QUESTION 141

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2.

 

All client computers run Windows 8 Enterprise.

 

DC1 contains a Group Policy object (GPO) named GPO1.

 

You need to update the PATH variable on all of the client computers.

 

Which Group Policy preference should you configure?

 

A.

Ini Files

B.

Services

C.

Data Sources

D.

Environment

 

Correct Answer: D

Explanation:

Environment Variable preference items allow you to create, update, replace, and delete user and system environment variables or semicolon-delimited segments of the PATH variable. Before you create an Environment Variable preference item, you should review the behavior of each type of action possible with this extension.

 

QUESTION 142

Your company has a main office and a branch office.

 

The main office contains a server that hosts a Distributed File System (DFS) replicated folder.

 

You plan to implement a new DFS server in the branch office.

 

You need to recommend a solution that minimizes the amount of network bandwidth used to perform the initial synchronization of the folder to the branch office.

 

You recommend using the Export-DfsrClone and Import-DfsrClonecmdlets.

 

Which additional command or cmdlet should you include in the recommendation?

 

A.

Robocopy.exe

B.

Synchost.exe

C.

Export-BcCachePackage

D.

Sync-DfsReplicationGroup

 

Correct Answer: A

Explanation:

By preseeding files before you set up DFS Replication, add a new replication partner, or replace a server, you can speed up initial synchronization and enable cloning of the DFS Replication database in Windows Server 2012 R2. The Robocopy method is one of several preceding methods

 

 

QUESTION 143

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Both servers run Windows Server 2012 R2. Both servers have the File and Storage Services server role, the DFS Namespaces role service, and the DFS Replication role service installed.

 

Server1 and Server2 are part of a Distributed File System (DFS) Replication group named Group1
. Server1 and Server2 are separated by a low-speed WAN connection.

 

You need to limit the amount of bandwidth that DFS can use to replicate between Server1 and Server2.

 

What should you modify?

 

A.

The referral ordering of the namespace

B.

The staging quota of the replicated folder

C.

The cache duration of the namespace

D.

The schedule of the replication group

 

Correct Answer: D

Explanation:

< font style="font-size: 10pt" color="#000000">Scheduling allows less bandwidth the by limiting the time interval of the replication Does DFS Replication throttle bandwidth per schedule, per server, or per connection? If you configure bandwidth throttling when specifying the schedule, all connections for that replication group will use that setting for bandwidth throttling. Bandwidth throttling can be also set as a connection-level setting using DFS Management.

 

To edit the schedule and bandwidth for a specific connection, use the following steps:

In the console tree under the Replication node, select the appropriate replication group. Click the Connections tab, right-click the connection that you want to edit, and then click Properties.

Click the Schedule tab, select Custom connection schedule and then click Edit Schedule. Use the Edit Schedule dialog box to control when replication occurs, as well as the maximum amount of bandwidth replication can consume.

 

clip_image002

 

 

QUESTION 144

You have a file server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.

 

Files created by users in the human resources department are assigned the Department classification property automatically.

 

You are configuring a file management task named Task1 to remove user files that have not been accessed for 60 days or more.

 

You need to ensure that Task1 only removes files that have a Department classification property of human resources. The solution must minimize administrative effort.

 

What should you configure on Task1?

 

A.

Configure a file screen

B.

Create a condition

C.

Create a classification rule

D.

Create a custom action

 

Correct Answer: B

Explanation:

Create a File Expiration Task

The following procedure guides you through the process of creating a file management task for expiring files. File expiration tasks are used to automatically move all files that match certain criteria to a specified expiration directory, where an administrator can then back those files up and delete them. Property conditions. Click Add to create a new condition based on the file’s classification. This will open the Property Condition dialog box, which allows you to select a property, an operator to perform on the property, and the value to compare the property against. After clicking OK, you can then create additional conditions, or edit or remove an existing condition.

 

 

QUESTION 145

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. You plan to use fine-grained password policies to customize the password policy settings ofcontoso.com.

 

You need to identify to which Active Directory object types you can directly apply the fine- grained password policies.

 

Which two object types should you identify? (Each correct answer presents part of the solution. Choose two.)

 

A.

Users

B.

Global groups

C.

computers

D.

Universal groups

E.

Domain local groups

 

Correct Answer: AB

Explanation:

First off, your domain functional level must be at Windows Server 2008. Second, Fine- grained password policies ONLY apply to user objects, and global security groups. Linking them to universal or domain local groups is ineffective. I know what you’re thinking, what about OU’s? Nope, Fine-grained password policy cannot be applied to an organizational unit (OU) directly. The third thing to keep in mind is, by default only members of the Domain Admins group can set fine-grained password policies. However, you can delegate this ability to other users if needed.

 

Fine-grained password policies apply only to user objects (or inetOrgPerson objects if they are used instead of user objects) and global security groups.

 

You can apply Password Settings objects (PSOs) to users or global security groups:

http://technet.microsoft.com/en-us/library/cc731589%28v=ws.10%29.aspx

http://technet.microsoft.com/en-us/library/cc731589%28v=ws.10%29.aspx

http://technet.microsoft.com/en-us/library/cc770848%28v=ws.10%29.aspx

http://www.brandonlawson.com/active-directory/creating-fine-grained-password-policies/

 

 

 

 

 

 

 

 

 

 

QUESTION 146

DRAG DROP

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1.

 

You need to create an Active Directory snapshot on DC1.

 

Which four commands should you run?

 

To answer, move the four appropriate commands from the list of commands to the answer area and arrange them in the correct order.

 

clip_image004

 

Correct Answer:

clip_image006

 

QUESTION 147

You have a cluster named Cluster1 that contains two nodes. Both nodes run Windows Server 2012 R2. Cluster1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2.

 

You configure a custom service on VM1 named Service1.

 

You need to ensure that VM1 will be moved to a different node if Service1 fails.

 

Which cmdlet should you run on Cluster1?

 

A.

Add-ClusterVmMonitoredItem

B.

Add-ClusterGenericServiceRole

C.

Set-ClusterResourceDependency

D.

Enable VmResourceMetering

 

Correct Answer: A

Explanation:

The Add-ClusterVMMonitoredItem cmdlet configures monitoring for a service or an Event Tracing for Windows (ETW) event so that it is monitored on a virtual machine. If the service fails or the event occurs, then the system responds by taking an action based on the f
ailover configuration for the virtual machine resource. For example, the configuration might specify that the virtual machine be restarted.

 

 

QUESTION 148

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Windows Server Update Services server role installed.

 

You need to configure Windows Server Update Services (WSUS) to support Secure Sockets Layer (SSL).

 

Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

 

A.

From Internet Information Services (IIS) Manager, modify the connection strings of the WSUS website.

B.

Install a server certificate.

C.

Run the wsusutil.exe command.

D.

Run the iisreset.exe command.

E.

From Internet Information Services (IIS) Manager, modify the bindings of the WSUS website.

 

Correct Answer: BCE

Explanation:

Certficate needs to be installed to IIS, Bindings modifies and wsutil run.

1. First we need to request a certificate for the WSUS web site, so open IIS, click the server name, then open Server Certificates.

On the Actions pane click Create Domain Certificate.

 

2. To add the signing certificate to the WSUS Web site in IIS 7.0

On the WSUS server, open Internet Information Services (IIS) Manager.

Expand Sites, right-click the WSUS Web site, and then click Edit Bindings.

In the Site Binding dialog box, select the https binding, and click Edit to open the Edit Site Binding dialog box.

Select the appropriate Web server certificate in the SSL certificate box, and then click OK.

Click Close to exit the Site Bindings dialog box, and then click OK to close Internet Information Services (IIS) Manager.

 

3. WSUSUtil.exe configuressl<FQDN of the software update point site system> (the name in your certificate) WSUSUtil.exe configuressl<Intranet FQDN of the software update point site system>.

 

4. The next step is to point your clients to the correct url, by modifying the existing GPO or creating a new one. Open the policy Specify intranet Microsof
t update service location and type the new url in the form https: //YourWSUSserver.

 

The gpupdate /force command will just download all the GPO’s and re-apply them to the client, it won’t force the client to check for updates. For that you need to use wuauclt /resetautorization /detectnow followed by wuauclt /reportnow

 

http://technet.microsoft.com/en-us/library/bb680861.aspx

http://technet.microsoft.com/en-us/library/bb633246.aspx

http://www.vkernel.ro/blog/configure-wsus-to-use-ssl

 

 

QUESTION 149

You have a server named Server1 that runs Windows Server 2012 R2.

 

You discover that the performance of Server1 is poor.

 

The results of a performance report generated on Server1 are shown in the following table.

 

clip_image008

 

You need to identify the cause of the performance issue.

 

What should you identify?

 

A.

Driver malfunction

B.

Insufficient RAM

C.

Excessive paging

D.

NUMA fragmentation

 

Correct Answer: A

Explanation:

Processor: %DPC Time. Much like the other values, this counter shows the amount of time that the processor spends servicing DPC requests. DPC requests are more often than not associated with the network interface.

 

Processor: % Interrupt Time. This is the percentage of time that the processor is spending on handling Interrupts. Generally, if this value exceeds 50% of the processor time you may have a hardware issue. Some components on the computer can force this issue and not really be a problem. For example a programmable I/O card like an old disk controller card, can take up to 40% of the CPU time. A NIC on a busy IIS server can likewise generate a large percentage of processor activity.

 

Processor: % User Time. The value of this counter helps to determine the kind of processing that is affecting the system. Of course the resulting val
ue is the total amount of non-idle time that was spent on User mode operations. This generally means application code.

 

Processor: %Privilege Time. This is the amount of time the processor was busy with Kernel mode operations. If the processor is very busy and this mode is high, it is usually an indication of some type of NT service having difficulty, although user mode programs can make calls to the Kernel mode NT components to occasionally cause this type of performance issue.

 

Memory: Pages/sec. This value is often confused with Page Faults/sec. The Pages/sec counter is a combination of Pages Input/sec and Pages Output/sec counters. Recall that Page Faults/sec is a combination of hard page faults and soft page faults. This counter, however, is a general indicator of how often the system is using the hard drive to store or retrieve memory associated data.

 

http://technet.microsoft.com/en-us/library/cc768048.aspx

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

QUESTION 150

HOTSPOT

You have a server named Servers that runs Windows Server 2012 R2. Servers has the Windows Deployment Services server role installed.

 

Server5 contains several custom images of Windows 8.

 

You need to ensure that when 32-bit client computers start by using PXE, the computers automatically install an image named Image 1.

 

What should you configure?

 

To answer, select the appropriate tab in the answer area.

 

clip_image010

 

Correct Answer:

clip_image012

 

Free VCE & PDF File for Microsoft 70-411 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…