2015 Microsoft Official New Released 70-413 Practice Exam Questions and Answers Free Sample Dumps Provided By Braindump2go! All Exams One Time Pass 100% Guaranteed!
Vendor: Microsoft
Exam Code: 70-413
Exam Name: Designing and Implementing a Server Infrastructure
QUESTION 76
Your network contains an Active Directory domain named contoso.com.
You deploy several servers that have the Remote Desktop Session Host role service installed. You have two organizational units (OUs).
The OUs are configured as shown in the following table.
GPO1 contains the Folder Redirection settings for all of the users.
You need to recommend a solution to prevent the sales users’ folders from being redirected when the users log on to a Remote Desktop session.
What should you include in the recommendation?
A. From GPO2, set the loopback processing mode.
B. Apply a WMI filter to GP02.
C. Configure security filtering for GPO1.
D. From GPO1, set the loopback processing mode.
Answer: A
Explanation:
http://support.microsoft.com/kb/231287
QUESTION 77
Your network contains an Active Directory domain named contoso.com.
The functional level of the domain and the forest is Windows Server 2008 R2.
All domain controllers run Windows Server 2008 R2.
You plan to deploy a new line-of-business application named App1 that uses claims-based authentication.
You need to recommend changes to the network to ensure that Active Directory can provide claims for App1.
What should you include in the recommendation? (Each correct answer presents part of the solution. Choose all that apply.)
A. Deploy Active Directory Lightweight Directory Services (AD LDS).
B. From the Default Domain Controllers Policy, enable the Support for Dynamic Access Control
and Kerberos armoring setting.
C. From the properties of the computer accounts of the domain controllers, enable Kerberos
constrained delegation.
D. Raise the domain functional level to Windows Server 2012.
E. Add domain controllers that run Windows Server 2012.
Answer: BE
QUESTION 78
Your company has two divisions named Division1 and Division2.
The network contains an Active Directory domain named contoso.com.
The domain contains two child domains named division1.contoso.com and division2.contoso.com.
The company sells division1 to another company.
You need to prevent administrators in contoso.com and division2.contoso.com from gaining administrative access to the resources in division1.contoso.com.
What should you recommend?
A. Create a new tree in the forest named contoso.secure.
Migrate the resources and the accounts in division1.contoso.com to contoso.secure.
B. On the domain controller accounts in division1.contoso.com, deny the Enterprise Admins
group the Allowed to Authenticate permission.
C. Create a new forest and migrate the resources and the accounts in division1.contoso.com
to the new forest.
D. In division1.contoso.com, remove the Enterprise Admins group from the Domain Admins
group and remove the Enterprise Admins group from the access control list (ACL) on the
division1.contoso.com domain object.
Answer: C
QUESTION 79
Your network contains an Active Directory domain named contoso.com.
The domain contains three Active Directory sites.
The Active Directory sites are configured as shown in the following table.
![wps7DF1.tmp_thumb[2]](http://www.itexamquiz.com/braindump2go/bdimages/d020ca8e56e6_8C13/wps7DF1.tmp_thumb2.png "wps7DF1.tmp_thumb[2]")
The sites connect to each other by using the site links shown in the following table.
![wpsAE64.tmp_thumb[2]](http://www.itexamquiz.com/braindump2go/bdimages/d020ca8e56e6_8C13/wpsAE64.tmp_thumb2.png "wpsAE64.tmp_thumb[2]")
You need to design the Active Directory site topology to meet the following requirements:
– Ensure that all replication traffic between Site2 and Site3 replicates through Site1 if a domain controller in Site1 is available.
– Ensure that the domain controllers between Site2 and Site3 can replicate if all of the domain controllers in Site1 are unavailable.
What should you do?
A. Delete Link1.
B. Delete Link2.
C. Delete Link3.
D. Disable site link bridging.
E. Create one site link bridge.
F. Modify the cost of Link2.
G. Create one SMTP site link between Site2 and Site3.
H. Create one SMTP site link between Site1 and Site3.
Create one SMTP site link between Site1 and Site2.
Answer: F
QUESTION 80
Your network contains an Active Directory forest.
The forest contains two Active Directory domains named contoso.com and child.contoso.com. The forest functional level is Windows Server 2003.
The functional level of both domains is Windows Server 2008.
The forest contains three domain controllers.
The domain controllers are configured as shown in the following table.
DC1 and DC2 have the DNS Server server role installed and are authoritative for both contoso.com and child.contoso.com. The child.contoso.com domain contains a server named serverl.child.contoso.com that runs Windows Server 2012.
You plan to deploy server1.child.contoso.com as a read-only domain controller (RODC).
You run the adprep.exe /rodcprep command on DC3 and receive the following error message:
You need to identify what prevents you from successfully running Adprep /rodcprep on DC3.
What should you identify?
A. The domain functional level of child.contoso.com is set to the wrong level.
B. DC3 cannot connect to the infrastructure master on DC2.
C. DC3 cannot connect to the domain naming master on DC1.
D. The forest functional level is set to the wrong level.
Answer: B
QUESTION 81
Your network contains an Active Directory forest named contoso.com.
The forest functional level is Windows Server 2012.
The forest contains an Active Directory domain.
The domain contains a global security group named GPO_Admins that is responsible for managing Group Policies in the forest.
A second forest named fabrikam.com contains three domains.
The forest functional level is Windows Server 2003.
You need to design a trust infrastructure to ensure that the GPO_Admins group can create, edit, and link Group Policies in every domain of the fabrikam.com forest.
What should you include in the design? More than one answer choice may achieve the goal. Select the BEST answer.
A. A two-way forest trust
B. A one-way forest trust
C. Three external trusts
D. Three shortcut trusts
Answer: B
QUESTION 82
Your network contains an Active Directory domain named contoso.com.
Client computers run either Windows 7 or Windows 8.
You plan to implement several Group Policy settings that will apply only to laptop computers.
You need to recommend a Group Policy strategy for the planned deployment.
What should you include in the recommendation? More than one answer choice may achieve the goal. Select the BEST answer.
A. Loopback processing
B. WMI filtering
C. Security filtering
D. Block inheritance
Answer: B
Explanation:
http://www.discoposse.com/index.php/2012/04/05/group-policy-wmi-filter-laptop-or-desktop-hardware/
Another method to detect hardware as laptop only is to look for the presence of a battery based on the BatteryStatus property of the Win32_Battery class. By using the Win32_Battery class, we can search to see if there is a battery present. If the battery status is not equal to zero ( BatteryStatus <> 0 ) then you know that it is a laptop.
QUESTION 83
Your network contains an Active Directory domain named contoso.com.
The domain contains an organizational unit (OU) named OU1.
You have a Group Policy object (GPO) named GPO1 that is linked to contoso.com.
GPO1 contains custom security settings.
You need to design a Group Policy strategy to meet the following requirements:
– The security settings in GPO1 must be applied to all client computers.
– Only GPO1 and other GPOs that are linked to OU1 must be applied to the client computers in OU1.
What should you include in the design? More than one answer choice may achieve the goal. Select the BEST answer.
A. Enable the Block Inheritance option at the domain level.
Enable the Enforced option on GPO1.
B. Enable the Block Inheritance option on OU1.
Link GPO1 to OU1.
C. Enable the Block Inheritance option on OU1.
Enable the Enforced option on GPO1.
D. Enable the Block Inheritance option on OU1.
Enable the Enforced option on all of the GPOs linked to OU1.
Answer: C
QUESTION 84
A new company registers the domain name of contoso.com.
The company has a web presence on the Internet.
All Internet resources have names that use a DNS suffix of contoso.com.
A third-party hosts the Internet resources and is responsible for managing the contoso.com DNS zone on the Internet.
The zone contains several hundred records.
The company plans to deploy an Active Directory forest.
You need to recommend an Active Directory forest infrastructure to meet the following requirements:
– Ensure that users on the internal network can resolve the names of the company’s Internet resources.
– Minimize the amount of administrative effort associated with the addition of new Internet servers.
What should you recommend?
A. A forest that contains a root domain named contoso.com and another domain named
ad.contoso.com
B. A forest that contains a root domain named contoso.com and another domain named
contoso.local
C. A forest that contains a single domain named contoso.local
D. A forest that contains a single domain named contoso.com
Answer: C
QUESTION 85
Your network contains an Active Directory domain named contoso.com.
The domain contains four computers that are configured as shown in the following table.
You plan to use domain controller cloning.
You need to identify on which computers you can clone domain controllers that run Windows Server 2012.
Which computers should you identify? (Each correct answer presents part of the solution. Choose all that apply.)
![wps36D8.tmp_thumb[2]](http://www.itexamquiz.com/braindump2go/bdimages/d020ca8e56e6_8C13/wps36D8.tmp_thumb2.png "wps36D8.tmp_thumb[2]")
A. Server1
B. Server2
C. Server3
D. Client1
Answer: AD
Explanation:
DC cloning can be done from either Hyper-V on Server 2012 and Hyper-V on Windows 8.
QUESTION 86
Your network contains an Active Directory domain named contoso.com.
The network contains a server named Server1 that has the Hyper-V server role installed.
Server1 hosts a virtual machine named VM1.
You deploy a new standalone server named Server2.
You install the Hyper-V server role on Server2.
Another administrator named Admin1 plans to create a replica of VM1 on Server2.
You need to ensure that Admin1 can configure Server2 to receive a replica of VM1.
To which group should you add Admin1?
A. Server Operators
B. Domain Admins
C. Hyper-V Administrators
D. Replicator
Answer: C
QUESTION 87
Your network contains an Active Directory domain named contoso.com.
All domain controllers run Windows Server 2012 R2.
The domain contains a server named Server1 that runs Windows Server 2012 R2.
You need to ensure that when users log on to Server1, their user account is added automatically to a local group named Group1 during the log on process.
Which Group Policy settings should you modify?
A. Restricted Groups
B. Security Options
C. User Rights Assignment
D. Preferences
Answer: D
QUESTION 88
Your network contains an Active Directory domain named contoso.com.
On several organizational units (OUs), an administrator named Admin1 plans to delegate control of custom tasks.
You need to ensure that Admin1 can delegate a custom task named Task1 by using the Delegation of Control Wizard.
What should you do?
A. Add a new class to the Active Directory schema.
B. Configure a custom MMC console.
C. Modify the Delegwiz.inf file.
D. Configure a new authorization store by using Authorization Manager.
Answer: C
Explanation:
http://support.microsoft.com/kb/308404
QUESTION 89
Your network contains an Active Directory domain named contoso.com.
You deploy Active Directory Certificate Services (AD CS).
Your company, which is named Contoso, Ltd., has a partner company named Fabrikam, Inc. Fabrikam also deploys AD CS. Contoso and Fabrikam plan to exchange signed and encrypted email messages.
You need to ensure that the client computers in both Contoso and Fabrikam trust each other’s email certificates.
The solution must prevent other certificates from being trusted.
What should you do? More than one answer choice may achieve the goal. Select the BEST answer.
A. Implement an online responder in each company.
B. Exchange the root certification authority (CA) certificates of both companies, and then deploy the certificates to the Trusted Root Certification Authorities store by using Group Policy objects (GPOs).
C. Exchange the root certification authority (CA) certificates of both companies, and then deploy the certificates to the Enterprise Trust store by using Group Policy objects (GPOs).
D. Implement cross-certification in each company.
Answer: D
QUESTION 90
Your network contains a server named Server1 that runs Windows Server 2012.
Server1 has the DHCP Server server role installed.
All of the client computers that are in a subnet named Subnet1 receive their IP address configurations from Server1.
You plan to add another DHCP server named Server2 to Subnet1.
You need to recommend changes to the DHCP infrastructure to ensure that the client computers continue to receive IP addressing information if a single DHCP server fails.
What should you do? More than one answer choice may achieve the goal. Select the BEST answer.
A. Create a Network Load Balancing (NLB) cluster.
B. Configure Failover for the scope.
C. Create a DHCP failover cluster.
D. Create a split scope.
Answer: B
Explanation:
http://blogs.technet.com/b/keithmayer/archive/2012/10/28/step-by-step-scoping-out-the-new-dhcpfailover-inwindows-server-2012-31-days-of-favorite-features-part-28-of-31.aspx#.UQhW-b-jbK0
Braindump2go 70-413 Exam Dumps are the latest updated! We guarantee you a 100% Pass of all exams Or Full Money Back! Download our Latest 70-413 Exam Dumps Full Version Now! Instant Download Provided!
