An Expert interview about exam 70 411


♥♥ 2017 NEW RECOMMEND ♥♥

Free VCE & PDF File for Microsoft 70-411 Real Exam (Full Version!)

★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions

Free Instant Download NEW 70-411 Exam Dumps (PDF & VCE):
Available on: https://www.certleader.com/70-411-dumps.html


70-411 Product Description:
Exam Number/Code: 70-411 vce
Exam name: Administering Windows Server 2012
n questions with full explanations
Certification: Microsoft Certification
Last updated on Global synchronizing

Instant Access to Free VCE Files: Microsoft 70-411 Administering Windows Server 2012

70-411 examcollection

Exam Code: 70 411 exam questions (Practice Exam Latest Test Questions VCE PDF)
Exam Name: Administering Windows Server 2012
Certification Provider: Microsoft
Free Today! Guaranteed Training- Pass exam ref 70 411 administering windows server 2012 r2 pdf Exam.

Q11. Your network contains an Active Directory domain named contoso.com. The domain 

contains a domain controller named DC1 that runs Windows Server 2012 R2. 

You create an Active Directory snapshot of DC1 each day. 

You need to view the contents of an Active Directory snapshot from two days ago. 

What should you do first? 

A. Run the dsamain.exe command. 

B. Stop the Active Directory Domain Services (AD DS) service. 

C. Start the Volume Shadow Copy Service (VSS). 

D. Run the ntdsutil.exe command. 

Answer:

Explanation: 

Dsamain.exe exposes Active Directory data that is stored in a snapshot or backup as a Lightweight Directory Access Protocol (LDAP) server. 

: http://technet.microsoft.com/en-us/library/cc772168.aspx 


Q12. HOTSPOT 

Your network contains an Active Directory domain named contoso.com. The domain contains three servers named Server2, Server3, and Server4. 

Server2 and Server4 host a Distributed File System (DFS) namespace named Namespace1. 

You open the DFS Management console as shown in the exhibit. (Click the Exhibit button.) 

To answer, complete each statement according to the information presented in the exhibit. Each correct selection is worth one point. 

Answer: 


Q13. Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1. 

The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2. 

You need to identify which security principals are authorized to have their password cached on RODC1. 

Which cmdlet should you use? 

A. Get-ADGroupMember 

B. Get-ADDomainControllerPasswordReplicationPolicy 

C. Get-ADDomainControllerPasswordReplicationPolicyUsage 

D. Get-ADDomain 

E. Get-ADOptionalFeature 

F. Get-ADAccountAuthorizationGroup 

Answer:


Q14. Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named IT and an OU named Sales. 

All of the help desk user accounts are located in the IT OU. All of the sales user accounts are located in the Sales OU. The Sales OU contains a global security group named G_Sales. The IT OU contains a global security group named G_HelpDesk. 

You need to ensure that members of G_HelpDesk can perform the following tasks: 

. Reset the passwords of the sales users. 

. Force the sales users to change their password at their next logon. 

What should you do? 

A. Run the Set-ADAccountPasswordcmdlet and specify the -identity parameter. 

B. Right-click the Sales OU and select Delegate Control. 

C. Right-click the IT OU and select Delegate Control. 

D. Run the Set-ADFineGrainedPasswordPolicycmdlet and specify the -identity parameter. 

Answer:

Explanation: 

G_HelpDesk members need to be allowed to delegate control on the Sales OU as it contains the sales users (G_Sales) 

You can use the Delegation of Control Wizard to delegate the Reset Password permission to the delegated user. 

References: http: //support. microsoft. com/kb/296999/en-us 

http: //support. microsoft. com/kb/296999/en-us 

http: //technet. microsoft. com/en-us/library/cc732524. aspx 


Q15. Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. 

The domain contains 200 Group Policy objects (GPOs). 

An administrator named Admin1 must be able to add new WMI filters from the Group Policy Management Console (GPMC). 

You need to delegate the required permissions to Admin1. The solution must minimize the number of permissions assigned to Admin1. 

What should you do? 

A. From Active Directory Users and Computers, add Admin1 to the WinRMRemoteWMIUsers__group. 

B. From Group Policy Management, assign Creator Owner to Admin1 for the WMI Filters container. 

C. From Active Directory Users and Computers, add Admin1 to the Domain Admins group. 

D. From Group Policy Management, assign Full control to Admin1 for the WMI Filters container. 

Answer:

Explanation: 

Users with Full control permissions can create and control all WMI filters in the domain, 

including WMI filters created by others. 

Users with Creator owner permissions can create WMI filters, but can only control WMI 

filters that they create. 

: http://technet.microsoft.com/en-us/library/cc757429(v=ws.10).aspx 


Q16. Your network is configured as shown in the exhibit. (Click the Exhibit button.) 

Server1 regularly accesses Server2. 

You discover that all of the connections from Server1 to Server2 are routed through Router1. 

You need to optimize the connection path from Server1 to Server2. 

Which route command should you run on Server1? 

A. Route add -p 10.10.10.0 MASK 255.255.255.0 172.23.16.2 METRIC 100 

B. Route add -p 10.10.10.0 MASK 255.255.255.0 10.10.10.1 METRIC 50 

C. Route add -p 10.10.10.12 MASK 255.255.255.0 10.10.10.1 METRIC 100 

D. Route add -p 10.10.10.12 MASK 255.255.255.0 10.10.10.0 METRIC 50 

Answer:

Explanation: 

Destination - specifies either an IP address or host name for the network or host. 

subnetmask - specifies a subnet mask to be associated with this route entry. If subnetmask is not specified, 255.255.255.255 is used. 

gateway - specifies either an IP address or host name for the gateway or router to use when forwarding. 

costmetric - assigns an integer cost metric (ranging from 1 through 9,999) to be used in calculating the fastest, most reliable, and/or least expensive routes. If costmetric is not specified, 1 is used. 

interface - specifies the interface to be used for the route that uses the interface number. If an interface is not specified, the interface to be used for the route is determined from the gateway IP address. 

References: http: //support. microsoft. com/kb/299540/en-us 

http: //technet. microsoft. com/en-us/library/cc757323%28v=ws. 10%29. aspx 


Q17. Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. 

An organizational unit (OU) named ResearchServers contains the computer accounts of all research servers. 

All domain users are configured to have a minimum password length of eight characters. 

You need to ensure that the minimum password length of the local user accounts on the research servers in the ResearchServers OU is 10 characters. 

What should you do? 

A. Configure a local Group Policy object (GPO) on each research server. 

B. Create and link a Group Policy object (GPO) to the ResearchServers OU. 

C. Create a universal group that contains the research servers. Create a Password Settings object (PSO) and assign the PSO to the group. 

D. Create a global group that contains the research servers. Create a Password Settings object (PSO) and assign the PSO to the group. 

Answer:

Explanation: 

For a domain, and you are on a member server or a workstation that is joined to the domain 

1. Open Microsoft Management Console (MMC). 

2. On the File menu, click Add/Remove Snap-in, and then click Add. 

3. Click Group Policy Object Editor, and then click Add. 

4. In Select Group Policy Object, click Browse. 

5. In Browse for a Group Policy Object, select a Group Policy object (GPO) in the appropriate domain, site, or organizational unit--or create a new one, click OK, and then click Finish. 

6. Click Close, and then click OK. 

7. In the console tree, click Password Policy. 

Where? 

Group Policy Object [computer name] Policy/Computer Configuration/Windows 

Settings/Security Settings/Account Policies/Password Policy 

8. In the details pane, right-click the policy setting that you want, and then click Properties. 

9. If you are defining this policy setting for the first time, select the Define this policy setting 

check box. 

10. Select the options that you want, and then click OK. 


Q18. Your network contains an Active Directory domain named adatum.com. 

A network administrator creates a Group Policy central store. 

After the central store is created, you discover that when you create new Group Policy objects (GPOs), the GPOs do not contain any Administrative Templates. 

You need to ensure that the Administrative Templates appear in new GPOs. 

What should you do? 

A. Add your user account to the Group Policy Creator Owners group. 

B. Configure all domain controllers as global catalog servers. 

C. Copy files from %Windir%\\Policydefinitions to the central store. 

D. Modify the Delegation settings of the new GPOs. 

Answer:

Explanation: 

To take advantage of the benefits of .admx files, you must create a Central Store in the SYSVOL folder on a domain controller. The Central Store is a file location that is checked by the Group Policy tools. The Group Policy tools use any .admx files that are in the Central Store. The files that are in the Central Store are later replicated to all domain controllers in the domain. 


Q19. Your network contains an Active Directory domain named contoso.com. The domain contains six domain controllers. The domain controllers are configured as shown in the following table. 

The network contains a server named Server1 that has the Hyper-v server role installed. DC6 is a virtual machine that is hosted on Server1. 

You need to ensure that you can clone DC6. 

Which FSMO role should you transfer to DC2? 

A. Rid master 

B. Domain naming master 

C. PDC emulator 

D. Infrastructure master 

Answer:

Explanation: 

The clone domain controller uses the security context of the source domain controller (the domain controller whose copy it represents) to contact the Windows Server 2012 R2 Primary Domain Controller (PDC) emulator operations master role holder (also known as flexible single master operations, or FSMO). The PDC emulator must be running Windows 

Server 2012 R2, but it does not have to be running on a hypervisor. 

Reference: 

http: //technet. microsoft. com/en-us/library/hh831734. aspx 


Q20. HOTSPOT 

You have a file server named Server1 that runs Windows Server 2012 R2. 

A user named User1 is assigned the modify NTFS permission to a folder named C:\\shares and all of the subfolders of C:\\shares. 

On Server1, you open File Server Resource Manager as shown in the exhibit. (Click the Exhibit button.) 

To answer, complete each statement according to the information presented in the exhibit. Each correct selection is worth one point. 

Answer: 



To know more about the Administering Windows Server 2012, click here.