Microsoft 70-411

Administering Windows Server 2012

Version: 30.0

Microsoft 70-411 Exam QUESTION NO: 1 You work as the network administrator for a Microsoft Windows Server 2008 domain named ABC.com. ABC.com has a Development division which utilizes two organizational units (OU) named DevelopUsers and DevelopComputers for user and computer account storage. The Development division user and computer accounts are configured as members of global security groups named DevUsers and DevComputers. During the course of the week you configure two Password Settings objects for Development division members named CredSettings01 and CredSettings02. You additionally configure a minimum password length of 10 for CredSettings01 and 9 for CredSettings02. ABC.com wants you to determine the required password length minimum for Development division users. What minimum password length should be configured for CredSettings01 applied to DevUsers? A. You should configure the minimum password length to 9. B. You should configure the minimum password length to 10. C. You should configure the minimum password length to 5. D. You should configure the minimum password length to 4. Answer: B Explanation:

QUESTION NO: 2 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts the File Server Resource Manager role service. A pre-configured quota threshold has been configured to send an email alert when 80% of the quota has been used. During the course of the week ABC.com instructs you to configure e-mail notification to your account to occur in event of the threshold being exceeded. Which action ensures e-mail notification would be utilized? A. You should consider creation of a Data Collector Set (DCS). B. You should consider configuring Windows Resource Monitor. C. You should consider configuring File Server Resource Manager Options. D. You should consider creating a quota template. Answer: C Explanation:

"Pass Any Exam. Any Time." - www.actualtests.com

Microsoft 70-411 Exam

QUESTION NO: 3 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes an organizational unit (OU) named FileServ for housing all File Server computer accounts in the domain. You need to be able to track access files on the File servers. Which of the following actions should you consider? A. You should consider configuring the Account Logon auditing category. B. You should consider configuring the Object Access auditing category. C. You should consider configuring the Global Object Access Auditing category. D. You should consider configuring the Directory Service Access auditing category. Answer: B Explanation:

QUESTION NO: 4 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts the DNS service and File Server Resource Manager role service. ABC.com Development division members utilize a folder named DevShare for storage purposes. You are required to configure a notification solution that is triggered by Development division members saving image and word documents to DevShare. Which of the actions ensure the notification solution utilizes e-mail? During the course of the day you receive instruction to configure e-mail notification if Development division members save image files to DevShare. Which of the following should be configured on ABC-DC01? A. You should consider configuring a file group. B. You should consider configuring a file screen template. C. You should consider configuring Quota Management. "Pass Any Exam. Any Time." - www.actualtests.com 3

Microsoft 70-411 Exam D. You should consider configuring File Management Tasks. Answer: A Explanation:

QUESTION NO: 5 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com domain controllers run Microsoft Windows Server 2012 and client computers run Microsoft Windows 8. Hard disk information is secured using BitLocker Drive Encryption (Bitlocker). ABC.com wants a solution implemented using the minimum server features and roles to support the Network Unlock feature. Which of the following servers hould be utilized for the feature? A. A Domain Controller B. A DHCP server C. A DNS Server D. A Windows Deployment Server E. An Application Server F. A Web Server G. A File and Print Server H. A Windows Server Update Services server Answer: D Explanation:

QUESTION NO: 6 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes two computer named ABC-DC01 and ABC-DC02. ABC-DC01 host the DHCP, DFS Namespace and DFS replication roles and ABC-DC02 hosts the NPS, DNS, DFS Namespace and DFS Replication roles. ABC-DC01 and ABC-DC02 are members of a DFS Replication group KingReplica. You are required to reduce network bandwidth utilized by the replication process. Which of the actions would decrease utilized bandwidth over a low-speed WAN connection?

"Pass Any Exam. Any Time." - www.actualtests.com

Microsoft 70-411 Exam A. You should consider modifying the Quota Size of Staging Folder and Conflict and Deleted Folder. B. You should consider modifying the schedule for the replication group. C. You should consider modifying the replication filters. D. You should consider modifying the replication topology. Answer: B Explanation:

QUESTION NO: 7 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes several administrative templates via Group Policy. You must provide a solution for reviewing active and inactive Group Policy settings containing comments. Which action can be utilized to filter out of scope Group Policy Objects to view only settings to be removed from registry? (Choose all that apply) A. You should configure the Configured Filter Options to No. B. You should configure the Commented Filter Options to No. C. You should configure the Managed Filter Options to Yes. D. You should configure the Commented Filter Options to Yes. E. You should configure the Configured Filter Options to Any. F. You should configure the Managed Filter Options to Any. Answer: C,D,E Explanation:

QUESTION NO: 8 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com makes use of Windows Power Shell scripts for configuring settings for network users at log on. During the course of the day you notice several scripts are not finished running by the timenetwork usersstart utilizing the desktop. ABC.com wants you to make sure the scripts are finished running by the time network users start utilizing the desktop. What action should you take? "Pass Any Exam. Any Time." - www.actualtests.com 5

Microsoft 70-411 Exam A. You should consider configuring the Run logon scripts asynchronously policy setting. B. You should consider configuring the Run logon scripts synchronously policy setting. C. You should consider configuring the Run Windows PowerShell scripts first at user logon, logoff setting. D. You should consider configuring the Run startup scripts asynchronously policy setting. Answer: B Explanation:

QUESTION NO: 9 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts the DHCP, DNS and Web Server roles. You receive an error message when configuring the World Wide Web Publishing Service to utilize a managed service account named KingWeb stating The account name is invalid or does not exist, or the password is invalid for the account name specified. You are required to ensure the World Wide Web Publishing Service utilize the KingWeb managed service account. Which action should be taken? A. You should consider having the user change password at next logon. B. You should consider utilizing KingWeb$@ABC.com as an account name. C. You should consider utilizing ABC.com\KingWeb$ as the account name. D. You should consider resetting and changing the account password. Answer: C Explanation:

QUESTION NO: 10 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes several Password Settings objects (PSOs) which are deployed using Group Policy. You are required to review the settings of a Password Settings Object (PSO) named KingPass before deployment of the object. Which action should be taken to view the Password Settings Object (PSO) settings?

"Pass Any Exam. Any Time." - www.actualtests.com

Microsoft 70-411 Exam A. You should consider utilizing the Resultant Set Of Policy (RSoP). B. You should consider utilizing Group Policy Results Management. C. You should consider utilizing Group Policy Management. D. You should consider utilizing the Microsoft Management Console Active Directory snap-ins. Answer: C Explanation:

QUESTION NO: 11 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts DNS, NPS and Active Directory Domain Services (AD DS). You are required to relocate the Active Directory database to a volume containing enough available storage capacity. Which action should be taken to move the Active Directory database? A. You should stop the Active Directory Domain Services (AD DS) service and utilize the Ntdsutil.exe utility with the DS behavior context. B. You should stop the Active Directory Domain Services (AD DS) service and utilize the Ntdsutil.exe utility with the Files context. C. You should stop the Active Directory Domain Services (AD DS) service and utilize the Ntdsutil.exe utility with the local roles context. D. You should stop the Active Directory Domain Services (AD DS) service and utilize the Ntdsutil.exe utility with the partition management context. Answer: B Explanation:

QUESTION NO: 12 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes three computers named ABC-DC01, ABC-DC02 and ABC-DC03. ABC-DC01 hosts the Web Server and DHCP roles and ABC-DC02 hosts the Web Server and DNS roles and the Microsoft SQL Server service installed on ABC-DC03. The network users access the application pool KingApp to access a Web site named TestWeb. The TestWeb application uses a database as a data store. You are required to create an account named ABCApplication for the TestWeb identity whilst ensuring users are required to provide their "Pass Any Exam. Any Time." - www.actualtests.com 7

Microsoft 70-411 Exam individual credentials. What action should be taken? A. You should consider utilizing separate Service Principal Name (SPN) with a delegation setting for ABC-DC03. B. You should consider creating a delegation setting for ABC-DC03 and ABC-DC02 with matching Service Principal Name (SPN). C. You should consider creating a Service Principal Name (SPN) for ABC-DC03 with delegation settings for ABC-DC01. D. You should consider creating a Service Principal Name (SPN) for ABCApplication with delegation settings for ABC-DC01 and ABC-DC02. Answer: D Explanation:

QUESTION NO: 13 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com servers run Microsoft Windows Server 2012 and client computers run Microsoft Windows 8. You have been charged with restoration of a deleted user account named KingEmployee using tombstone reanimation. Which action should be taken to restore the KingEmployee user account? A. You should consider utilization of Windows Backup. B. You should consider utilizing System Restore to restore the computer to a state with the user account. C. You should consider utilization of the Advanced Startup options Directory Services Restore Mode. D. You should consider utilization of the Ldp utility. Answer: D Explanation:

QUESTION NO: 14 You work as the network administrator for a Microsoft Windows Server 2008 domain named ABC.com. ABC.com has a Financial division which utilizes two organizational units (OU) named FinUsers and FinComputers for user and computer account storage. The Development division "Pass Any Exam. Any Time." - www.actualtests.com 8

Microsoft 70-411 Exam user and computer accounts are configured as members of global security groups named DevUsers and DevComputers. You configure two Password Settings objects for Financial division members named Credential01 and Credential02. You additionally configure a minimum password length of 4 for CredSettings01 and 7 for CredSettings02. ABC.com wants you to determine the required password length minimum for Development division users. What minimum password length should be configured for CredSettings02 applied to FinUsers? A. You should configure the minimum password length to 9. B. You should configure the minimum password length to 10. C. You should configure the minimum password length to 7. D. You should configure the minimum password length to 4. Answer: C Explanation:

QUESTION NO: 15 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-SR01 which hosts the Web Server, DNS and DHCP services. You create a snapshot backup of ABC-SR01 utilizing the Ntdsutil utility. You are required to provide access to the information of the snapshot backup. Which action should be taken? A. You should consider utilization of the Dsamain.exe utility with the /adlds parameter. B. You should consider utilization of the Dsamain.exe utility with the /allowupgradeparameter. C. You should consider utilizing the Dsamain.exe /dbpath command from the command prompt. D. You should consider utilization of the Dsamain.exe utility with the /logpathparameter. Answer: C Explanation:

QUESTION NO: 16 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named "Pass Any Exam. Any Time." - www.actualtests.com 9

Microsoft 70-411 Exam ABC.com. ABC.com utilizes a computer named ABC-DC01 for running several administrative tasks. ABC.com wants you to create a process for recording registration entries and executing a specific application if free space drops below 8 percent. You start configuring a Data Collector Set (DCS) named KingTrace. What additional action should be taken? A. You should consider configuring the KingTrace data collector set for Event trace data and a Performance Counter Alert. B. You should consider configuring the KingTrace data collector set for a Performance Counter and System Configuration information. C. You should consider configuring the KingTrace data collector set for system configuration information and event trace data. D. You should consider configuring the KingTrace data collector set for a performance counter alert and system configuration information. Answer: A Explanation:

QUESTION NO: 17 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes two computers named ABC-DC01 and ABC-SR01. During the course of the day ABC.com decided to have a collector initiated subscription configured for collecting events from ABC-SR01 to ABC-DC01.to a central location. At maintenance time you notice no entries for ABC-SR01 have been recorded. Which action should be taken to collect the events? A. You should consider utilizing the Collector initiated subscription method and configure the Destination log as Forwarded Events. B. You should consider utilizing the Source initiated subscription method and configure the Destination log as System Log. C. You should consider utilizing the Source initiated subscription method and configure the Destination log as Security Log. D. You should consider utilizing the Source initiated subscription method and configure the Destination log as Application Log. Answer: A

"Pass Any Exam. Any Time." - www.actualtests.com

10

Microsoft 70-411 Exam Explanation:

QUESTION NO: 18 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts the Windows Server Update Services (WSUS) and Microsoft Forefront Threat Management Gateway (TMG). ABC.com receives an HTTP error when trying to utilize Windows Server Update Services configuration wizard Start Connecting functions. Which action should be taken to ensure ABC-DC01 is allowed to download updates from the Internet? A. You should consider modifying Products And Classifications option from the Update Services console. B. You should consider modifying Update Source and Proxy Server option from the Update Services console C. You should consider modifying Update Files And Languages option from the Update Services console. D. You should consider modifying Automatic Approvals option from the Update Services console. Answer: B Explanation:

QUESTION NO: 19 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a member server running Windows Server Update Services and the DNS service. During the course of the day you receive instruction from ABC.com to utilize ABC-DC01 for Windows Update operations. Which action should be taken to ensure express installation files are downloaded for utilization? A. You should consider modifying Products And Classifications option from the Update Services console. B. You should consider modifying Update Source and Proxy Server option from the Update Services console "Pass Any Exam. Any Time." - www.actualtests.com 11

Microsoft 70-411 Exam C. You should consider modifying Update Files And Languages option from the Update Services console. D. You should consider modifying Automatic Approvals option from the Update Services console. Answer: A Explanation:

QUESTION NO: 20 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 which is utilized for performing various administrative tasks. During the course of the day you receive instruction from ABC.com to create an Windows image using DISM which contains several Windows Updates. Which action should be taken to ensure updates applied do not require rebooting? A. You should consider utilizing the DISM utility with the /Get-MountedWinInfo parameter. B. You should consider utilizing the DISM utility with the /Add-ProvisionedAppxPackage parameter. C. You should consider utilizing the DISM utility with the /Get-WimInfo parameter D. You should consider utilizing the DISM utility with the /Commit-Wim parameter. Answer: B Explanation:

QUESTION NO: 21 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts the Windows Server Update Services (WSUS) and Windows Deployment Services (WDS). During the course of the day you receive instruction to create an image of a computer which has all custom business applications installed. What action should be taken to create the image on ABC-DC01? A. You should consider creating a Windows Deployment Services (WDS) Installation and Discovery image. B. You should consider creating a Windows Deployment Services (WDS) Boot image. "Pass Any Exam. Any Time." - www.actualtests.com 12

Microsoft 70-411 Exam C. You should consider creating a Windows Deployment Services (WDS) Installation and Capture image. D. You should consider creating a Windows Deployment Services (WDS) Boot and Discovery image. Answer: B Explanation:

QUESTION NO: 22 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a DNS server and Routing and Remote Access (RRAS) server. During the course of the day you receive instruction to ensure a network User named Clive Johnson is able to create Virtual Private Network (VPN) connection sessions to ABC-DC01. Which action should be taken? A. You should consider creating a connection request policy and add a RADIUS client. B. You should consider creating a network policy and adding network users as members of the Remote Management Users group. C. You should consider creating a network policy. D. You should consider adding a RADIUS client configured to utilize the RADIUS global option of request-rate. Answer: C Explanation:

QUESTION NO: 23 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Dynamic Host Configuration Protocol (DHCP) and Web server. During the course of maintenance you discover Rory Allen is able to establish DirectAccess connections to ABC-DC01. ABC.com wants you to ensure Web server resources are not accessible using DirectAccess whilst leaving other resources accessed by DirectAccess unaffected. Which action should be taken? "Pass Any Exam. Any Time." - www.actualtests.com 13

Microsoft 70-411 Exam A. You should consider configuring Windows Update Group Policy Object settings. B. You should consider configuring a connection request policy and Name Resolution policy Group Policy Object settings. C. You should consider configuring DirectAccess Client Experience Settings and Network Connections Group Policy Object settings. D. You should consider configuring DNS client Group Policy Object settings. Answer: D Explanation:

QUESTION NO: 24 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS) server. During the previous month a junior administrator removed a computer named ABC-SR01 from the domain but records for the computer still exists. ABC.com wants you to have all static resource information about ABC-SR01 to be removed. Which action should be taken to ensure records are automatically scavenged? A. You should consider modifying the Record time stamp value of the static resource record information. B. You should consider modifying Time To-Live (TTL) and Security settings of the static resource record information. C. You should consider modifying Record Time stamp value and Expires after value of the static resource record information. D. You should consider modifying Security Settings and Record Time stamp values of static resource record information. Answer: A Explanation:

QUESTION NO: 25 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. A company Weyland Industries which has a domain named weyland.com entered into partnership with ABC.com. During the course of the month you receive a request from Weyland Industries to configure "Pass Any Exam. Any Time." - www.actualtests.com 14

Microsoft 70-411 Exam ABC.com DNS servers to resolve requests from both weyland.com and ABC.com domains whilst ensuring administrative output is minimized and server names do not require changing. Which action should be taken? A. You should consider creating an Active Directory-integrated zone. B. You should consider creating a Stub zone. C. You should consider creating a Standard Primary and Standard Secondary zone. D. You should consider creating a Standard Primary and Reverse Lookup zone. Answer: B Explanation:

QUESTION NO: 26 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes two computers named ABC-DC01 and ABC-SR01. ABC-DC01 hosts Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS) and ABC-SR01 hosts Web Server and Domain Name System (DNS). During the course of the month you are instructed to create a Standard Primary zone on ABCDC01 and ensure that ABC-SR01 would be able to host the Standard Secondary zone. Which action should be taken? A. You should consider adding ABC-DC01 as a name server on ABC-SR01. B. You should consider creating a Active Directory-integrated zone on ABC-SR01. C. You should consider adding ABC-SR01 as a name server on ABC-DC01. D. You should consider configuring a trust anchor and zone delegation for ABC-SR01 on ABCDC01. Answer: C Explanation:

QUESTION NO: 27 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server and domain controller.

"Pass Any Exam. Any Time." - www.actualtests.com

15

Microsoft 70-411 Exam During the course of the week you receive instruction to review the Group Policy Object (GPO) named KingPolicies preference settings. Which action should be taken? A. You should consider utilizing Gpfixup and Gpupdate commands. B. You should consider utilizing Gpresult and Restore-GPO commands. C. You should consider utilizing Add-ADGroupMember and Get-GPOReport commands. D. You should consider utilizing the Get-GPOReport command. Answer: D Explanation:

QUESTION NO: 28 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server and domain controller. During the course of the week you receive instruction to stop a Group Policy Object (GPO) named KingPolicy from being applied to members of the Remote Users Group Organizational Unit (OU) at domain and site level. Which action would ensure the least administrative effort? A. You should consider utilizing Gpfixup and Gpupdate commands. B. You should consider utilizing Gpresult and Restore-GPO commands. C. You should consider utilizing Add-ADGroupMember and Get-GPOReport commands. D. You should consider utilizing the Restore-GPO command. Answer: D Explanation:

QUESTION NO: 29 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server and domain controller. During the course of the week you receive instruction to configure order in which three group policy objects (GPOs) named KingPolicy, TestPolicy and ABCPolicy are applied. "Pass Any Exam. Any Time." - www.actualtests.com 16

Microsoft 70-411 Exam Which action should be taken? A. You should consider utilizing Gpfixup and Gpupdate commands. B. You should consider utilizing Gpresult and Restore-GPO commands. C. You should consider utilizing Add-ADGroupMember and Get-GPOReport commands. D. You should consider utilizing the Set-GPLink command. Answer: D Explanation:

QUESTION NO: 30 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server and domain controller. During the course of the week you receive instruction to ensure a junior administrator named Rory Allen is able to create Group Policy Objects (GPOs) whilst ensuring Rory Allen is unable to link Group Policy Objects (GPOs). Which action should be taken? A. You should consider utilizing Gpfixup and Gpupdate commands. B. You should consider utilizing Gpresult and Restore-GPO commands. C. You should consider utilizing Add-ADGroupMember and Get-GPOReport commands. D. You should consider utilizing the Add-ADGroupMember command. Answer: D Explanation:

QUESTION NO: 31 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 and ABC-SR01. ABC-DC01 is configured as a DHCP, DNS and Enterprise Certificate Authority and ABC-SR01 is configured as a Web server, Network Policy Server (NPS) and Health Registration Authority (HRA). During the course of the week you receive instruction to implement a Network Access Protection (NAP) solution which utilizes IPSecenforcement. You create a Group Policy Object (GPO) named KingObject for deployment of trusted server groups. ABC.com wants you to ensure the network user client computers automatically detect the Health Registration Authority (HRA) server ABC"Pass Any Exam. Any Time." - www.actualtests.com 17

Microsoft 70-411 Exam SR01. Which action should be taken? (Choose two) A. You should consider configuring the EnableDiscovery registry key of ABC-SR01. B. You should consider creating an alias (CNAME) record whilst configuring the EnableDiscovery registry key of client computers. C. You should consider creating an alias (CNAME) record and service location (SRV) record. D. You should consider creating a service location (SRV) record, alias (CNAME) record and configure the EnableDiscovery registry key on client computers. Answer: A,B Explanation:

QUESTION NO: 32 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server, DNS and Network Policy Server (NPS) server. During the course of the week you receive instruction to configure a Virtual Private Network (VPN) connection which utilizes a Network Access Protection (NAP) health policy. Which action should be taken? A. You should consider installing a System Health Validator (SVH) and RRAS role before executing the Configure NAP wizard. B. You should consider installing a computer certificate before executing the Configure NAP wizard. C. You should consider installing DFS before executing the Configure NAP wizard. D. You should consider installing DFS and BitLocker before executing the Configure NAP wizard. Answer: B Explanation:

QUESTION NO: 33 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes two computers named ABC-DC01 and ABC-SR01. ABC-DC01 is configured as a DHCP, Web server and Network Policy Server (NPS) and ABC-SR01 is configured as a DNS, RRAS and Network Policy Server (NPS).

"Pass Any Exam. Any Time." - www.actualtests.com

18

Microsoft 70-411 Exam During the course of the day you receive instruction to export the Network Policy Server (NPS) settings configured on ABC-DC01 for importation on ABC-SR01. Which action should be taken? A. You should consider configuring SQL Server Logging Properties and Network Policies. B. You should consider configuring Network Policies and Connection Request Policies. C. You should consider configuring SQL Server Logging Properties. D. You should consider configuring Connection Request policies and RADIUS Clients. Answer: C Explanation:

QUESTION NO: 34 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a DNS, Network Policy Server (NPS) and Routing and Remote Access (RRAS) server. During the course of the day you receive instruction to configure ABC-DC01 Network Policy Server to utilize certificate-based authentication. Which action should be taken? A. You should consider accessing the Certificates Console and accessing the Certificates of the Current User to access the Enterprise Trust section. B. You should consider accessing the Certificates Console and accessing the Certificate of the Current User to access the Personal section. C. You should consider accessing the Certificates Console and accessing the Certificates of the local computer to access the Untrusted Certificates section. D. You should consider accessing the Certificates Console and accessing the Certificates of the local computer to access the Personal section. Answer: D Explanation:

QUESTION NO: 35 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes two computers named ABC-DC01 and ABC-SR01. ABC-DC01 is configured as a DNS, DHCP and RADIUS server and ABC-SR01 is configured as a Web Server and Network Policy Server (NPS). "Pass Any Exam. Any Time." - www.actualtests.com 19

Microsoft 70-411 Exam During the course of the day you receive instruction to ensure ABC-SR01 forwards all accounting requests received to ABC-DC01. What action should be taken? A. You should consider creating a remote RADIUS server group named KingRemote and access the Network Policies node of the NPS configuration. B. You should consider creating a remote RADIUS server group named KingRemote and access the Connection Request Policies node of the NPS configuration. C. You should consider creating a remote RADIUS server group named KingRemote and access the Health Policies node of the NPS configuration. D. You should consider creating a remote RADIUS server group named KingRemote and access the Remediation Server Groups node of the NPS configuration. Answer: B Explanation:

QUESTION NO: 36 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server and domain controller. During the course of the week you receive instruction to restore the Default Domain Policy GPO which the junior administrator Rory Allen deleted. ABC.com additionally informs you no backup of the Group Policy Objects (GPOs) exist. Which action should be taken? A. You should consider utilizing Gpfixup and Gpupdate commands. B. You should consider utilizing Gpresult and Restore-GPO commands. C. You should consider utilizing Add-ADGroupMember and Get-GPOReport commands. D. You should consider utilizing the Dcgpofix command. Answer: D Explanation:

"Pass Any Exam. Any Time." - www.actualtests.com

20

Microsoft 70-411 Exam QUESTION NO: 37 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a Web server, DHCP and domain controller. During the course of the week you receive instruction to configure ABC-DC01 to record all information regarding access to devices with removable storage. Which action should be taken? A. You should consider configuring the Account Logon auditing category. B. You should consider configuring the Detailed Tracking auditing category. C. You should consider configuring the DS Access auditing category. D. You should consider configuring the Object Access auditing category. Answer: D Explanation:

QUESTION NO: 38 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes three computers named ABC-DC01, ABC-DC02 and ABC-SR01. ABC-DC01 hosts the PDC emulator, Infrastructure master and DHCP server roles. ABC-DC02 is configured as a RID master, DNS and EFS server with ABC-SR01 configured as the Web server, NPS and Schema master. During the course of the day you receive instruction to point-out configurations which would prevent ABC.com from utilizing a Distributed File System (DFS) namespace. Which factors should you consider? A. You should consider the Namespace Server and Namespace Settings utilized. B. You should consider the operating systems and roles hosted by the servers utilized. C. You should consider the RID master, Schema master and PDC emulator role locations. D. You should consider the functional level configured for the domain. Answer: D Explanation:

QUESTION NO: 39 "Pass Any Exam. Any Time." - www.actualtests.com 21

Microsoft 70-411 Exam You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes an organizational unit (OU) named KingFileServ for housing all File Server computer accounts in the domain. You need to be able to track access files located in the SYSVOL and Confidential shares on the File servers. Which of the actions should you consider? A. You should consider configuring the Account Logon and Object Access auditing category. B. You should consider configuring the Object Access auditing category. C. You should consider configuring the Global Object Access Auditing and DS Access auditing category. D. You should consider configuring the Directory Service Access and Audit system events auditing category. Answer: B Explanation:

QUESTION NO: 40 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts the DNS service, DHCP and File Server Resource Manager role service. ABC.com Development division members utilize a folder named DevShare for storage purposes. You are required to configure a notification solution that is triggered by Development division members causing File Screening Auditing to occur. Which action should be taken on ABC-DC01? A. You should consider configuring a file group. B. You should consider configuring a file screen template. C. You should consider configuring Quota Management. D. You should consider configuring File Management Tasks. E. You should consider configuring a storage report task. Answer: E Explanation:

QUESTION NO: 41 "Pass Any Exam. Any Time." - www.actualtests.com 22

Microsoft 70-411 Exam You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a DFS, DNS and NPS server. During maintenance you notice a network user Rory Allen frequently accesses information which is located in different DFS target sites. Which action should be taken to ensure Rory Allen utilizes only DFS targets in accordance to the site utilized? A. You should consider modifying the properties of AD Objects. B. You should consider modifying namespace referral settings. C. You should consider modifying the D sites and referral settings. D. You should consider modifying AD site links and delegation settings. Answer: B Explanation:

QUESTION NO: 42 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com domain controllers run Microsoft Windows Server 2012 and client computers run Microsoft Windows 8. Hard disk information is secured using BitLocker Drive Encryption (Bitlocker). ABC.com wants a solution implemented using the minimum server features and roles to support the Network Unlock feature. Which of the following servers should be utilized for the feature? A. A NPS Server B. A DHCP server C. A DFS Server D. A Windows Deployment Server E. An Application Server F. A Web Server G. A File and Print Server H. A Windows Server Update Services server Answer: D Explanation:

"Pass Any Exam. Any Time." - www.actualtests.com

23

Microsoft 70-411 Exam

QUESTION NO: 43 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com domain controllers run Microsoft Windows Server 2012 and client computers run Microsoft Windows 8. ABC.com Marketing division members utilize portable computers which are in an organizational unit (OU) named Marketers. You are required to utilize Group policy to configure connections for Internet utilization. Which settings should be configured? A. You should consider configuring Software Settings of the User Configuration in the Group Policy Object (GPO). B. You should consider configuring Windows Settings of the User Configuration in the Group Policy Object (GPO). C. You should consider configuring Windows Connect Now of the User Configuration in the Group Policy Object (GPO). D. You should consider configuring Network Connections and Network Options of the User Configuration in the Group Policy Object (GPO). Answer: D Explanation:

QUESTION NO: 44 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a NPS, Web Server and File Server. During the course of the week you receive complaints from users stating Internet Explorer 10 and Internet Explorer 11 never starts at the company homepage. ABC.com wants you to ensure client computers browsing starts at www.ABC.com. Which action should be taken? A. You should consider configuring the Startup of Internet Explorer 10 to Start with tabs from the last session. B. You should consider configuring the Tabs section of Internet Explorer 11 to choose which pages are displayed in tabs. "Pass Any Exam. Any Time." - www.actualtests.com 24

Microsoft 70-411 Exam C. You should consider utilizing F5 after opening the Internet Explorer 10 and Internet Explorer 11 settings. D. You should consider utilizing the dcgpofix.exe and GPupdate commands. Answer: C Explanation:

QUESTION NO: 45 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-SR01 which hosts Windows Server Update Services (WSUS), NPS and DNS services. ABC.com client computers are configured via Group Policy to acquire all their updates from Microsoft servers and are forced to have updates installed Fridays 13:00 hours. Which action should be taken? A. You should consider configuring the Windows Update Group Policy setting of Turn on Software Notifications. B. You should consider configuring the Windows Update Group Policy setting of Configure Automatic Updates. C. You should consider configuring the Windows Update Group Policy setting of Allow Automatic Updates immediate installation. D. You should consider configuring the Windows Update Group Policy setting of Do not display Install Updates and Shut Down option in Shut Down Windows dialog box. Answer: B Explanation:

QUESTION NO: 46 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 for running several administrative tasks. ABC.com wants you to create a process for recording registry setting values and Directory Services replication data. You start configuring a Data Collector Set (DCS) named KingTrace. What additional action should be taken?

"Pass Any Exam. Any Time." - www.actualtests.com

25

Microsoft 70-411 Exam A. You should consider configuring the KingTrace data collector set for Event trace data and a Performance Counter Alert. B. You should consider configuring the KingTrace data collector set for a Performance Counter and System Configuration information. C. You should consider configuring the KingTrace data collector set for system configuration information and event trace data. D. You should consider configuring the KingTrace data collector set for a performance counter alert and system configuration information. Answer: A Explanation:

QUESTION NO: 47 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a domain controller. You are required to provide a solution for automated deletion of records in event of the performance log data folder achieves 110MB in size. Which action should be taken? A. You should consider configuring Data Manager Settings on the utilized Data Collector Set (DCS). B. You should consider configuring a performance counter alert. C. You should consider utilizing a File Server Resource Manager (FSRM) quota and file screen exception. D. You should consider utilizing a File Server Resource Manager (FSRM) storage report task. Answer: A Explanation:

QUESTION NO: 48 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a NPS, DNS and DHCP server. During the course of the day you receive instruction to configure ABC-DC01 to ensure health requirements of computers transmitting health statements are reviewed. "Pass Any Exam. Any Time." - www.actualtests.com 26

Microsoft 70-411 Exam Which action should be taken? A. You should consider configuring Called Station ID constraints and NAS Port Type constraints. B. You should consider MS-Service Class conditions and Health Policies. C. You should consider configuration of the Called Station ID constraints and MS-Service Class conditions. D. You should consider configuration of Health policies and NAP-Capable Computers conditions. Answer: C Explanation:

QUESTION NO: 49 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 configured as a DNS, DHCP, NPS and Routing and Remote Access (RRAS) server. During the course of the week you receive instruction to create a network policy which will take effect on Virtual Private Network (VPN) connection of the Point-To-Point2 Tunneling Protocol (PPTP) type. Which action should be taken? A. You should consider configuring the Protocol and Port in the Network Policy. B. You should consider configuring the Service Type and Port in the Network Policy. C. You should consider configuring the Tunnel Type in the Network Policy. D. You should consider configuring the NAS Port Type and Protocol in the Network Policy. Answer: C Explanation:

QUESTION NO: 50 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 forests named ABC.com and weyland.com. The forest utilize three computers named ABC-DC01, WEYLANDDC01 and ABC-SR01. ABC-SR01 is configured as a DHCP and VPN Server and ABC-DC01 is configured as the DNS,

"Pass Any Exam. Any Time." - www.actualtests.com

27

Microsoft 70-411 Exam Web and NPS server whilst WEYLAND-DC01 is configured as the File server and NPS server. Which action should be taken to ensure connection requests are forwarded from ABC-DC01 to WEYLAND-DC01? A. You should consider modifying the Location Groups and Identity Type conditions of the connection request policies. B. You should consider modifying the Authentication settings and Standard RADIUS Attributes settings of the connection request policies. C. You should consider modifying the User Name and Location Groups condition of the connection request policies. D. You should consider modifying the Authentication settings and User Name conditions of the connection request policies. Answer: A Explanation:

QUESTION NO: 51 You are hired by ABC.com to administrate a Microsoft Windows Server 2012 domain named ABC.com. ABC.com utilizes a computer named ABC-DC01 which hosts DNS, NPS and Active Directory Domain Services (AD DS). You are required to relocate the Active Directory database to a volume containing enough available storage capacity. Which action should be taken to move the Active Directory logs? A. You should consider utilizing the Ntdsutil.exe utility with the DS behavior context. B. You should consider utilizing the Ntdsutil.exe utility with the Configurable Settings context. C. You should consider utilizinge the Ntdsutil.exe utility with the local roles context. D. You should consider utilizing the Ntdsutil.exe utility with the partition management context. Answer: B Explanation:

"Pass Any Exam. Any Time." - www.actualtests.com

28