tools could you use? (Choose two possible answers).
407A. You should use the Group Policy Management Console (GPMC).
408B. You should use the Invoke-GPUpdate cmdlet.
409C. You should use the Active Directory Sites and Services.
410D. You should use the Get-GPO cmdlet.
411E. You should use the Secedit command.
412F. You should use the Set-GPLink cmdlet.
413Correct Answer: AB
414Section: (none)
415Explanation
416Explanation/Reference:
417Explanation:
418QUESTION 24
419You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
420domain have Microsoft Windows Server 2012 R2 installed.
421Site.com has a main office and a branch office. The two offices are connected by a WAN link.
422Site.com has five domain controllers named Site-DC01, Site-DC02, Site-DC03, Site-DC04 and Site-DC05. Site-DC01, Site-DC03 and Site-DC05 are located in the
423main office. Site-DC02 and Site-DC04 are located in the branch office. Site.com has a Development department located in the main office. The developers have
424created an application that runs on domain controllers. You need to ensure that application settings are replicated to only the domain controllers in the main office.
425You want to create a custom Active Directory application partition that will be used to control which domain controllers the settings are replicated to.
426How can you create the Active Directory application partition?
427A. You should run Active Directory Sites and Services.
428http://www.gratisexam.com/
429B. You should run the Netdom.exe command.
430C. You should run the Ntdsutil.exe command.
431D. You should run Active Directory Domains and Trusts.
432Correct Answer: C
433Section: (none)
434Explanation
435Explanation/Reference:
436Explanation:
437QUESTION 25
438You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
439domain have Microsoft Windows Server 2012 R2 installed.
440Site.com has a Sales department. An OU exists for the Sales department. The OU contains the user and computer accounts for the Sales department. A shadow
441group named SalesSG is configured for the Sales OU and contains all objects within the Sales OU. A password settings object (PSO) named SalesPSO is applied
442to the SalesSG group.
443You want to view the settings of SalesPSO.
444How can you view the settings of SalesPSO?
445A. You should run the Get-ADDefaultDomainPasswordPolicy cmdlet.
446B. You should run the Get- ADAccountPassword cmdlet.
447C. You should run the Get-ADFineGrainedPasswordPolicy cmdlet.
448D. You should run the Get-ADDefaultDomainPasswordPolicy cmdlet.
449Correct Answer: C
450Section: (none)
451Explanation
452Explanation/Reference:
453Explanation:
454QUESTION 26
455You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
456domain have Microsoft Windows Server 2012 R2 installed.
457A server named Site-SR12 runs the DNS Server role and hosts a primary zone for Site.com.
458Mia works as an IT Technician at Site.com. Mia is not a member of the Domain Admins group.
459You need to enable Mia to modify records in the Site.com DNS zone. Mia must not be able to create or modify other DNS zones on Site-SR12.
460http://www.gratisexam.com/
461Your solution must minimize the administrative privileges assigned to Mia. Which of the following actions would achieve the desired result?
462A. In DNS Management, go to the properties of the server and modify the permissions on the Security tab.
463B. In DNS Management, go to the properties of the Site.com zone and modify the permissions on the Security tab.
464C. In Active Directory Users and Computers, modify Mia's group membership.
465D. In DNS Management, go to the properties of the Site.com zone and modify the start of authority (SOA) record.
466Correct Answer: B
467Section: (none)
468Explanation
469Explanation/Reference:
470Explanation:
471QUESTION 27
472You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
473domain have Microsoft Windows Server 2012 R2 installed.
474A server named Site-SR21 runs the File Services role and hosts several shared folders. You have created a Data Collector Set (DCS) on Site-SR21 to collect disk
475performance data. The DCS has been created with the default name.
476You want to change the name of the DCS to "Disk Performance".
477How can you change the name of the DCS?
478A. You should right-click on the DCS and selecting Rename.
479B. You should modify the settings on the General tab in the properties of the DCS.
480C. You should modify the settings on the Directory tab in the properties of the DCS.
481D. The name cannot be changed. You should save the DCS as a template and create a new DCS based on the template.
482Correct Answer: D
483Section: (none)
484Explanation
485Explanation/Reference:
486Explanation:
487QUESTION 28
488You work as a Network Administrator at Site.com. The Site.com network has two Active Directory forests. The corporate network is an Active Directory forest with a
489single Active Directory Domain Services (AD DS) domain named Site.com. The second forest has a single Active Directory Domain Services (AD DS) domain
490named weyland.com The weyland.com domain is used for test purposes including the testing of Group Policy Objects (GPOs).
491http://www.gratisexam.com/
492A group policy object named TestPol has been created in the weyland.com domain. You want to apply TestPol to the CertKingdom.com domain.
493You take a backup of TestPol from a domain controller in the weyland.com domain and copy it to a domain controller in the CertKingdom.com domain.
494You need to view the domain-specific information in TestPol that will need to be updated before the GPO can be applied in the CertKingdom.com domain.
495What should you do?
496A. In the Group Policy Management Console, open the Migration Table Editor and select Populate from Backup.
497B. In the Group Policy Management Console, right-click on the Group Policy Objects node and select Manage Backups.
498C. In the Group Policy Management Console, open the Migration Table Editor and select Populate from GPO.
499D. In the Group Policy Management Console run the Group Policy Results Wizard.
500Correct Answer: A
501Section: (none)
502Explanation
503Explanation/Reference:
504Explanation:
505QUESTION 29
506You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
507domain have Microsoft Windows Server 2008 R2 installed.
508Site.com is considering migrating to Windows Server 2012 R2. You use a server named Site-SR27 that runs the Hyper-V Host server role. You want to test
509Windows Server 2012 R2 by installing it on a new virtual machine on Site-SR27. You configure a native-boot virtual hard disk (VHD) to on Site-SR27 to run
510Windows Server 2012 R2 and use Disk Management to create and attach a VHD. You plan to use Deployment Image Servicing and Management (DISM) to install
511Windows Server 2012 R2 onto the VHD and then configure the server to boot from the VHD. Which parameter should you use with DISM to install Windows Server
5122012 R2 onto the VHD?
513A. You should use the /mount-image parameter.
514B. You should use the /mount-wim parameter.
515C. You should use the /append-image parameter.
516D. You should use the /apply-image parameter.
517Correct Answer: D
518Section: (none)
519Explanation
520Explanation/Reference:
521Explanation:
522http://www.gratisexam.com/
523QUESTION 30
524You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
525domain have Microsoft Windows Server 2012 R2 installed. Site.com has a corporate LAN and a perimeter network.
526A Windows Server 2012 R2 server named Site-SR11 is located in the perimeter network and hosts the corporate website. The website is publicly accessible. A
527Windows Server 2012 R2 server named Site-SR04 is also located in the perimeter network. Site-SR04 hosts a publicly accessible DNS zone which contains DNS
528records for the corporate website.
529You plan to move the corporate web site to a new server named Site-SR12. You need to change the DNS records for the corporate web site to point to Site-SR12.
530To minimize the time it takes for the changed DNS records to propagate to other public DNS servers, you want to reduce the time that the DNS records are cached
531for.
532What action should you take?
533A. In the properties of the DNS zone, change the Serial Number value on the Start of Authority (SOA) tab.
534B. In the properties of the DNS zone, change the Refresh Interval value on the Start of Authority (SOA) tab.
535C. In the properties of the DNS zone, change the Expires After value on the Start of Authority (SOA) tab.
536D. In the properties of the DNS zone, change the Minimum (default) TTL value on the Start of Authority (SOA) tab.
537E. In the properties of the DNS zone, change the TTL for this record value on the Start of Authority (SOA) tab.
538Correct Answer: D
539Section: (none)
540Explanation
541Explanation/Reference:
542Explanation:
543QUESTION 31
544You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
545domain have Microsoft Windows Server 2012 R2 installed.
546Site.com has a Sales department. An OU exists for the Sales department. The OU contains the user and computer accounts for the Sales department. Mia works
547as an IT Technician at Site.com. Mia is not a member of the Domain Admins group.
548You have delegated control of the Sales OU to Mia to enable her to manage the user accounts of the Sales users.
549A new company security states that the following settings should be applied to Sales users:
550Users must change password at next logon.
551Minimum password length: 10.
552Account is sensitive and cannot be delegated.
553Enforce password history.
554Password must meet complexity requirements.
555Enforce maximum password age.
556Mia can configure some of the required settings in the account properties of the user accounts. Other required settings will be configured using a password settings
557object (PSO). Which settings can Mia configure? (Choose all that apply).
558http://www.gratisexam.com/
559A. Users must change password at next logon.
560B. Minimum password length: 10.
561C. Account is sensitive and cannot be delegated.
562D. Enforce password history.
563E. Password must meet complexity requirements.
564F. Enforce maximum password age.
565Correct Answer: ABC
566Section: (none)
567Explanation
568Explanation/Reference:
569Explanation:
570QUESTION 32
571You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
572domain have Microsoft Windows Server 2012 R2 installed.
573A technician has created a vhd file containing a Windows Server 2012 R2 installation image. The vhd image is offline. You must use DISM to apply updates to the
574vhd image. You need to mount the vhd image.
575Which of the following actions should you take?
576A. You should run the DISM utility with the /Get-MountedWinInfo parameter.
577B. You should use Diskpart.exe.
578C. You run the DISM utility with the /Mount-wim parameter.
579D. You should run the DISM utility with the /Append-Image parameter.
580E. You should run the DISM utility with the /Apply-Image parameter.
581Correct Answer: B
582Section: (none)
583Explanation
584Explanation/Reference:
585Explanation:
586QUESTION 33
587You work as a Network Administrator at Site.com. Sitte.com has an Active Directory Domain Services (AD DS) domain named Site.com. All the domain controllers
588on the Site.com network have Windows Server 2012 R2 installed. You have an Active Directory snapshot that you mount on a domain controller named SiteDC07.
589You want to configure the snapshot so that it can be used as an LDAP server.
590Which of the following can you use?
591http://www.gratisexam.com/
592A. You should make use of the Dcpromo.exe utility with the /adv parameter.
593B. You should make use of the Dsdbutil.exe utility with the activate parameter.
594C. You should make use of the of the Dsmain.exe utility with the /dbpath paramater.
595D. You should make use of the of the Ntdsutil.exe utility with the snapshot activate paramater.
596E. You should make use of the of the Dsmain.exe utility with the /adlds parameter.
597Correct Answer: C
598Section: (none)
599Explanation
600Explanation/Reference:
601Explanation:
602QUESTION 34
603You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
604domain have Microsoft Windows Server 2012 R2 installed and all client computers have Windows 8 Enterprise installed.
605BitLocker Drive Encryption (Bitlocker) is enabled on all client computers. You are using a client
606computer named Site-WS38 that has a BitLocker recovery key on drive C. When you return from a meeting you discover that drive D is locked. When you attempt
607to unlock drive D using the recovery key you receive an error message stating: "A valid USB key wasn't detected ..."
608Which of the following actions should you take to access drive D?
609A. You should run the manage-bde protectors add cmdlet.
610B. You should run the Remove-BitLockerKeyProtector cmdlet.
611C. You should run the manage-bde protectors get cmdlet.
612D. You should run the Unlock-BitLocker -MountPoint "D:" cmdlet.
613Correct Answer: C
614Section: (none)
615Explanation
616Explanation/Reference:
617Explanation:
618QUESTION 35
619You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers on the network
620have Windows Server 2012 R2 installed.
621You plan to enable external users to connect to the network using a VPN connection. You are deploying Network Access Protection to ensure system health
622compliance for users that connect over a VPN connection.
623http://www.gratisexam.com/
624You install a Windows Server 2012 R2 computer named Site-SR16 and install the Network Policy Server role. You want to configure Site-SR16 as a Network
625Access Protection (NAP) health policy server for the VPN connections.
626You run the Configure NAP wizard to create a VPN Enforcement policy. However, you are unable to complete the wizard.
627How can you ensure that you are able to complete the Configure NAP wizard to configure VPN Enforcement?
628A. You should configure the IPSEC enforcement method first.
629B. You should install a computer certificate on Site-SR16.
630C. You should install a System Health Agent on Site-SR16.
631D. You should install a System Health Validator on Site-SR16.
632Correct Answer: B
633Section: (none)
634Explanation
635Explanation/Reference:
636Explanation:
637QUESTION 36
638You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers on the network
639have Windows Server 2012 R2 installed.
640DirectAccess is enabled on the network using the default configuration. You want the DirectAccess clients to use DirectAccess whenever they access the Internet.
641Which of the following actions should you take?
642A. You should run the Set-DAClientExperienceConfiguration cmdlet.
643B. You should run the run the netsh -c advfirewall command.
644C. You should modify the external IP address assigned to the Web server.
645D. You should configure the force tunneling settings for DirectAccess clients.
646Correct Answer: D
647Section: (none)
648Explanation
649Explanation/Reference:
650Explanation:
651QUESTION 37
652You work as a Network Administrators at Site.com. All servers on the Site.com network have Windows Server 2012 R2 installed. The network has a server named
653Site-SR34 that is configured as a Network Policy Server (NPS).
654The network contains several wireless access points (WAPs). You want to secure the wireless network by using certificate-based mutual authentication.
655http://www.gratisexam.com/
656Which action should you take?
657A. You should configure NPS to use RADIUS authentication.
658B. You should configure NPS to use EAP-TLS authentication.
659C. You should configure NPS to use EAP-MS-CHAPv2 authentication.
660D. You should configure NPS to use PEAP-MS-CHAPv2 authentication.
661Correct Answer: B
662Section: (none)
663Explanation
664Explanation/Reference:
665Explanation:
666QUESTION 38
667You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. The Site.com network has
668two domain controllers named Site-SR01 and Site SR02 that have Windows Server 2008 installed.
669You add a new Windows Server 2012 R2 domain controller named CertKingdom-SR06 to the network. You now want to use Active Directory Administrative Center
670on Site-SR06 to implement Password Settings objects (PSOs). However, you are unable to create a PSO. Which of the following actions do you need to take before
671you can create PSOs?
672A. You should seize the operations masters role to Site-SR06.
673B. You should raise the domain functional level.
674C. You should upgrade Site-SR01 and Site-SR02 to at least Windows Server 2008 R2.
675D. You should configure Site-SR06 as a Read-Only domain controller (RODC).
676Correct Answer: B
677Section: (none)
678Explanation
679Explanation/Reference:
680Explanation:
681QUESTION 39
682You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com
683domain have Microsoft Windows Server 2012 R2 installed and all client computers have Windows 8 Pro installed.
684You connect a new client computer named Site-WS43 to the domain and want to ping a domain controller named Site-DC07 from Site-WS43. However, when you
685attempt to run the ping Site-dc07 command from the command prompt, you receive "Request timed out" messages.
686How can you resolve this problem and allow Site-WS43 to ping Site-DC07 successfully?
687http://www.gratisexam.com/
688A. You should run the netsh firewall set icmpsetting all enable command on Site-DC07.
689B. You should configure the inbound firewall rules on Site-WS43 to allow Echo Requests.
690C. You should run the netsh firewall set icmpsetting 4 enable command on Site-WS43.
691D. You should run the netsh advfirewall firewall add rule name="All ICMP V4" dir=in action=allow protocol=icmpv4 command on Site-DC07.
692Correct Answer: D
693Section: (none)
694Explanation
695Explanation/Reference:
696Explanation:
697QUESTION 40
698Your network contains an Active Directory domain named contoso.com. The functional level of the forest is Windows Server 2008 R2. Computer accounts for the
699marketing department are in an organizational unit (OU) named Departments\Marketing\Computers. User accounts for the marketing department are in an OU
700named Departments\Marketing\Users. All of the marketing user accounts are members of a global security group named MarketingUsers. All of the marketing
701computer accounts are members of a global security group named MarketingComputers. In the domain, you have Group Policy objects (GPOs) as shown in the
702exhibit. You create two Password Settings objects named PSO1 and PSO2. PSO1 is applied to MarketingUsers. PSO2 is applied to MarketingComputers. The
703minimum password length is defined for each policy as shown in the following table.
704"Best Material, Great Results". www.certkingdom.com 59
70570-411
706http://www.gratisexam.com/
707You need to identify the minimum password length required for each marketing user. What should you identify?
708A. 5
709B. 6
710C. 7
711D. 10
712http://www.gratisexam.com/
713E. 12
714Correct Answer: D
715Section: (none)
716Explanation
717Explanation/Reference:
718QUESTION 41
719Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012. You
720have a Group Policy object (GPO) named GPO1 that contains several custom Administrative templates. You need to filter the GPO to display only settings that will
721be removed from the registry when the GPO falls out of scope. The solution must only display settings that are either enabled or disabled and that have a comment.
722How should you configure the filter?
723To answer, select the appropriate options below. Select three.
724http://www.gratisexam.com/
725http://www.gratisexam.com/
726A. Set Managed to: Yes
727B. Set Managed to: No
728C. Set Managed to: Any
729D. Set Configured to: Yes
730E. Set Configured to: No
731F. Set Configured to: Any
732G. Set Commented to: Yes
733H. Set Commented to: No
734I. Set Commented to: Any
735Correct Answer: AFG
736Section: (none)
737Explanation
738Explanation/Reference:
739QUESTION 42
740Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no
741enforced GPOs. You have two GPOs linked to an organizational unit (OU) named OU1. You need to change the precedence order of the GPOs. What should you
742use?
743A. dcgpofix
744B. Get-GPOReport
745C. Gpfixup
746D. Gpresult
747E. Gptedit.msc
748F. Import-GPO
749G. Restore-GPO
750H. Set-GPInheritance
751I. Set-GPLink
752J. Set-GPPermission
753K. Gpupdate
754L. Add-ADGroupMember
755Correct Answer: I
756http://www.gratisexam.com/
757Section: (none)
758Explanation
759Explanation/Reference:
760QUESTION 43
761Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no
762enforced GPOs. You need to provide an Administrator named Admin1 with the ability to create GPOs in the domain. The solution must not provide Admin1 with the
763ability to link GPOs. What should you use?
764A. dcgpofix
765B. Get-GPOReport
766C. Gpfixup
767D. Gpresult
768E. Gptedit.msc
769F. Import-GPO
770G. Restore-GPO
771H. Set-GPInheritance
772I. Set-GPLink
773J. Set-GPPermission
774K. Gpupdate
775L. Add-ADGroupMember
776Correct Answer: J
777Section: (none)
778Explanation
779Explanation/Reference:
780QUESTION 44
781Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no
782enforced GPOs. The domain contains a GPO named GPO1. GPO1 contains several Group Policy preferences. You need to view all of the preferences configured
783in GPO1. What should you use?
784http://www.gratisexam.com/
785A. dcgpofix
786B. Get-GPOReport
787C. Gpfixup
788D. Gpresult
789E. Gptedit.msc
790F. Import-GPO
791G. Restore-GPO
792H. Set-GPInheritance
793I. Set-GPLink
794J. Set-GPPermission
795K. Gpupdate
796L. Add-ADGroupMember
797Correct Answer: B
798Section: (none)
799Explanation
800Explanation/Reference:
801QUESTION 45
802Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no
803enforced GPOs. A network Administrator accidentally deletes the Default Domain Policy GPO. You do not have a backup of any of the GPOs. You need to recreate
804the Default Domain Policy GPO. What should you use?
805http://www.gratisexam.com/
806A. dcgpofix
807B. Get-GPOReport
808C. Gpfixup
809D. Gptedit.msc
810http://www.gratisexam.com/
811E. Import-GPO
812F. Restore-GPO
813G. Set-GPInheritance
814H. Set-GPLink
815I. Set-GPPermission
816J. Gpupdate
817K. Add-ADGroupMember
818Correct Answer: A
819Section: (none)
820Explanation
821Explanation/Reference:
822QUESTION 46
823Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no
824enforced GPOs. The domain is renamed to adatum.com. Group Policies no longer function correctly. You need to ensure that the existing GPOs are applied to
825users and computers. You want to achieve this goal by using the minimum amount of Administrative effort. What should you use?
826A. dcgpofix
827B. Get-GPOReport
828C. Gpfixup
829D. Gpresult
830E. Gptedit.msc
831F. Import-GPO
832G. Restore-GPO
833H. Set-GPInheritance
834I. Set-GPLink
835J. Set-GPPermission
836K. Gpupdate
837L. Add-ADGroupMember
838Correct Answer: C
839Section: (none)
840Explanation
841http://www.gratisexam.com/
842Explanation/Reference:
843QUESTION 47
844Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no
845enforced GPOs. The domain contains a top-level organizational unit (OU) for each department. A group named Group1 contains members from each department.
846You have a GPO named GPO1 that is linked to the domain. You need to configure GPO1 to apply settings to Group1 only. What should you use?
847A. dcgpofix
848B. Get-GPOReport
849C. Gpfixup
850D. Gpresult
851E. Gptedit.msc
852F. Import-GPO
853G. Restore-GPO
854H. Set-GPInheritance
855I. Set-GPLink
856J. Set-GPPermission
857K. Gpupdate
858L. Add-ADGroupMember
859Correct Answer: J
860Section: (none)
861Explanation
862Explanation/Reference:
863QUESTION 48
864Your network contains an Active Directory domain named contoso.com. A user named User1 creates a central store and opens the Group Policy Management
865Editor as shown in the exhibit. You need to ensure that the default Administrative Templates appear in GPO1. What should you do?
866http://www.gratisexam.com/
867A. Link a WMI filter to GPO1.
868B. Add User1 to the Group Policy Creator Owners group.
869C. Configure Security Filtering in GPO1.
870D. Copy files from %Windir%\PolicyDefinitions to the central store.
871Correct Answer: D
872Section: (none)
873Explanation
874Explanation/Reference:
875QUESTION 49
876Your network contains a single Active Directory domain named contoso.com. The domain contains an Active Directory site named Site1 and an organizational unit
877(OU) named OU1. The domain contains a client computer named Client1 that is located in OU1 and Site1. You create five Group Policy objects (GPO). The GPOs
878are configured as shown in the following table.
879http://www.gratisexam.com/
880You need to identify in which order the GPOs will be applied to Client1. In which order should you arrange the listed GPOs?
881To answer, move all GPOs from the list of GPOs to the answer area and arrange them in the correct order.
882Select and Place:
883A.
884B.
885C.
886D.
887Correct Answer:
888Section: (none)
889Explanation
890Explanation/Reference:
891http://www.gratisexam.com/
892QUESTION 50
893Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or
894Windows Server 2012. You have a Password Settings object (PSOs) named PSO1. You need to view the settings of PSO1. Which tool
895should you use?
896A. Get-ADFineGrainedPasswordPolicy
897B. Get-ADAccountResultantPasswordReplicationPolicy
898C. Get-ADDomainControllerPasswordReplicationPolicy
899D. Get-ADDefaultDomainPasswordPolicy
900Correct Answer: A
901Section: (none)
902Explanation
903Explanation/Reference:
904QUESTION 51
905Your network contains a production Active Directory forest named contoso.com and a test Active Directory forest named test.contoso.com. There is no network
906connectivity between contoso.com and test.contoso.com. The test.contoso.com domain contains a Group Policy object (GPO) named GPO1. You need to apply the
907settings in GPO1 to the contoso.com domain. Which four actions should you perform?
908To answer, move the four appropriate actions from the list of actions to the answer area and arrange them in the correct order.
909Select and Place:
910http://www.gratisexam.com/
911A.
912B.
913C.
914D.
915Correct Answer:
916Section: (none)
917Explanation
918Explanation/Reference:
919http://www.gratisexam.com/
920"Best Material, Great Results". www.certkingdom.com 69
92170-411
922QUESTION 52
923Your network contains an Active Directory domain named contoso.com. All user accounts reside in an organizational unit (OU) named OU1. All of the users in the
924marketing department are members of a group named Marketing. All of the users in the human resources department are members of a group named HR. You
925create a Group Policy object (GPO) named GPO1. You link GP01 to OU1. You configure the Group Policy preferences of GPO1 to add two shortcuts named Link1
926and Link2 to the desktop of each user. You need to ensure that Link1 only appears on the desktop of the users in Marketing and that Link2 only appears on the
927desktop of the users in HR.
928What should you configure?
929A. Item-level targeting
930B. Group Policy Inheritance
931C. Security Filtering
932D. WMI Filtering
933Correct Answer: A
934Section: (none)
935http://www.gratisexam.com/
936Explanation
937Explanation/Reference:
938QUESTION 53
939Your network contains a single Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. The domain contains 400 desktop
940computers that run Windows 8 and 10 desktop computers that run Windows XP Service Pack 3 (SP3). All new desktop computers that are added to the domain run
941Windows 8. All of the desktop computers are located in an organizational unit (OU) named OU1. You create a Group Policy object (GPO) named GPO1. GPO1
942contains startup script settings. You link GPO1 to OU1. You need to ensure that GPO1 is applied only to computers that run Windows XP SP3. What should you
943do?
944A. Modify the Security settings of OU1.
945B. Run the Set-GPLink cmdlet and specify the -target parameter.
946C. Create and link a WMI filter to GPO1.
947D. Run the Set-GPInheritance cmdlet and specify the -target parameter.
948Correct Answer: C
949Section: (none)
950Explanation
951Explanation/Reference:
952QUESTION 54
953Your network contains an Active Directory domain named contoso.com. The domain contains 30 user accounts that are used for network administration. The user
954accounts are members of a domain global group named Group1. You identify the security requirements for the 30 user accounts as shown in the following table.
955You need to identify which settings must be implemented by using a Password Settings object (PSO) and which settings must be implemented by modifying the
956properties of the user accounts.
957http://www.gratisexam.com/
958What should you identify?
959To answer, configure the appropriate settings in the dialog box in the answer area.
960Hot Area:
961A.
962B.
963C.
964D.
965Correct Answer:
966Section: (none)
967Explanation
968Explanation/Reference:
969http://www.gratisexam.com/
970QUESTION 55
971Computer1 is located in an OU, and the GPO1, User1 is another OU, and as GPO2, to ensure you can apply GPO1 to User1 should be how to do?
972A. Security filtering
973B. Inheritance
974C. Gpupdate
975D. GPO
976Correct Answer: A
977Section: (none)
978Explanation
979Explanation/Reference:
980http://www.gratisexam.com/
981QUESTION 56
982Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8 Pro. You have a Group Policy object (GPO) named
983GP1. GP1 is linked to the domain. GP1 contains the Windows Internet Explorer 10 and 11 Internet Settings. The settings are shown in the exhibit.
984Users report that when they open Windows Internet Explorer, the home page is NOT set to
985http://www.contoso.com.
986http://www.gratisexam.com/
987You need to ensure that the home page is set to http://www.contoso.com the next time users log on to the domain. What should you do?
988A. On each client computer, run gpupdate.exe.
989B. Open the Internet Explorer 10 and 11 Internet Settings, and then press F5.
990C. Open the Internet Explorer 10 and 11 Internet Settings, and then modify the Tabs settings.
991D. On each client computer, run Invoke-GPupdate.
992Correct Answer: A
993Section: (none)
994Explanation
995Explanation/Reference:
996QUESTION 57
997Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. You have a Group Policy object (GPO)
998named GPO1 that contains hundreds of settings. GPO1 is linked to an organizational unit (OU) named OU1. OU1 contains 200 client computers. You plan to unlink
999GPO1 from OU1. You need to identify which GPO settings will be removed from the computers after GPO1 is unlinked from OU1. Which two GPO settings should
1000you identify? (Each correct answer presents part of the solution. Choose two.)
1001A. The managed Administrative Template settings
1002B. The unmanaged Administrative Template settings
1003C. The System Services security settings
1004D. The Event Log security settings
1005E. The Restricted Groups security settings
1006Correct Answer: AD
1007Section: (none)
1008Explanation
1009Explanation/Reference:
1010QUESTION 58
1011Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named IT and an OU named Sales. All of
1012the help desk user accounts are located in the IT OU. All of the sales user accounts are located in the Sales OU. The Sales OU contains a global security group
1013named G_Sales. The IT OU contains a global security group named G_HelpDesk.
1014You need to ensure that members of G_HelpDesk can perform the following tasks:
1015* Reset the passwords of the sales users.
1016http://www.gratisexam.com/
1017* Force the sales users to change their password at their next logon.
1018What should you do?
1019A. Run the Set-ADFinecrainedPasswordPolicy cmdlet and specify the -identity parameter.
1020B. Right-click the IT OU and select Delegate Control.
1021C. Right-click the Sales OU and select Delegate Control.
1022D. Run the Set-ADAccountPassword cmdlet and specify the -identity parameter.
1023Correct Answer: C
1024Section: (none)
1025Explanation
1026Explanation/Reference:
1027QUESTION 59
1028Your network contains an Active Directory domain named contoso.com. The domain contains 30 organizational units (OUs). You need to ensure that a user named
1029User1 can link Group Policy Objects (GPOs) in the domain. What should you do?
1030A. From the Active Directory Users and Computers, add User1 to the Network Configuration Operators group.
1031B. From the Group Policies Management, click the contoso.com node and modify the Delegation settings.
1032C. From the Group Policies Management, click the Group policy Objects node and modify the Delegation settings.
1033D. From the Active Directory Users and Computers, add User1 to the Group Policy Creator Owners group.
1034Correct Answer: B
1035Section: (none)
1036Explanation
1037Explanation/Reference:
1038QUESTION 60
1039Your network contains a single Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. The domain contains 400 desktop
1040computers that run Windows 8 and 10 desktop computers that run Windows XP Service Pack 3 (SP3). All new desktop computers that are added to the domain run
1041Windows 8. All of the desktop computers are located in an organizational unit (OU) named OU1. You create a Group Policy object (GPO) named GPO1. GPO1
1042contains startup script settings. You link GPO1 to OU1. You need to ensure that GPO1 is applied only to computers that run Windows XP SP3. What should you
1043do?
1044A. Modify the Security settings of OU1.
1045http://www.gratisexam.com/
1046B. Run the Set-GPLink cmdlet and specify the -target parameter.
1047C. Create and link a WMI filter to GPO1.
1048D. Run the Set-GPInheritance cmdlet and specify the -target parameter.
1049Correct Answer: C
1050Section: (none)
1051Explanation
1052Explanation/Reference:
1053QUESTION 61
1054DRAG DROP
1055Your network contains an Active Directory domain named contoso.com. All client computers run Windows 7. Group Policy objects (GPOs) are linked to the domain
1056as shown in the exhibit.
1057http://www.gratisexam.com/
1058GP02 contains user configurations only and GP03 contains computer configurations only. You need to configure the GPOs to meet the following requirements:
1059* Ensure that GP02 only applies to the user accounts in OU2 that are members of a global group named Group2.
1060* Ensure that GP03 only applies to the computer accounts in OU3 that have more than 100 GB of free disk space.
1061What should you do?
1062To answer, drag the appropriate setting to the correct GPO. Each setting may be used once, more than once, or not at all. You may need to drag the split bar
1063between panes or scroll to view content.
1064Select and Place:
1065http://www.gratisexam.com/
1066"Best Material, Great Results". www.certkingdom.com 75
106770-411
1068A.
1069B.
1070C.
1071D.
1072Correct Answer:
1073Section: (none)
1074Explanation
1075Explanation/Reference:
1076http://www.gratisexam.com/
1077QUESTION 62
1078Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. The domain contains 500 client
1079computers that run Windows 8 Enterprise. You implement a Group Policy central store. You have an application named App1. App1 requires that a custom registry
1080setting be deployed to all of the computers. You need to deploy the custom registry setting. The solution must minimize administrator effort. What should you
1081configure in a Group Policy object (GPO)?
1082A. The Administrative Templates
1083B. An application control policy
1084C. The Group Policy preferences
1085D. The Software Installation settings
1086Correct Answer: C
1087Section: (none)
1088Explanation
1089Explanation/Reference:
1090QUESTION 63
1091Your network contains two Active Directory forests named contoso.com and adatum.com. All domain controllers run Windows Server 2012. The adatum.com
1092domain contains a Group Policy object (GPO) named GPO1. An administrator from adatum.com backs up GPO1 to a USB flash drive. You have a domain
1093controller named dc1.contoso.com. You insert the USB flash drive in dc1.contoso.com. You need to identify the domain-specific reference in GPO1. What should
1094you do?
1095A. From Group Policy Management, run the Group Policy Results Wizard.
1096B. From the Migration Table Editor, click Populate from GPO.
1097C. From Group Policy Management, run the Group Policy Modeling Wizard.
1098D. From the Migration Table Editor, click Populate from Backup.
1099Correct Answer: D
1100Section: (none)
1101Explanation
1102Explanation/Reference:
1103QUESTION 64
1104Your network contains an Active Directory domain named contoso.com. All client computers run Windows Vista Service Pack 2 (SP2). All client computers are in an
1105organizational unit (OU) named 0U1. All user accounts are in an OU named OU2. All users log on to their client computer by using standard user accounts. A
1106Group Policy object (GPO) named GPO1 is linked to OU1. A GPO named GP02 is linked to 0U2. You need to apply advanced audit policy settings to all of the client
1107http://www.gratisexam.com/
1108computers. What should you do?
1109A. In GPO1, configure a startup script that runs auditpol.exe.
1110B. In GPO2, configure a logon script that runs auditpol.exe.
1111C. In GPO1, configure the Advanced Audit Policy Configuration settings.
1112D. In GPO2, configure the Advanced Audit Policy Configuration settings.
1113Correct Answer: A
1114Section: (none)
1115Explanation
1116Explanation/Reference:
1117QUESTION 65
1118Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or
1119Windows Server 2012. You have a Password Settings object (PSOs) named PSO1. You need to view the settings of PSO1. Which tool should you use?
1120A. Group Policy Management
1121B. Get-ADFineGrainedPasswordPolicy
1122C. Get-ADDefaultDomainPasswordPolicy
1123D. Server Manager
1124Correct Answer: B
1125Section: (none)
1126Explanation
1127Explanation/Reference:
1128QUESTION 66
1129Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. An organizational unit (OU) named OU1
1130contains 200 client computers that run Windows 8 Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1. You make a change to GPO1. You need
1131to force all of the computers in OU1 to refresh their Group Policy settings immediately. The solution must minimize administrative effort. Which tool should you use?
1132A. Group Policy Object Editor
1133B. The Secedit command
1134C. Group Policy Management Console (GPMC)
1135D. Active Directory Users and Computers
1136http://www.gratisexam.com/
1137Correct Answer: C
1138Section: (none)
1139Explanation
1140Explanation/Reference:
1141QUESTION 67
1142HOTSPOT
1143Your network contains an Active Directory domain named contoso.com. The domain contains a
1144domain controller named DC1 that runs Windows Server 2012. The domain contains some test client computers that run either Windows XP, Windows Vista,
1145Windows 7, or Windows 8. The computer accounts for the test computers are located in an organizational unit (OU) named OU1. You have a Group Policy object
1146(GPO) named GP01 linked to OU1. GPO1 is used to assign several applications to the test computers. You need to ensure that when the test computers in OU1
1147restart, you can see which application installation is running currently. Which setting should you modify in GPO1?
1148To answer, select the appropriate setting in the answer area.
1149Hot Area:
1150http://www.gratisexam.com/
1151A.
1152B.
1153C.
1154D.
1155Correct Answer:
1156Section: (none)
1157Explanation
1158Explanation/Reference:
1159"Best Material, Great Results". www.certkingdom.com 78
1160http://www.gratisexam.com/
116170-411
1162QUESTION 68
1163Your network contains an Active Directory domain named contoso.com. The domain contains a Web server named www.contoso.com. The Web server is available
1164on the Internet. You implement DirectAccess by using the default configuration. You need to ensure that users never attempt to connect to www.contoso.com by
1165using DirectAccess. The solution must not prevent the users from using DirectAccess to access other resources in contoso.com. Which settings should you
1166configure in a Group Policy object (GPO)?
1167A. Name Resolution Policy
1168B. DNS Client
1169C. Network Connections
1170http://www.gratisexam.com/
1171D. DirectAccess Client Experience Settings
1172Correct Answer: A
1173Section: (none)
1174Explanation
1175Explanation/Reference:
1176QUESTION 69
1177You have a DNS server named Server1. Server1 has a primary zone named contoso.com. Zone Aging/Scavenging is configured for the contoso.com zone. One
1178month ago, an Administrator removed a server named Server2 from the network. You discover that a static resource record for Server2 is present in contoso.com.
1179Resource records for decommissioned client computers are
1180removed automatically from contoso.com. You need to ensure that the static resource records for all of the servers are removed automatically from contoso.com.
1181What should you modify?
1182A. The Security settings of the static resource records
1183B. The Expires after value of contoso.com
1184C. The Record time stamp value of the static resource records
1185D. The time-to-live (TTL) value of the static resource records
1186Correct Answer: C
1187Section: (none)
1188Explanation
1189Explanation/Reference:
1190QUESTION 70
1191You have a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. You need to configure the ports on
1192Server1 to ensure that client computers can establish VPN connections to Server1 by using TCP port 443. What should you modify?
1193To answer, select the appropriate object in the answer area.
1194Hot Area:
1195http://www.gratisexam.com/
1196A.
1197B.
1198C.
1199D.
1200Correct Answer:
1201Section: (none)
1202Explanation
1203Explanation/Reference:
1204http://www.gratisexam.com/
1205QUESTION 71
1206Your network contains two Active Directory domains named contoso.com and adatum.com. The network contains a server named Server1 that runs Windows
1207Server 2012. Server1 has the DNS Server server role installed. Server1 has a copy of the contoso.com DNS zone. You need to configure Server1 to resolve names
1208in the adatum.com domain. The solution must meet the following requirements:
1209* Prevent the need to change the configuration of the current name servers that host zones for adatum.com.
1210* Minimize Administrative effort.
1211Which type of zone should you create?
1212A. Primary
1213B. Secondary
1214C. Reverse lookup
1215D. Stub
1216http://www.gratisexam.com/
1217Correct Answer: D
1218Section: (none)
1219Explanation
1220Explanation/Reference:
1221QUESTION 72
1222Your network contains two servers named Server1 and Server2. Both servers run Windows Server 2012 and have the DNS Server role installed. On Server1, you
1223create a standard primary zone
1224named contoso.com. You need to ensure that Server2 can host a secondary zone for contoso.com. What should you do from Server1?
1225A. Add Server2 as a name server.
1226B. Convert contoso.com to an Active Directory-integrated zone.
1227C. Create a zone delegation that points to Server2.
1228D. Create a trust anchor named Server2.
1229Correct Answer: A
1230Section: (none)
1231Explanation
1232Explanation/Reference:
1233QUESTION 73
1234You have a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. On Server1, you create a network policy
1235named Policy1. You need to configure Policy1 to apply only to VPN connections that use the L2TP protocol. What should you configure in Policy1?
1236A. The Tunnel Type
1237B. The Service Type
1238C. The NAS Port Type
1239D. The Framed Protocol
1240Correct Answer: A
1241Section: (none)
1242Explanation
1243Explanation/Reference:
1244http://www.gratisexam.com/
1245QUESTION 74
1246Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012. All
1247client computers run Windows 8 Enterprise. DC1 contains a Group Policy object (GPO) named GPO1. You need to deploy a VPN connection to all users. What
1248should you configure from User Configuration in GPO1?
1249http://www.gratisexam.com/
1250A. Preferences/Control Panel Settings/Network Options
1251B. Policies/Administrative Templates/Windows Components/Windows Mobility Center
1252C. Policies/Administrative Templates/Network/Windows Connect Now
1253D. Policies/Administrative Templates/Network/Network Connections
1254Correct Answer: A
1255Section: (none)
1256Explanation
1257Explanation/Reference:
1258QUESTION 75
1259Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012. All sales users have laptop computers that run
1260Windows 8. The sales computers are joined to the domain. All user accounts for the sales department are in an organizational unit (OU) named Sales_OU. A
1261Group Policy object (GPO) named GPO1 is linked to Sales_OU. You need to configure a dial-up connection for all of the sales users. What should you configure
1262from User Configuration in GPO1?
1263A. Policies/Administrative Templates/Network/Windows Connect Now
1264B. Policies/Administrative Templates/Windows Components/Windows Mobility Center
1265C. Preferences/Control Panel Settings/Network Options
1266D. Policies/Administrative Templates/Network/Network Connections
1267Correct Answer: C
1268http://www.gratisexam.com/
1269Section: (none)
1270Explanation
1271Explanation/Reference:
1272QUESTION 76
1273HOTSPOT
1274Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 and
1275are configured as DNS servers. All DNS zones are Active Directory-integrated. Active Directory Recycle Bin is enabled. You need to modify the amount of time
1276deleted objects are retained in the Active Directory Recycle Bin.
1277Which naming context should you use?
1278To answer, select the appropriate naming context in the answer area.
1279Hot Area:
1280http://www.gratisexam.com/
1281A.
1282B.
1283C.
1284D.
1285http://www.gratisexam.com/
1286Correct Answer:
1287Section: (none)
1288Explanation
1289Explanation/Reference:
1290http://www.gratisexam.com/
1291QUESTION 77
1292Your network contains an Active Directory domain named contoso.com. The domain contains six domain controllers named DC1, DC2, DC3, DC4, DC5, and DC6.
1293Each domain controller has the DNS Server server role installed and hosts an Active Directory-integrated zone for contoso.com. You plan to create a new Active
1294Directory-integrated zone named litwareinc.com that will be used for testing. You need to ensure that the new zone will be available only on DC5 and DC6. What
1295should you do first?
1296A. Create an application directory partition.
1297B. Change the zone replication scope.
1298C. Create an Active Directory connection object.
1299D. Create an Active Directory site link.
1300Correct Answer: A
1301Section: (none)
1302Explanation
1303Explanation/Reference:
1304QUESTION 78
1305Your network contains a DNS server named Server1 that runs Windows Server 2012. Server1 has a zone named contoso.com. The network contains a server
1306named Server2 that runs Windows Server 2008 R2. Server1 and Server2 are members of an Active Directory domain named contoso.com. You change the IP
1307address of Server2. Several hours later, some users report that they cannot connect to Server2. On the affected users' client computers, you flush the DNS client
1308resolver cache, and the users successfully connect to Server2. You need to reduce the amount of time that the client computers cache DNS records from
1309contoso.com. Which value should you modify in the Start of Authority (SOA) record?
1310To answer, select the appropriate setting in the answer area.
1311Hot Area:
1312http://www.gratisexam.com/
1313A.
1314B.
1315C.
1316D.
1317Correct Answer: 
1318http://www.gratisexam.com/
1319Section: (none)
1320Explanation
1321Explanation/Reference:
1322QUESTION 79
1323http://www.gratisexam.com/
1324Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. You enable
1325and configure Routing and Remote Access (RRAS) on Server1. You create a user account named User1. You need to ensure that User1 can establish VPN
1326connections to Server1. What should you do?
1327A. Create a network policy.
1328B. Modify the members of the Remote Management Users group.
1329C. Create a connection request policy.
1330D. Add a RADIUS client.
1331Correct Answer: A
1332Section: (none)
1333Explanation
1334Explanation/Reference:
1335QUESTION 80
1336Your network contains an Active Directory domain named fabrikam.com. You implement DirectAccess and an IKEv2 VPN. You need to view the properties of the
1337VPN connection. Which
1338connection properties should you view?
1339To answer, select the appropriate connection properties in the answer area.
1340Hot Area:
1341http://www.gratisexam.com/
1342A.
1343B.
1344C.
1345D.
1346Correct Answer:
1347Section: (none)
1348Explanation
1349Explanation/Reference:
1350QUESTION 81
1351The contoso.com domain contains a DNS server named Server1 that host a primary zone. Server2 contains a secondary zone for the contoso.com domain. You
1352need to configure how long Server2 queries Server1 to renew the zone. What should you configure?
1353A. Refresh interval
1354B. Restart DNS
1355C. Forwarders
1356D. Stub zone
1357Correct Answer: A
1358Section: (none)
1359Explanation
1360http://www.gratisexam.com/
1361Explanation/Reference:
1362QUESTION 82
1363You have a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. On Server1, you create a network policy
1364named PPTP_Policy. You need to configure PPTP_Policy to apply only to VPN connections that use the PPTP protocol.
1365What should you configure in PPTP_Policy?
1366A. The Service Type
1367B. The Tunnel Type
1368C. The Framed Protocol
1369D. The NAS Port Type
1370Correct Answer: B
1371Section: (none)
1372Explanation
1373Explanation/Reference:
1374QUESTION 83
1375Your network contains a RADIUS server named Server1. You install a new server named Server2 that runs Windows Server 2012 and has Network Policy Server
1376(NPS) installed. You need to ensure that all accounting requests for Server2 are forwarded to Server1. On Server2, you configure a Connection Request Policy.
1377What else should you configure on Server2? To answer, select the appropriate node in the answer area.
1378Hot Area:
1379http://www.gratisexam.com/
1380A.
1381B.
1382C.
1383D.
1384Correct Answer:
1385Section: (none)
1386Explanation
1387Explanation/Reference:
1388http://www.gratisexam.com/
1389QUESTION 84
1390Your network contains two Active Directory forests named contoso.com and adatum.com. The contoso.com forest contains a server named server1.contoso.com.
1391The adatum.com forest contains a server named server2.adatum.com. Both servers have the Network Policy Server role service installed. The network contains a
1392server named Server3. Server3 is located in the perimeter network and has the Network Policy Server role service installed. You plan to configure Server3 as an
1393authentication provider for several VPN servers. You need to ensure that RADIUS requests received by Server3 for a specific VPN server are always forwarded to
1394server1.contoso.com. Which two should you configure on Server3? (Each correct answer presents part of the solution. Choose two.)
1395A. Network policies
1396B. Remote RADIUS server groups
1397C. Connection authorization policies
1398D. Remediation server groups
1399E. Connection request policies
1400Correct Answer: BE
1401Section: (none)
1402Explanation
1403Explanation/Reference:
1404http://www.gratisexam.com/
1405QUESTION 85
1406Your network contains an Active Directory domain named fabrikam.com. You implement DirectAccess. You need to view the properties of the DirectAccess
1407connection. Which connection properties should you view?
1408To answer, select the appropriate connection properties in the answer area.
1409Hot Area:
1410A.
1411B.
1412C.
1413D.
1414Correct Answer:
1415Section: (none)
1416Explanation
1417Explanation/Reference:
1418http://www.gratisexam.com/
1419QUESTION 86
1420Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. You enable
1421and configure Routing and Remote Access (RRAS) on Server1. You create a user account named User1. You need to ensure that User1 can establish VPN
1422connections to Server1. What should you do?
1423A. Add a RADIUS client.
1424B. Create a connection request policy.
1425C. Modify the members of the Remote Management Users group.
1426D. Modify the Dial-in setting of User1.
1427Correct Answer: D
1428Section: (none)
1429Explanation
1430Explanation/Reference:
1431QUESTION 87
1432Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. All of the DNS servers in both of the
1433domains run Windows
1434Server 2012. The network contains two servers named Server1 and Server2. Server1 hosts an Active Directory-integrated zone for contoso.com. Server2 hosts an
1435Active Directory-integrated zone for fabrikam.com. Server1 and Server2 connect to each other by using a WAN link. Client computers that connect to Server1 for
1436name resolution cannot resolve names in fabrikam.com. You need to configure Server1 to support the resolution of names in fabrikam.com. The solution must
1437ensure that users in contoso.com can resolve names in fabrikam.com if the WAN link fails.
1438http://www.gratisexam.com/
1439What should you do on Server1?
1440A. Add a forwarder.
1441B. Create a conditional forwarder.
1442C. Create a secondary zone.
1443D. Create a stub zone.
1444Correct Answer: C
1445Section: (none)
1446Explanation
1447Explanation/Reference:
1448QUESTION 88
1449Your network contains two servers named Server1 and Server2. Both servers run Windows Server 2012 and have the DNS Server role installed. Server1 hosts a
1450primary zone for contoso.com. Server2 hosts a secondary zone for contoso.com. The zone is not configure to notify secondary servers of changes automatically.
1451You update several records on Server1. You need to force the replication of the contoso.com zone records from Server1 to Server2. What should you do from
1452Server2?
1453A. Right-click Server2 and click Update Server Data Files.
1454B. Right-click Server2 and click Refresh.
1455C. Right-click the contoso.com zone and click Reload.
1456D. Right-click the contoso.com zone and click Transfer from Master.
1457Correct Answer: D
1458Section: (none)
1459Explanation
1460Explanation/Reference:
1461QUESTION 89
1462Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8. Your company has users who work from home. Some
1463of the home users have desktop computers. Other home users have laptop computers. All of the computers are joined to the domain. All of the computer accounts
1464are members of a group named Group1. Currently, the home users access the corporate network by using a PPTP VPN. You implement DirectAccess by using the
1465default configuration and you specify Group1 as the DirectAccess client group. The home users who have desktop computers report that they cannot use
1466DirectAccess to access the corporate network. The home users who have laptop computers report that they can use DirectAccess to access the corporate network.
1467You need to ensure that the home users who have desktop computers can access the network by using DirectAccess. What should you modify?
1468http://www.gratisexam.com/
1469A. The security settings of the computer accounts for the desktop computers
1470B. The membership of the R.AS and IAS Servers group
1471C. The WMI filter for Direct Access Client Settings GPO
1472D. The conditions of the Connections to Microsoft Routing and Remote Access server policy
1473Correct Answer: C
1474Section: (none)
1475Explanation
1476Explanation/Reference:
1477QUESTION 90
1478You have a DNS server named Server1 that has a Server Core Installation on Windows Server 2012. You need to view the time-to-live (TTL) value of a name
1479server (NS) record that is cached by the DNS Server service on Server1. What should you run?
1480A. Show-DNSServerCache
1481B. dnscacheugc.exe
1482C. ipconfiq.exe /displaydns
1483D. nslookup.exe
1484Correct Answer: A
1485Section: (none)
1486Explanation
1487Explanation/Reference:
1488QUESTION 91
1489Your network contains a single Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that hosts the primary DNS
1490zone for contoso.com. All servers dynamically register their host names. You install the new Web servers that host identical copies of your company's intranet
1491website. The servers are configured as shown in the following table.
1492You need to use DNS records to load balance name resolution queries for intranet.contoso.com between the two Web servers. What is the minimum number of
1493http://www.gratisexam.com/
1494DNS records that you should create manually?
1495A. 1
1496B. 2
1497C. 3
1498D. 4
1499Correct Answer: B
1500Section: (none)
1501Explanation
1502Explanation/Reference:
1503QUESTION 92
1504You have a Direct Access Server named Server1 running Server 2012. You need to add prevent users from accessing websites from an Internet connection. What
1505should you configure?
1506A. Split Tunneling
1507B. Security Groups
1508C. Force Tunneling
1509D. Network Settings
1510Correct Answer: C
1511Section: (none)
1512Explanation
1513Explanation/Reference:
1514QUESTION 93
1515You have a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. You need to configure the ports on
1516Server1 to ensure that client computers can establish VPN connections to Server1. The solution must NOT require the use of certificates or pre-shared keys. What
1517should you modify? To answer, select the appropriate object in the answer area.
1518Hot Area:
1519http://www.gratisexam.com/
1520A.
1521B.
1522C.
1523D.
1524Correct Answer:
1525Section: (none)
1526Explanation
1527Explanation/Reference:
1528http://www.gratisexam.com/
1529QUESTION 94
1530Your network contains an Active Directory domain named contoso.com. The domain does not contain a certification authority (CA). All servers run Windows Server
15312012. All client computers run Windows 8. You need to add a data recovery agent for the Encrypting File System (EFS) to the domain. Which two actions should
1532you perform? (Each correct answer presents part of the solution. Choose two).
1533A. From the Default Domain Controllers policy, select Create Data Recovery Agent.
1534B. From the Default Domain Controllers policy, select Add Data Recovery Agent.
1535C. From Windows PowerShell, run Get-Certificate.
1536D. From the Default Domain Policy, select Add Data Recovery Agent.
1537E. From a command prompt, run cipher.exe.
1538F. From the Default Domain Policy, select Create Data Recovery Agent.
1539http://www.gratisexam.com/
1540Correct Answer: DE
1541Section: (none)
1542Explanation
1543Explanation/Reference:
1544QUESTION 95
1545Your network contains multiple Active Directory sites. You have a Distributed File System (DFS) namespace that has a folder target in each site. You discover that
1546some client computers connect to DFS targets in other sites. You need to ensure that the client computers only connect to a DFS target in their respective site.
1547What should you modify?
1548A. the properties of the Active Directory site links
1549B. the properties of the Active Directory sites
1550C. the delegation settings of the namespace
1551D. the referral settings of the namespace
1552Correct Answer: D
1553Section: (none)
1554Explanation
1555Explanation/Reference:
1556QUESTION 96
1557Your network contains an Active Directory domain named contoso.com. You have a failover cluster named Cluster1. All of the nodes in Cluster1 have BitLocker
1558Drive Encryption (BitLocker) installed. You plan to add a new volume to the shared storage of Cluster1. You need to add the new volume to the shared storage. The
1559solution must meet the following requirements:
1560* Encrypt the volume.
1561* Avoid using maintenance mode on the cluster.
1562Which three actions should you perform?
1563To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.
1564Select and Place:
1565http://www.gratisexam.com/
1566A.
1567B.
1568C.
1569D.
1570Correct Answer:
1571Section: (none)
1572Explanation
1573Explanation/Reference:
1574http://www.gratisexam.com/
1575QUESTION 97
1576Your network contains an Active Directory domain named contoso.com. The domain functional level in Windows Server 2008. All domain controllers run Windows
1577Server 2008 R2. The domain contains a file server named Server1 that runs Windows Server 2012. Server1 has a BitLocker Drive Encryption (BitLocker)-encrypted
1578drive. Server1 uses a trusted Platform Module (TPM) chip. You enable the Turn on TPM backup to Active Directory Domain Services policy setting by using a
1579Group Policy object (GPO). You need to ensure that you can back up the BitLocker recovery information to Active Directory. What should you do?
1580A. Upgrade a domain controller to Windows 2012.
1581B. Enable the Store BitLocker recovery information in the Active Directory Services (Windows Server2008 and Windows Vista) policy settings.
1582C. Raise the forest functional level to Windows 2008 R2.
1583D. Add a BitLocker data recovery agent
1584Correct Answer: B
1585Section: (none)
1586Explanation
1587Explanation/Reference:
1588QUESTION 98
1589Your company has a main office and a branch office. The main office is located in Seattle. The branch office is located in Montreal. Each office is configured as an
1590http://www.gratisexam.com/
1591Active Directory site. The network contains an Active Directory domain named adatum.com. The Seattle office contains a file server named Server1. The Montreal
1592office contains a file server named Server2. The servers run Windows Server 2012 and have the File and Storage Services server role, the DFS Namespaces role
1593service, and the DFS Replication role service installed. Server1 and Server2 each have a share named Share1 that is replicated by using DFS Replication. You
1594need to ensure that users connect to the replicated folder in their respective office when they connect to \\contoso.com\Share1. Which three actions should you
1595perform? (Each correct answer presents part of the solution. Choose three.)
1596A. Share and publish the replicated folder.
1597B. Modify the Referrals settings.
1598C. Create a new topology.
1599D. Create a namespace.
1600E. Create a replication connection.
1601Correct Answer: ABD
1602Section: (none)
1603Explanation
1604Explanation/Reference:
1605QUESTION 99
1606Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1 that runs Windows Server 2012. You
1607view the effective policy settings of Server1 as shown in the exhibit.
1608http://www.gratisexam.com/
1609On Server1, you have a folder named C:\Share1 that is shared as Share1. Share1 contains confidential data. A group named Group1 has full control of the content
1610in Share1. You need to ensure that an entry is added to the event log whenever a member of Group1 deletes a file in Share1. What should you configure?
1611http://www.gratisexam.com/
1612A. The Audit File System setting of Servers GPO
1613B. The Sharing settings of C:\Share1
1614C. The Security settings of C:\Share1
1615D. The Audit File Share setting of Servers GPO
1616Correct Answer: C
1617Section: (none)
1618Explanation
1619Explanation/Reference:
1620QUESTION 100
1621You have a server named Server1 that runs Windows Server 2012. Server1 has the File Server Resource Manager role service installed. Server1 has a folder
1622named Folder1 that is used by the human resources department. You need to ensure that an email notification is sent immediately to the human resources
1623manager when a user copies an audio file or a video file to Folder1. What should you configure on Server1?
1624A. A file screen
1625B. A file screen exception
1626C. A file group
1627D. A storage report task
1628Correct Answer: D
1629Section: (none)
1630Explanation
1631Explanation/Reference:
1632QUESTION 101
1633Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Both servers run Windows
1634Server 2012. Both servers have the File and Storage Services server role, the DFS Namespace role service, and the DFS Replication role service installed. Server1
1635and Server2 are part of a Distributed File System (DFS) Replication group named Group1. Server1 and Server2 are connected by using a high-speed LAN
1636connection. You need to minimize the amount of processor resources consumed by DFS Replication. What should you do?
1637A. Reduce the bandwidth usage.
1638B. Disable Remote Differential Compression (RDC).
1639http://www.gratisexam.com/
1640C. Modify the staging quota.
1641D. Modify the replication schedule.
1642Correct Answer: B
1643Section: (none)
1644Explanation
1645Explanation/Reference:
1646QUESTION 102
1647Your company has a main office and two branch offices. The main office is located in New York. The branch offices are located in Seattle and Chicago. The
1648network contains an Active Directory domain named contoso.com. An Active Directory site exists for each office. Active Directory site links exist between the main
1649office and the branch offices. All servers run Windows Server 2012. The domain contains three file servers. The file servers are configured as shown in the
1650following table.
1651You implement a Distributed File System (DFS) replication group named ReplGroup. ReplGroup is used to replicate a folder on each file server. ReplGroup uses a
1652hub and spoke topology. NYCSVR1 is configured as the hub server. You need to ensure that replication can occur if NYC-SVR1 fails. What should you do?
1653A. Create an Active Directory site link.
1654B. Modify the properties of ReplGroup.
1655C. Create an Active Directory site link bridge.
1656D. Create a connection in ReplGroup.
1657Correct Answer: D
1658Section: (none)
1659Explanation
1660Explanation/Reference:
1661QUESTION 103
1662http://www.gratisexam.com/
1663You have a server named Server1 that runs Windows Server 2012. On Server1, you configure a custom Data Collector Set (DCS) named DCS1. DCS1 is
1664configured to store performance log data in C:\Logs. You need to ensure that the contents of C:\Logs are deleted automatically when the folder reaches 100 MB in
1665size. What should you configure?
1666A. A File Server Resource Manager (FSRM) quota on the C:\Logs folder
1667B. A File Server Resource Manager (FSRM) file screen on the C:\Logs folder
1668C. A schedule for DCS1
1669D. The Data Manager settings of DCS1
1670Correct Answer: D
1671Section: (none)
1672Explanation
1673Explanation/Reference:
1674QUESTION 104
1675Your domain has contains a Windows 8 computer name Computer1 using BitLocker. The E:\ drive is encrypted and currently locked. You need to unlock the E:\
1676drive with the recovery key stored on C:\. What should you run?
1677A. Unlock-BitLocker
1678B. Suspend-BitLocker
1679C. Enable-BitLockerAutoUnloc
1680D. Disable-BitLocker
1681Correct Answer: A
1682Section: (none)
1683Explanation
1684Explanation/Reference:
1685QUESTION 105
1686Your network contains and active Directory domain named contoso.com. The doman contains a server named Server1 that runs Windows Server 2012. A local
1687account named Admin1 is a member of the Administrators group on Server1. You need to generate an audit event whenever Admin1 is denied access to a file or
1688folder. What should you run?
1689A. auditpol.exe /set /user:admin1 /category:"detailed tracking" /failure:enable
1690B. auditpol.exe /set/user:admin1 /failure:enable
1691http://www.gratisexam.com/
1692C. auditpol.exe /resourcesacl /set /type:keyauditpol.exe /resourcesacl /set /type: /access:ga
1693D. auditpol.exe /resourcesacl /set /type:file /user:admin1 /failure
1694Correct Answer: D
1695Section: (none)
1696Explanation
1697Explanation/Reference:
1698QUESTION 106
1699Your network contains and Active Directory domain named contoso.com. The domain contains a file server named server1 that runs windows Server 2012. You
1700view the effective policy settings of server1 as shown in the exhibit.
1701http://www.gratisexam.com/
1702http://www.gratisexam.com/
1703You need to ensure that an entry is added to the event log whenever a local user account is created or deleted on server1. What should you do?
1704A. In Servers GPO, modify the Advanced Audit Configuration Settings.
1705B. On Server1, attach a task to the security log.
1706C. In Servers GPO, modify the Audit Policy settings.
1707D. On Server1, attach a task to the system log.
1708Correct Answer: C
1709Section: (none)
1710Explanation
1711Explanation/Reference:
1712QUESTION 107
1713On the DFS replication your receive a wrap error on the sysvol on domain controller 4. Which 3 steps should you do to recover this error in the correct order?
1714A. Stop FSR
1715B. Start FSR
1716C. Edit the computer object in AD
1717D. Edit the registry
1718E. Stop DFSR
1719F. Start DFRS
1720Correct Answer: ABD
1721Section: (none)
1722Explanation
1723Explanation/Reference:
1724QUESTION 108
1725Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2008. All domain controllers run Windows
1726Server 2008 R2. The domain contains a file server named Server1 that runs Windows Server 2012. Server1 has a BitLocker Drive Encryption (BitLocker)-encrypted
1727drive. Server1 uses a Trusted Platform Module (TPM) chip. You enable the Turn on TPM backup to Active Directory Domain Services policy setting by using a
1728Group Policy object (GPO). You need to ensure that you can back up the BitLocker recovery information to Active Directory. What should you do?
1729A. Raise the forest functional level to Windows Server 2008 R2.
1730http://www.gratisexam.com/
1731B. Enable the Configure the level of TPM owner authorization information available to the operating system policy setting and set the Operating system managed
1732TPM authentication level to None.
1733C. Add a BitLocker data recovery agent.
1734D. Import the TpmSchemaExtension.ldf and TpmSchemaExtensionACLChanges.ldf schema extensions to the Active Directory schema.
1735Correct Answer: D
1736Section: (none)
1737Explanation
1738Explanation/Reference:
1739QUESTION 109
1740Your network contains an Active Directory domain named contoso.com. The domain contains 2 WSUS servers, ServerA and ServerB. ServerB is a replica server of
1741Server
1742A. You need to configure
1743WSUS to report data from SERVERB to SERVER
1744B. What should you configure?
1745C. Update Reports
1746D. Synchronization
1747E. Computer Groups
1748F. Reporting Rollup
1749Correct Answer: D
1750Section: (none)
1751Explanation
1752Explanation/Reference:
1753QUESTION 110
1754Your network contains an Active Directory domain named adatum.com. You have a Group Policy object (GPO) that configures the Windows Update settings.
1755Currently, client computers are configured to download updates from Microsoft Update servers. Users choose when the updates are installed. You need to
1756configure all client computers to install Windows updates automatically. Which setting should you configure in the GPO? To answer, select the appropriate setting in
1757the answer area.
1758Hot Area:
1759http://www.gratisexam.com/
1760A.
1761B.
1762C.
1763D.
1764Correct Answer:
1765Section: (none)
1766Explanation
1767Explanation/Reference:
1768http://www.gratisexam.com/
1769QUESTION 111
1770Your network contains and Active Directory domain named contoso.com. The domain contains a member server named Server1. All servers run Server 2012. You
1771need to collect the error events from all the servers on Server1. The solution ensure that when new servers are added to the domain, their error events are collected
1772automatically on Server1. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
1773A. On Server1, create a source computer initiated subscription.
1774B. From a Group Policy object (GPO), configure the Configure forwarder resource usage settings.
1775C. From a Group Policy object (GPO), configure the Configure target Subscription Manager settings.
1776D. On Server1, create a collector initiated subscription.
1777Correct Answer: AC
1778Section: (none)
1779http://www.gratisexam.com/
1780Explanation
1781Explanation/Reference:
1782QUESTION 112
1783Your network contains an Active Directory domain called contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2012.
1784You enable the EventLog- Application event trace session. You need to set the maximum size of the log file used by the trace session to 10 MB. From which tab
1785should you perform the configuration? To answer, select the appropriate tab in the answer area.
1786Hot Area:
1787A.
1788B.
1789C.
1790D.
1791Correct Answer: 
1792http://www.gratisexam.com/
1793Section: (none)
1794Explanation
1795Explanation/Reference:
1796QUESTION 113
1797Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows server 2012. Server1 has
1798the Windows Server Update Services server role installed. You need to use the Group Policy object (GPO) to assign members to a computer group. Which setting
1799should you configure in the GPO? To answer, select the appropriate setting in the answer area.
1800Hot Area:
1801http://www.gratisexam.com/
1802A.
1803B.
1804C.
1805D.
1806Correct Answer:
1807Section: (none)
1808Explanation
1809Explanation/Reference:
1810http://www.gratisexam.com/
1811QUESTION 114
1812You have Windows Server 2012 installation media that contains a file named Install.wim. You need to identify which images are present in Install.wim. What should
1813you do?
1814http://www.gratisexam.com/
1815A. Run imagex.exe and specify the/verify parameter.
1816B. Run imagex.exe and specify the /ref parameter.
1817C. Run dism.exe and specify the /get-mountedwiminfo parameter.
1818D. Run dism.exe and specify the /get-imageinfo parameter.
1819http://www.gratisexam.com/
1820Correct Answer: D
1821Section: (none)
1822Explanation
1823Explanation/Reference:
1824QUESTION 115
1825Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run
1826Windows Server 2012. Server1 and Server2 are nodes in a Hyper-V cluster named Cluster1. Cluster1 hosts 10 virtual machines. All of the virtual machines run
1827Windows Server 2012 and are members of the domain. You need to ensure that the first time a service named Service1 fails on a virtual machine, the virtual
1828machine is moved to a different node. You configure Service1 to be monitored from Failover Cluster Manager. What should you configure on the virtual machine?
1829A. From the Recovery settings of Service1, set the First failure recovery action to Restart the Service.
1830B. From the General settings, modify the Service status.
1831C. From the Recovery settings of Service1, set the First failure recovery action to Take No Action.
1832D. From the General settings, modify the Startup type.
1833Correct Answer: C
1834Section: (none)
1835Explanation
1836Explanation/Reference:
1837QUESTION 116
1838DRAG DROP
1839Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run
1840Windows Server 2012. You generalize Server2. You install the Windows Deployment Services (WDS) server role on Server1. You need to capture an image of
1841Server2 on Server1. Which three actions should you perform? To answer, move the three appropriate actions from the list of actions to the answer area and
1842arrange them in the correct order.
1843Select and Place:
1844http://www.gratisexam.com/
1845A.
1846B.
1847C.
1848D.
1849Correct Answer:
1850Section: (none)
1851Explanation
1852Explanation/Reference:
1853http://www.gratisexam.com/
1854QUESTION 117
1855Your network contains an Active Directory domain named contoso.com. The domain contains a member server that runs Windows Server 2012 and has the
1856Windows Deployment Services (WDS) server role installed. You create a new multicast session in WDS and connect 50 client computers to the session. When you
1857open the Windows Deployment Services console, you discover that all of the computers are listed as pending devices. You need to ensure that any of the
1858computers on the network can join a multicast transmission without requiring administrator approval. What should you configure?
1859To answer, select the appropriate tab in the answer area.
1860Hot Area:
1861http://www.gratisexam.com/
1862http://www.gratisexam.com/
1863A.
1864B.
1865C.
1866D.
1867Correct Answer:
1868Section: (none)
1869Explanation
1870Explanation/Reference:
1871http://www.gratisexam.com/
1872http://www.gratisexam.com/
1873QUESTION 118
1874Your network contains two servers named Server1 and Server2 that run Windows Server 2012. Server1 and Server2 have the Windows Server Update Services
1875server role installed. Server1 synchronizes from Microsoft Update. Server2 is a Windows Server Update Services (WSUS) replica of Server1. You need to configure
1876replica downstream servers to send Server1 summary information about the computer update status. What should you do?
1877A. From Server1, configure Reporting Rollup.
1878B. From Server2, configure Reporting Rollup.
1879C. From Server1, configure Email Notifications.
1880D. From Server2, configure Email Notifications.
1881Correct Answer: A
1882Section: (none)
1883Explanation
1884Explanation/Reference:
1885QUESTION 119
1886You have a server named Server1 that runs Windows Server 2012. Server1 has the Windows Server Update Services roll installed. Server1 stores update files
1887locally in C:\Updates. You need to change the location in which the updates files are stored to D:\Updates. What should you do?
1888A. From the Update Services Console, run the Windows Server Update Services Configuration Wizard
1889B. From the command prompt, run wsusutil.exe and specify the movecontent parameter
1890C. From the command prompt, run wsusutil.exe and specify the export parameter
1891D. From the Update Services Console, configure the update Files and Languages option
1892Correct Answer: B
1893Section: (none)
1894Explanation
1895Explanation/Reference:
1896QUESTION 120
1897You have Site1 with 400 desktops and Site2 with 150 desktops. You have a WSUS Server to deploy updates for both sites. You need to make sure that all
1898computers in the same site will have the same updates. What should you configure?
1899A. Computer Groups
1900http://www.gratisexam.com/
1901B. Security Groups
1902C. Synchronization Options
1903D. Classifications
1904Correct Answer: A
1905Section: (none)
1906Explanation
1907Explanation/Reference:
1908QUESTION 121
1909You have a WDS server named Server1 on Windows Server 2012. You need to automate the WDS deployment. Which Tab should you configure?
1910A. Boot Properties
1911B. Client Properties
1912C. Network Settings
1913D. PXE Response Settings
1914Correct Answer: B
1915Section: (none)
1916Explanation
1917Explanation/Reference:
1918QUESTION 122
1919You are an admin. You have wsus with 2 sites which contain computers. You want to have the ability to update the computers per site or together. Which 3 steps do
1920you do?
1921A. Create computer groups in wsus
1922B. Create synchronization options
1923C. Create GPO and configure updates
1924D. Under Tasks, click Synchronize now
1925Correct Answer: ABC
1926Section: (none)
1927Explanation
1928http://www.gratisexam.com/
1929Explanation/Reference:
1930QUESTION 123
1931Which of the options should you configure for a WDS pre-staged computer name? You should select 2 of the 4 check boxes.
1932A. GUID o MAC-address preceding with nulls
1933B. WdsClientUnattend
1934C. Give the minimum required permission to a user who wants to promote a RODC.
1935D. ReferralServer
1936Correct Answer: AC
1937Section: (none)
1938Explanation
1939Explanation/Reference:
1940QUESTION 124
1941Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2008 R2. You
1942plan to test Windows Server 2012 by using native-boot virtual hard disks (VHDs). You attach a new VHD to Server1. You need to install Windows Server 2102 in
1943the VHD. What should you do?
1944A. Run dism.exe and specify the /apply-image parameter.
1945B. Run dism.exe and specify the /append-image parameter.
1946C. Run imagex.exe and specify the /export parameter.
1947D. Run imagex.exe and specify the /append parameter.
1948Correct Answer: A
1949Section: (none)
1950Explanation
1951Explanation/Reference:
1952QUESTION 125
1953You have a server named Admin1 that runs Windows Server 2012. On Admin1, you configure a custom Data Collector Set (DCS) named DCS1. DCS1 is
1954configured to store performance log data in C:\Logs. You need to ensure that the contents of C:\Logs are deleted automatically when the folder reaches 100 MB in
1955size. What should you configure?
1956http://www.gratisexam.com/
1957A. A File Server Resource Manager (FSRM) quota on the C:\Logs folder
1958B. A File Server Resource Manager (FSRM) file screen on the C:\Logs folder
1959C. A schedule for DCS1
1960D. The Data Manager settings of DCS1
1961Correct Answer: D
1962Section: (none)
1963Explanation
1964Explanation/Reference:
1965QUESTION 126
1966Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 and a server
1967named Server2 that has the File Services server role installed. You install the Windows Deployment Services server role on Server1. You plan to use Server2 as a
1968reference computer. You need to create an image of Server2 by using Windows Deployment Services. Which type of image should you add to Server1 first?
1969A. Install
1970B. Boot
1971C. Discovery
1972D. Capture
1973Correct Answer: B
1974Section: (none)
1975Explanation
1976Explanation/Reference:
1977QUESTION 127
1978You have a server named Server1 that runs Windows Server 2012. You create a Data Collector Set (DCS) named DCS1. You need to configure DCS1 to log data
1979to D:\logs. What should you do?
1980A. Right-click DCS1 and click Properties.
1981B. Right-click DCS1 and click Save template.
1982C. Right-click DCS1 and click Data Manager.
1983D. Right-click DCS1 and click Export list.
1984Correct Answer: A
1985http://www.gratisexam.com/
1986Section: (none)
1987Explanation
1988Explanation/Reference:
1989QUESTION 128
1990You have a server named WSUS1 that runs Windows Server 2012. WSUS1 has the Windows Server Update Services server role installed and has one volume.
1991You add a new hard disk to WSUS1 and then create a volume on the hard disk. You need to ensure that the Windows Server Update Services (WSUS) update files
1992are stored on the new volume. What should you do?
1993A. From a command prompt, run wsusutil.exe and specify the move content parameter.
1994B. From the Update Services console, run the Windows Server Update Services Configuration Wizard.
1995C. From the Update Services console, configure the Update Files and Languages option.
1996D. From a command prompt, run wsusutil.exe and specify the export parameter.
1997Correct Answer: A
1998Section: (none)
1999Explanation
2000Explanation/Reference:
2001QUESTION 129
2002Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1
2003has the DHCP Server role installed. The network contains 400 client computers that run Windows 8. All of the client computers are joined to the domain and are
2004configured DHCP clients. You install a new server named Server2 that runs Windows Server 2012. On Server2, you install the Network Policy Server role service
2005and you configure Network Access Protection (NAP) to use the DHCP enforcement method. You need to ensure that Server1 only provides a valid default gateway
2006to computers that pass the system health validation. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
2007A. From the DHCP console, configure the 016 Swap Server option.
2008B. From the DHCP console, create a new policy.
2009C. From the NAP Client Configuration console, enable the DHCP Quarantine Enforcement Client.
2010D. From the DHCP console, enable NAP on all scopes.
2011E. From Server Manager, install the Network Policy Server role service.
2012Correct Answer: DE
2013Section: (none)
2014Explanation
2015http://www.gratisexam.com/
2016Explanation/Reference:
2017QUESTION 130
2018Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 is
2019configured as a Network Policy Server (NPS) server and as a DHCP server. You need to ensure that only computers that send a statement of health are checked
2020for Network Access Protection (NAP) health requirements. Which two settings should you configure? (Each correct answer presents part of the solution.
2021Choose two.)
2022A. The Called Station ID constraints
2023B. The MS-Service Class conditions
2024C. The Health Policies conditions
2025D. The NAS Port Type constraints
2026E. The NAP-Capable Computers conditions
2027Correct Answer: CE
2028Section: (none)
2029Explanation
2030Explanation/Reference:
2031QUESTION 131
2032Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8 Pro. You have a Group Policy object (GPO) named
2033GP1. GP1 is linked to the domain. GP1 contains the Windows Internet Explorer 10 and 11 Internet Settings. The settings are shown in the exhibit.
2034http://www.gratisexam.com/
2035Users report that when they open Windows Internet Explorer, the home page is NOT set to http://www.contoso.com.
2036You need to ensure that the home page is set to http://www.contoso.com the next time users log on to the domain. What should you do?
2037A. On each client computer, run gpupdate.exe.
2038B. Open the Internet Explorer 10 and 11 Internet Settings, and then press F5.
2039C. Open the Internet Explorer 10 and 11 Internet Settings, and then modify the Tabs settings.
2040http://www.gratisexam.com/
2041D. On each client computer, run Invoke-GPupdate.
2042Correct Answer: B
2043Section: (none)
2044Explanation
2045Explanation/Reference:
2046QUESTION 132
2047Your network is configured as shown in the exhibit. (Click the Exhibit button.)
2048Server1 regularly accesses Server2. You discover that all of the connections from Server1 to Server2 are routed through Router1. You need to optimize the
2049connection path from Server1 to Server2. Which route command should you run on Server1?
2050A. Route add -p 10.10.10.0 MASK 255.255.255.0 10.10.10.1 METRIC 50
2051B. Route add -p 10.10.10.0 MASK 255.255.255.0 172.23.16.2 METRIC 100
2052C. Route add -p 10.10.10.12 MASK 255.255.255.0 10.10.10.1 METRIC 100
2053D. Route add -p 10.10.10.12 MASK 255.255.255.0 10.10.10.0 METRIC 50
2054Correct Answer: B
2055Section: (none)
2056Explanation
2057Explanation/Reference:
2058http://www.gratisexam.com/
2059QUESTION 133
2060You have a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. You have a client named Client1 that is
2061configured as an 802.1X supplicant. You need to configure Server1 to handle authentication requests from Client1. The solution must minimize the number of
2062authentication methods enabled on Server1. Which authentication method should you enable?
2063To answer, select the appropriate authentication method in the answer area.
2064Hot Area:
2065A.
2066B.
2067C.
2068D.
2069Correct Answer: 
2070http://www.gratisexam.com/
2071Section: (none)
2072Explanation
2073Explanation/Reference:
2074QUESTION 134
2075DRAG DROP
2076Your network contains an Active Directory domain named adatum.com. The domain contains a
2077server named Server1 that runs Windows Server 2012. Server1 is configured as a Network Policy Server (NPS) server and as a DHCP server. You need to log all
2078DHCP clients that have Windows Firewall disabled. Which three actions should you perform in sequence? To answer, move the three appropriate actions from the
2079list of actions to the answer area and arrange them in the correct order.
2080A. Create a connection request policy
2081B. Create Network Policy
2082C. Create remediation server group
2083D. Create Windows Security Health Validator (VSHV)
2084http://www.gratisexam.com/
2085E. Create a health Policy
2086Correct Answer: BDE
2087Section: (none)
2088Explanation
2089Explanation/Reference:
2090QUESTION 135
2091DRAG DROP
2092Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 is
2093configured as a Network Policy Server (NPS) server and as a DHCP server. You need to log all DHCP clients that have Windows Firewall disabled. Which three
2094actions should you perform in sequence? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct
2095order.
2096Select and Place:
2097A.
2098B.
2099C.
2100D.
2101http://www.gratisexam.com/
2102Correct Answer:
2103Section: (none)
2104Explanation
2105Explanation/Reference:
2106QUESTION 136
2107HOTSPOT
2108You have a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. Server1 is located in the perimeter
2109network. The IPv4 routing table on Server1 is configured as shown in the following exhibit.
2110http://www.gratisexam.com/
2111Your company purchases an additional router named Router1. Router1 has an interface that connects to the perimeter network and an interface that connects to
2112the Internet. The IP address of the interface that connects to the perimeter network is 172.16.0.2. You need to ensure that Server1 will route traffic to the Internet by
2113using Router1 if the current default gateway is unavailable. How should you configure the static route on Server1? To answer, select the appropriate static route in
2114the answer area.
2115Hot Area:
2116http://www.gratisexam.com/
2117http://www.gratisexam.com/
2118A.
2119B.
2120C.
2121D.
2122Correct Answer:
2123Section: (none)
2124Explanation
2125Explanation/Reference:
2126http://www.gratisexam.com/
2127http://www.gratisexam.com/
2128QUESTION 137
2129Force an authoritative and non-authoritative synchronization for DFSR-replicated SYSVOL
2130A. dfsgui.msc
2131B. ultrasound
2132C. rplmon
2133D. frsutil
2134Correct Answer: C
2135Section: (none)
2136Explanation
2137Explanation/Reference:
2138QUESTION 138
2139I am using a Domain Admins account to run the console and the service is running under local system. I try approve Requests from Pending devices, then I got
2140notice Access Denied, (Windows Server 2003 R2). And why Architecture x64, clients are x86? Is that the reason and how to fix it?
2141A. Open WDS and right click on the server and select properties. Then click on the tab "PXE Response settings" and select respond to all (known and unknown)
2142client. And also select the little checkbox below.
2143B. You need to grant permissions on the OU in which you want to create machine accounts for the WDS Server Machine Account.
2144"Best Material, Great Results". www.certkingdom.com 145 70-411
2145C. To grant permissions to approve a pending computer.
2146Open Active Directory Users and Computers.
2147Right-click the OU where you are creating prestaged computer accounts, and then select Delegate Control.
2148On the first screen of the wizard, click Next.
2149Change the object type to include computers.
2150Add the computer object of the Windows Deployment Services server, and then click Next.
2151Select Create a Custom task to delegate.
2152Select Only the following objects in the folder. Then select the Computer Objects check box, select Create selected objects in this folder, and click Next.
2153In the Permissions box, select the Write all Properties check box, and click Finish.
2154D. Define the OU path to add systems in WDS.
2155Delegate Computer object create or greater rights to the WDS server for the OU.
2156Delegate computer object create rights to your account or simply use a domain admin account to logon.
2157Correct Answer: C
2158Section: (none)
2159Explanation
2160http://www.gratisexam.com/
2161Explanation/Reference:
2162QUESTION 139
2163Force an authoritative and non-authoritative synchronization for DFSR-replicated SYSVOL
2164A. ldp
2165B. dfsgui.msc
2166C. ultrasound
2167D. rplmon
2168Correct Answer: D
2169Section: (none)
2170Explanation
2171Explanation/Reference:
2172QUESTION 140
2173How to give the minimum required permission to a user who wants to promote a RODC.
2174A. member of the Domain Admins group
2175B. allowed to attach the server to the RODC computer account
2176C. Local admin
2177D. organization admin
2178Correct Answer: BC
2179Section: (none)
2180Explanation
2181Explanation/Reference:
2182QUESTION 141
2183Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. A domain controller named DC1 has the
2184ADMX Migrator tool installed. You have a custom Administrative Template file on DC1 named Template1.adm. You need to add a custom registry entry to
2185Template1.adm by using the ADMX Migrator tool. Which action should you run first?
2186http://www.gratisexam.com/
2187A. New Category
2188B. Load Template
2189C. New Policy Setting
2190D. Generate ADMX from ADM
2191Correct Answer: D
2192Section: (none)
2193Explanation
2194Explanation/Reference:
2195QUESTION 142
2196Your network contains an Active Directory domain named contoso.com. You need to audit access to removable storage devices. Which audit category should you
2197configure? To answer, select the appropriate category in the answer area.
2198Hot Area:
2199http://www.gratisexam.com/
2200A.
2201B.
2202C.
2203D.
2204Correct Answer:
2205Section: (none)
2206Explanation
2207Explanation/Reference:
2208QUESTION 143
2209Your network contains an Active Directory domain named adatum.com. You need to audit changes to the files in the SYSVOL shares on all of the domain
2210controllers. The solution must minimize the amount of SYSVOL replication traffic caused by the audit. Which two settings should you configure? (Each correct
2211answer presents part of the solution. Choose two.)
2212http://www.gratisexam.com/
2213A. Audit Policy\Audit system events
2214B. Advanced Audit Policy Configuration\DS Access
2215C. Advanced Audit Policy Configuration\Global Object Access Auditing
2216D. Audit Policy\Audit object access
2217E. Audit Policy\Audit directory service access
2218F. Advanced Audit Policy Configuration\Object Access
2219Correct Answer: DF
2220Section: (none)
2221Explanation
2222Explanation/Reference:
2223QUESTION 144
2224Your network contains an Active Directory domain named contoso.com. You have several Windows PowerShell scripts that execute when client computers start.
2225When a client computer starts, you discover that it takes a long time before users are prompted to log on. You need to reduce the amount of time it takes for the
2226client computers to start. The solution must not prevent scripts from completing successfully. Which setting should you configure? To answer, select the appropriate
2227setting in the answer area.
2228Hot Area:
2229http://www.gratisexam.com/
2230A.
2231B.
2232C.
2233D.
2234Correct Answer:
2235Section: (none)
2236Explanation
2237Explanation/Reference:
2238http://www.gratisexam.com/
2239QUESTION 145
2240You are a network administrator of an Active Directory domain named contoso.com. You have a server named Server1 that runs Windows Server 2012. Server1
2241has the Web Server (IIS) server role installed. Server1 will host a web site at URL https://secure.contoso.com. The application pool identity account of the web site
2242will be set to a domain user account named AppPool1. You need to identify the setspn.exe command that you must run to configure the appropriate Service
2243Principal Name (SPN) for the web site. What should you run? To answer, drag the appropriate objects to the correct location. Each object may be used once, more
2244than once, or not at all.
2245Select and Place:
2246http://www.gratisexam.com/
2247A.
2248B.
2249C.
2250D.
2251Correct Answer:
2252Section: (none)
2253Explanation
2254Explanation/Reference:
2255http://www.gratisexam.com/
2256QUESTION 146
2257Your network contains an Active Directory domain named contoso.com. You deploy a web-based application named App1 to a server named Server1. App1 uses
2258an application pool named AppPool1. AppPool1 uses a domain user account named User1 as its identity. You need to configure Kerberos constrained delegation
2259for User1. Which three actions should you perform? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in
2260the correct order
2261Select and Place:
2262http://www.gratisexam.com/
2263A.
2264B.
2265C.
2266D.
2267Correct Answer:
2268Section: (none)
2269Explanation
2270Explanation/Reference:
2271http://www.gratisexam.com/
2272QUESTION 147
2273Your network contains an Active Directory domain called contoso.com. The domain contains a domain controller named DC1 that runs Windows server 2012. The
2274domain contains some test client computers that run either Windows XP, Windows Vista, Windows 7, or Windows 8. The computer accounts for the test computers
2275are located in an organizational unit (OU) named OU1. You have a Group Policy object (GPO) named GPO1 linked to OU1. GPO1 is used to assign several
2276applications to the test computers. You need to ensure that when the test computers in OU1 restart, you can see which application installation is running currently.
2277Which setting should you modify in GPO1?
2278To answer, select the appropriate setting in the answer area.
2279Hot Area:
2280http://www.gratisexam.com/
2281A.
2282B.
2283C.
2284D.
2285Correct Answer:
2286Section: (none)
2287Explanation
2288Explanation/Reference:
2289QUESTION 148
2290Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. The domain contains 500 client
2291http://www.gratisexam.com/
2292computers that run Windows 8 Enterprise. You implement a Group Policy central store. You have an application named App1. App1 requires that a custom registry
2293setting be deployed to all of the computers. You need to deploy the custom registry setting. The solution must minimize administrator effort. What should you
2294configure in a Group Policy object (GPO)?
2295A. The Administrative Templates
2296B. An application control policy
2297C. The Group Policy preferences
2298D. Software installation setting
2299Correct Answer: C
2300Section: (none)
2301Explanation
2302Explanation/Reference:
2303QUESTION 149
2304Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012. You
2305create an Active Directory snapshot of DC1 each day. You need to view the contents of an Active Directory snapshot from two days ago. What should you do first?
2306A. Run the dsamain.exe command.
2307B. Stop the Active Directory Domain Services (AD DS) service.
2308C. Run the ntdsutil.exe command.
2309D. Start the Volume Shadow Copy Service (VSS).
2310Correct Answer: C
2311Section: (none)
2312Explanation
2313Explanation/Reference:
2314QUESTION 150
2315Your network contains an Active Directory domain named adatum.com. All domain controllers run Windows Server 2012. The domain contains a virtual machine
2316named DC2. On DC2, you run Get-ADDCCloningExcludedApplicationList and receive the output shown in the following table.
2317http://www.gratisexam.com/
2318You need to ensure that you can clone DC2. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
2319A. Create an empty file named CustomDCClonesAllowList.xml
2320B. Add the following information to the DCCloneConfigSchema.xsd <AllowList>
2321<Allow>
2322"Best Material, Great Results". www.certkingdom.com 153 70-411
2323<Name>App1</Name>
2324<Type>Service</Type>
2325</Allow>
2326</AllowList>
2327C. Create a filename DCCloneConfig.xml that contains the following information <AllowList>
2328<Allow>
2329<Name>App1</Name>
2330<Type>Service</Type>
2331</Allow>
2332</AllowList>
2333D. Create a filename CustomDCCloneAllowList.xml that contains the following information <AllowList>
2334<Allow>
2335<Name>App1</Name>
2336<Type>Service</Type>
2337</Allow>
2338</AllowList>
2339E. Create an empty file named DCCloneConfig.xml
2340Correct Answer: DE
2341Section: (none)
2342Explanation
2343Explanation/Reference:
2344QUESTION 151
2345Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 has the Web Server (IIS)
2346server role installed. On Server1, you install a managed service account named Service1. You attempt to configure the World Wide Web Publishing Service as
2347http://www.gratisexam.com/
2348shown in the exhibit.
2349You receive the following error message: "The account name is invalid or does not exist, or the password is invalid for the account name specified." You need to
2350ensure that the World Wide Web Publishing Service can log on by using the managed service account. What should you do?
2351A. Specify contoso\service1$ as the account name.
2352B. Specify service1@contoso.com as the account name.
2353C. Reset the password for the account.
2354D. Enter and confirm the password for the account.
2355http://www.gratisexam.com/
2356Correct Answer: A
2357Section: (none)
2358Explanation
2359Explanation/Reference:
2360QUESTION 152
2361Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. You pre-create a read-only domain
2362controller (P.QDC) account named RODC1. You export the settings of RODC1 to a file named File1.txt. You need to promote RODC1 by using File1.txt. Which tool
2363should you use?
2364A. The Dcpromo command
2365B. The Install-WindowsFeature cmdlet
2366C. The Install-ADDSDomainController cmdlet
2367D. The Add-WindowsFeature cmdlet
2368E. The Dism command
2369Correct Answer: A
2370Section: (none)
2371Explanation
2372Explanation/Reference:
2373QUESTION 153
2374Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2008 R2. The domain contains three servers
2375that run Windows Server 2012. The servers are configured as shown in the following table.
2376Server1 and Server2 are configured in a Network Load Balancing (NLB) cluster. The NLB cluster hosts a website named Web1 that uses an application pool named
2377http://www.gratisexam.com/
2378App1. Web1 uses a database named DB1 as its data store. You create an account named User1. You configure User1, as the identity of App1. You need to ensure
2379that contoso.com domain users accessing Web1 connect to DB1 by using their own credentials. Which two actions should you perform? (Each correct answer
2380presents part of the solution. Choose two.)
2381A. Configure the delegation settings of Server3.
2382B. Create a Service Principal Name (SPN) for User1.
2383C. Configure the delegation settings of User1.
2384D. Create a matching Service Principal Name (SPN) for Server1 and Server2.
2385E. Configure the delegation settings of Server1 and Server2.
2386Correct Answer: BE
2387Section: (none)
2388Explanation
2389Explanation/Reference:
2390QUESTION 154
2391Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2003, Windows Server 2008 R2, or
2392Windows Server 2012. A support technician accidentally deletes a user account named User1. You need to use tombstone reanimation to restore the User1
2393account. Which tool should you use?
2394A. Ntdsutil
2395B. Ldp
2396C. Esentutl
2397D. Active Directory Administrative Center
2398Correct Answer: B
2399Section: (none)
2400Explanation
2401Explanation/Reference:
2402QUESTION 155
2403Your network contains an Active Directory domain named contoso.com. The domain contains a
2404domain controller named DC4 that runs Windows Server 2012. You create a DCCloneConfig.xml file. You need to clone DC4. Where should you place
2405DCCloneConfig.xml on DC4?
2406http://www.gratisexam.com/
2407A. %Systemroot%\SYSVOL
2408B. %Programdata%\Microsoft
2409C. %Systemroot%\NTDS
2410D. %Systemdrive%
2411Correct Answer: C
2412Section: (none)
2413Explanation
2414Explanation/Reference:
2415QUESTION 156
2416Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. You run ntdsutil (as shown in the
2417exhibit).
2418You need to ensure that you can access the contents of the mounted snapshot. What should you do?
2419A. From a command prompt, run dsamain.exe -dbpath
2420c:\$snap_201204131056_volumec$\windows\ntds\ntds.dit - Idapport 33389.
2421B. From a command prompt, run dsamain.exe -dbpath
2422c:\$snap_201204131056_volumec$\windows\ntds\ntds.dit - Idapport 389.
2423C. From the snapshot context of ntdsutil, run activate instance "NTDS".
2424D. From the snapshot context of ntdsutil, run mount (79f94f82-5926-4f44-8af0-2f56d827a57d).
2425http://www.gratisexam.com/
2426Correct Answer: A
2427Section: (none)
2428Explanation
2429Explanation/Reference:
2430QUESTION 157
2431Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. On DC1, you add a new volume and
2432you stop the Active Directory Domain Services (AD DS) service. You run ntdsutil.exe and you set NTDS as the active instance. You need to move the Active
2433Directory database to the new volume. Which Ntdsutil context should you use?
2434A. Configurable Settings
2435B. Partition management
2436C. IFM
2437D. Files
2438Correct Answer: D
2439Section: (none)
2440Explanation
2441Explanation/Reference:
2442QUESTION 158
2443Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. On all of the domain controllers, Windows
2444is installed in C:\Windows and the Active Directory database is located in D:\Windows\NTDS\. All of the domain controllers have a third-party application installed.
2445The operating system fails to recognize that the application is compatible with domain controller cloning. You verify with the application vendor that the application
2446supports domain controller cloning. You need to prepare a domain controller for cloning. What should you do?
2447A. In D:\Windows\NTDS\, create an XML file named DCCloneConfig.xml and add the application information to the file.
2448B. In D:\Windows\NTDS\, create an XML file named CustomDCCloneAllowList.xml and add the application information to the file.
2449C. In the root of a USB flash drive, add the application information to an XML file named DefaultDCCloneAllowList.xml.
2450D. In D:\Windows\NTDS, create an XML file named DefaultDCCloneAllowList.xml and add the application information to the file.
2451Correct Answer: B
2452Section: (none)
2453Explanation
2454http://www.gratisexam.com/
2455Explanation/Reference:
2456QUESTION 159
2457You have a server named Server1 that has the Web Server (IIS) server role installed. You obtain a Web Server certificate. You need to configure a website on
2458Server1 to use Secure Sockets Layer (SSL). To which store should you import the certificate? Hot Area:
2459http://www.gratisexam.com/
2460http://www.gratisexam.com/
2461A.
2462B.
2463C.
2464D.
2465Correct Answer:
2466Section: (none)
2467Explanation
2468Explanation/Reference:
2469http://www.gratisexam.com/
2470http://www.gratisexam.com/
2471QUESTION 160
2472Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. On all of the domain controllers, Windows
2473is installed in C:\Windows and the Active Directory database is located in D:\Windows\NTDS\. All of the domain controllers have a third-party application installed.
2474The operating system fails to recognize that the application is compatible with domain controller cloning. You verify with the application vendor that the application
2475supports domain controller cloning. You need to prepare a domain controller for cloning. What should you do?
2476A. In the root of a USB flash drive, add the application information to an XML file named DefaultDCCloneAllowList.xml.
2477B. In C:\Windows\system32\sysprep\actionfiles\, add the application information to an XML file named Specialize .xml.
2478"Best Material, Great Results". www.certkingdom.com 160 70-411
2479C. In D:\Windows\NTDS\, create an XML file named CustomDCCloneAllowList.xml and add the application information to the file.
2480D. In C:\Windows\system32\sysprep\actionfiles\add the application information to an XML file named Respecialize .xml.
2481Correct Answer: C
2482Section: (none)
2483Explanation
2484Explanation/Reference:
2485QUESTION 161
2486Your network contains an Active Directory domain named contoso.com. You create a user account named User1. The properties of User1 are shown in the exhibit.
2487http://www.gratisexam.com/
2488You plan to use the User1 account as a service account. The service will forward authentication requests to other servers. You need to ensure that you can view the
2489Delegation tab from the properties of the User1 account. What should you do first?
2490A. Modify the Security settings of User1.
2491B. Modify the user principal name (UPN) of User1.
2492C. Configure a Service Principal Name (SPN) for User1.
2493D. Configure the Name Mappings of User1.
2494http://www.gratisexam.com/
2495Correct Answer: C
2496Section: (none)
2497Explanation
2498Explanation/Reference:
2499QUESTION 162
2500Your network contains an Active Directory domain named adatum.com. The domain contains a domain controller named DC1. On DC1, you create a new volume
2501named E. You restart DC1 in Directory Service Restore Mode. You open ntdsutil.exe and you set NTDS as the active instance. You need to move the Active
2502Directory logs to E:\NTDS\. Which Ntdsutil context should you use?
2503A. IFM
2504B. Configurable Settings
2505C. Partition management
2506D. Files
2507Correct Answer: D
2508Section: (none)
2509Explanation
2510Explanation/Reference:
2511QUESTION 163
2512Your network contains an Active Directory domain named contoso.com. The domain contains six domain controllers. The domain controllers are configured as
2513shown in the following table.
2514http://www.gratisexam.com/
2515The network contains a server named Server1 that has the Hyper-V server role installed. DC6 is a virtual machine that is hosted on Server1. You need to ensure
2516that you can clone DC6. Which FSMO role should you transfer to DC2?
2517A. Infrastructure Master
2518B. RID Master
2519C. Domain Naming Master
2520D. PDC emulator
2521Correct Answer: D
2522Section: (none)
2523Explanation
2524Explanation/Reference:
2525QUESTION 164
2526Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server
25272012 and has the Hyper-V server role installed. Server1 hosts 10 virtual machines. A virtual machine named VM1 runs Windows Server 2012 and hosts a
2528processor-intensive application names App1. Users report that App1 responds more slowly than expected. You need to monitor the processor usage on VM1 to
2529identify whether changes must be made to the hardware settings of VM1. Which performance object should you monitor on Server1?
2530A. Processor
2531B. Hyper-V Hypervisor Root Virtual Processor
2532http://www.gratisexam.com/
2533C. Hyper-V Hypervisor Logical Processor
2534D. Process
2535E. Hyper-V Hypervisor Virtual Processor
2536Correct Answer: E
2537Section: (none)
2538Explanation
2539Explanation/Reference:
2540QUESTION 165
2541The contoso.com domain contains 2 domain controllers running Server 2012, AD recycle bin is enabled for the domain. DC1 is configured to take AD snapshots
2542daily, DC2 is set to take snapshots weekly. Someone deletes a group containing 100 users, you need to recover this group. What should you do?
2543A. Authoritative Restore
2544B. Non Authoritative Restore
2545C. Tombstone Reanimation
2546D. Modify attribute isdeleted=true
2547Correct Answer: C
2548Section: (none)
2549Explanation
2550Explanation/Reference:
2551QUESTION 166
2552You have a RODC named Server1 running Server 2012. You need to add a RODC Administrator.
2553How do you complete the task?
2554A. dsmgmt.exe
2555B. ntdsutil
2556C. Add user to Local Administrator Group on Server1
2557D. Use Security Group and modify RODC Delegated Administrator
2558Correct Answer: D
2559Section: (none)
2560Explanation
2561http://www.gratisexam.com/
2562Explanation/Reference:
2563QUESTION 167
2564Your network contains an Active Directory domain named contoso.com. You need to create an AD Snapshot. Which four actions should you perform?
2565To answer, move the four appropriate actions from the list of actions to the answer area and arrange them in the correct order.
2566Select and Place:
2567http://www.gratisexam.com/
2568A.
2569B.
2570C.
2571D.
2572http://www.gratisexam.com/
2573Correct Answer:
2574Section: (none)
2575Explanation
2576Explanation/Reference:
2577QUESTION 168
2578Your network contains an Active Directory forest named contoso.com. All domain controllers run Windows Server 2008 R2. The schema is upgraded to Windows
2579Server 2012. Contoso.com contains two servers. The servers are configured as shown in the following table.
2580http://www.gratisexam.com/
2581Server 1 and Server2 host a load-balanced application pool named AppPool1. You need to ensure that AppPool1 uses a group Managed Service Account as its
2582identity. Which 3 actions should you perform?
2583Select and Place:
2584A.
2585B.
2586C.
2587D.
2588Correct Answer:
2589Section: (none)
2590Explanation
2591Explanation/Reference:
2592http://www.gratisexam.com/
2593QUESTION 169
2594Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012. The
2595domain contains two domain controllers. The domain controllers are configured as shown in the following table.
2596http://www.gratisexam.com/
2597Active Directory Recycle Bin is enabled. You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an
2598hour ago. What should you do?
2599A. Perform a non-authoritative restore.
2600B. Modify the Recycled attribute of Group1.
2601C. Perform an authoritative restore.
2602D. Recover the items by using Active Directory Recycle Bin.
2603Correct Answer: D
2604Section: (none)
2605Explanation
2606Explanation/Reference:
2607QUESTION 170
2608Your network contains an Active Directory domain named contoso.com. The domain contains a read-only domain controller (RODC) named RODC1. You create a
2609global group named RODC_Admins. You need to provide the members of RODC_Admins with the ability to manage the hardware and the software on RODC1.
2610The solution must not provide RODC_Admins with the ability to manage Active Directory objects. What should you do?
2611A. From Active Directory Users and Computers, configure the Managed By settings of the RODC1 account.
2612B. From Active Directory Sites and Services, run the Delegation of Control Wizard
2613http://www.gratisexam.com/
2614C. From Active Directory Users and Computers, run the Delegation of Control Wizard.
2615D. From a command prompt, run the dsadd computer command.
2616Correct Answer: A
2617Section: (none)
2618Explanation
2619Explanation/Reference:
2620QUESTION 171
2621Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. In a remote site, a support technician
2622installs a server named DC10 that runs Windows Server 2012. DC10 is currently a member of a workgroup. You plan to promote DC10 to a read-only domain
2623controller (RODC). You need to ensure that a user named Contoso/User1 can promote DC10 to a RODC in the contoso.com domain. The solution must minimize
2624the number of permissions assigned to User1. What should you do?
2625A. Join DC10 to the domain. Modify the properties of the DC10 computer account.
2626B. From Active Directory Administrative Center, pre-create an RODC computer account.
2627C. Join DC10 to the domain. Run dsmod and specify the /server switch.
2628D. From Active Directory Administrative Center, modify the security settings of the Domain Controllers organizational unit (OU).
2629Correct Answer: B
2630Section: (none)
2631Explanation
2632Explanation/Reference:
2633QUESTION 172
2634HOTSPOT
2635Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 and
2636are configured as DNS servers. All DNS zones are Active Directory-integrated. Active Directory Recycle Bin is enabled. You need to modify the amount of time
2637deleted objects are retained in the Active Directory Recycle Bin.
2638Which naming context should you use?
2639To answer, select the appropriate naming context in the answer area.
2640Hot Area:
2641http://www.gratisexam.com/
2642A.
2643B.
2644C.
2645http://www.gratisexam.com/
2646D.
2647Correct Answer:
2648Section: (none)
2649Explanation
2650Explanation/Reference:
2651http://www.gratisexam.com/
2652QUESTION 173
2653Your network contains an Active Directory domain named contoso.com. The domain contains six
2654domain controllers. The domain controllers are configured as shown in the following table.
2655http://www.gratisexam.com/
2656The network contains a server named Server1 that has the Hyper-V server role installed. DC6 is a virtual machine that is hosted on Server1. You need to ensure
2657that you can clone DC6. What should you do?
2658A. Transfer the schema master to DC6.
2659B. Transfer the schema master to DC4.
2660C. Transfer the PDC emulator to DC2.
2661D. Transfer the PDC emulator to DC5.
2662Correct Answer: C
2663Section: (none)
2664Explanation
2665Explanation/Reference:
2666QUESTION 174
2667Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2012. You need to create a custom Active Directory
2668application partition. Which tool should you use?
2669A. Dsadd
2670B. Dsmod
2671C. Netdom
2672D. Ntdsutil
2673http://www.gratisexam.com/
2674Correct Answer: D
2675Section: (none)
2676Explanation
2677Explanation/Reference:
2678QUESTION 175
2679Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. The domain contains two servers. The
2680servers are configured as shown in the following table.
2681Server1 and Server2 host a load-balanced website named Web1. Web1 runs by using an application pool named WebApp1. WebApp1 uses a group Managed
2682Service Account named gMSA1 as its identity. Domain users connect to Web1 by using either the name webl.contoso.com or the alias myweb.contoso.com. You
2683discover the following:
2684* When the users access Web1 by using webl.contoso.com, they authenticate by using Kerberos.
2685* When the users access Web1 by using myweb.contoso.com, they authenticate by using NTLM.
2686You need to ensure that the users can authenticate by using Kerberos when they connect by using myweb.contoso.com. What should you do?
2687A. Modify the properties of the WebApp1 application pool.
2688B. Run the Add-ADComputerServiceAccount cmdlet.
2689C. Modify the properties of the Web1 website.
2690D. Modify the properties of the gMSA1 service account.
2691Correct Answer: B
2692Section: (none)
2693Explanation
2694http://www.gratisexam.com/
2695Explanation/Reference:
2696QUESTION 176
2697Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server
26982012 and has the Hyper-V server role installed. Server1 hosts 10 virtual machines. A virtual machine named VM1 runs Windows Server 2012 and hosts a
2699processor-intensive application named Appl. Users report that App1 responds more slowly than expected. You need to monitor the processor usage on VM1 to
2700identify whether changes must be made to the hardware settings of VM1. Which performance object should you monitor on Server1?
2701A. Processor
2702B. Hyper-V Hypervisor Virtual Processor
2703C. Hyper-V Hypervisor Root Virtual Processor
2704D. Process
2705E. Hyper-V Hypervisor Logical Processor
2706Correct Answer: B
2707Section: (none)
2708Explanation
2709Explanation/Reference:
2710QUESTION 177
2711Your network contains an Active Directory domain named adatum.com. The domain contains 10
2712domain controllers that run Windows Server 2012.
2713You plan to create a new Active Directory-integrated zone named contoso.com. You need to ensure that the new zone will be replicated to only four of the domain
2714controllers.
2715What should you do first?
2716A. Create an Active Directory connection object.
2717B. Create an application directory partition.
2718C. Change the zone replication scope.
2719D. Create an Active Directory site link.
2720Correct Answer: B
2721Section: (none)
2722Explanation
2723Explanation/Reference:
2724http://www.gratisexam.com/
2725QUESTION 178
2726Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. You pre-create a read-only domain
2727controller (P.QDC) account named RODC1. You export the settings of RODC1 to a file named Filel.txt. You need to promote RODC1 by using Filel.txt. Which tool
2728should you use?
2729A. The Install-WindowsFeature cmdlet
2730B. The Add-WindowsFeature cmdlet
2731C. The Dism command
2732D. The Install-ADDSDomainController cmdlet
2733E. the Dcpromo command
2734Correct Answer: E
2735Section: (none)
2736Explanation
2737Explanation/Reference:
2738QUESTION 179
2739How to configure IIS to change the authentication (kerberos or ntlm) Solution:
2740cscript adsutil.vbs set w3svc/WebSite/root/NTAuthenticationProviders "Negotiate,NTLM"
2741A. True
2742B. False
2743Correct Answer: A
2744Section: (none)
2745Explanation
2746Explanation/Reference:
2747QUESTION 180
2748You need to enable three of your domain controllers as global catalog servers. Where would you configure the domain controllers as global catalogs?
2749A. Forest, NTDS settings
2750B. Domain, NTDS settings
2751http://www.gratisexam.com/
2752C. Site, NTDS settings
2753D. Server, NTDS settings
2754Correct Answer: D
2755Section: (none)
2756Explanation
2757Explanation/Reference:
2758QUESTION 181
2759You are the network administrator for your organization. Your company uses a Windows Server 2012 Enterprise certification authority to issue certificates. You
2760need to start using key archival.
2761What should you do?
2762A. Implement a distribution CRL.
2763B. Install the smart card key retrieval.
2764C. Implement a Group Policy object (GPO) that enables the Online Certificate Status Protocol (OCSP) responder.
2765D. Archive the private key on the server.
2766Correct Answer: D
2767Section: (none)
2768Explanation
2769Explanation/Reference:
2770QUESTION 182
2771Which parameter do you need to use to import GUID and MAC address?
2772A. /get-AutoAddDevices
2773B. /get-Device
2774C. /add
2775D. /enable
2776Correct Answer: B
2777Section: (none)
2778Explanation
2779http://www.gratisexam.com/
2780Explanation/Reference:
2781QUESTION 183
2782A computer does not support PXE, what kind of image do you need to create?
2783A. boot
2784B. install
2785C. discovery
2786D. capture
2787Correct Answer: C
2788Section: (none)
2789Explanation
2790Explanation/Reference:
2791QUESTION 184
2792Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. The domain contains two organizational
2793units (OUs) named OU1 and OU2 in the root of the domain. Two Group Policy objects (GPOs) named GPO1 and GPO2 are created. GPO1 is linked to OU1. GPO2
2794is linked to OU2. OU1 contains a client computer named Computer1. OU2 contains a user named User1. You need to ensure that the GPOs applied to Computer1
2795are applied to User1 when User1 logs on. What should you configure?
2796A. Item-level targeting
2797B. Group Policy loopback processing mode
2798C. the Enforced setting
2799D. Block Inheritance
2800Correct Answer: B
2801Section: (none)
2802Explanation
2803Explanation/Reference:
2804QUESTION 185
2805Your network contains a single Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server
28062012. Server1 has the Windows Server Updates Services server role installed and is configured to download updates from the Microsoft Update servers. You need
2807to ensure that Server1 only downloads Critical Updates from the Microsoft Update servers. What should you do from the Update Services console?
2808http://www.gratisexam.com/
2809A. From the Automatic Approvals options, configure the Update Rules settings.
2810B. From the Products and Classifications options, configure the Classifications settings.
2811C. From the Products and Classifications options, configure the Products settings.
2812D. From the Update Files and Languages options, configure the Update Files settings.
2813Correct Answer: B
2814Section: (none)
2815Explanation
2816Explanation/Reference:
2817QUESTION 186
2818Your network contains an Active Directory domain named contoso.com. The network contains a server named Server1 that runs Windows Server 2012. Server1
2819has the Network Policy and Access Services server role installed. You plan to deploy additional servers that have the Network Policy and Access Services server
2820role installed. You must standardize as many settings on the new servers as possible. You need to identify which settings can be standardized by using the Network
2821Policy Server (NPS) templates. Which three settings should you identify? (Each answer presents part of the solution. Choose three.)
2822A. IP filters
2823B. shared secrets
2824C. health policies
2825D. network policies
2826E. connection request policies
2827Correct Answer: ABC
2828Section: (none)
2829Explanation
2830Explanation/Reference:
2831QUESTION 187
2832From where can you enable NAT?
2833A. Routing and Remote Access ==> IPv4 ==> Create new Routing Protocol
2834B. Missing
2835C. Missing
2836http://www.gratisexam.com/
2837D. Missing
2838Correct Answer: A
2839Section: (none)
2840Explanation
2841Explanation/Reference:
2842QUESTION 188
2843You are the network administrator for a midsize computer company. You have a single Active Directory forest, and your DNS servers are configured as Active
2844Directory Integrated zones. When you look at the DNS records in Active Directory, you notice that there are many records for computers that do not exist on your
2845domain. You want to make sure only domain computers register with your DNS servers. What should you do to resolve this issue?
2846A. Set dynamic updates to None.
2847B. Set dynamic updates to Nonsecure And Secure.
2848C. Set dynamic updates to Domain Users Only.
2849D. Set dynamic updates to Secure Only.
2850Correct Answer: D
2851Section: (none)
2852Explanation
2853Explanation/Reference:
2854QUESTION 189
2855Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8. Group Policy objects (GPOs) are linked to the domain
2856as shown in the exhibit.
2857http://www.gratisexam.com/
2858GP02 contains computer configurations only and GP03 contains user configurations only. You need to configure the GPOs to meet the following requirements:
2859* Ensure that GP02 only applies to the computer accounts in OU2 that have more than one processor.
2860* Ensure that GP03 only applies to the user accounts in OU3 that are members of a security group named SecureUsers.
2861Which setting should you configure in each GPO?
2862To answer, drag the appropriate setting to the correct GPO. Each setting may be used once, more than once, or not at all. You may need to drag the split bar
2863between panes or scroll to view content.
2864Select and Place:
2865"Best Material, Great Results". www.certkingdom.com 181 70-411
2866http://www.gratisexam.com/
2867A.
2868B.
2869C.
2870D.
2871Correct Answer:
2872Section: (none)
2873Explanation
2874Explanation/Reference:
2875http://www.gratisexam.com/
2876QUESTION 190
2877Your network contains an Active Directory domain named adatum.com. You have a standard primary zone named adatum.com. You need to provide a user named
2878User1 the ability to modify records in the zone. Other users must be prevented from modifying records in the zone. What should you do first?
2879A. From the properties of the zone, modify the start of authority (SOA) record.
2880B. Run the Zone Signing Wizard for the zone.
2881C. Run the New Delegation Wizard for the zone.
2882D. From the properties of the zone, change the zone type.
2883Correct Answer: D
2884Section: (none)
2885Explanation
2886Explanation/Reference:
2887QUESTION 191
2888You have a server named Server1 that runs Windows Server 2012. Server1 has 2 dual-core processors and 16 GB of RAM. You install the Hyper-V server role in
2889Server1. You plan to create two virtual machines on Server1. You need to ensure that both virtual machines can use up to 8 GB of memory. The solution must
2890ensure that both virtual machines can be started
2891simultaneously. What should you configure on each virtual machine?
2892A. Dynamic Memory
2893B. NUMA topology
2894C. Memory weight
2895D. Resource Control
2896Correct Answer: A
2897Section: (none)
2898Explanation
2899Explanation/Reference:
2900QUESTION 192
2901You have a server named Server1 that runs Windows Server 2012. You promote Server1 to domain controller. You need to view the service location (SVR) records
2902that Server1 registers on DNS. What should you do on Server1?
2903http://www.gratisexam.com/
2904A. Open the Srv.sys file
2905B. Open the Netlogon.dns file
2906C. Run ipconfig/displaydns
2907D. Run Get-DnsServerDiagnostics
2908Correct Answer: B
2909Section: (none)
2910Explanation
2911Explanation/Reference:
2912QUESTION 193
2913Your company has a remote office that contains 600 client computers on a single subnet. You need to select a subnet mask for the network that will support all of
2914the client computers. The solution must minimize the number of unused addresses. Which subnet mask should you select?
2915A. 255.255.252.0
2916B. 255.255.254.0
2917C. 255.255.255.0
2918D. 255.255.255.128
2919Correct Answer: A
2920Section: (none)
2921Explanation
2922Explanation/Reference:
2923QUESTION 194
2924Your network contains an Active Directory domain named corp.contoso.com. The domain contains a domain controller named DC1. When you run ping
2925dcl.corp.contoso.com, you receive the result as shown in the exhibit.
2926http://www.gratisexam.com/
2927You need to ensure that DC1 can respond to the Ping command. Which rule should you modify? To answer, select the appropriate rule in the answer area.
2928Hot Area:
2929http://www.gratisexam.com/
2930A.
2931B.
2932C.
2933D.
2934Correct Answer:
2935Section: (none)
2936Explanation
2937Explanation/Reference:
2938http://www.gratisexam.com/
2939QUESTION 195
2940Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Admin1 and Server2. Both servers run Windows
2941Server 2012. Both servers have the File and Storage Services server role, the DFS Namespaces role service, and the DFS Replication role service installed.
2942Admin1 and Server2 are part of a Distributed File System (DFS) Replication group named Group1. Admin1 and Server2 are separated by a low-speed WAN
2943connection. You need to limit the amount of bandwidth that DFS can use to replicate between Admin1 and Server2. What should you modify?
2944A. The cache duration of the namespace
2945B. The staging quota of the replicated folder
2946C. The referral ordering of the namespace
2947D. The schedule of the replication group
2948Correct Answer: D
2949Section: (none)
2950Explanation
2951Explanation/Reference:
2952http://www.gratisexam.com/
2953QUESTION 196
2954Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. One of the domain controllers is named
2955DC1. The DNS zone for the contoso.com zone is Active Directory-integrated and has the default settings. A server named Server1 is a DNS server that runs a
2956UNIX-based operating system. You plan to use Server1 as a secondary DNS server for the contoso.com zone. You need to ensure that Server1 can host a
2957secondary copy of the contoso.com zone. What should you do?
2958A. From Windows PowerShell, run the Set-DnsServerForwarder cmdlet and specify the contoso.com zone as a target.
2959B. From Windows PowerShell, run the Set-DnsServerSetting cmdlet and specify DC1 as a target.
2960C. From Windows PowerShell, run the Set-DnsServerPrimaryZone cmdlet and specify the contoso.com zone as a target.
2961D. From DNS Manager, modify the Advanced settings of DC1.
2962Correct Answer: C
2963Section: (none)
2964Explanation
2965Explanation/Reference:
2966QUESTION 197
2967Your network contains two Active Directory domains named contoso.com and adatum.com. The contoso.com domain contains a server named
2968Server1.contoso.com. The adatum.com domain contains a server named server2.adatum.com. Server1 and Server2 run Windows Server 2012 and have the
2969DirectAccess and VPN (RRAS) role service installed. Server1 has the default network policies and the default connection request policies. You need to configure
2970Server1 to perform authentication and authorization of VPN connection requests to Server2. Only users who are members of Adatum\Group1 must be allowed to
2971connect. Which two actions should you perform on Server1? (Each correct answer presents part of the solution. Choose two.)
2972A. Network policies
2973B. Connection request policies
2974C. Create a network policy.
2975D. Create a connection request policy.
2976Correct Answer: AD
2977Section: (none)
2978Explanation
2979Explanation/Reference:
2980QUESTION 198
2981You are a network administrator of an Active Directory domain named contoso.com. You have a server named Server1 that runs Windows Server 2012. Server1
2982has the DHCP Server server role and the Network Policy Server role service installed. You enable Network Access Protection (NAP) on all of the DHCP scopes on
2983http://www.gratisexam.com/
2984Server1. You need to create a DHCP policy that will apply to all of the NAP non-compliant DHCP clients. Which criteria should you specify when you create the
2985DHCP policy?
2986A. The relay agent information
2987B. The user class
2988C. The vendor class
2989D. The client identifier
2990Correct Answer: B
2991Section: (none)
2992Explanation
2993Explanation/Reference:
2994QUESTION 199
2995Your network contains an Active Directory domain named contoso.com. The domain contains a server named Print1. Your company implements DirectAccess. A
2996user named User1 frequently works at a customer's office. The customer's office contains a print server named Print1. While working at the customer's office,
2997User1 attempts to connect to Print1. User1 connects to the Print1 server in contoso.com instead of the Print1 server at the customer's office. You need to provide
2998User1 with the ability to connect to the Print1 server in the customer's office. Which Group Policy option should you configure?
2999To answer, select the appropriate option in the answer area.
3000Hot Area:
3001http://www.gratisexam.com/
3002A.
3003B.
3004http://www.gratisexam.com/
3005C.
3006D.
3007Correct Answer:
3008Section: (none)
3009Explanation
3010Explanation/Reference:
3011http://www.gratisexam.com/
3012QUESTION 200
3013Your network contains an Active Directory domain named contoso.com. You need to create a
3014http://www.gratisexam.com/
3015certificate template for the BitLocker Drive Encryption (BitLocker) Network Unlock feature. Which Cryptography setting of the certificate template should you
3016modify? To answer, select the appropriate setting in the answer area.
3017Solution:
3018Cryptographic provider that supports RSA (Microsoft Software Key Storage Provider)
3019A. True
3020B. False
3021Correct Answer: A
3022Section: (none)
3023Explanation
3024Explanation/Reference:
3025QUESTION 201
3026Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012. The
3027domain contains two domain controllers. The domain controllers are configured as shown in the following table.
3028You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago. You need to restore the
3029membership of Group1. What should you do?
3030http://www.gratisexam.com/
3031A. Apply a virtual machine snapshot to VM1.
3032B. Perform an authoritative restore.
3033C. Perform a non-authoritative restore.
3034D. Perform tombstone reanimation.
3035Correct Answer: B
3036Section: (none)
3037Explanation
3038Explanation/Reference:
3039QUESTION 202
3040Your network contains an Active Directory domain named contoso.com. The domain contains a read-only domain controller (RODC) named RODC1. You create a
3041global group named RODC_Admins. You need to provide the members of RODC_Admins with the ability to manage the hardware and the software on RODC1.
3042The solution must not provide RODC_Admins with the ability to manage Active Directory objects. What should you do?
3043A. From Active Directory Site and Services, configure the Security settings of the RODC1 server object.
3044B. From Active Directory Sites and Services, run the Delegation of Control Wizard.
3045C. From Windows PowerShell, run the Set-ADAccountControl cmdlet.
3046D. From Active Directory Users and Computers, configure the Managed By settings of the RODC1 account.
3047Correct Answer: D
3048Section: (none)
3049Explanation
3050Explanation/Reference:
3051QUESTION 203
3052Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and childl.contoso.com. All domain
3053controllers run Windows Server 2012. The domain contains four domain controllers. The domain controllers are configured as shown in the following table.
3054http://www.gratisexam.com/
3055You open Active Directory Users and Computers on a client computer and connect to DC1. You display the members of a group named Group1 as shown in the
3056Group1 Members exhibit.
3057http://www.gratisexam.com/
3058http://www.gratisexam.com/
3059When you view the properties of a user named User102, you receive the error message shown in the Error exhibit.
3060The error message does not display for any other members of Group1. You need to identify which domain controller causes the issue shown in the error message.
3061Which domain controller should you identify?
3062A. DC1
3063B. DC2
3064C. DC10
3065D. DC11
3066Correct Answer: B
3067Section: (none)
3068Explanation
3069Explanation/Reference:
3070QUESTION 204
3071Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012. The domain contains a file server named Server1.
3072All client computers run Windows
30738. Users share the client computers and frequently log on to different client computers. You need to ensure that when the users save files in the Documents folder,
3074the files are saved automatically to \\Server1\Users\. The solution must minimize the amount of network traffic that occurs when the users log on to the client
3075computers. What should you do?
3076http://www.gratisexam.com/
3077A. From a Group Policy object (GPO), configure the Folder Redirection settings.
3078B. From the properties of each user account, configure the Home folder settings.
3079C. From the properties of each user account, configure the User profile settings.
3080D. From a Group Policy object (GPO), configure the Drive Maps preference.
3081Correct Answer: A
3082Section: (none)
3083Explanation
3084Explanation/Reference:
3085QUESTION 205
3086HOTSPOT
3087You have a server named Server1 that runs Windows Server 2012. Server1 has two network adapters and is located in a perimeter network. You need to configure
3088Server1 as a network address translation (NAT) server. Which node should you use to add the NAT routing protocol? To answer, select the appropriate node in the
3089answer area.
3090Hot Area:
3091http://www.gratisexam.com/
3092A.
3093B.
3094C.
3095D.
3096Correct Answer:
3097Section: (none)
3098Explanation
3099Explanation/Reference:
3100http://www.gratisexam.com/
3101QUESTION 206
3102HOTSPOT
3103You have a server named Server5 that runs Windows Server 2012. Servers has the Windows Deployment Services server role installed. You need to ensure that
3104when client computers connect to Server5 by using PXE, the computers use an unattended file. What should you configure? To answer, select the appropriate tab
3105in the answer area.
3106Hot Area:
3107http://www.gratisexam.com/
3108A.
3109B.
3110http://www.gratisexam.com/
3111C.
3112D.
3113Correct Answer:
3114Section: (none)
3115Explanation
3116Explanation/Reference:
3117http://www.gratisexam.com/
3118QUESTION 207
3119Your network contains a server named Server1 that has the Network Policy and Access Services server role installed. All of the network access servers' forward
3120connection requests to Server1. You create a new network policy on Server1. You need to ensure that the new policy applies only to connection requests from
3121http://www.gratisexam.com/
3122Microsoft RAS servers that are located on the 192.168.0.0/24 subnet. Which two configurations should you performing? (Each correct answer presents part of the
3123solution. Choose two.)
31241. Set the MS-RAS Vendor ID condition to $teelHead.
31252. Set the Called Station ID constraint to 192.168.0.
31263. Set the Client IP4 Address condition to 192.168.0.0/24.
31274. Set the MS-RAS Vendor ID condition to ^311$.
31285. Set the Called Station ID constraint to 192.168.0.0/24.
31296. Set the Client IP4 Address condition to 192.168.0.
3130A.
3131B.
3132C.
3133D.
3134Correct Answer:
3135Section: (none)
3136Explanation
3137Explanation/Reference:
3138QUESTION 208
3139Your network contains an Active Directory domain named contoso.com. The domain contains a server
3140named Server1. Server1 is configured as a VPN server. You need to configure Server1 to perform network address translation (NAT). What should you do?
31411. From Network Connections, modify the Internet Protocol Version 6 (TCP/IPv6) setting of each network adapter.
31422. From Routing and Remote Access, add an IPv4 routing protocol.
31433. From Routing and Remote Access, add an IPv6 routing protocol.
31444. From Network Connections, modify the Internet Protocol Version 4 (TCP/IPv4) setting of each network adapter.
3145A.
3146B.
3147C.
3148D.
3149Correct Answer:
3150Section: (none)
3151Explanation
3152http://www.gratisexam.com/
3153Explanation/Reference:
3154QUESTION 209
3155Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that has the Remote Access server role
3156installed. DirectAccess is implemented on Server1 by using the default configuration. You discover that DirectAccess clients do not use DirectAccess when
3157accessing websites on the Internet. You need to ensure that DirectAccess clients access all Internet websites by using their DirectAccess connection. What should
3158you do?
31591. Disable the DirectAccess Passive Mode policy setting in the DirectAccess Client Settings Group Policy object (GPO).
31602. Configure a DNS suffix search list on the DirectAccess clients.
31613. Enable the Route all traffic through the internal network policy setting in the DirectAccess Server Settings Group Policy object (GPO).
31624. Configure DirectAccess to enable force tunneling.
3163A.
3164B.
3165C.
3166D.
3167Correct Answer:
3168Section: (none)
3169Explanation
3170Explanation/Reference:
3171QUESTION 210
3172You have a DNS server named Server1 that runs Windows Server 2012. On Server1, you create a DNS zone named contoso.com. You need to specify the email
3173address of the person responsible for the zone. Which type of DNS record should you configure?
31741. Start of authority (SOA)
31752. Mail exchanger (MX)
31763. Host information (HINFO)
31774. Mailbox (MB)
3178A.
3179B.
3180C.
3181D.
3182http://www.gratisexam.com/
3183Correct Answer:
3184Section: (none)
3185Explanation
3186Explanation/Reference:
3187QUESTION 211
3188You have a server named Server1 that runs Windows Server 2012. You discover that the performance of Server1 is poor. The results of a performance report
3189generated on Server1 are shown in the following table.
3190&nbs
3191p;
3192You need to identify the cause of the performance issue. What should you identify?
3193http://www.gratisexam.com/
31941. Excessive paging
31952. NUMA fragmentation
31963. Driver malfunction
31974. Insufficient RAM
3198A.
3199B.
3200C.
3201D.
3202Correct Answer:
3203Section: (none)
3204Explanation
3205Explanation/Reference:
3206QUESTION 212
3207Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012. An organizational unit (OU) named ResearchServers
3208contains the computer accounts of all research servers. All domain users are configured to have a minimum password length of eight characters. You need to
3209ensure that the minimum password length of the local user accounts on the research servers in the ResearchServers OU is 10 characters. What should you do?
32101. Create a universal group that contains the research servers. Create a Password Settings object (PSO) and assign the PSO to the group.
32112. Configure a local Group Policy object (GPO) on each research server.
32123. Create and link a Group Policy object (GPO) to the ResearchServers OU.
32134. Create a global group that contains the research servers. Create a Password Settings object (PSO) and assign the PSO to the group.
3214A.
3215B.
3216C.
3217D.
3218Correct Answer:
3219Section: (none)
3220Explanation
3221Explanation/Reference:
3222QUESTION 213
3223http://www.gratisexam.com/
3224Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012.
3225The domain contains an Edge Server named Server1. Server1 is configured as a DirectAccess server.
3226Server1 has the following settings:
3227Internal DNS name: Server1.contoso.com
3228External DNS name: dal.contoso.com
3229Internal IPv6 address: 2002:c1a8:6a:3333::1
3230External IPv4 address: 65.55.37.62
3231Your company uses split-brain DNS for the contoso.com zone. You run the Remote Access Setup wizard as shown in the following exhibit.
3232You need to ensure that client computers on the Internet can establish DirectAccess connections to Server1. Which additional name suffix entry should you add
3233from the Remote Access Setup wizard?
32341. A Name Suffix value of dal.contoso.com and a blank DNS Server Address value
32352. A Name Suffix value of Server1.contoso.com and a DNS Server Address value of 65.55.37.62
32363. A Name Suffix value of Server1.contoso.com and a blank DNS Server Address value
32374. A Name Suffix value of dal.contoso.com and a DNS Server Address value of 65.55.37.62
3238A.
3239http://www.gratisexam.com/
3240B.
3241C.
3242D.
3243Correct Answer:
3244Section: (none)
3245Explanation
3246Explanation/Reference:
3247QUESTION 214
3248Your network contains an Active Directory domain named contoso.com. All servers run Windows
3249Server 2012. Client computers run either Windows 7 or Windows 8. All of the client computers have an application named App1 installed. The domain contains a
3250Group Policy object (GPO) named GPO1 that is applied to all of the client computers. You need to add a system variable named App1Data to all of the client
3251computers. Which Group Policy preference should you configure?
32521. Services
32532. Ini Files
32543. Environment
32554. Data Sources
3256A.
3257B.
3258C.
3259D.
3260Correct Answer:
3261Section: (none)
3262Explanation
3263Explanation/Reference:
3264QUESTION 215
3265Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The forest contains two Active Directory sites named
3266Site1 and Site2. You plan to deploy a read-only domain controller (RODC) named DC10 to Site2. You pre-create the DC10 domain controller account by using
3267Active Directory Users and Computers. You need to identify which domain controller will be used for initial replication during the promotion of the RODC. Which tab
3268should you use to identify the domain controller?
3269To answer, select the appropriate tab in the answer area.
3270http://www.gratisexam.com/
3271Hot Area:
3272http://www.gratisexam.com/
3273http://www.gratisexam.com/
3274A.
3275B.
3276C.
3277D.
3278Correct Answer:
3279Section: (none)
3280Explanation
3281Explanation/Reference:
3282http://www.gratisexam.com/
3283http://www.gratisexam.com/
3284QUESTION 216
3285Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1
3286has the following role services installed:
3287DirectAccess and VPN (RRAS)
3288Network Policy Server
3289Remote users have client computers that run either Windows XP, Windows 7, or Windows 8. You need to ensure that only the client computers that run Windows 7
3290or Windows 8 can establish VPN connections to Server1. What should you configure on Server1?
32911. A vendor-specific RADIUS attribute of a Network Policy Server (NPS) connection request policy
32922. A condition of a Network Policy Server (NPS) network policy
32933. A condition of a Network Policy Server (NPS) connection request policy
32944. A constraint of a Network Policy Server (NPS) network policy
3295A.
3296B.
3297C.
3298D.
3299Correct Answer:
3300Section: (none)
3301Explanation
3302Explanation/Reference:
3303QUESTION 217
3304You manage a server that runs Windows Server 2012. The server has the Windows Deployment Services server role installed. You start a virtual machine named
3305VM1 as shown in the exhibit.
3306http://www.gratisexam.com/
3307You need to configure a pre-staged device for VM1 in the Windows Deployment Services console. Which two values should you assign to the device ID? (Each
3308correct answer presents a complete solution. Choose two.)
33091. 979708BFC04B45259FE0C4150BB6C618
33102. 979708BF-C04B-4525-9FE0-C4150BB6C618
33113. 00155D000F1300000000000000000000
33124. 0000000000000000000000155D000F13
33135. 00000000-0000-0000-0000-C4150BB6C618
3314A.
3315B.
3316C.
3317D.
3318Correct Answer:
3319Section: (none)
3320Explanation
3321http://www.gratisexam.com/
3322Explanation/Reference:
3323QUESTION 218
3324Your company has a main office and a branch office. The network contains an Active Directory domain named contoso.com. The main office contains a domain
3325controller named DC1 that runs Windows Server 2012. DC1 is a DNS server and hosts a primary zone for contoso.com. The branch office contains a member
3326server named Server1 that runs Windows Server 2012. Server1 is a DNS server and hosts a secondary zone for contoso.com. The main office connects to the
3327branch office by using an unreliable WAN link. You need to ensure that Server1 can resolve names in contoso.com if the WAN link in unavailable for three days.
3328Which setting should you modify in the start of authority (SOA)
3329record?
33301. Retry interval
33312. Minimum (default) TTL
33323. Refresh interval
33334. Expires after
3334A.
3335B.
3336C.
3337D.
3338Correct Answer:
3339Section: (none)
3340Explanation
3341Explanation/Reference:
3342QUESTION 219
3343Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012. The functional level of both the domain and the
3344forest is Windows Server 2008 R2. The domain contains a domain-based Distributed File System (DFS) namespace that is configured as shown in the exhibit.
3345http://www.gratisexam.com/
3346You need to enable access-based enumeration on the DFS namespace. What should you do first?
33471. Install the File Server Resource Manager role service on Server3 and Server5.
33482. Raise the domain functional level.
33493. Delete and recreate the namespace.
33504. Raise the forest functional level.
3351A.
3352B.
3353C.
3354D.
3355Correct Answer:
3356Section: (none)
3357Explanation
3358Explanation/Reference:
3359QUESTION 220
3360HOTSPOT
3361You have a server named Server1 that runs Windows Server 2012. Server1 has two network adapters and is located in a perimeter network. You need to install the
3362RIP version 2 routing protocol on Server1. Which node should you use to add the RIP version 2 routing protocol? To answer, select the appropriate node in the
3363http://www.gratisexam.com/
3364answer area.
3365Hot Area:
3366A.
3367B.
3368C.
3369D.
3370Correct Answer:
3371Section: (none)
3372Explanation
3373http://www.gratisexam.com/
3374Explanation/Reference:
3375QUESTION 221
3376HOTSPOT
3377Your network contains an Active Directory domain named contoso.com. All DNS servers host a DNS zone named adatum.com. The adatum.com zone is not Active
3378Directory-integrated. An administrator modifies the start of authority (SOA) record for the adatum.com zone. After the modification, y ou discover that when you add
3379or modify DNS records in the adatum.com zone, the changes are not transferred to the DNS servers that host secondary copies of the adatum.com zone. You need
3380to ensure that the records are transferred to all the copies of the adatum.com zone. What should you modify in the SOA record for the adatum.com zone?
3381To answer, select the appropriate setting in the answer area.
3382Hot Area:
3383http://www.gratisexam.com/
3384http://www.gratisexam.com/
3385http://www.gratisexam.com/
3386A.
3387B.
3388C.
3389D.
3390Correct Answer:
3391Section: (none)
3392Explanation
3393Explanation/Reference:
3394http://www.gratisexam.com/
3395http://www.gratisexam.com/
3396http://www.gratisexam.com/