QUESTION 135
Hotspot Question
Your network contains an Active Directory forest name fabrikam.com. The forest contains two domains named fabrikam.com and contoso.com. All servers run Windows Server 2012 R2.
The forest contains a DHCP server named Server1 and a DNS server named Server2.
You need to recommend a solution to ensure that any computers that are neither members of contoso.com nor fabrikam.com receive a DNS suffix of guest.fabrikam.com.
What two commands should you run? To answer, select the appropriate options in the answer area.
Answer:
QUESTION 136
Your company has three offices. The offices are located in Montreal, Toronto, and Vancouver.
The network contains two Active Directory forests named contoso.com and adatum.com. The contoso.com forest contains one domain. The adatum.com forest contains two domains. All of the servers in adatum.com are located in the Toronto office. The servers in contoso.com are located in the Montreal and Vancouver offices. All of the servers in both of the forests run Windows Server 2012 R2.
A two-way, forest trusts exists between the forests.
Each office contains DHCP servers and DNS servers.
You are designing an IP Address Management (IPAM) solution to manage the network.
You need to recommend a solution for the placement of IPAM servers to manage all of the DHCP servers and all of the DNS servers in both of the forests. The solution must minimize the number of IPAM servers deployed.
What should you recommend?
A. One IPAM server in each office
B. One IPAM server in the Montreal office and one IPAM server in the Toronto office
C. One IPAM server in the Toronto office
D. Two IPAM servers in the Toronto office and one IPAM server in the Montreal office
E. Two IPAM servers in the Toronto office, one IPAM server in the Montreal office, and one IPAM server
in the Vancouver office
Answer: B
QUESTION 137
Your network contains an Active Directory forest named contoso.com. The forest contains a single domain and two sites named Montreal and Vancouver.
Montreal contains an IP Address Management (IPAM) server named Server1 that is used to manage all of the DHCP servers and the DNS servers in the site.
Vancouver contains several DHCP servers and several DNS servers.
In Vancouver, you install the IP Address Management (IPAM) Server feature on a server named Server2.
You need to recommend which configurations must be performed to ensure that the DHCP servers and the DNS servers in Vancouver are managed by Server2.
What should you recommend?
A. Replicate the IPAM database from Server1 to Server2.
On Server2, change the manageability status of the DNS servers and the DHCP servers in Vancouver.
B. Replicate the IPAM database from Server1 to Server2.
On Server1, change the manageability status of the DNS servers and the DHCP servers in Vancouver.
C. From Server2, run the Invoke-IpamGpoProvisioningcmdlet.
On Server2, change the manageability status of the DNS servers and the DHCP servers in Vancouver.
D. From Server1, run the Invoke-IpamGpoProvisioningcmdlet.
On Server1, change the manageability status of the DNS servers and the DHCP servers in Vancouver.
Answer: C
QUESTION 138
Hotspot Question
You have a domain controller that hosts an Active Directory-integrated zone. On the domain controller, you run the following cmdlet:
PS C:\> Get-DnsServerScavenging
NoRefreshlnterval:2.00:00:00
Refreshlnterval:3.00:00:00
Scavenginglnterval:4.00:00:00
ScavengingState:True
LastScavengeTime:1/30/2014 9:10:36 AM
Use the drop-down menus to select the answer choice that completes each statement.
![clip_image0026_thumb_thumb_thumb_thu[2]](http://examgod.com/l2pimages/4edfa774f4d6_7A7A/clip_image0026_thumb_thumb_thumb_thu2.jpg "clip_image0026_thumb_thumb_thumb_thu[2]")
Answer:
QUESTION 139
Your network contains an Active Directory domain named contoso.com.
The domain contains the organization units (OUs) configured as shown in the following table.
Users and computers at the company change often.
You create a Group Policy object (GPO) named GPO6. GPO6 contains user settings.
You need to ensure that GPO6 applies to users when they log on to the kiosk computers only. The solution must minimize administrative effort.
What should you do?
A. Link GPO6 to OU4 and configure loopback processing in GPO6.
B. Link GPO6 to OU1 and configure WMI filtering on GPO3.
C. Link GPO6 to OU1 and configure loopback processing in GPO6.
D. Link GPO6 to OU1 and configure loopback processing in GPO5.
Answer: A
QUESTION 140
Hotspot Question
Your network contains an Active Directory forest named contoso.com. The forest contains one domain. All domain controllers run Windows Server 2012. The functional level of the forest and the domain is Windows Server 2012.
The domain contains three domain controllers. The domain controllers are configured as shown in the following table.
In the forest, you plan to add a new domain controller that runs Windows Server 2012 R2.
You need to prepare the environment before you add the new domain controller.
Which domain controllers must be available to run each command? To answer, select the appropriate domain controllers in the answer area.
![clip_image0016_thumb_thumb_thumb_thu[1]](http://examgod.com/l2pimages/4edfa774f4d6_7A7A/clip_image0016_thumb_thumb_thumb_thu1.jpg "clip_image0016_thumb_thumb_thumb_thu[1]")
Answer:
![clip_image0018_thumb_thumb_thumb_thu[2]](http://examgod.com/l2pimages/4edfa774f4d6_7A7A/clip_image0018_thumb_thumb_thumb_thu2.jpg "clip_image0018_thumb_thumb_thumb_thu[2]")
QUESTION 141
You are designing an Active Directory forest for a company named Contoso, Ltd. Contoso identifies the following administration requirements for the design:
– User account administration and Group Policy administration will be performed by network technicians.
– The technicians will be added to a group named OUAdmins.
– IT staff who are responsible for backing up servers will have user accounts that are members of the Backup Operators group in the domain.
– All user accounts will be located in an organizational unit (OU) named AllEmployees.
You run the Delegation of Control Wizard and assign the OUAdmins group full control to all of the objects in the AllEmployeesOU.
After delegating the required permissions, you discover that the user accounts of some of the IT staff have inconsistent permissions on the objects in AllEmployees.
You need to recommend a solution to ensure that the members of OUAdmins can manage all of the objects in AllEmployees.
What should you include in the recommendation?
A. Remove the IT staff user accounts from Backup Operators and place them in a new group.
Grant the new group the Backup files and directories user right and the Restore files and directories
user right.
Enforce permission inheritance on all of the objects in the AllEmployeesOU.
B. Create separate administrator user accounts for the technicians.
Enforce permission inheritance on all of the objects in the AllEmployeesOU.
Delegate permissions to the new useraccounts.
C. Enforce permission inheritance on all of the objects in the AllEmployeesOU.
Run the Delegation of Control Wizard.
D. Move the user accounts of the technicians to a separate OU.
Enforce permission inheritance on all of the objects in the AllEmployeesOU.
Run the Delegation of Control Wizard on the AllEmployeesOU.
Answer: B
QUESTION 142
Your network contains 50 servers that run Windows Server 2003 and 50 servers that run Windows Server 2008.
You plan to implement Windows Server 2012 R2.
You need to create a report that includes the following information:
The servers that run applications and services that can be moved to Windows Server 2012 R2
The servers that have hardware that can run Windows Server 2012 R2 The servers that are suitable to be converted to virtual machines hosted on Hyper- V hosts that run Windows Server 2012 R2
Solution: From an existing server, you run the Microsoft Application Compatibility Toolkit (ACT).
Does this meet the goal?
A. Yes
B. No
Answer: B
QUESTION 143
Your network contains an Active Directory domain named contoso.com. The domain contains multiple sites.
You plan to deploy DirectAccess.
The network security policy states that when client computers connect to the corporate network from the Internet, all of the traffic destined for the Internet must be routed through the corporate network.
You need to recommend a solution for the planned DirectAccess deployment that meets the security policy requirement.
Solution: You enable force tunneling.
Does this meet the goal?
A. Yes
B. No
Answer: A
QUESTION 144
Your network contains an Active Directory domain named contoso.com. The domain contains three VLANs. The VLANs are configured as shown in the following table.
![clip_image00210_thumb_thumb_thumb_th[2]](http://examgod.com/l2pimages/4edfa774f4d6_7A7A/clip_image00210_thumb_thumb_thumb_th2.jpg "clip_image00210_thumb_thumb_thumb_th[2]")
All client computers run either Windows 7 or Windows 8.
The corporate security policy states that all of the client computers must have the latest security updates installed.
You need to implement a solution to ensure that only the client computers that have all of the required security updates installed can connect to VLAN 1. The solution must ensure that all other client computers connect to VLAN 3.
Solution: You implement the IPsec enforcement method.
Does this meet the goal?
A. Yes
B. No
Answer: B
Passing Microsoft 70-413 Exam successfully in a short time! Just using Braindump2go’s Latest Microsoft 70-413 Dump
http://www.braindump2go.com/70-413.html