Microsoft 70-411 Exam Questions Instant Access

Question 1

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1 is backed up daily.

The domain has the Active Directory Recycle Bin enabled.

During routine maintenance, you delete 500 inactive user accounts and 100 inactive groups. One of the deleted groups is named Group1. Some of the deleted user accounts are members of some of the deleted groups.

For documentation purposes, you must provide a list of the members of Group1 before the group was deleted.

You need to identify the names of the users who were members of Group1 prior to its deletion.

You want to achieve this goal by using the minimum amount of administrative effort.

What should you do first?

AMount the most recent Active Directory backup.

BReactivate the tombstone of Group1.

CPerform an authoritative restore of Group1.

DUse the Recycle Bin to restore Group1.

Answer : A

The Active Directory Recycle Bin does not have the ability to track simple changes to objects.

If the object itself is not deleted, no element is moved to the Recycle Bin for possible recovery in the future. In other words, there is no rollback capacity for changes to object properties, or, in other words, to the values of these properties.

Question 2

Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2.

You have a Password Settings object (PSOs) named PSO1.

You need to view the settings of PSO1.

Which tool should you use?

AGet-ADDefaultDomainPasswordPolicy

BActive Directory Administrative Center

CLocal Security Policy

DGet-ADAccountResultantPasswordReplicationPolicy

Answer : B

In Windows Server 2012, fine-grained password policy management is made much easier than Windows Server 2008/2008 R2. Windows Administrators not have to use ADSI Edit and configure complicated settings to create the Password Settings Object (PSO) in the Password Settings Container. Instead we can configure fine-grained password policy directly in Active Directory Administrative Center (ADAC).

Question 3

Your network contains an Active Directory domain named adatum.com. The domain contains 10 controllers that run Windows Server 2012 R2.

You plan to create a new Active Directory-integrated zone named contoso.com.

You need to ensure that the new zone will be replicated to only four of the domain controllers.

What should you do first?

ACreate an Active Directory site link.

BCreate an Active Directory connection object.

CCreate an application Directory partition.

DChange the zone replication scope.

Answer : C

Question 4

Your network contains an Active Directory domain named contoso.com.

You need to install and configure the Web Application Proxy role service.

What should you do?

AInstall the Active Directory Federation Services server role and the Remote Access server role on different servers.

BInstall the Active Directory Federation Services server role and the Remote Access server role on the same server.

CInstall the Web Server (IIS) server role and the Application Server server role on the same server.

DInstall the Web Server (IIS) server role and the Application Server server role on different servers.

Answer : A

Web Application Proxy is a new Remote Access role service in Windows Server 2012 R2.

Question 5

You have a server that runs Windows Server 2012 R2.

You have an offline image named Windows2012.vhd that contains an installation of Windows Server 2012 R2.

You plan to apply several updates to Windows2012.vhd.

You need to mount Wmdows2012.vhd to D:\Mount.

Which tool should you use?

AServer Manager

BDevice Manager

CMountvol

DDism

Answer : D

You can use the Deployment Image Servicing and Management (DISM) tool to mount a Windows image from a WIM or VHD file. Mounting an image maps the contents of the image to a directory so that you can service the image using DISM without booting into the image. You can also perform common file operations, such as copying, pasting, and editing on a mounted image.

To apply packages and updates to a Windows Embedded Standard 7 image, we recommend creating a configuration set and then using Deployment Imaging Servicing and Management (DISM) to install that configuration set. Although DISM can be used to install individual updates to an image, this method carries some additional risks and is not recommended.

Question 6

Your network contains an Active Directory domain named contoso.com. Network Access Protection (NAP) is deployed to the domain.

You need to create NAP event trace log files on a client computer.

What should you run?

Alogman

BRegister-ObjectEvent

Ctracert

DRegister-EngineEvent

Answer : A

You can enable NAP client tracing by using the command line. On computers running Windows Vista, you can enable tracing by using the NAP Client Configuration console. NAP client tracing files are written in Event Trace Log (ETL) format. These are binary files representing trace data that must be decoded by Microsoft support personnel. Use the --o option to specify the directory to which they are written. In the following example, files are written to %systemroot%\tracing\nap. For more information, see Logman (http: //go. microsoft.com/fwlink/?LinkId=143549).

To create NAP event trace log files on a client computer

Open a command line as an administrator.

Type

logman start QAgentRt -p {b0278a28-76f1-4e15-b1df-14b209a12613} 0xFFFFFFFF 9 -o %systemroot%\tracing\nap\QAgentRt. etl --ets.

Note: To troubleshoot problems with WSHA, use the following GUID: 789e8f15-0cbf-4402-b0ed-0e22f90fdc8d.

Reproduce the scenario that you are troubleshooting.

Type logman stop QAgentRt -ets.

Close the command prompt window.

References:

http: //technet. microsoft. com/en-us/library/dd348461%28v=ws. 10%29. aspx

Question 7

You have Windows Server 2012 R2 installation media that contains a file named Install.wim. You need to identify the permissions of the mounted images in Install.wim.

What should you do?

ARun dism.exe and specify the /get-mountedwiminfo parameter.

BRun imagex.exe and specify the /verify parameter.

CRun imagex.exe and specify the /ref parameter.

DRun dism.exe and specify the/get-imageinfo parameter.

Answer : A

/Get-MountedWimInfo Lists the images that are currently mounted and information about the mounted image such as read/write permissions, mount location, mounted file path, and mounted image index.

References:

http: //technet. microsoft. com/en-us/library/cc749447(v=ws. 10). aspx

http: //technet. microsoft. com/en-us/library/dd744382(v=ws. 10). aspx

http: //technet. microsoft. com/en-us/library/hh825224. aspx

Microsoft Administering Windows Server 70-411 Exam Questions