Latest Real 70-414 Tests Dumps and VCE Exam Questions 51-60

Ensurepass

QUESTION 51

Your network contains an Active Directory domain named contoso.com. The corporate security policy states that when new User Accounts, Computer accounts, and contacts are added to an organizational unit (OU) named Secure, the addition must be audited. You need to recommend an auditing solution to meet the security policy. What should you include in the recommendation? (Each answer presents part of the solution. Choose all that apply.)

 

A.      From the Default Domain Controllers Policy, enable the Audit directory services setting.

B.      Create a new Group Policy object (GPO) that is linked to the Secure OU, and then modify the Audit directory services setting

C.      From the Secure OU, modify the Auditing settings.

D.      From the Default Domain Controllers Policy, enable the Audit object access setting.

E.       From the Secure OU, modify the Permissions settings.

F.       Create a new Group Policy object (GPO) that is linked to the Secure OU, and then modify the Audit object access setting.

 

Correct Answer: AC

 

 

QUESTION 52

Your network contains an Active Directory domain named contoso.com. The network contains two servers named Server1 and Server2. You deploy Active Directory Certificate Services (AD CS). The certification authority (CA) is configured as shown in the exhibit.

clip_image002

You need to ensure that you can issue certificates based on certificate templates. What should you do?

 

A.      On Server1, install the Network Device Enrollment Service role Service.

B.      Configure Server1 as a standalone root CA.

C.      Uninstall AD Certificate Services and reinstall.

D.      On Server1, run the Add-CertificateEnrollmentPolicyServer cmdlet.

 

Correct Answer: C

 

 

QUESTION 53

Your Company has 10,000 users located in 25 different sites. All servers run Windows Server 2012. All dient Computers run either Windows 7 or Windows 8. You need to recommend a solution to provide self-service password reset for all of the users. What should you include in the recommendation?

 

A.      The Microsoft System Center 2012 Service Manager Self-Service Portal and Microsoft System Center 2012 Operation Manager management packs.

B.      Microsoft System Center 2012 Operations Manager management packs and Microsoft System Center 2012 Configuration Manager collections.

C.      Microsoft System Center 2012 App Controller and Microsoft System Center 2012 Orchestrator runbooks.

D.      The Microsoft System Center 2012 Service Manager Self-Service Portal and Microsoft System Center 2012 Orchestrator runbooks.

 

Correct Answer: D

 

 

QUESTION 54

Your network contains a Hyper-V host named Host1. Host1 hosts 25 virtual machines. All of the virtual machines are configured to Start automatically when Host1 restarts. You discover that some of the virtual machines fail to Start automatically when Host1 restarts and require an administrator to Start them manually. You need to modify the settings of the virtual machines to ensure that they automatically restart when Host1 restarts. Which settings should you modify?

 

A.      Memory weight

B.      Maximum RAM

C.      Startup RAM

D.      Minimum RAM

 

Correct Answer: C

 

 

QUESTION 55

You have a Hyper-V host named Hyper1 that has Windows Server 2012 Installed. Hyper1 hosts 20 virtual machines. Hyper1 has one physical network adapter. You need to implement a networking solution that evenly distributes the available bandwidth on Hyper1 to all of the virtual machines. What should you modify?

A.      The Quality of Service (QoS) Packet Scheduler settings of the physical network adapter.

B.      The settings of the network adapter.

C.      The settings of the virtual switch.

D.      The settings of the legacy network adapter.

 

Correct Answer: B

 

 

QUESTION 56

Your network contains an Active Directory domain named contoso.com. You plan to deploy an Active Directory Federation Services (AD FS) farm that will contain eight federation servers. You need to identify which technology or technologies must be deployed on the network before you install the federation servers. Which technology or technologies should you identify? (Each correct answer presents part of the solution. Choose all that apply.)

 

A.      Network Load Balancing (NLB)

B.      Microsoft Forefront Identity Manager (FIM) 2010

C.      The Windows Internal Database feature

D.      Microsoft SQL Server 2012

E.       The Windows Identity Foundation 3.5 feature

 

Correct Answer: AD

 

 

QUESTION 57

Your Company has a human resources department and a finance department. You are planning an administrative model for both departments to meet the following requirements:

 

Ÿ   Provide human resources managers with the ability to view the audit logs for the files of their department.

Ÿ   Ensure that only domain administrators can view the audit logs for the files of the finance department.

 

You need to recommend a solution for the deployment of file servers for both departments. What should you recommend? More than one answer choice may achieve the goal. Select the BEST answer.

 

A.      Deploy two file servers. Add the human resources managers to the local Administrators group on one of the servers.

B.      Deploy two file servers. Add the human resources managers to the local Event Log Readers group on one of the servers.

C.      Deploy one file Server. Add the human resources managers to the local Administrators group.

D.      Deploy one file Server. Add the human resources managers to the local Event Log Readers group.

 

Correct Answer: B

 

 

QUESTION 58

Your network contains an Active Directory domain named contoso.com. Your Company has an enterprise root certification authority (CA) named CA1. You plan to deploy Active Directory Federation Services (AD FS) to a Server named Server1. The Company purchases a Microsoft Office 365 subscription. You plan register the company’s SMTP domain for Office 365 and to configure single sign-on for all users. You need to identify which certificate or certificates are required for the planned deployment. Which certificate or certificates should you identify? (Each correct answer presents a complete solution. Choose all that apply.)

 

A.      Server authentication certificate that is issued by a trusted third-party root CA and that contains the subject name server1.contoso.com

B.      Server authentication certificate that is issued by CA1 and that contains the subject name Server1

C.      Server authentication certificate that is issued by a trusted third-party root CA and that contains the subject name Server1

D.      Server authentication certificate that is issued by CA1 and that contains the subject name Server1.contoso.com

E.       A self-signed server authentication certificates for Server1.contoso.com

 

Correct Answer: A

 

 

QUESTION 59

Your network contains an Active Directory domain named contoso.com. You deploy Active Directory Certificate Services (AD CS). Your Company, which is named Contoso, Ltd., has a Partner Company named Fabrikam, Inc. Fabrikam also deploys AD CS. Contoso and Fabrikam plan to exchange signed and encrypted email messages. You need to ensure that the dient Computers in both Contoso and Fabrikam trust each other’s email certificates. The solution must prevent other certificates from being trusted. What should you do? More than one answer choice may achieve the goal. Select the BEST answer.

 

A.      Implement an online responder in each Company.

B.      Exchange the root certification authority (CA) certificates of both Companies, and then deploy the certificates to the Trusted Root Certification Authorities store by using Group Policy objects (GPOs).

C.      Exchange the root certification authority (CA) certificates of both Companies, and then deploy the certificates to the Enterprise Trust store by using Group Policy objects (GPOs).

D.      Implement cross-certification in each Company.

 

Correct Answer: D

 

 

QUESTION 60

You have a failover cluster named Cluster1 that contains four Hyper-V hosts. Cluster1 hosts 20 virtual machines. You deploy a new failover cluster named Cluster2. You plan to replicate the virtual machines from Cluster1 to Cluster2. You need to recommend which actions must be performed on Cluster2 for the planned deployment. Which three actions should you recommend?

 

To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

 

Select and Place:

clip_image004

 

Correct Answer:

clip_image006