MICROSOFT OFFICIAL: New Added 70-411 Exam Questions from Braindump2go 70-411 PDF Dumps and 70-411 VCE Dumps! Welcome to Download the Newest Braindump2go 70-411 VCE&PDF Dumps: http://www.braindump2go.com/70-411.html (442 Q&As)
Exam Code: 70-411
Exam Name Administering Windows Server 2012
Certification Provider: Microsoft
Corresponding Certifications: MCSA, MCSA: Windows Server 2012, MCSE, MCSE: Desktop Infrastructure, MCSE: Private Cloud, MCSE: Server Infrastructure
Keywords:70-411 Dumps,70-411 Microsoft Exam Questions,70-411 VCE,70-411 PDF,70-411 Practice Exams,70-411 Practice Tests,70-411 Book,70-411 Study Guide
QUESTION 420
You have a group managed Service Account name Account01.
Only three servers named Server01, Server02 and Server03 are allowed to use Account01 service account.
You plan to decommission Server01.
You need to prevent Server01 from using the Account01 service account.
The solution must ensure that Server02 and Server03 continue to use the Account01 service account What command should you run? To answer, select the appropriate options in the answer area.
A. Set-ADServiceAccount
B. Uninstall-ADServiceAccount
C. remove-ADServiceAccount
D. Reset-ADServiceAccountPassword
Answer: D
Explanation:
https://technet.microsoft.com/en-us/library/ee617190.aspx
https://www.petri.com/restrict-privileged-accounts-with-authentication-silos-in-windows-server-2012-r2
QUESTION 421
Active Directory Recycle Bin is enabled.
You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago.
You need to restore the membership of Group1.
What should you do?
A. Perform tombstone reanimation.
B. Export and import data by using Dsamain.
C. Perform a non-authoritative restore.
D. Recover the items by using Active Directory Recycle Bin.
Answer: D
QUESTION 422
Server1 download update from microsoft update.
You have Server2 that must syncronize update from Server1.
Have firewall separate between Server1 and Server2.
Which port should to open on Server2 to syncronize ?
A. 80
B. 443
C. 3389
D. 8530
Answer: D
QUESTION 423
You configure server1 for ssl for all wsus metadata by using a CA. Server2 must sync from server1.
A. from iis, import certificate
B. from update services, windows server update services config wizard
C. cmd, wsutil.exe configssl server2
D. cmd, wsutil.exe configssl server1
Answer: D
Explanation:
Note, template command WSUSUtil.exe configuressl <Intranet FQDN of the site system server>.
QUESTION 424
Your Network contains oneActive Directory domain named contoso.com.
You pilot DirectAccess on the network.
During the pilot deployment, you enable DirectAccess only for a group Contoso\Test Computers.
Ones the pilot is complete, you need to enable DirectAccess for all the client computers in the domain.
What should you do?
A. From Group Policy Management, modify the security filtering of an object named Direct Access Server Setting Group Policy.
B. From Active Directory Users and Computers, modify the membership of the Windows Authorization Access Group.
C. From Group Policy Management, modify the security filtering of an object named Direct Access Client Setting Group Policy.
D. From Remote Access Management Console, run the remote access Server Setup wizard.
Answer: C
Explanation:
http://technet.microsoft.com/en-us/library/jj574180.aspx
http://technet.microsoft.com/en-us/library/hh918432(v=wps.630).aspx
QUESTION 425
Your Network contains oneActive Directory domain named contoso.com.
You pilot DirectAccess on the network.
During the pilot deployment, you enable DirectAccess only for a group Contoso\Test Computers.
Ones the pilot is complete, you need to enable DirectAccess for all the client computers in the domain.
What should you do?
A. From Windows PowerShell, run the Ser-DAServer cmdlet.
B. From Remote Access Management Console, run the remote access Server Setup wizard.
C. From Group Policy Management, modify the security filtering of an object named Direct Access Server Setting Group Policy
D. From Group Policy Management, modify the security filtering of an object named Direct Access Client Setting Group Policy.
Answer: D
QUESTION 426
Your Network contains oneActive Directory domain named contoso.com.
You pilot DirectAccess on the network.
During the pilot deployment, you enable DirectAccess only for a group Contoso\Test Computers.
Ones the pilot is complete, you need to enable DirectAccess for all the client computers in the domain.
What should you do?
A. From Windows PowerShell, run the Ser-DAClient cmdlet.
B. From Windows PowerShell, run the Ser-DirectAccess cmdlet.
C. From Active Directory Users and Computers, modify the membership of the Windows Authorization Access Group.
D. From Group Policy Management, modify the security filtering of an object named Direct Access Client Setting Group Policy.
Answer: D
Explanation:
http://technet.microsoft.com/en-us/library/jj574180.aspx
http://technet.microsoft.com/en-us/library/hh918432(v=wps.630).aspx
QUESTION 427
Your network contains an Active Directory domain named contoso.com.
All user accounts reside in an organizational unit (OU) named OU1.
All of the users in the marketing department are members of a group named Marketing.
All of the users in the human resources department are members of a group named HR.
You create a Group Policy object (GPO) named GPO1.
You link GPO1 to OU1.
You configure the Group Policy preferences of GPO1 to add two shortcuts named Link1 and Link2 to the desktop of each user.
You need to ensure that Link1 only appears on the desktop of client computers that have more than 80 GB of free disk space and Link2 only appears on the desktop of client computers that have less than 80 GB of free disk space.
What should you configure?
A. Group Policy Inheritance
B. WMI Filtering
C. Security Filtering
D. Item-level targeting
Answer: B
QUESTION 428
Your Network contains an Active Directory domain named contoso.com.
All domain controllers run Windows Server 2012 R2.
A central store is configured on the domain controller named DC1.
You have a custom administrative template file name App1.admx. App1.admx contains application setting for an application App1.
You copy App1.admx to the central store.
You create a Group Policy object (GPO) name App1_Setting.
When you edit App1_Settings, you receive the warning massage show in following…
An appropriate recource file could not be found for file \\contoso.com\SysVol\contoso.com\PoliciesDefinations\App1.admx (error =2):
The system cannot find the file specified.
You need to ensure that you can edit the settings for App1_Settings GPO.
What should you do?
A. Copy an ADML file to the central store.
B. Move the ADMX file to the local PolicyDefinations Folder.
C. Modify the permission of the ADMX File.
D. Add an Administrative Template to the App1_Settings GPO.
Answer: A
FREE DOWNLOAD: NEW UPDATED 70-411 PDF Dumps & VCE Dumps from Braindump2go: http://www.braindump2go.com/70-411.html (442 Q&As)
