Latest Real 70-411 Tests Dumps and VCE Exam 251-260

Ensurepass

QUESTION 251

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has the Network Policy and Access Services server role installed. You plan to deploy 802.1x authentication to secure the wireless network. You need to identify which Network Policy Server (NPS) authentication method supports certificate-based mutual authentication for the 802.lx deployment.

Which authentication method should you identify?

 

A.      PEAP-MS-CHAP v2

B.      MS-CHAP v2

C.      EAP-TLS

D.      MS-CHAP

 

Correct Answer: C

 

 

QUESTION 252

You have a server named Server1 that runs Windows Server 2012. Server1 has two network adapters and is located in a perimeter network. You need to install the RIP version 2 routing protocol on Server1. Which node should you use to add the RIP version 2 routing protocol?

 

To answer, select the appropriate node in the answer area.

 

Hot Area:

clip_image002

 

Correct Answer:

clip_image004

QUESTION 253

Your network contains an Active Directory domain named contoso.com. All DNS servers host a DNS zone named adatum.com. The adatum.com zone is not Active Directory-integrated. An administrator modifies the start of authority (SOA) record for the adatum.com zone. After the modification, you discover that when you add or modify DNS records in the adatum.com zone, the changes are not transferred to the DNS servers that host secondary copies of the adatum.com zone. You need to ensure that the records are transferred to all the copies of the adatum.com zone. What should you modify in the SOA record for the adatum.com zone?

 

To answer, select the appropriate setting in the answer area.

 

Hot Area:

clip_image006

 

Correct Answer:

clip_image008

 

 

QUESTION 254

Your network contains an Active Directory domain named contoso.com. The domain controllers in the domain are configured as shown in the following table.

 

clip_image010

 

You deploy a new domain controller named DC3 that runs Windows Server 2012. You discover that you cannot create Password Settings objects (PSOs) by using Active Directory Administrative Center. You need to ensure that you can create PSOs from Active Directory Administrative Center. What should you do?

 

A.      Raise the functional level of the domain.

B.      Upgrade DC1.

C.      Transfer the infrastructure master operations master role.

D.      Transfer the PDC emulator operations master role.

 

Correct Answer: A

 

 

QUESTION 255

You have a DNS server named DNS1 that runs Windows Server 2012. On DNS1, you create a standard primary DNS zone named adatum.com. You need to change the frequency that secondary name servers will replicate the zone from DNS1. Which type of DNS record should you modify?

 

A.      start of authority (SOA)

B.      name server (NS)

C.      service location (SRV)

D.      host information (HINFO)

 

Correct Answer: A

 

 

QUESTION 256

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. The domain contains 200 Group Policy objects (GPOs) and 100 WMI filters. An administrator named Admin1 must be able to create new WMI filters and edit all of the existing WMI filters from the Group Policy Management Console (GPMC). You need to delegate the required permissions to Admin1. The solution must minimize the number of permissions assigned to Admin1. What should you do?

 

A.      From Group Policy Management, assign Full control to Admin1 for the WMI Filters container.

B.      From Active Directory Users and Computers, add Admin1 to the Domain Admins group.

C.      From Group Policy Management, assign Creator Owner to Admin1 for the WMI Filters container.

D.      From Active Directory Users and Computers, add Admin1 to the

WinRMRemoteWMIUsers_group.

 

Correct Answer: A

 

 

QUESTION 257

Your network contains three Network Policy Server (NPS) servers named NPS1, NPS2, and NPS3.

NPS1 is configured as a RADIUS proxy that forwards connection requests to a remote RADIUS server group named Group1. You need to ensure that NPS2 receives connection requests. NPS3 must only receive connection requests if NPS2 is unavailable. How should you configure Group1?

 

A.      Change the Weight of NPS2 to 10.

B.      Change the Weight of NPS3 to 10.

C.      Change the Priority of NPS2 to 10.

D.      Change the Priority of NPS3 to 10.

 

Correct Answer: D

 

 

QUESTION 258

You need to create Active directory application partition. Which tool should you use?

 

A.        dsmod

B.        dsamain

C.        dsmgmt

D.        nesth

 

Correct Answer: C

 

 

QUESTION 259

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has the Windows Server Update Services server role installed. All client computers are configured to download updates from Server1. You have a Group Policy object (GPO) named GPO1 that is linked to an organizational unit (OU) named Sales_OU. You need to ensure that all of the computers in Sales_OU are added to a Windows Server Update Services (WSUS) computer group named SalesComputers. Which setting should you configure in the GPO?

 

To answer, select the appropriate setting in the answer area.

 

Hot Area:

clip_image012

 

Correct Answer:

clip_image014

 

 

QUESTION 260

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. You plan to use fine-grained password policies to customize the password policy settings of contoso.com. You need to identify to which Active Directory object types you can directly apply the fine- grained password policies. Which two object types should you identify? (Each correct answer presents part of the solution. Choose two.)

 

A.      Domain local groups

B.      Computers

C.      Universal groups

D.      Global groups

E.       Users

 

Correct Answer: DE