Achieve New Updated (September) Microsoft 70-411 Examination Questions 321-330

Ensurepass

 

QUESTION 321

Your network contains two Active Directory domains named contoso.com and adatum.com. The contoso.com domain contains a server named Server1.contoso.com. The adatum.com domain contains a server named server2.adatum.com. Server1 and Server2 run Windows Server 2012 and have the DirectAccess and VPN (RRAS) role service installed. Server1 has the default network policies and the default connection request policies. You need to configure Server1 to perform authentication and authorization of VPN connection requests to Server2. Only users who are members of AdatumGroup1 must be allowed to connect. Which two actions should you perform on Server1? (Each correct answer presents part of the solution. Choose two.)

 

A.

Network policies

B.

Connection request policies

C.

Create a network policy.

D.

Create a connection request policy.

 

Correct Answer: AD

 

 

QUESTION 322

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has a drive named E that is encrypted by using BitLocker Drive Encryption (BitLocker). A recovery key is stored on drive C. Drive E becomes locked. When you attempt to use the recovery key, you receive the following error message.

 

clip_image002

You need to access the data stored on drive E. What should you run first?

 

A.

manage-bde -protectors get e:

B.

manage-bde -unlock e: -recoverykey c:

C.

disable-bitlocker -mountpoint e:

D.

unlock-bitlocker -mountpoint e: -recoverykeypath c:

 

Correct Answer: B

 

 

QUESTION 323

Your network contains an Active Directory forest named contoso.com. The forest contains two sites named Main and Branch. The Main site contains 400 desktop computers and the Branch site contains 150 desktop computers. All of the desktop computers run Windows 8. In Main, the network contains a member server named Server1 that runs Windows Server 2012. You install the Windows Server Update Services server role on Server1. You need to ensure that Windows updates obtained from Windows Server Update Services (WSUS) are the same for the computers in each site. You want to achieve this goal by using the minimum amount of administrative effort. What should you do?

 

A.

From the Update Services console, create computer groups.

B.

From the Update Services console, configure the Computers options.

C.

From the Group Policy Management console, configure the Windows Update settings.

D.

From the Group Policy Management console, configure the Windows Anytime Upgrade settings.

E.

From the Update Services console, configure the Synchronization Schedule options.

 

Correct Answer: A

 

 

QUESTION 324

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012. The domain contains two domain controllers. The domain controllers are configured as shown in the following table.

 

clip_image003

 

You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago. You need to restore the membership of Group1. What should you do?

 

A.

Apply a virtual machine snapshot to VM1.

B.

Perform an authoritative restore.

C.

Perform a non-authoritative restore.

D.

Perform tombstone reanimation.

 

Correct Answer: B

 

 

QUESTION 325

Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and childl.contoso.com. All domain controllers run Windows Server 2012. The domain contains four domain controllers. The domain controllers are configured as shown in the following table.

 

clip_image004

 

You open Active Directory Users and Computers on a client computer and connect to DC1. You display the members of a group named Group1 as shown in the Group1 Members exhibit.

 

clip_image005

 

When you view the properties of a user named User102
, you receive the error message shown in the Error exhibit.

 

clip_image007

 

The error message does not display for any other members of Group1. You need to identify which domain controller causes the issue shown in the error message. Which domain controller should you identify?

 

A.

DC1

B.

DC2

C.

DC10

D.

DC11

 

Correct Answer: B

&nbs
p;

 

QUESTION 326

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012. The domain contains a file server named Server1. All client computers run Windows

8. Users share the client computers and frequently log on to different client computers. You need to ensure that when the users save files in the Documents folder, the files are saved automatically to \Server1Users. The solution must minimize the amount of network traffic that occurs when the users log on to the client computers. What should you do?

 

A.

From a Group Policy object (GPO), configure the Folder Redirection settings.

B.

From the properties of each user account, configure the Home folder settings.

C.

From the properties of each user account, configure the User profile settings.

D.

From a Group Policy object (GPO), configure the Drive Maps preference.

 

Correct Answer: A

 

 

 

 

 

 

 

 

 

 

 

 

 

 

QUESTION 327

HOTSPOT

You have a server named Server1 that runs Windows Server 2012. Server1 has two network adapters and is located in a perimeter network. You need to configure Server1 as a network address translation (NAT) server. Which node should you use to add the NAT routing protocol?

 

To answer, select the appropriate node in the answer area.

 

clip_image009

 

Correct Answer:< /span>

clip_image011

 

QUESTION 328

Your network contains a server named Server1 that has the Network Policy and Access Services server role installed. All of the network access servers’ forward connection requests to Server1. You create a new network policy on Server1. You need to ensure that the new policy applies only to connection requests from Microsoft RAS servers that are located on the 192.168.0.0/24 subnet. Which two configurations should you performing? (Each correct answer presents part of the solution. Choose two.)

 

A.

Set the MS-RAS Vendor ID condition to $teelHead.

B.

Set the Called Station ID constraint to 192.168.0.

C.

Set the Client IP4 Address condition to 192.168.0.0/24.

D.

Set the MS-RAS Vendor ID condition to ^311$.

E.

Set the Called Station ID constraint to 192.168.0.0/24.

F.

Set the Client IP4 Address condition to 192.168.0.

 

Correct Answer: DF

 

 

QUESTION 329

HOTSPOT

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The contoso.com zone is Active Directory-integrated and configured to replicate to all of the domain controllers in the contoso.com domain. Server1 has a DNS record in the contoso.com zone. You need to verify when the DNS record for Server1 was last updated. In which Active Directory partition should you view the DNS record of Server1?

 

To answer, select the appropriate Active Directory partition in the answer area.

 

clip_image012

 

Correct Answer:

clip_image013

 

 

 

 

 

QUESTION 330

Your network contains an Active Directory domain named contoso.com. The domain controllers in the domain are configured as shown in the following table.

 

clip_image014

 

You deploy a new domain controller named DC3 that runs Windows Server 2012. You discover that you cannot create Password Settings objects (PSOs) by using Active Directory Administrative Center. You need to ensure that you can create PSOs from Active Directory Administrative Center. What should you do?

 

A.

Raise the functional level of the domain.

B.

Upgrade DC1.

C.

Transfer the infrastructure master operations master role.

D.

Transfer the PDC emulator operations master role.

 

Correct Answer: A

Free VCE & PDF File for Microsoft 70-411 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…