Microsoft 70-414 Exam Practice Test Instant Access

Question 1

Your network contains an Active Directory domain named contoso.com. You deploy Active Directory Certificate Services (AD CS). You plan to deploy 100 external Web servers that will be publicly accessible and will require Secure Sockets Layer (SSL) certificates.

You also plan to deploy 50,000 certificates for secure email exchanges with Internet-based recipients.

You need to recommend a certificate services solution for the planned deployment.

What should you recommend? More than one answer choice may achieve the goal. Select the BEST answer.

ADeploy a certification authority (CA) that is subordinate to an external root CA.

BPurchase 50,100 certificates from a trusted third-party root certification authority (CA).

CDistribute a copy of the root certification authority (CA) certificate to external relying parties.

DInstruct each user to request a Secure Email certificate from a trusted third-party root CA, and then purchase 100 Web server certificates.

Answer : A

Question 2

Your network contains five Active Directory forests.

You plan to protect the resources in all of the forests by using Active Directory Rights Management Services (AD RMS).

Users in one of the forests will access the protected resources.

You need to identify the minimum number of AD RMS clusters required for the planned deployment.

What should you identify?

Afive licensing clusters and one root cluster

Bone licensing cluster

Cone root cluster

Dfive root clusters and one licensing cluster

Answer : D

Question 3

This question consists of two statements: One is named Assertion and the other is named Reason. Both of these statements may be true; both may be false; or one may be true, while the other may be false.

To answer this question, you must first evaluate whether each statement is true on its own. If both statements are true, then you must evaluate whether the Reason (the second statement) correctly explains the Assertion (the first statement). You will then select the answer from the list of answer choices that matches your evaluation of the two statements.

Assertion:

You must install and configure Network Device Enrollment Services (NDES) on CHICA01.

Reason:

NDES allows non-domain joined devices to obtain a Certificate Revocation List from an Active Directory-integrated certification authority, and then validate whether a certificate is valid.

Evaluate the Assertion and Reason statements and choose the correct answer option.

ABoth the Assertion and Reason are true, and the Reason is the correct explanation for the Assertion.

BBoth the Assertion and Reason are true, but the Reason is not the correct explanation for the Assertion.

CThe Assertion is true, but the Reason is false.

DThe Assertion is false, but the Reason is true.

EBoth the Assertion and the Reason are false.

Answer : D

The Network Device Enrollment Service (NDES) allows software on routers and other network devices running without domain credentials to obtain certificates based on the Simple Certificate Enrollment Protocol (SCEP).

https://technet.microsoft.com/en-us/library/hh831498.aspx

Question 4

Your network contains an Active Directory domain named contoso.com. The domain contains 20 servers that run Windows Server 2012. The domain contains a Microsoft System Center 2012 infrastructure. A web application named WebApp1 is installed on the 20 servers.

You plan to deploy a custom registry key for WebApp1 on the 20 servers. You need to deploy the registry key to the 20 servers. The solution must ensure that you can verify whether the registry key was applied successfully to the servers.

What should you do? More than one answer choice may achieve the goal. Select the BEST answer.

AFrom Operations Manager, create a monitor.

BFrom the Group Policy Management console, create a Group Policy object (GPO).

CFrom Configuration Manager, create a Compliance Settings.

DFrom Orchestrator Runbook Designer, create a runbook.

Answer : C

Question 5

Your network contains an Active Directory forest named contoso.com.

Your company works with a partner company that has an Active Directory forest named fabrikam.com. Both forests contain domain controllers that run only Windows Server 2012 R2.

The certification authority (CA) infrastructure of both companies is configured as shown in the following table.

You need to recommend a certificate solution that meets the following requirements:

Server authentication certificates issued from fabrikam.com must be trusted automatically by the computers in contoso.com.

The computers in contoso.com must not trust automatically any other type of certificates issued from the CA hierarchy in fabrikam.com.

What should you include in the recommendation?

ADeploy a Group Policy object (GPO) that defines intermediate CAs. Import a certificate that has an application policy object identifier (OID) of CA Encryption Certificate.

BDeploy a Group Policy object (GPO) that defines an enterprise trust. Import a certificate that has an application policy object identifier (OID) of Microsoft Trust List Signing.

CDeploy a Group Policy object (GPO) that defines an enterprise trust. Import a certificate that has an application policy object identifier (OID) of CA Encryption Certificate.

DDeploy a Group Policy object (GPO) that defines intermediate CAs. Import a certificate that has an application policy object identifier (OID) of Microsoft Trust List Signing.

Answer : B

Question 6

You need to recommend a storage solution for the App1 VHDs. The solution must minimize downtime if a Hyper-V host fails.

What should you include in the recommendation?

ADistributed File System (DFS) Replication

BA clustered file server of the File Server for scale-out application data type

CA clustered file server of the File Server for general use type

DA Distributed File System (DFS) namespace

Answer : B

Question 7

A company has data centers in Seattle and New York. A high-speed link connects the data centers. Each data center runs a virtualization infrastructure that uses Hyper-V Server 2012 and Hyper-V Server 2012 R2. Administrative users from the Seattle and New York offices are members of Active Directory Domain Services groups named SeattleAdmins and NewYorkAdmins, respectively.

You deploy one System Center Virtual Machine Manager (SCVMM) in the Seattle data center. You create two private clouds named SeattleCloud and NewYorkCloud in the Seattle and New York data centers, respectively.

You have the following requirements:

Administrators from each data center must be able to manage the virtual machines and services from their location by using a web portal.

Administrators must not apply new resource quotas or change resource quotas.

You must manage public clouds by using the existing SCVMM server.

You must use the minimum permissions required to perform the administrative tasks.

You need to configure the environment.

What should you do?

AFor both the Seattle and New York admin groups, create a User Role and assign it to the Application Administrator profile. Add the Seattle and New York private clouds to the corresponding User Role.

BFor both the Seattle and New York admin groups, create a User Role and assign it to the Tennant Administrator profile. Add the Seattle and New York private clouds to the corresponding User Role.

CAdd both SeattleAdmins and NewYorkAdmins to the Local Administrators group of each Hyper-V host in Seattle and New York, respectively.

DAdd both SeattleAdmins and NewYorkAdmins to the Local Administrators group of the SCVMM server.

Answer : A

Members of the Application Administrator (Self-Service User) ole can create, deploy, and manage their own virtual machines and services by using the VMM console or a Web portal.

Microsoft 70-414 Implementing an Advanced Server Infrastructure Exam Practice Test