PrepAway - Latest Free Exam Questions & Answers

Which two components should you install?

You deploy a windows Server Update (WSUS) server named Server01.
You need to ensure that you can view update reports and computer reports on server01.
Which two components should you install? Each correct answer presents part of the solution.

PrepAway - Latest Free Exam Questions & Answers

A.
Microsoft Report Viewer 2008 Redistributable Package

B.
Microsoft .Net Framework 2.0

C.
Microsoft SQL Server 2008 R2 Builder 3.0

D.
Microsoft XPS Viewer

E.
Microsoft SQL Server 2012 reporting Services (SSRS)

29 Comments on “Which two components should you install?

  1. Marhoon says:

    Answers are:
    A, B main components.

    anyone will go for option E i think will be wrong as reporting services includes programming features that enabling extend and customize reporting functionality which is more advanced than question here.

    My reference is 20411D Trainer hand Book & related lab:

    The following software is required for WSUS
    • Windows Server 2012, Windows
    Server 2008 R2, Windows Server 2008 Service
    Pack 1 (SP1) or newer, Windows Server 2003
    SP1 or newer, Windows Small Business
    Server 2008, or Windows Small Business
    Server 2003.
    • Internet Information Services (IIS) 6.0 or newer.
    • Microsoft .NET Framework 2.0 or newer.
    • Microsoft Management Console (MMC) 3.0.
    • Microsoft Report Viewer Redistributable 2008 or newer.
    • SQL Server 2012, SQL Server 2008, SQL Server 2005 SP2, or Windows Internal Database.




    0



    0
  2. frank says:

    Every question we can find

    1)
    Your network contains two Active Directory forests named contoso.com and adatum.com. All domain controllers run Windows 2012 R2.
    The Adatum.com domain contains a Group Policy object (GPO) named GPO1. An Administrator from the Adatum.com back up to a USB flash drive.
    You have a domain controller named dc1.contoso.com You insert USB flash drive in dc1.contoso.com.
    You need to identify the domain-specific reference in GPO1
    What should you do?

    A) From the Migration Table Editor, click Populate from GPO.
    B) From the Migration Table Editor, click Populate from Backup. <– Answer
    C) From Group Policy Management, run the Group Policy Results Wizard.
    D) From Group Policy Management, run the Group Policy Modelling Wizard.
    ———————————————————————————————

    2)
    You deploy a windows Server Update (WSUS) server named Server01.
    You need to prevent the WSUS service on Server01 from being updated automatically.
    What should you do from the update service console?

    A. From the Product and Classification options, modify the Products setting.
    B. From the Automatic Approvals options, modify the advanced settings. <- Answer
    C. From the Product and Classification options, modify the Classifications setting
    D. From the Automatic Approvals options, modify the Default Automatic Approval rule.

    ————————————————————————————————————————————–

    3)
    You deploy a windows Server Update (WSUS) server named Server01.
    You need to ensure that you can view update reports and computer reports on server01.
    Which two components should you install? Each correct answer presents part of the solution.

    A. Microsoft Report Viewer 2008 Redistributable Package <-Answer
    B. Microsoft .Net Framework 2.0 <- Answer
    C. Microsoft SQL Server 2008 R2 Builder 3.0
    D. Microsoft XPS Viewer
    E. Microsoft SQL Server 2012 reporting Services (SSRS)
    ————————————————————————————————————————————–
    4)
    You have a group managed Service Account name Account01. Only three servers named Server01, Server02 and Server03 are allowed to use Account01 service account.
    You plan to decommission Server01.
    You need to prevent Server01 from using the Account01 service account. The solution must ensure that Server02 and Server03 continue to use the Account01 service account
    What command should you run? To answer, select the appropriate options in the answer area.

    Answer Area Account01
    Remove-ADServiceAccount -DNSHostName Server01
    Reset-ADServiceAccount -PrincipalsAllowedToReteriveMamagedPassword Server01$
    Set-ADServiceAccount -SAMAccountNAme Server02,Server03
    -Server Server02$,Server03$ Unistall-Addsserviceaccount

    Set-ADServiceAccount -Name Account01 -PrincipalsAllowedToRetrieveManagedPassword Server02 Server03

    5)
    Your Company is testing DirectAccess on Windows Server 2012 R2.
    Users report that when they connect to the corporate network by using DirectAccess, access to Internet websites and Internet hosts is slow.
    The users report that when they disconnect from DirectAccess, acces to the internet websites and the internet hosts is much faster.
    You need to identify the most likely cause of the performance issue.
    What should you identify?

    A. DirectAccess uses a self-signed certificate.
    B. The corporate firewall blocks TCP port 8080.
    C. Force tunneling is enabled New-AdServiceAccount service01 –DNSHostName service01.contoso.com New-ADServiceAccount : Key does not exist
    At line : 1 char : 1
    + New-ADServicAccount service01
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo : NotSpecified: {CN=service01,CN… =contoso,DC=com:String} [New-ADServiceAccount], ADException
    +FullyQualifiedErrorId :
    ActiveDirectoryserver : -2146893811,Microsoft. ActiveDirectory . Management . Commands . NewADServiceAccount

    You need to create a Managed service Account.
    What should you do?

    A. Run Set-KDSConfiguration and then run New-ADServiceAccount –Name “service01” –DNSHostName service01.contoso.com <- Answer

    B. Run New-AuthenticationPolicySilo, and then run New-ADServiceAccount – Name “service01” – DNSHostName

    C. Run New-ADServiceAccount – Name “service01” – DNSHostName service01.contoso.com – RestrictToSingleComputer <– Answer

    D. Run New-ADServiceAccount – Name “service01” – DNSHostName service01.contoso.com – SAMAccountName service01.
    ————————————————————————————————————————————–

    8)
    ACL
    Which command to list global object access auditing entries for file and folder on Server1 (Drop-Down)

    First Down-Drop option Second Down-Drop option /type:File /view
    auditpol.exe /get
    can't remember /list
    Get-ACL /resourceSACL
    secedit.exe can't remember

    auditpol.exe /resourceSACL
    Refer, technet.microsoft.com/en-us/library/ff625687.aspx
    ————————————————————————————————————————————–
    9)
    FSMO roles (Hotspot)
    You plan to transferring DC that holding FSMO roles.
    You need to select which tools can use to transfer domain naming master role and Operations master roles.
    Role need to transfer
    Tool Domain naming master Operations master
    AD Domains and Trust x
    AD User and Computers x
    Schmeca MMC

    ————————————————————————————————————————————–

    10)
    Server1 download update from microsoft update. You have Server2 that must syncronize update from Server1. Have firewall separate between Server1 and Server2.
    Which port should to open on Server2 to syncronize ?

    A. 80
    B. 443
    C. 3389
    D. 8530 <– Answer
    ————————————————————————————————————————————–
    11)
    gMSA (Drag and Drop)
    You have DC run Windows Server 2008 R2. You deploy new DC run Windows Server 2012 R2.
    new DC have configured to running Load balance of application App1, show as below table
    Server1 WS2012 R2 can't remember
    Load Balance
    Server2 WS2012 R2 can't remember
    Load Balance
    You need to use group Managed Services Accounts to identify on App1.
    Need to drag-drop 3 process with correct in sequence steps.

    Add-KdsRootKey
    New-ADServiceAccount
    Set-ADServiceAccount
    Install-ADServiceAccount
    Add modify to App1

    Choose Add-KdsRootKey, New-ADServiceAccount, Add modify to App1

    ————————————————————————————————————————————–
    13)
    12)
    Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.
    You need to configure Server1 to meet the following requirements:

    – Ensure that old files in a folder named Folder1 are archived automatically to a folder named Archive1.
    – Ensure that all JPG files can always be saved to a local computer, even when a file screen exists.

    Which two nodes should you configure?
    To answer, select the appropriate two nodes in the answer area.

    File Screens – Here you can set a "file screen exception for JPG's"
    File Management Tasks – Set a new task to archive data

    ————————————————————————————————————————————–

    14)
    Your network contains two servers named server1 and Server2. Both servers run the Windows Server 2012 R2.
    On Server1, you create a Data Collector set (DCS) named Data1
    You need to export Data1 to Server2.

    A) Right-click Data1 and click Properties
    B) Right-click Data1 and click Data manager
    C) Right-click Data1 and click Export List
    D) Right-click Data1 and click Save Template <— Answer

    ————————————————————————————————————————————–
    15)
    You have two Windows Server Update Services (WSUS) servers named Server1 and Server2. Server01 synchronizes from Microsoft Update. Server2 synchronizes updates from Server1.
    Both servers are members of the same Active Directory domain.
    You configure Server1 to require SSL for all WSUS metadata by using a certificate issued by an enterprise root certification authority (CA).
    You need to ensure that Server2 synchronizes updates from Server1. What should you do on Server2?

    A. From the Update Services console, modify the Update Source and Proxy Server options.
    B. From a command prompt, run wsusutil.exe configuresslproxy server2 443.
    C. From a command prompt, run wsusutil.exe configuressl server1. <– Answer
    D. From a command prompt, run wsusutil.exe configuresslproxy server1 443.

    ————————————————————————————————————————————–

    16)
    You have three Windows Server Update Services (WSUS) Servers named Server01 Server02 and Server03. Server01 synchronizes form Microsoft Update. You need to ensure that only Server02 and Server03 can Synchronize updates from Server01.

    What should you do?

    A) Modify %ProgramFiles%\Update Services\WebServices\Serversyncgwevservice\SimpleAuth.asmx
    B) From the Update Services console, modify the Update Source and Proxy Server options.
    C) From the Update Services console, modify the Automatic Approvals Options.
    D) Modify %ProgramFiles%\Update Services\WebServices\Serversyncgwevservice\Web.config ^– Answer
    ————————————————————————————————————————————–
    17)
    You have a DNS server that runs Windows Server 2012 R2. The server hosts the zone for contoso.com and is accessible from the internet.
    You need to create a DNS record for the Sender Policy Framework (SPF) to list that are authorized ti send email for contoso.com
    Which type of record should you create?

    A) Name Server (NS)
    B) Mail.exchanger (MX)
    C) Resource record signature (RRSIG)
    D) Text (TXT) <– Answer

    ————————————————————————————————————————————–

    18)
    You have a group Managed Service Account named Service01, Three server’s names Server01, Server02 and Server03 currently use Service01 Service account.

    You plan to decommission Server01.

    You need to remove the cached password of the Service01 service account from Server01.

    The solution must ensure that Server02 and Server03 continues to use Service02.

    A) Uninstall-ADServiceAccount
    B) Set-ADServiceAccount
    C) Remove- ADServiceAccount <– Answer
    D) Reset-ADServiceAccountPassword

    ————————————————————————————————————————————–
    19)
    Create a starter gpo call Starter_GPO, and assign edit permission to a group Group1
    Create a new gpo called GPO1
    which the following answer is correct
    A.*** in GPO1

    B.change Administrative Template in GPO1

    C.change the Group policy preference of Starter_GPO <– Answer

    D.change the permission of Starter_GPO

    ————————————————————————————————————————————–

    20)
    One user needed a mapped drive but if they had it already you weren't to replace it.
    Another user had a mapped drive. You need to update the UNC but not any other settings.
    Options were

    If X already exists, it must NOT make any changes
    If Y already exists, change the UNC path, but leave the contents of it
    Create, <— Answer
    replace,
    delete and
    update <—- Answer

    ————————————————————————————————————————————–

    21)

    File1 has been encrypted by Contoso\admin1
    File2 has been encrypted by Server1\admin1
    File3 has been encrypted by Server1\administrator

    You need to back up the DRA agents.
    Who is the owner of each of the agents.

    There is a selection of drop down boxes. You should to select one in every file
    File1 : Contoso\admin
    Contoso\administrator < Answer
    Server1\admin1
    Server1\administrator

    File2 : Contoso\admin
    Contoso\administrator
    Server1\admin1
    Server1\administrator < Answer

    File3 : Contoso\admin
    Contoso\administrator
    Server1\admin1
    Server1\administrator < Answer

    https://technet.microsoft.com/en-us/library/cc512680.aspx

    ————————————————————————————————————————————–

    22)
    You have a windows Server update services (WSUS) server01 and Server02. Server01 synchronizes from Microsoft Update. Server02 Synchronizes updates from Server01. Both Servers are members of the same Active Directory domain.

    You configure Server01 to require SSL for all WSUS metadata by using certificate issued by an enterprise root certification authority (CA)

    You need to ensure that server02 synchronizes updates from Server01

    What should you do?

    A) From the update Services console, modify the Automatic Approvals options

    B) From command prompt run wsusutil.exe configuredns server02.

    C) From Internet Information Services (IIS) Manager, import certificate

    D) From the update services console, modify the Update Source and Proxy Server Options. <– Answer

    ————————————————————————————————————————————–

    23)

    You have two Windows Server Update Services (WSUS) servers named Server01 and Server02. Server01 synchronizes from Microsoft Update. Server02 synchronizes updates from Server01. Both servers are members of the same Active Directory domain.

    You configure Server01 to require SSL for all WSUS metadata by using a certificate issued by an enterprise root certification authority (CA).

    You need to ensure that Server02 synchronizes updates from Server01.

    What should you do on Server02?

    A. From a command prompt, run wsusutil.exe configuresslproxy server02 443.
    B. From a command prompt, run wsusutil.exe configuressl server01. <– Answer
    C. From a command prompt, run wsusutil.exe configuresslproxy server01 443.
    D. From the Update Services console, modify the Update Source and Proxy Server options.

    ————————————————————————————————————————————–
    24)
    you want to encypt a drive without TPM.

    Allow enhanced PINs for startup
    Allow network unlock at startup
    Allow Secure Boot for integrity validation
    Choose how BitLocker-protected operating system drives can be recovered
    Configure minimum PIN length for startup
    Configure TPM platform validation profile (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2)
    Configure TPM platform validation profile for BIOS-based firmware configurations
    Configure TPM platform validation profile for native UEFI firmware configurations
    Configure use of hardware-based encryption for operating system drives
    Configure use of passwords for operating system drives
    Disallow standard users from changing the PIN or password
    Enable use of BitLocker authentication requiring preboot keyboard input on slates
    Enforce drive encryption type on operating system drives
    Require additional authentication at startup <– Answer
    Require additional authentication at startup (Windows Server 2008 and Windows Vista)
    Reset platform validation data after BitLocker recovery
    Use enhanced Boot Configuration Data validation profile
    ————————————————————————————————————————————–
    25)
    You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012.
    All servers run Windows Server 2012 R2. All client computer run Windows 8.1.
    The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.
    You need to identify whether deleted objects can be recovered from the Active Directory Recycle Bin.
    Which cmdlet should you use?

    A. Get-ADGroupMember
    B. Get-ADDomainControllerPasswordReplicationPolicy
    C. Get-ADDomainControllerPasswordReplicationPolicyUsage
    D. Get-ADDomain
    E. Get-ADOptionalFeature
    F. Get-ADAccountAuthorizationGroup
    G. Get-ADAuthenticationPolicySlio
    H. Get-ADAuthenticationPolicy

    Answer: E
    ————————————————————————————————————————————–

    26)
    You need to identify whether the members of the protected Users group will be prevented from authenticating by using NTLM.
    Which cmdlet should you use?

    A. Get-ADGroupMember
    B. Get-ADDomainControllerPasswordReplicationPolicy
    C. Get-ADDomainControllerPasswordReplicationPolicyUsage
    D. Get-ADDomain
    E. Get-ADOptionalFeature
    F. Get-ADAccountAuthorizationGroup
    G. Get-ADAuthenticationPolicySlio
    H. Get-ADAuthenticationPolicy

    Answer: D
    ————————————————————————————————————————————–
    27)
    You need to identify which user accounts were authenticated by RODC1. Which cmdlet should you use?

    A. Get-ADGroupMember
    B. Get-ADDomainControllerPasswordReplicationPolicy
    C. Get-ADDomainControllerPasswordReplicationPolicyUsage
    D. Get-ADDomain
    E. Get-ADOptionalFeature
    F. Get-ADAccountAuthorizationGroup
    G. Get-ADAuthenticationPolicySlio
    H. Get-ADAuthenticationPolicy

    Answer: C

    ————————————————————————————————————————————–
    28)
    You need to identify whether the members of the protected Users group will be prevented from authenticating by using NTLM.
    Which cmdlet should you use?

    A. Get-ADGroupMember
    B. Get-ADDomainControllerPasswordReplicationPolicy
    C. Get-ADDomainControllerPasswordReplicationPolicyUsage
    D. Get-ADDomain
    E. Get-ADOptionalFeature
    F. Get-ADAccountAuthorizationGroup
    G. Get-ADAuthenticationPolicySlio
    H. Get-ADAuthenticationPolicy

    Answer: D
    ————————————————————————————————————————————–
    29)
    You need to identify which security principals are authorized to have their passwords cached on RODC1

    A. Get-ADGroupMember
    B. Get-ADDomainControllerPasswordReplicationPolicy
    C. Get-ADDomainControllerPasswordReplicationPolicyUsage
    D. Get-ADDomain
    E. Get-ADOptionalFeature
    F. Get-ADAccountAuthorizationGroup
    G. Get-ADAuthenticationPolicySlio
    H. Get-ADAuthenticationPolicy

    Answer:C Get-ADDomainControllerPasswordReplicationPolicyUsage
    ————————————————————————————————————————————–

    30)
    You need to identify which domain controllers are authorized to be cloned using virtual domain controller cloning.
    A. Get-ADGroupMember
    B. Get-ADDomainControllerPasswordReplicationPolicy
    C. Get-ADDomainControllerPasswordReplicationPolicyUsage
    D. Get-ADDomain
    E. Get-ADOptionalFeature
    F. Get-ADAccountAuthorizationGroup
    G. Get-ADAuthenticationPolicySlio
    H. Get-ADAuthenticationPolicy

    Answer :A Get-ADGroupMember
    ————————————————————————————————————————————–
    31)
    You need to identify which domain controller must be online when cloning a domain controller.

    A. Get-ADGroupMember
    B. Get-ADDomainControllerPasswordReplicationPolicy
    C. Get-ADDomainControllerPasswordReplicationPolicyUsage
    D. Get-ADDomain
    E. Get-ADOptionalFeature
    F. Get-ADAccountAuthorizationGroup
    G. Get-ADAuthenticationPolicySlio
    H. Get-ADAuthenticationPolicy

    d: Get-ADDomain
    ————————————————————————————————————————————–

    32)
    Determine what domain controller needs to be online to promote a RODC.

    A. Get-ADGroupMember
    B. Get-ADDomainControllerPasswordReplicationPolicy
    C. Get-ADDomainControllerPasswordReplicationPolicyUsage
    D. Get-ADDomain
    E. Get-ADOptionalFeature
    F. Get-ADAccountAuthorizationGroup
    G. Get-ADAuthenticationPolicySlio
    H. Get-ADAuthenticationPolicy

    D: Get-ADDomain

    ————————————————————————————————————————————–
    33)
    What accounts are allowed to replicate their password with the RODC?

    A. Get-ADGroupMember
    B. Get-ADDomainControllerPasswordReplicationPolicy
    C. Get-ADDomainControllerPasswordReplicationPolicyUsage
    D. Get-ADDomain
    E. Get-ADOptionalFeature
    F. Get-ADAccountAuthorizationGroup
    G. Get-ADAuthenticationPolicySlio
    H. Get-ADAuthenticationPolicy

    C: Get-ADDomainControllerPasswordReplicationPolicy

    ————————————————————————————————————————————–

    34)
    You need to identify whose passwords can be stored, view stored passwords.

    A. Get-ADGroupMember
    B. Get-ADDomainControllerPasswordReplicationPolicy
    C. Get-ADDomainControllerPasswordReplicationPolicyUsage
    D. Get-ADDomain
    E. Get-ADOptionalFeature
    F. Get-ADAccountAuthorizationGroup
    G. Get-ADAuthenticationPolicySlio
    H. Get-ADAuthenticationPolicy

    Get-ADDomainControllerPasswordReplicationPolicyUsage


    35) You have a server named Server1 that runs Windows Server 2012 R2. You discover that the performance of Server1 is poor. The results of a performance report generated on Server1 are shown in the following table.

    Counter | Value
    Processor(Total)\% DPC Time 35
    Processor(Total)\% Interupt Time 2
    Processor(Total)\% User time 12
    System\Processor Queue Length 6
    Processor Information(_Total)\% 98
    Processor Time
    Memory\Available Bytes 7,341,024,329
    Memory\ Pages/Sec 125

    A. Driver malfunction
    B. Insufficient ram,
    C. Insufficient processors <– Answer
    D. Excessive paging.

    Processor\% Processor Time This measures the percentage of elapsed time the processor spends executing a non-idle thread.
    If the percentage is greater than 85 percent, the processor is overwhelmed and the server may require a faster processor

    System\Processor Queue Length This indicates the number of threads in the processor queue.
    The server doesn't have enough processor power if the value is more than two times the number of CPUs for an extended period of time.

    36)
    Your network contains one Active Directory domain named contoso.com. The domain contains a file server named Server01 that runs Windows Server 2012 R2. Server01 has an operating system drive and a data drive. Server01 has a trusted Platform Module (TPM).
    Which cmdlet should you run first?

    A. Enable-TPMAutoProvisioning
    B. Unblock-TPM
    C. Install-WindowsFeature <- Answer
    D. Lock-BitLocker
    ————————————————————————————————————————————–

    37)
    DFS Replication
    What command do you user to replicate files
    Robocopy.exe
    What command do you user to replicate the database
    ExportDFSRClone
    ————————————————————————————————————————————–
    38)
    Created admx File and copied to central store. Trying to edit settings a warning pops up: "An appropriate resource file could not be found for file \\domainname.com\sysvol\domainname.com\Policies\PolicyDefinitions\anyfile.admx (error = 2): The system cannot find the file specified" What is wrong?
    ADML File is missing
    ————————————————————————————————————————————–
    39)

    You Create Service Account: Service NT\Service1. You see the Service1 Properties Popup. The question is: What kind of Account is the service Account used on the computer?
    "virtual Account" ,
    Which account is used when this Serviceaccount gets into Network? – If a service accesses the network while running as a virtual account, it accesses resources as the
    “computer account” (DOMAIN\Computername$).
    ————————————————————————————————————————————–

    40)
    You have a group policy. You need to add a comment into the group policy. How do you do this?
    You edit the GPO Object
    ————————————————————————————————————————————–




    0



    1
    1. Josh says:

      what’s difference between #22 and #23???I believe both should have the same answer as “From the Update Services console, modify the Update Source and Proxy Server options”
      any one has an idea?




      0



      0
  3. Kaye says:

    A,B, confirmed from my reference ebook for 70-411

    “To view the reports, you must first install Microsoft .NET Framework 2.0 and then
    download and install Microsoft Report Viewer 2008 Redistributable on Microsoft’s website.”




    1



    0
  4. Gabriel Porto says:

    I’ve taken the exam last Friday (05/Feb/2016) here in Australia and passed with a score of 876.
    Got all these new questions which FRANK shared here, also around 4 new questions.

    Studied the 411(v.5) and 411(v.6) here. Training Guide and Exam Ref books (most important) and also the Sacriestory.353q PDF.

    Thanks guys, 🙂




    1



    0
  5. Raei Siva says:

    New 70-411 Exam Questions and Answers Updated Recently (6/May/2016):

    NEW QUESTION 435
    You have a server named Server1 that is a number of a domain named contoso.com. You view the properties of a service on Server1 as shown in the graphic.
    Image URL: examgod.com/plimages/257a8e899d68_F2B9/new-70-411-exam-dumps-4351_thumb.png
    Use the drop-down menus to select the answer choice that completes each statement. NOTE: Each correct selection is worth one point.
    Image URL: examgod.com/plimages/257a8e899d68_F2B9/new-70-411-exam-dumps-4352_thumb.jpg

    Answer:
    Image URL: examgod.com/plimages/257a8e899d68_F2B9/new-70-411-exam-dumps-4353_thumb.jpg
    Explanation:
    Virtual accounts are “managed local accounts” that provide the following features to simplify service administration:
    – No password management is required.
    – The ability to access the network with a computer identity in a domain environment.
    Virtual accounts require very little management. They cannot be created or deleted, nor do they require any password management. You must be a member of the Administrators group on the local computer to perform the following procedures. To configure a service to use a virtual account:
    – Click Start, point to Administrative Tools, and then click Services.
    – In the details pane, right-click the service that you want to configure, and then click Properties.
    – Click the Log On tab, click This account, and then type NT SERVICE\ServiceName. When you are finished, click OK.
    – Restart the service for the change to take effect.
    READ MORE — technet.microsoft.com/en-us/library/dd548356%20(v=WS.10).aspx

    NEW QUESTION 436
    You have a Windows Server Update Services (WSUS) server named Server1. Server1 synchronizes from Microsoft Update. You plan to deploy a new WSUS server named Server2. Server2 will synchronize updates Server2 will be separated from Server1 by a firewall from Server1. You need to identify which port must be open on the firewall so that Server2 can synchronize the updates. Which port should you identify?

    A. 8530
    B. 3389
    C. 443
    D. 80

    Answer: A
    Explantion:
    WSUS upstream and downstream servers will synchronize on the port configured by the WSUS Administrator. By default, these ports are configured as follows:
    – On WSUS 3.2 and earlier, port 80 for HTTP and 443 for HTTPS
    – On WSUS 6.2 and later (at least Windows Server 2012), port 8530 for HTTP and 8531 for HTTPS The firewall on the WSUS server must be configured to allow inbound traffic on these ports
    READ MORE — technet.microsoft.com/en-us/library/hh852346.aspx

    NEW QUESTION 437
    A technician installs a new server that runs Windows Server 2012 R2. During the installation of Windows Server Update Services (WSUS) on the new server, the technician reports that on the Choose Languages page of the Windows Server Update Services Configuration Wizard, the only available language is English. The technician needs to download updates in French and English. What should you tell the network technician to do to ensure that the required updates are available?

    A. Complete the Windows Server Update Services Configuration Wizard, and then modify the update language on the server.
    B. Uninstall all instances of the Windows Internal Database.
    C. Change the update languages on the upstream server.
    D. Change the System Local of the server to French.

    Answer: C
    Explanation:
    Configure upstream servers to synchronize updates in all languages that are required by downstream replica servers.
    You will not be notified of needed updates in the unsynchronized languages.
    The Choose Languages page of the WSUS Configuration Wizard allows you to get updates from all languages or from a subset of languages. Selecting a subset of languages saves disk space, but it is important to choose all the languages that are needed by all the downstream servers and client computers of a WSUS server.
    Downstream servers and client computers will not receive all the updates they need if you have not selected all the necessary languages for the upstream server. Make sure you select all the languages that will be needed by all the client computers of all the downstream servers.
    You should generally download updates in all languages on the root WSUS server that synchronizes to Microsoft Update. This selection guarantees that all downstream servers and client computers will receive updates in the languages that they require.
    To choose update languages for a downstream server:
    If the upstream server has been configured to download update files in a subset of languages:
    In the WSUS Configuration Wizard, click Download updates only in these languages (only languages marked with an asterisk are supported by the upstream server), and then select the languages for which you want updates.
    READ MORE — technet.microsoft.com/en-us/library/hh328568(v=ws.10).aspx

    NEW QUESTION 438
    Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question. Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs. You have a GPO named GPO1 that is linked to the domain. You need to configure GPO1 to apply settings to Group1 only. What should you use?

    A. Dcgpofix
    B. Get-GPOReport
    C. Gpfixup
    D. Gpresult
    E. Gpedit. msc
    F. Import-GPO
    G. Restore-GPO
    H. Set-GPInheritance
    I. Set-GPLink
    J. Set-GPPermission
    K. Gpupdate
    L. Add-ADGroupMember

    Answer: C

    NEW QUESTION 439
    ……

    NEW QUESTION 440
    Your network contains one Active Directory forest named contoso.com. You create a starter Group Policy object (GPO) named Starter_GPO1. From the Delegation tab of Starter_GPO1, you add a group named GPO_Admins and you assign the Edit settings permissions to the group. You create a new GPO named GPO1 from Starter_GPO1. You need to identity which action can he performed by the members of the GPO Admins group. What should you identify?

    A. Modify the Delegation settings of Starter_GPO1.
    B. Modify the Group Policy Preferences in Starter_GPO1.
    C. Link a WMI filter to GPO1.
    D. Modify the Administrative Templates in GPO1.

    Answer: A
    Explanation:
    Permission rights applied to starter GPO objects are relative to the starter GPO objects only; they are not inherited from actual GPOs created from starter GPOs.
    B is wrong because Starter GPOs do not have preferences, only Administrative Template policy settings.
    READ MORE — technet.microsoft.com/en-us/library/cc753200.aspx

    NEW QUESTION 441
    ……

    P.S. These New 70-411 Exam Questions Were Just Updated From The Real 70-411 Exam, You Can Get The Newest 70-411 Dumps In PDF And VCE From — http://bitly.com/70-411-dumps-vce-pdf (447q)

    Good Luck !!!




    0



    0
  6. Ganesh says:

    QUESTION 1: You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed. You want to clone a domain controller to create another domain controller. Which two of the following steps should you perform first? (Choose two).

    A. You should run the Install-ADDSDomainController PowerShell cmdlet.
    B. You should run the New-ADDCCloneConfigFile PowerShell cmdlet.
    C. You should run the sysprep.exe /oobe command.
    D. You should run the dcpromo.exe /adv command.
    E. You should place a DCCloneConfig.xml file in the %Systemroot%NTDS folder.
    F. You should place an Unattend.xml file in the %Systemroot%SYSVOL folder.

    Answer: B, E

    QUESTION 2: You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. The Site.com network has a Windows Server 2012 R2 domain controller named Site-DC10 which hosts the Web Server, DNS and DHCP services. You create a snapshot backup of Site-DC10 using the Ntdsutil utility and mount the snapshot. How would you access the contents of the snapshot?

    A. You should run the Ntdsutil.exe utility with the partition management parameter. B. You should run the Dsamain.exe utility with the /allowupgrade parameter.
    C. You should run the Dsamain.exe /dbpath command from the command prompt.
    D. You should run the Ntdsutil.exe utility with the files parameter.

    Answer: C

    QUESTION 3: You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All domain controllers in the Site.com domain have Microsoft Windows Server 2012 R2 installed. Several Sales users spend most of their time away from the office. You implement DirectAccess to enable the Sales users to connect to the network when they are away from the office. All computers used by the Sales users are joined to the domain. You create a DirectAccess client group named SalesDirectAccess and add all the computer accounts for the Sales users’ computers to the SalesDirectAccess group. Some Sales users report that they are unable to access the network using DirectAccess. Other Sales report that they can connect successfully. You discover that only users using laptop computers can connect using DirectAccess. Sales users are unable to connect when they use desktop computers. How can you enable all Sales users to access the network using DirectAccess?

    A.You should add the computer accounts for the Sales user computers to the RAS and IAS Servers group.
    B.You should add the user accounts for the Sales users to the SalesDirectAccess group.
    C.You should modify the group that the Direct Access Client Settings GPO applies to. D.You should modify the WMI filter that the Direct Access Client Settings GPO is linked to.

    Answer: D

    QUESTION 4: You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed.
    4. Sales users often work away from the office. The Sales users have portable computers that have Windows 7, Windows Vista or Windows XP installed. All client computers are members of the Site.com domain. You have been asked to implement a remote access solution to enable the Sales users to connect to the network when they are working away from the office. The remote access solution must ensure that all Sales users can connect to the network. Which VPN solution should you implement?

    A. Point-to-Point Tunneling Protocol (PPTP).
    B. Layer 2 Tunneling Protocol (L2TP).
    C. Secure Socket Tunneling Protocol (SSTP).
    D. DirectAccess.

    Answer: B

    QUESTION 5: You are hired by Site.com to administrate a DNS server named Site-SR08 which is currently equipped with a Server Core Installation on Windows Server 2012. Which of the following commands will need to be run if you are required to have the time-to-live (TTL) value of a name server (NS) record displayed, taking into account that the time-to-live (TTL) value is currently being cached by the DNS Server service on Site-SR08?

    A. You will need to run the Show-DNSServerCache command.
    B. You will need to run the ipconfig.exe /display command.
    C. You will need to run the nslookup.exe command.
    D. You will need to run the ipconfig.exe/register command.

    Answer:A

    QUESTION 6: You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed.Site.com has a main office and a branch office. The two offices are connected by a slow WAN
    5. link. A server in the main office named Site-SR21 runs the File and Storage Services and Distributed File System roles. A server in the branch office named Site-SR22 also runs the File and Storage Services and Distributed File System roles. Shared folders on Site-SR21 and Site-SR22 are replicated to each other using DFS Replication (DFSR).You discover that DFS replication between the two servers is using too much bandwidth over the WAN link. How can you limit the amount of bandwidth used by DFS replication?

    A. You should run the Set-DfsrConnectionSchedule cmdlet.
    B. You should run the Set-DfsrGroupSchedule cmdlet.
    C. You should run the Set-DfsReplicatedFolder cmdlet.
    D. You should run the Set-DfsReplicationGroup cmdlet.

    Answer: B

    QUESTION 7: You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed. Site.com has a Research department. A server in the Research department named Site-SR25 runs the File and Storage Services role and the File Server Resource Manager role service. Sensitive information is stored in shared folders on Site-SR25. You want to be notified by e- mail when an executable file is stored in a shared folder on Site-SR25. The notification must include information about the user who stored the file and the exact location of the file.What should you do?

    A. You should enable Encrypted File System (EFS) on Site-SR25.
    B. You should modify the permissions of the shared folders on Site-SR25.
    C. You should configure a File Screen Exception on Site-SR25.
    D. You should configure a File Screen on Site-SR25.

    Answer: D

    QUESTION 8: Your role of Network Administrator at Site.com includes the management of the Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed. Site.com has a Sales department and a Production department. An OU exists for each department. The OUs contain the user and computer accounts for the respective departments. A shadow group named SalesSG is configured for the Sales OU and contains all objects within the Sales OU. A password settings object (PSO) named SalesPSO is applied to the SalesSG group and applies a minimum password length of 6 characters.You want to modify the PSO to require a minimum password length of 8 characters. Which of the following cmdlets should you use?

    A. You should use the Get-ADAccountResultantPasswordReplicationPolicy cmdlet.
    B. You should use the Set-ADDefaultDomainPasswordPolicy cmdlet.
    C. You should use the Set-ADFineGrainedPasswordPolicy cmdlet.
    D. You should use the Set-ADAccountPassword cmdlet.
    E. You should use the Set-ADDefaultDomainPasswordPolicy cmdlet.

    Answer: C

    QUESTION 9: You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All domain controllers in the Site.com domain have Microsoft Windows Server 2012 R2 installed. You implement DirectAccess. You leave the connection name as the default when you run the DirectAccess wizard. You want to view the properties of a DirectAccess connection. In the Networks window, what is the name of the DirectAccess connection?
    A. VPN Connection.
    B. Remote Access Connection.
    C. Local Area Connection.
    D. CertKingdom.com.
    E. Workplace Connection.

    Answer: E

    QUESTION 10: You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed. Site.com has a main office and a branch office. The two offices are connected by a WAN link. A server in the main office named Site-SR21 runs the DNS Server role and hosts an Active Directory Integrated primary zone for Site.com. You install a server named Site-SR22 in the branch office. Site-SR22 runs the DNS Server role. You plan to configure a secondary zone for Site.com on Site-SR22. What do you need to do first?

    A.You should modify the Site.com zone on Site-SR21 to be a non-Active Directory Integrated primary zone.
    B. You should log in to Site-SR21 and configure an MX record for Site-SR22.
    C. You should log in to Site-SR21 and configure a zone delegation for Site-SR22. D.You should log in to Site-SR21 and in the properties of the Site.com zone, add Site-SR22 as a name server

    Answer: D




    0



    0

Leave a Reply