70-411

Microsoft 70-411

Administering Windows Server 2012Version: 30.0

QUESTION NO: 1 You work as the network administrator for a Microsoft Windows Server 2008 domain namedABC.com. ABC.com has a Development division which utilizes two organizational units (OU)named DevelopUsers and DevelopComputers for user and computer account storage. TheDevelopment division user and computer accounts are configured as members of global securitygroups named DevUsers and DevComputers. During the course of the week you configure two Password Settings objects for Developmentdivision members named CredSettings01 and CredSettings02. You additionally configure aminimum password length of 10 for CredSettings01 and 9 for CredSettings02. ABC.com wantsyou to determine the required password length minimum for Development division users. What minimum password length should be configured for CredSettings01 applied to DevUsers? A. You should configure the minimum password length to 9. B. You should configure the minimum password length to 10. C. You should configure the minimum password length to 5. D. You should configure the minimum password length to 4.

Answer: B

Explanation:

QUESTION NO: 2 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts the File Server ResourceManager role service. A pre-configured quota threshold has been configured to send an emailalert when 80% of the quota has been used. During the course of the week ABC.com instructs you to configure e-mail notification to youraccount to occur in event of the threshold being exceeded. Which action ensures e-mail notification would be utilized? A. You should consider creation of a Data Collector Set (DCS). B. You should consider configuring Windows Resource Monitor. C. You should consider configuring File Server Resource Manager Options. D. You should consider creating a quota template.

Answer: C

Explanation:

Microsoft 70-411 Exam

"Pass Any Exam. Any Time." - www.actualtests.com 2

QUESTION NO: 3 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes an organizational unit (OU) named FileServ for housing all File Servercomputer accounts in the domain. You need to be able to track access files on the File servers. Which of the following actions should you consider? A. You should consider configuring the Account Logon auditing category. B. You should consider configuring the Object Access auditing category. C. You should consider configuring the Global Object Access Auditing category. D. You should consider configuring the Directory Service Access auditing category.

Answer: B

Explanation:

QUESTION NO: 4 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts the DNS service and FileServer Resource Manager role service. ABC.com Development division members utilize a folder named DevShare for storage purposes.You are required to configure a notification solution that is triggered by Development divisionmembers saving image and word documents to DevShare. Which of the actions ensure the notification solution utilizes e-mail? During the course of the day you receive instruction to configure e-mail notification if Developmentdivision members save image files to DevShare. Which of the following should be configured on ABC-DC01? A. You should consider configuring a file group. B. You should consider configuring a file screen template. C. You should consider configuring Quota Management.



D. You should consider configuring File Management Tasks.

Answer: A

Explanation:

QUESTION NO: 5 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com domain controllers run Microsoft Windows Server 2012 and client computersrun Microsoft Windows 8. Hard disk information is secured using BitLocker Drive Encryption (Bitlocker). ABC.com wants asolution implemented using the minimum server features and roles to support the Network Unlockfeature. Which of the following servers hould be utilized for the feature? A. A Domain Controller B. A DHCP server C. A DNS Server D. A Windows Deployment Server E. An Application Server F. A Web Server G. A File and Print Server H. A Windows Server Update Services server

Answer: D

Explanation:

QUESTION NO: 6 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes two computer named ABC-DC01 and ABC-DC02. ABC-DC01 hostthe DHCP, DFS Namespace and DFS replication roles and ABC-DC02 hosts the NPS, DNS, DFSNamespace and DFS Replication roles. ABC-DC01 and ABC-DC02 are members of a DFS Replication group KingReplica. You arerequired to reduce network bandwidth utilized by the replication process. Which of the actions would decrease utilized bandwidth over a low-speed WAN connection?



A. You should consider modifying the Quota Size of Staging Folder and Conflict and DeletedFolder. B. You should consider modifying the schedule for the replication group. C. You should consider modifying the replication filters. D. You should consider modifying the replication topology.

Answer: B

Explanation:

QUESTION NO: 7 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes several administrative templates via Group Policy. You must provide a solution for reviewing active and inactive Group Policy settings containingcomments. Which action can be utilized to filter out of scope Group Policy Objects to view only settings to beremoved from registry? (Choose all that apply) A. You should configure the Configured Filter Options to No. B. You should configure the Commented Filter Options to No. C. You should configure the Managed Filter Options to Yes. D. You should configure the Commented Filter Options to Yes. E. You should configure the Configured Filter Options to Any. F. You should configure the Managed Filter Options to Any.

Answer: C,D,E

Explanation:

QUESTION NO: 8 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com makes use of Windows Power Shell scripts for configuring settings fornetwork users at log on. During the course of the day you notice several scripts are not finished running by the timenetworkusersstart utilizing the desktop. ABC.com wants you to make sure the scripts are finished runningby the time network users start utilizing the desktop. What action should you take?



A. You should consider configuring the Run logon scripts asynchronously policy setting. B. You should consider configuring the Run logon scripts synchronously policy setting. C. You should consider configuring the Run Windows PowerShell scripts first at user logon, logoffsetting. D. You should consider configuring the Run startup scripts asynchronously policy setting.

Answer: B

Explanation:

QUESTION NO: 9 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts the DHCP, DNS and WebServer roles. You receive an error message when configuring the World Wide Web Publishing Service to utilizea managed service account named KingWeb stating “The account name is invalid or does notexist, or the password is invalid for the account name specified.” You are required to ensure theWorld Wide Web Publishing Service utilize the KingWeb managed service account. Which action should be taken? A. You should consider having the user change password at next logon. B. You should consider utilizing [email protected] as an account name. C. You should consider utilizing ABC.com\KingWeb$ as the account name. D. You should consider resetting and changing the account password.

Answer: C

Explanation:

QUESTION NO: 10 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes several Password Settings objects (PSOs) which are deployed usingGroup Policy. You are required to review the settings of a Password Settings Object (PSO) named KingPassbefore deployment of the object. Which action should be taken to view the Password Settings Object (PSO) settings?



A. You should consider utilizing the Resultant Set Of Policy (RSoP). B. You should consider utilizing Group Policy Results Management. C. You should consider utilizing Group Policy Management. D. You should consider utilizing the Microsoft Management Console Active Directory snap-ins.

Answer: C

Explanation:

QUESTION NO: 11 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts DNS, NPS and ActiveDirectory Domain Services (AD DS). You are required to relocate the Active Directory database to a volume containing enoughavailable storage capacity. Which action should be taken to move the Active Directory database? A. You should stop the Active Directory Domain Services (AD DS) service and utilize theNtdsutil.exe utility with the DS behavior context. B. You should stop the Active Directory Domain Services (AD DS) service and utilize theNtdsutil.exe utility with the Files context. C. You should stop the Active Directory Domain Services (AD DS) service and utilize theNtdsutil.exe utility with the local roles context. D. You should stop the Active Directory Domain Services (AD DS) service and utilize theNtdsutil.exe utility with the partition management context.

Answer: B

Explanation:

QUESTION NO: 12 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes three computers named ABC-DC01, ABC-DC02 and ABC-DC03.ABC-DC01 hosts the Web Server and DHCP roles and ABC-DC02 hosts the Web Server andDNS roles and the Microsoft SQL Server service installed on ABC-DC03. The network users access the application pool KingApp to access a Web site named TestWeb.The TestWeb application uses a database as a data store. You are required to create an accountnamed ABCApplication for the TestWeb identity whilst ensuring users are required to provide their



individual credentials. What action should be taken? A. You should consider utilizing separate Service Principal Name (SPN) with a delegation settingfor ABC-DC03. B. You should consider creating a delegation setting for ABC-DC03 and ABC-DC02 with matchingService Principal Name (SPN). C. You should consider creating a Service Principal Name (SPN) for ABC-DC03 with delegationsettings for ABC-DC01. D. You should consider creating a Service Principal Name (SPN) for ABCApplication withdelegation settings for ABC-DC01 and ABC-DC02.

Answer: D

Explanation:

QUESTION NO: 13 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com servers run Microsoft Windows Server 2012 and client computers runMicrosoft Windows 8. You have been charged with restoration of a deleted user account named KingEmployee usingtombstone reanimation. Which action should be taken to restore the KingEmployee user account? A. You should consider utilization of Windows Backup. B. You should consider utilizing System Restore to restore the computer to a state with the useraccount. C. You should consider utilization of the Advanced Startup options Directory Services RestoreMode. D. You should consider utilization of the Ldp utility.

Answer: D

Explanation:

QUESTION NO: 14 You work as the network administrator for a Microsoft Windows Server 2008 domain namedABC.com. ABC.com has a Financial division which utilizes two organizational units (OU) namedFinUsers and FinComputers for user and computer account storage. The Development division



user and computer accounts are configured as members of global security groups namedDevUsers and DevComputers. You configure two Password Settings objects for Financial division members named Credential01and Credential02. You additionally configure a minimum password length of 4 for CredSettings01and 7 for CredSettings02. ABC.com wants you to determine the required password lengthminimum for Development division users. What minimum password length should be configured for CredSettings02 applied to FinUsers? A. You should configure the minimum password length to 9. B. You should configure the minimum password length to 10. C. You should configure the minimum password length to 7. D. You should configure the minimum password length to 4.

Answer: C

Explanation:

QUESTION NO: 15 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-SR01 which hosts the Web Server, DNS andDHCP services. You create a snapshot backup of ABC-SR01 utilizing the Ntdsutil utility. You are required toprovide access to the information of the snapshot backup. Which action should be taken? A. You should consider utilization of the Dsamain.exe utility with the /adlds parameter. B. You should consider utilization of the Dsamain.exe utility with the /allowupgradeparameter. C. You should consider utilizing the Dsamain.exe /dbpath command from the command prompt. D. You should consider utilization of the Dsamain.exe utility with the /logpathparameter.

Answer: C

Explanation:

QUESTION NO: 16 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named



ABC.com. ABC.com utilizes a computer named ABC-DC01 for running several administrativetasks. ABC.com wants you to create a process for recording registration entries and executing a specificapplication if free space drops below 8 percent. You start configuring a Data Collector Set (DCS)named KingTrace. What additional action should be taken? A. You should consider configuring the KingTrace data collector set for Event trace data and aPerformance Counter Alert. B. You should consider configuring the KingTrace data collector set for a Performance Counterand System Configuration information. C. You should consider configuring the KingTrace data collector set for system configurationinformation and event trace data. D. You should consider configuring the KingTrace data collector set for a performance counteralert and system configuration information.

Answer: A

Explanation:

QUESTION NO: 17 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes two computers named ABC-DC01 and ABC-SR01. During the course of the day ABC.com decided to have a collector initiated subscription configuredfor collecting events from ABC-SR01 to ABC-DC01.to a central location. At maintenance time younotice no entries for ABC-SR01 have been recorded. Which action should be taken to collect the events? A. You should consider utilizing the Collector initiated subscription method and configure theDestination log as Forwarded Events. B. You should consider utilizing the Source initiated subscription method and configure theDestination log as System Log. C. You should consider utilizing the Source initiated subscription method and configure theDestination log as Security Log. D. You should consider utilizing the Source initiated subscription method and configure theDestination log as Application Log.

Answer: A



Explanation:

QUESTION NO: 18 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts the Windows ServerUpdate Services (WSUS) and Microsoft Forefront Threat Management Gateway (TMG). ABC.com receives an HTTP error when trying to utilize Windows Server Update Servicesconfiguration wizard Start Connecting functions. Which action should be taken to ensure ABC-DC01 is allowed to download updates from theInternet? A. You should consider modifying Products And Classifications option from the Update Servicesconsole. B. You should consider modifying Update Source and Proxy Server option from the UpdateServices console C. You should consider modifying Update Files And Languages option from the Update Servicesconsole. D. You should consider modifying Automatic Approvals option from the Update Services console.

Answer: B

Explanation:

QUESTION NO: 19 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a member serverrunning Windows Server Update Services and the DNS service. During the course of the day you receive instruction from ABC.com to utilize ABC-DC01 forWindows Update operations. Which action should be taken to ensure express installation files are downloaded for utilization? A. You should consider modifying Products And Classifications option from the Update Servicesconsole. B. You should consider modifying Update Source and Proxy Server option from the UpdateServices console



C. You should consider modifying Update Files And Languages option from the Update Servicesconsole. D. You should consider modifying Automatic Approvals option from the Update Services console.

Answer: A

Explanation:

QUESTION NO: 20 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 which is utilized for performing variousadministrative tasks. During the course of the day you receive instruction from ABC.com to create an Windows imageusing DISM which contains several Windows Updates. Which action should be taken to ensure updates applied do not require rebooting? A. You should consider utilizing the DISM utility with the /Get-MountedWinInfo parameter. B. You should consider utilizing the DISM utility with the /Add-ProvisionedAppxPackageparameter. C. You should consider utilizing the DISM utility with the /Get-WimInfo parameter D. You should consider utilizing the DISM utility with the /Commit-Wim parameter.

Answer: B

Explanation:

QUESTION NO: 21 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts the Windows ServerUpdate Services (WSUS) and Windows Deployment Services (WDS). During the course of the day you receive instruction to create an image of a computer which hasall custom business applications installed. What action should be taken to create the image on ABC-DC01? A. You should consider creating a Windows Deployment Services (WDS) Installation andDiscovery image. B. You should consider creating a Windows Deployment Services (WDS) Boot image.



C. You should consider creating a Windows Deployment Services (WDS) Installation and Captureimage. D. You should consider creating a Windows Deployment Services (WDS) Boot and Discoveryimage.

Answer: B

Explanation:

QUESTION NO: 22 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a DNS server andRouting and Remote Access (RRAS) server. During the course of the day you receive instruction to ensure a network User named CliveJohnson is able to create Virtual Private Network (VPN) connection sessions to ABC-DC01. Which action should be taken? A. You should consider creating a connection request policy and add a RADIUS client. B. You should consider creating a network policy and adding network users as members of theRemote Management Users group. C. You should consider creating a network policy. D. You should consider adding a RADIUS client configured to utilize the RADIUS global option ofrequest-rate.

Answer: C

Explanation:

QUESTION NO: 23 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Dynamic HostConfiguration Protocol (DHCP) and Web server. During the course of maintenance you discover Rory Allen is able to establish DirectAccessconnections to ABC-DC01. ABC.com wants you to ensure Web server resources are notaccessible using DirectAccess whilst leaving other resources accessed by DirectAccessunaffected. Which action should be taken?



A. You should consider configuring Windows Update Group Policy Object settings. B. You should consider configuring a connection request policy and Name Resolution policyGroup Policy Object settings. C. You should consider configuring DirectAccess Client Experience Settings and NetworkConnections Group Policy Object settings. D. You should consider configuring DNS client Group Policy Object settings.

Answer: D

Explanation:

QUESTION NO: 24 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Dynamic HostConfiguration Protocol (DHCP) and Domain Name System (DNS) server. During the previous month a junior administrator removed a computer named ABC-SR01 from thedomain but records for the computer still exists. ABC.com wants you to have all static resourceinformation about ABC-SR01 to be removed. Which action should be taken to ensure records are automatically scavenged? A. You should consider modifying the Record time stamp value of the static resource recordinformation. B. You should consider modifying Time –To-Live (TTL) and Security settings of the static resourcerecord information. C. You should consider modifying Record Time stamp value and Expires after value of the staticresource record information. D. You should consider modifying Security Settings and Record Time stamp values of staticresource record information.

Answer: A

Explanation:

QUESTION NO: 25 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. A company Weyland Industries which has a domain named weyland.com entered intopartnership with ABC.com. During the course of the month you receive a request from Weyland Industries to configure



ABC.com DNS servers to resolve requests from both weyland.com and ABC.com domains whilstensuring administrative output is minimized and server names do not require changing. Which action should be taken? A. You should consider creating an Active Directory-integrated zone. B. You should consider creating a Stub zone. C. You should consider creating a Standard Primary and Standard Secondary zone. D. You should consider creating a Standard Primary and Reverse Lookup zone.

Answer: B

Explanation:

QUESTION NO: 26 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes two computers named ABC-DC01 and ABC-SR01. ABC-DC01 hostsDynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS) and ABC-SR01hosts Web Server and Domain Name System (DNS). During the course of the month you are instructed to create a Standard Primary zone on ABC-DC01 and ensure that ABC-SR01 would be able to host the Standard Secondary zone. Which action should be taken? A. You should consider adding ABC-DC01 as a name server on ABC-SR01. B. You should consider creating a Active Directory-integrated zone on ABC-SR01. C. You should consider adding ABC-SR01 as a name server on ABC-DC01. D. You should consider configuring a trust anchor and zone delegation for ABC-SR01 on ABC-DC01.

Answer: C

Explanation:

QUESTION NO: 27 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server anddomain controller.



During the course of the week you receive instruction to review the Group Policy Object (GPO)named KingPolicies preference settings. Which action should be taken? A. You should consider utilizing Gpfixup and Gpupdate commands. B. You should consider utilizing Gpresult and Restore-GPO commands. C. You should consider utilizing Add-ADGroupMember and Get-GPOReport commands. D. You should consider utilizing the Get-GPOReport command.

Answer: D

Explanation:

QUESTION NO: 28 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server anddomain controller. During the course of the week you receive instruction to stop a Group Policy Object (GPO) namedKingPolicy from being applied to members of the Remote Users Group Organizational Unit (OU) atdomain and site level. Which action would ensure the least administrative effort? A. You should consider utilizing Gpfixup and Gpupdate commands. B. You should consider utilizing Gpresult and Restore-GPO commands. C. You should consider utilizing Add-ADGroupMember and Get-GPOReport commands. D. You should consider utilizing the Restore-GPO command.

Answer: D

Explanation:

QUESTION NO: 29 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server anddomain controller. During the course of the week you receive instruction to configure order in which three grouppolicy objects (GPOs) named KingPolicy, TestPolicy and ABCPolicy are applied.



Which action should be taken? A. You should consider utilizing Gpfixup and Gpupdate commands. B. You should consider utilizing Gpresult and Restore-GPO commands. C. You should consider utilizing Add-ADGroupMember and Get-GPOReport commands. D. You should consider utilizing the Set-GPLink command.

Answer: D

Explanation:

QUESTION NO: 30 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server anddomain controller. During the course of the week you receive instruction to ensure a junior administrator named RoryAllen is able to create Group Policy Objects (GPOs) whilst ensuring Rory Allen is unable to linkGroup Policy Objects (GPOs). Which action should be taken? A. You should consider utilizing Gpfixup and Gpupdate commands. B. You should consider utilizing Gpresult and Restore-GPO commands. C. You should consider utilizing Add-ADGroupMember and Get-GPOReport commands. D. You should consider utilizing the Add-ADGroupMember command.

Answer: D

Explanation:

QUESTION NO: 31 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 and ABC-SR01. ABC-DC01 isconfigured as a DHCP, DNS and Enterprise Certificate Authority and ABC-SR01 is configured asa Web server, Network Policy Server (NPS) and Health Registration Authority (HRA). During the course of the week you receive instruction to implement a Network Access Protection(NAP) solution which utilizes IPSecenforcement. You create a Group Policy Object (GPO) namedKingObject for deployment of trusted server groups. ABC.com wants you to ensure the networkuser client computers automatically detect the Health Registration Authority (HRA) server ABC-



SR01. Which action should be taken? (Choose two) A. You should consider configuring the EnableDiscovery registry key of ABC-SR01. B. You should consider creating an alias (CNAME) record whilst configuring the EnableDiscoveryregistry key of client computers. C. You should consider creating an alias (CNAME) record and service location (SRV) record. D. You should consider creating a service location (SRV) record, alias (CNAME) record andconfigure the EnableDiscovery registry key on client computers.

Answer: A,B

Explanation:

QUESTION NO: 32 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server, DNS andNetwork Policy Server (NPS) server. During the course of the week you receive instruction to configure a Virtual Private Network (VPN)connection which utilizes a Network Access Protection (NAP) health policy. Which action should be taken? A. You should consider installing a System Health Validator (SVH) and RRAS role beforeexecuting the Configure NAP wizard. B. You should consider installing a computer certificate before executing the Configure NAPwizard. C. You should consider installing DFS before executing the Configure NAP wizard. D. You should consider installing DFS and BitLocker before executing the Configure NAP wizard.

Answer: B

Explanation:

QUESTION NO: 33 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes two computers named ABC-DC01 and ABC-SR01. ABC-DC01 isconfigured as a DHCP, Web server and Network Policy Server (NPS) and ABC-SR01 isconfigured as a DNS, RRAS and Network Policy Server (NPS).



During the course of the day you receive instruction to export the Network Policy Server (NPS)settings configured on ABC-DC01 for importation on ABC-SR01. Which action should be taken? A. You should consider configuring SQL Server Logging Properties and Network Policies. B. You should consider configuring Network Policies and Connection Request Policies. C. You should consider configuring SQL Server Logging Properties. D. You should consider configuring Connection Request policies and RADIUS Clients.

Answer: C

Explanation:

QUESTION NO: 34 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a DNS, Network PolicyServer (NPS) and Routing and Remote Access (RRAS) server. During the course of the day you receive instruction to configure ABC-DC01 Network PolicyServer to utilize certificate-based authentication. Which action should be taken? A. You should consider accessing the Certificates Console and accessing the Certificates of theCurrent User to access the Enterprise Trust section. B. You should consider accessing the Certificates Console and accessing the Certificate of theCurrent User to access the Personal section. C. You should consider accessing the Certificates Console and accessing the Certificates of thelocal computer to access the Untrusted Certificates section. D. You should consider accessing the Certificates Console and accessing the Certificates of thelocal computer to access the Personal section.

Answer: D

Explanation:

QUESTION NO: 35 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes two computers named ABC-DC01 and ABC-SR01. ABC-DC01 isconfigured as a DNS, DHCP and RADIUS server and ABC-SR01 is configured as a Web Serverand Network Policy Server (NPS).



During the course of the day you receive instruction to ensure ABC-SR01 forwards all accountingrequests received to ABC-DC01. What action should be taken? A. You should consider creating a remote RADIUS server group named KingRemote and accessthe Network Policies node of the NPS configuration. B. You should consider creating a remote RADIUS server group named KingRemote and accessthe Connection Request Policies node of the NPS configuration. C. You should consider creating a remote RADIUS server group named KingRemote and accessthe Health Policies node of the NPS configuration. D. You should consider creating a remote RADIUS server group named KingRemote and accessthe Remediation Server Groups node of the NPS configuration.

Answer: B

Explanation:

QUESTION NO: 36 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server anddomain controller. During the course of the week you receive instruction to restore the Default Domain Policy GPOwhich the junior administrator Rory Allen deleted. ABC.com additionally informs you no backup ofthe Group Policy Objects (GPOs) exist. Which action should be taken? A. You should consider utilizing Gpfixup and Gpupdate commands. B. You should consider utilizing Gpresult and Restore-GPO commands. C. You should consider utilizing Add-ADGroupMember and Get-GPOReport commands. D. You should consider utilizing the Dcgpofix command.

Answer: D

Explanation:



QUESTION NO: 37 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server, DHCPand domain controller. During the course of the week you receive instruction to configure ABC-DC01 to record allinformation regarding access to devices with removable storage. Which action should be taken? A. You should consider configuring the Account Logon auditing category. B. You should consider configuring the Detailed Tracking auditing category. C. You should consider configuring the DS Access auditing category. D. You should consider configuring the Object Access auditing category.

Answer: D

Explanation:

QUESTION NO: 38 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes three computers named ABC-DC01, ABC-DC02 and ABC-SR01.ABC-DC01 hosts the PDC emulator, Infrastructure master and DHCP server roles. ABC-DC02 is configured as a RID master, DNS and EFS server with ABC-SR01 configured as theWeb server, NPS and Schema master. During the course of the day you receive instruction topoint-out configurations which would prevent ABC.com from utilizing a Distributed File System(DFS) namespace. Which factors should you consider? A. You should consider the Namespace Server and Namespace Settings utilized. B. You should consider the operating systems and roles hosted by the servers utilized. C. You should consider the RID master, Schema master and PDC emulator role locations. D. You should consider the functional level configured for the domain.

Answer: D

Explanation:

QUESTION NO: 39



You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes an organizational unit (OU) named KingFileServ for housing all FileServer computer accounts in the domain. You need to be able to track access files located in the SYSVOL and Confidential shares on theFile servers. Which of the actions should you consider? A. You should consider configuring the Account Logon and Object Access auditing category. B. You should consider configuring the Object Access auditing category. C. You should consider configuring the Global Object Access Auditing and DS Access auditingcategory. D. You should consider configuring the Directory Service Access and Audit system events auditingcategory.

Answer: B

Explanation:

QUESTION NO: 40 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts the DNS service, DHCPand File Server Resource Manager role service. ABC.com Development division members utilize a folder named DevShare for storage purposes.You are required to configure a notification solution that is triggered by Development divisionmembers causing File Screening Auditing to occur. Which action should be taken on ABC-DC01? A. You should consider configuring a file group. B. You should consider configuring a file screen template. C. You should consider configuring Quota Management. D. You should consider configuring File Management Tasks. E. You should consider configuring a storage report task.

Answer: E

Explanation:

QUESTION NO: 41



You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a DFS, DNS and NPSserver. During maintenance you notice a network user Rory Allen frequently accesses information whichis located in different DFS target sites. Which action should be taken to ensure Rory Allen utilizes only DFS targets in accordance to thesite utilized? A. You should consider modifying the properties of AD Objects. B. You should consider modifying namespace referral settings. C. You should consider modifying the D sites and referral settings. D. You should consider modifying AD site links and delegation settings.

Answer: B

Explanation:

QUESTION NO: 42 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com domain controllers run Microsoft Windows Server 2012 and client computersrun Microsoft Windows 8. Hard disk information is secured using BitLocker Drive Encryption (Bitlocker). ABC.com wants asolution implemented using the minimum server features and roles to support the Network Unlockfeature. Which of the following servers should be utilized for the feature? A. A NPS Server B. A DHCP server C. A DFS Server D. A Windows Deployment Server E. An Application Server F. A Web Server G. A File and Print Server H. A Windows Server Update Services server

Answer: D

Explanation:



QUESTION NO: 43 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com domain controllers run Microsoft Windows Server 2012 and client computersrun Microsoft Windows 8. ABC.com Marketing division members utilize portable computers which are in an organizationalunit (OU) named Marketers. You are required to utilize Group policy to configure connections forInternet utilization. Which settings should be configured? A. You should consider configuring Software Settings of the User Configuration in the GroupPolicy Object (GPO). B. You should consider configuring Windows Settings of the User Configuration in the GroupPolicy Object (GPO). C. You should consider configuring Windows Connect Now of the User Configuration in the GroupPolicy Object (GPO). D. You should consider configuring Network Connections and Network Options of the UserConfiguration in the Group Policy Object (GPO).

Answer: D

Explanation:

QUESTION NO: 44 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a NPS, Web Server andFile Server. During the course of the week you receive complaints from users stating Internet Explorer 10 andInternet Explorer 11 never starts at the company homepage. ABC.com wants you to ensure clientcomputers browsing starts at www.ABC.com. Which action should be taken? A. You should consider configuring the Startup of Internet Explorer 10 to Start with tabs from thelast session. B. You should consider configuring the Tabs section of Internet Explorer 11 to choose whichpages are displayed in tabs.



C. You should consider utilizing F5 after opening the Internet Explorer 10 and Internet Explorer 11settings. D. You should consider utilizing the dcgpofix.exe and GPupdate commands.

Answer: C

Explanation:

QUESTION NO: 45 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-SR01 which hosts Windows Server UpdateServices (WSUS), NPS and DNS services. ABC.com client computers are configured via Group Policy to acquire all their updates fromMicrosoft servers and are forced to have updates installed Friday’s 13:00 hours. Which action should be taken? A. You should consider configuring the Windows Update Group Policy setting of Turn on SoftwareNotifications. B. You should consider configuring the Windows Update Group Policy setting of ConfigureAutomatic Updates. C. You should consider configuring the Windows Update Group Policy setting of Allow AutomaticUpdates immediate installation. D. You should consider configuring the Windows Update Group Policy setting of Do not display“Install Updates and Shut Down” option in Shut Down Windows dialog box.

Answer: B

Explanation:

QUESTION NO: 46 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 for running several administrativetasks. ABC.com wants you to create a process for recording registry setting values and DirectoryServices replication data. You start configuring a Data Collector Set (DCS) named KingTrace. What additional action should be taken?



A. You should consider configuring the KingTrace data collector set for Event trace data and aPerformance Counter Alert. B. You should consider configuring the KingTrace data collector set for a Performance Counterand System Configuration information. C. You should consider configuring the KingTrace data collector set for system configurationinformation and event trace data. D. You should consider configuring the KingTrace data collector set for a performance counteralert and system configuration information.

Answer: A

Explanation:

QUESTION NO: 47 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a domain controller. You are required to provide a solution for automated deletion of records in event of theperformance log data folder achieves 110MB in size. Which action should be taken? A. You should consider configuring Data Manager Settings on the utilized Data Collector Set(DCS). B. You should consider configuring a performance counter alert. C. You should consider utilizing a File Server Resource Manager (FSRM) quota and file screenexception. D. You should consider utilizing a File Server Resource Manager (FSRM) storage report task.

Answer: A

Explanation:

QUESTION NO: 48 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a NPS, DNS and DHCPserver. During the course of the day you receive instruction to configure ABC-DC01 to ensure healthrequirements of computers transmitting health statements are reviewed.



Which action should be taken? A. You should consider configuring Called Station ID constraints and NAS Port Type constraints. B. You should consider MS-Service Class conditions and Health Policies. C. You should consider configuration of the Called Station ID constraints and MS-Service Classconditions. D. You should consider configuration of Health policies and NAP-Capable Computers conditions.

Answer: C

Explanation:

QUESTION NO: 49 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a DNS, DHCP, NPSand Routing and Remote Access (RRAS) server. During the course of the week you receive instruction to create a network policy which will takeeffect on Virtual Private Network (VPN) connection of the Point-To-Point2 Tunneling Protocol(PPTP) type. Which action should be taken? A. You should consider configuring the Protocol and Port in the Network Policy. B. You should consider configuring the Service Type and Port in the Network Policy. C. You should consider configuring the Tunnel Type in the Network Policy. D. You should consider configuring the NAS Port Type and Protocol in the Network Policy.

Answer: C

Explanation:

QUESTION NO: 50 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 forests namedABC.com and weyland.com. The forest utilize three computers named ABC-DC01, WEYLAND-DC01 and ABC-SR01. ABC-SR01 is configured as a DHCP and VPN Server and ABC-DC01 is configured as the DNS,



Web and NPS server whilst WEYLAND-DC01 is configured as the File server and NPS server. Which action should be taken to ensure connection requests are forwarded from ABC-DC01 toWEYLAND-DC01? A. You should consider modifying the Location Groups and Identity Type conditions of theconnection request policies. B. You should consider modifying the Authentication settings and Standard RADIUS Attributessettings of the connection request policies. C. You should consider modifying the User Name and Location Groups condition of theconnection request policies. D. You should consider modifying the Authentication settings and User Name conditions of theconnection request policies.

Answer: A

Explanation:

QUESTION NO: 51 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain namedABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts DNS, NPS and ActiveDirectory Domain Services (AD DS). You are required to relocate the Active Directory database to a volume containing enoughavailable storage capacity. Which action should be taken to move the Active Directory logs? A. You should consider utilizing the Ntdsutil.exe utility with the DS behavior context. B. You should consider utilizing the Ntdsutil.exe utility with the Configurable Settings context. C. You should consider utilizinge the Ntdsutil.exe utility with the local roles context. D. You should consider utilizing the Ntdsutil.exe utility with the partition management context.

Answer: B

Explanation:



70-411

Documents

microsoft windows server

aminimum password length

administering windows

development division

password settings objects

windows resource monitor

development division

computer account storage