Ensurepass

QUESTION 211

Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs WindowsServer 2012 R2. Server1 is configured as a Network Policy Server (NPS) server and as a DHCP server.

 

You need to ensure that only computers that send a statement of health are checked for Network Access Protection (NAP) health requirements.

 

Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)

 

A.

The NAS Port Type constraints

B.

The MS-Service Class conditions

C.

The Health Policies conditions

D.

The NAP-Capable Computers conditions

E.

The Called Station ID constraints

 

Correct Answer: CD

QUESTION 212

Your network contains an Active Directory domain named adatum.com. The domain contains a member server named Server1 and 10 web servers. All of the web servers are in an organizational unit (OU) named WebServers_OU. All of the servers run Windows Server 2012 R2. On Server1, you need to collect the error events from all of the web servers. The solution must ensure that when new web servers are added to WebServers_OU, their error events are collected automatically on Server1. What should you do?

 

A.

On Server1, create a collector initiated subscription. From a Group Policy object (GPO), configure the Configure target Subscription Manager setting.

B.

On Server1, create a collector initiated subscription. From a Group Policy object (GPO), configure the Configure forwarder resource usage setting.

C.

On Server1, create a source computer initiated subscription. From a Group Policy object (GPO), configure the Configure forwarder resource usage setting.

D.

On Server1, create a source computer initiated subscription. From a Group Policy object (GPO), configure the Configure target Subscription Manager setting.

 

Correct Answer: D

 

 

QUESTION 213

Which terminology is being described below:

 

This trust is a manually created trust that shortens the trust path to improve the speed at which authentications, which occur between domain trees, are processed.

 

A.

Shortcut Trust

B.

Quick Trust

C.

Easy Trust

D.

Simple Trust

 

Correct Answer: A

 

 

QUESTION 214

Which terminology is being described below?

 

These trusts are sometimes necessary when users need access to resources that are located in a Windows NT 4.0 domain or in a domain that is in a separate Active Directory Domain Services (AD DS) forest that is not joined by a forest trust.

 

A.

Shortcut Trusts

B.

Realm Trusts

C.

Forest Trusts

D.

External Trust

 

Correct Answer: D

Explanation:

You can create an external trust to form a one-way or two-way, nontransitive trust with domains that are outside your forest

http://technet.microsoft.com/enus/library/cc775736%28v=ws.10%29.aspx

 

Trust types

 

clip_image002

 

http://technet.microsoft.com/en-us/library/cc731297.aspx

 

Understanding When to Create a Realm Trust When to create a realm trust You can establish a realm trust between any non-Windows Kerberos version 5 (V5) realm and an Active Directory domain. This trust relationship allows cross-platform interoperability with security services that are based on other versions of the Kerberos V5 protocol, for example, UNIX and MIT implementations. Realm trusts can switch from non transitive to transitive and back. Realm trusts can also be either one-way or two way.

 

 

QUESTION 215

HOTSPOT

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2. The servers have the Hyper-V server role installed.

 

A certification authority (CA) is available on the network.

 

A virtual machine named vml.contoso.com is replicated from Server1 to Server2. A virtual machine named vm2.contoso.com is replicated from Server2 to Server1.

 

You need to configure Hyper-V to encrypt the replication of the virtual machines.

 

Which common name should you use for the certificates on each server?

 

To answer, configure the appropriate common name for the certificate on each server in the answer area.

 

clip_image004

 

Correct Answer:

clip_image006

 

 

QUESTION 216

Server manager is a great tool for managing most of your server settings and configuration all in one central place. Which one of the following Server manager Features is used for management of Public Key Infrastructure?

 

A.

Dynamic Host Configuration Server

B.

WINS Server

C.

Domain Name Service

D.

Active Directory Certificate Services

 

Correct Answer: D

 

 

 

 

 

 

 

QUESTION 217

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2.

 

Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. Cluster1 has access to four physical disks. The disks are configured as shown in the following table.

 

clip_image008

 

You need to ensure that all of the disks can be added to a Cluster Shared Volume (CSV).

 

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.

Enable BitLocker on Disk4

B.

Disable BitLocker on Disk1

C.

Format Disk2 to use NTFS

D.

Format Disk3 to use NTFS

 

Correct Answer: CD

 

 

QUESTION 218

Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1 that runs Windows Server 2012 R2. You create a user account named User1 in the domain.

 

You need to ensure that User1 can use Windows Server Backup to back up Server1.

 

The solution must minimize the number of administrative rights assigned to User1.

 

What should you do?

 

A.

Assign User1 the Back up files and directories user right.

B.

Add User1 to the Backup Operators group.

C.

Add User1 to the Power Users group.

D.

Assign User1 the Back up files and directories user right and the Restore files and directories user right.

 

Correct Answer: A

Explanation:

Backup Operators have these permissions by default:

However the question explicitly says we need to minimize administrative rights. Since the requirement is for backing up the data onlyno requirement to restore or shutdownthen assigning the “Back up files and directories user right” would be the correct.

clip_image010

 

 

QUESTION 219

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.

 

On a server named Server2, you perform a Server Core Installation of Windows Server 2012 R2. You join Server2 to the contoso.com domain.

 

You need to ensure that you can manage Server2 by using the Computer Management console on Server1.

 

What should you do on Server2?

 

A.

Run sconfig.exe and configure remote management.

B.

Run sconfig.exe and configure Remote Server Administration Tools (RSAT).

C.

Install Windows Management Framework.

D.

Install Remote Server Administration Tools (RSAT).

 

Correct Answer: A

Explanation:

In Windows Server 2012, you can use the Server Configuration tool (Sconfig.cmd) to configure and manage several common aspects of Server Core installations. You must be a member of the Administrators group to use the tool. Sconfig.cmd is available in the Minimal Server Interface and in Server with a GUI mode.

 

References:

http://technet.microsoft.com/en-us/library/jj647766.aspx

Training Guide: Installing and Configuring Windows Server 2012, Chapter 2: Deploying servers, p. 80

 

QUESTION 220

DRAG DROP

Your network contains an Active Directory domain named contoso.com. The domain contains four member servers named Server 1, Server2, Server3, and Server4. All servers run Windows Server 2012 R2.

 

Server1 and Server2 are located in a site named Site1. Server3 and Server4 are located in a site named Site2. The servers are configured as nodes in a failover cluster named Cluster1.

 

Cluster1 is configured to use the Node Majority quorum configuration.

 

You need to ensure that Server1 is the only server in Site1 that can vote to maintain quorum.

 

What should you run from Windows PowerShell?

 

To answer, drag the appropriate commands to the correct location. Each command may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

 

clip_image011

 

Correct Answer:

clip_image012

 

 

Free VCE & PDF File for Microsoft 70-417 Actual Tests

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…