2015 Microsoft Official New Released 70-413 Practice Exam Questions and Answers Free Sample Dumps Provided By Braindump2go! All Exams One Time Pass 100% Guaranteed!
Vendor: Microsoft
Exam Code: 70-413
Exam Name: Designing and Implementing a Server Infrastructure
QUESTION 91
Your network contains an Active Directory forest named contoso.com.
The forest contains one domain.
Your company plans to open a new division named Division1.
A group named Division1Admins will administer users and groups for Division1.
You identify the following requirements for Division1:
– All Division1 users must have a complex password that is 14 characters.
– Division1Admins must be able to manage the user accounts for Division1.
– Division1Admins must be able to create groups, and then delete the groups that they create.
– Division1Admins must be able to reset user passwords and force a password change at the next logon for all Division1 users.
You need to recommend changes to the forest to support the Division1 requirements.
What should you recommend? More than one answer choice may achieve the goal. Select the BEST answer.
A. Create a new child domain named divisionl.contoso.com.
Move all of the Division1 user accounts to the new domain.
Add the Division1Admin members to the Domain Admins group.
Configure the password policy in a Group Policy object (GPO).
B. In the forest, create a new organizational unit (OU) named Division1 and add
Division1Admins to the Managed By attribute of the new OU.
Move the Division1 user objects to the new OU.
Create a fine-grained password policy for the Division1 users.
C. Create a new forest. Migrate all of the Division1 user objects to the new forest and add the
Division1Admins members to the Enterprise Admins group.
Configure the password policy in a Group Policy object (GPO).
D. In the forest, create a new organizational unit (OU) named Division1 and delegate
permissions for the OU to the Division1Admins group.
Move all of the Division1 user accounts to the new OU.
Create a fine-grained password policy for the Division1 users.
Answer: D
QUESTION 92
Your company has a main office and four branch offices.
The main office is located in London.
The network contains an Active Directory domain named contoso.com.
The network is configured as shown in the exhibit. (Click the Exhibit button.)
Each office contains several servers that run Windows Server 2012.
In each branch office, you plan to deploy an additional 20 servers that will run Windows Server 2012. Some of the servers will have a Server Core Installation of Windows Server 2012.
You identify the following requirements for the deployment of the new servers:
– Operating system images must be administered centrally.
– The operating system images must be deployed by using PXE.
– The WAN traffic caused by the deployment of each operating system must be minimized.
You need to recommend a solution for the deployment of the new servers.
What should you recommend?
A. Deploy Windows Deployment Services (WDS) in each office.
Replicate the images by using Distributed File System (DFS) Replication.
B. Deploy Windows Deployment Services (WDS) in each office.
Copy the images by using BranchCache.
C. Deploy Windows Deployment Services (WDS) in the main office only.
Copy the images by using BranchCache.
D. Deploy Windows Deployment Services (WDS) in the main office only.
Replicate the images by using Distributed File System (DFS) Replication.
Answer: A
QUESTION 93
Your network contains an Active Directory domain named contoso.com.
The domain contains a Microsoft System Center 2012 infrastructure.
The domain contains two sites named Site1 and Site2.
The sites connect to each other by using a 1-Mbps WAN link.
The sites contain four servers.
The servers are configured as shown in the following table.
In Site2, you plan to deploy 50 Hyper-V hosts.
You need to recommend a solution to deploy the Hyper-V hosts by using VMM.
The solution must minimize the amount of traffic between Site1 and Site2 during deployment.
What should you recommend?
A. On Server4, install VMM.
From the Virtual Machine Manager console, add Server1 as a PXE server and add Server4
as a library server.
B. On Server4/ install VMM.
From the Virtual Machine Manager console, add Server1 as a PXE server and a library server.
C. On Server4, install WDS.
From the Virtual Machine Manager console, add Server4 as a PXE server and a library server.
D. On Server4, install WDS.
From the Virtual Machine Manager console, add Server4 as a PXE server and add Server1
as a library server.
Answer: C
QUESTION 94
Your network contains an Active Directory forest named contoso.com.
You plan to add a new domain named child.contoso.com to the forest.
On the DNS servers in child.contoso.com, you plan to create conditional forwarders that point to the DNS servers in contoso.com.
You need to ensure that the DNS servers in contoso.com can resolve names for the servers in child. contoso.com.
What should you create on the DNS servers in contoso.com?
A. A root hint
B. A zone delegation
C. A conditional forwarder
D. A trust point
Answer: B
QUESTION 95
Your network contains a server named Server1 that runs Windows Server 2012.
Server1 has the DHCP Server server role installed.
The network contains a Virtual Desktop Infrastructure (VDI).
All virtual machines run Windows 8.
You identify the following requirements for allocating IPv4 addresses to client computers:
– All virtual desktops must have static IP addresses.
– All laptop computers must receive dynamic IP addresses.
– All virtual desktops must be prevented from obtaining dynamic address.
You need to recommend a DHCP solution that meets the requirements for allocating IPv4 addresses.
The solution must use the least amount of administrative effort.
What should you recommend? More than one answer choice may achieve the goal. Select the BEST answer.
A. Create two physical subnets.
Configure 802.1x authentication for each subnet.
B. Create two physical subnets.
Connect the laptop computers to the subnet that contains Server1.
C. Configure DHCP filtering.
D. Configure DHCP policies.
Answer: C
Explanation:
Policies would work too but filtering is less effort
QUESTION 96
Your network contains an Active Directory forest that has two domains named contoso.com and europe. contoso.com.
The forest contains five servers.
The servers are configured as shown in the following table.
You plan to manage the DHCP settings and the DNS settings centrally by using IP Address Management (IPAM).
You need to ensure that you can use IPAM to manage the DHCP and DNS settings in both domains.
The solution must use the minimum amount of administrative effort.
What should you do?
A. Upgrade DCE1 and DCE2 to Windows Server 2012, and then install the IP Address
Management (IPAM) Server feature.
Run the Invoke-IpamGpoProvisioning cmdlet for each domain.
B. Upgrade DCE1 and DCE2 to Windows Server 2012, and then install the IP Address
Management (IPAM) Server feature.
Run the Set-IpamConfiguration cmdlet for each domain.
C. Upgrade DC1 and DC2 to Windows Server 2012, and then install the IP Address
Management (IPAM) Server feature.
Run the Set-IpamConfiguration cmdlet for each domain.
D. Upgrade DC1 and DC2 to Windows Server 2012, and then install the IP Address
Management (IPAM) Server feature.
Run the Invoke-IpamGpoProvisioning cmdlet for each domain.
Answer: A
Explanation:
Invoke-IpamGpoProvisioning
Creates and links group policies in the specified domain for provisioning required access settings on the servers managed by the computer running the IP Address Management (IPAM) server.
http://technet.microsoft.com/en-us/library/jj553805.aspx
Set-IpamConfiguration
Sets the configuration for the computer running the IP Address Management (IPAM) server, including the TCP port number over which the computer running the IPAM Remote Server Administration Tools (RSAT) client connects with the computer running the IPAM server.
http://technet.microsoft.com/en-us/library/jj590816.aspx
QUESTION 97
Your company is a hosting provider that provides cloud-based services to multiple customers.
Each customer has its own Active Directory forest located in your company’s datacenter.
You plan to provide VPN access to each customer.
The VPN solution will use RADIUS for authentication services and accounting services.
You need to recommend a solution to forward authentication and accounting messages from the perimeter network to the Active Directory forest of each customer.
What should you recommend? More than one answer choice may achieve the goal. Select the BEST answer.
A. A RADIUS server for each customer and one RADIUS proxy
B. A RADIUS server for each customer and a RADIUS proxy for each customer
C. One RADIUS proxy and one Active Directory Lightweight Directory Services (AD LDS)
instance for each customer
D. One RADIUS proxy for each customer and Active Directory Federation Services (AD FS)
Answer: A
QUESTION 98
Your network contains an Active Directory domain named contoso.com.
The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2008 R2.
You plan to replace the domain controllers with new servers that run Windows Server 2012.
The new servers will be named DC3 and DC4.
You need to recommend a strategy to replace DC1 and DC2 with DC3 and DC4.
The solution must minimize the amount of disruption to the users.
Which three actions should you recommend? To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
QUESTION 99
Your network contains an Active Directory forest.
The forest contains two domains named contoso.com and fabrikam.com.
You plan to decommission the fabrikam.com domain.
You need to perform the following migration tasks:
– Copy user accounts from the fabrikam.com domain to the contoso.com domain.
– Move the client computers from fabrikam.com to contoso.com.
The solution must ensure that all of the user profiles are associated to the migrated user accounts.
Which tool should you use to perform each task? To answer, drag the appropriate tool to the correct migration task in the answer area. Each tool may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 100
Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Server1 that runs Windows Server 2008 R2.
Server1 is a file server.
You deploy a new member server named Server2 that runs Windows Server 2012.
You plan to migrate file shares from Server1 to Server2.
File share and NTFS permissions are assigned only to domain local groups.
You need to identify which actions are required to perform the migration.
Which five actions should you identify? To answer, move the five appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
QUESTION 101
Your company plans to deploy a remote access solution to meet the following requirements:
– Ensure that client computers that are connected to the Internet can be managed remotely without requiring that the user log on.
– Ensure that client computers that run Windows Vista or earlier can connect remotely.
– Ensure that non-domain-joined computers can connect remotely by using TCP port 443.
You need to identify which remote access solutions meet the requirements.
Which solutions should you identify? To answer, drag the appropriate solution to the correct requirement in the answer area. Each solution may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content.
Answer:
Explanation:
– DirectAccess, introduced in the Windows 7 and Windows Server 2008 R2 operating systems, allows remote users to securely access enterprise shares, web sites, and applications without connecting to a virtual private network (VPN). DirectAccess establishes bi-directional connectivity with a user’s enterprise network every time a user’s DirectAccess-enabled portable computer connects to the Internet, even before the user logs on. Users never have to think about connecting to the enterprise network and IT administrators can manage remote computers outside the office, even when the computers are not connected to the VPN. Forefront Unified Access Gateway (UAG) 2010 extends the benefits of DirectAccess across your infrastructure, enhancing scalability and simplifying deployment and ongoing management.
– Both L2TP and IPsec must be supported by both the VPN client and the VPN server. Client support for L2TP is built in to the Windows Vista® and Windows XP remote access clients, and VPN server support for L2TP is built in to members of the Windows Server® 2008 and Windows Server 2003 family.
– Secure Socket Tunneling Protocol (SSTP) is a form of VPN tunnel that provides a mechanism to transport PPP or L2TP traffic through an SSL 3.0 channel. SSL provides transport-level security with key-negotiation, encryption and traffic integrity checking. The use of SSL over TCP port 443 allows SSTP to pass through virtually all firewalls and proxy servers.
QUESTION 102
Your network contains an Active Directory domain named contoso.com.
The domain contains three Active Directory sites.
The Active Directory sites are configured as shown in the following table.
![wpsCE73.tmp_thumb[2]](http://www.itexamquiz.com/braindump2go/bdimages/94dfd78a8a79_9B6B/wpsCE73.tmp_thumb2.png "wpsCE73.tmp_thumb[2]")
The sites connect to each other by using the site links shown in the following table.
![wpsF96A.tmp_thumb[2]](http://www.itexamquiz.com/braindump2go/bdimages/94dfd78a8a79_9B6B/wpsF96A.tmp_thumb2.png "wpsF96A.tmp_thumb[2]")
You need to design the Active Directory site topology to meet the following requirements:
– Ensure that all replication traffic between Site2 and Site3 replicates through Site1 if a domain controller in Site1 is available.
– Ensure that the domain controllers between Site2 and Site3 can replicate if all of the domain controllers in Site1 are unavailable.
What should you do?
A. Delete Link2.
B. Disable site link bridging.
C. Delete Link3.
D. Create one site link bridge.
Answer: D
QUESTION 103
Your network contains a server named Server1 that runs Windows Server 2012.
Server1 is configured as a Hyper-V host. Server1 hosts a virtual machine named VM1.
VM1 is configured as a file server that runs Windows Server 2012.
VM1 connects to a shared storage device by using the iSCSI Initiator.
You need to back up the files and the folders in the shared storage used by VM1.
The solution must ensure that open files are included in the backup.
What should you do?
A. From Hyper-V Manager, create a snapshot of VM1.
B. From Server1, perform a backup by using Windows Server Backup.
C. From VM1, perform a backup by using Windows Server Backup.
D. From Microsoft System Center 2012 Virtual Machine Manager (VMM), create a copy of VM1.
Answer: C
Explanation:
Backing Up Hyper-V Virtual Machines Using Windows Server Backup
QUESTION 104
Your company has a main office and a branch office.
The network contains an Active Directory domain named contoso.com.
The domain contains three domain controllers.
The domain controllers are configured as shown in the following table.
The domain contains two global groups.
The groups are configured as shown in the following table.
You need to ensure that the RODC is configured to meet the following requirements:
– Cache passwords for all of the members of Branch1Users.
– Prevent the caching of passwords for the members of Helpdesk.
What should you do?
A. Create a Password Settings object (PSO) for the Helpdesk group.
B. Install the BranchCache feature on RODC1.
C. Modify the password replication policy of RODC1.
D. Modify the delegation settings of RODC1.
Answer: C
QUESTION 105
Your company has a main office, ten regional datacenters; and 100 branch offices.
You are designing the site topology for an Active Directory forest named contoso.com.
The forest will contain the following servers:
– In each regional datacenter and in the main office, a domain controller that runs Windows Server
– In each branch office, a file server that runs Windows Server 2012
You have a shared folder that is accessed by using the path \\contoso.com\shares\software.
The folder will be replicated to a local file server in each branch office by using Distributed File System (DFS) replication.
You need to recommend an Active Directory site design to meet the following requirements:
– Ensure that users in the branch offices will be authenticated by a domain controller in the closest regional datacenter.
– Ensure that users automatically connect to the closest file server when they access \\contoso.com\shares\software.
How many Active Directory sites should you recommend?
A. 1
B. 10
C. 11
D. 111
Answer: D
Explanation:
You must have a domain controller in each site (if the site contains users that need to log in to the domain).
Braindump2go 70-413 Exam Dumps are the latest updated! We guarantee you a 100% Pass of all exams Or Full Money Back! Download our Latest 70-413 Exam Dumps Full Version Now! Instant Download Provided!
