Getting Smart with: exam 70 410 pdf

we provide Accurate Microsoft 70 410 exam questions torrent which are the best for clearing vce 70 410 test, and to get certified by Microsoft Installing and Configuring Windows Server 2012. The mcsa 70 410 Questions & Answers covers all the knowledge points of the real vce 70 410 exam. Crack your Microsoft 70 410 installing and configuring windows server 2012 Exam with latest dumps, guaranteed!

Q41. - (Topic 3) 

You have a server named Server1 that runs Windows Server 2012 R2. 

You plan to enable Hyper-V Network Virtualization on Server1. 

You need to install the Windows Network Visualization Filter Driver on Server1. 

Which Windows PowerShell cmdlet should you run? 

A. Set-NetVirtualizationGlobal 

B. Enable-NetAdapterBinding 

C. Add - WindowsFeature 

D. Set-NetAdapterVmq 

Answer:

Explanation: 

Hyper-V Network Virtrtualization runs multiple virtual networks on a physical network. And each virtual network operates as if it is running as a physical network. The Set-NetAdaptercmdlet sets the basic properties of a network adapter such as virtual LAN (VLAN) identifier (ID) and MAC address. Thus if you add the binding parameter to the command then you will be able to install the Windows Network Virtualization Filter Driver. Step one: Enable Windows Network Virtualization (WNV). This is a binding that is applied to the NIC that you External Virtual Switch is bound to. This can be a physical NIC, it can be an LBFO NIC team. Either way, it is the network adapter that your External Virtual Switch uses to exit the server. This also means that if you have multiple virtual networks or multiple interfaces that you can pick and choose and it is not some global setting. If you have one External Virtual Switch this is fairly easy: $vSwitch = Get-VMSwitch -SwitchType External # Check if Network Virtualization is bound # This could be done by checking for the binding and seeing if it is enabled ForEach-Object -InputObject $vSwitch { if ((Get-NetAdapterBinding -ComponentID "ms_netwnv" -InterfaceDescription $_.NetAdapterInterfaceDescription).Enabled -eq $false){ # Lets enable it Enable-NetAdapterBinding -InterfaceDescription $_.NetAdapterInterfaceDescription -ComponentID "ms_netwnv"}} 


Q42. - (Topic 3) 

You work as a senior administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 installed, and all workstations have Windows 8 installed. 

You are running a training exercise for junior administrators. You are currently discussing the Always Offline Mode. 

Which of the following is TRUE with regards to the Always Offline Mode? (Choose all that apply.) 

A. It allows for swifter access to cached files and redirected folders. 

B. To enable Always Offline Mode, you have to satisfy the forest and domain functional-level requirements, as well as schema requirements 

C. It allows for lower bandwidth usage due to users are always working offline. 

D. To enable Always Offline Mode, you must have workstations running Windows 7 or Windows Server 2008 R2. 

Answer: A,C 

Explanation: 

There are no domain/forest/schema requirements, but clients must be running Windows 

8/Windows Server 2012 or later. 

Offline Files have four modes of operation: 

Online Slow link Auto offline Manual offline Offline Files transition between the three modes online, slow link and auto offline depending on connection speed. The user can always override the automatic mode selection by manually switching to manual offline mode. To determine the connection speed two pings with default packet size are sent to the file server. If the average round-trip time is below 80 ms (Windows 7) or 35 ms (Windows 8), the connection is put into online mode, otherwise into slow link mode. The latency value of 35/80 ms is configurable through the Group Policy setting Configure slow-link mode. Reads, Writes and Synchronization In online mode, changes to files are made on the file server as well as in the local cache (this induces a performance hit – see this article for details). Reads are satisfied from the local cache (if in sync). In slow link mode, changes to files are made in the local cache. The local cache is background-synchronized with the file server every 6 hours (Windows 7) or 2 hours (Windows 8), by default. This can be changed through the Group Policy setting Configure Background Sync. . In auto offline mode, all reads and writes go to the local cache. No synchronization occurs. . In manual offline mode, all reads and writes go to the local cache. No synchronization occurs by default, but background synchronization can be enabled through the Group Policy setting Configure Background Sync. 


Q43. - (Topic 1) 

Your network contains an Active Directory domain named contoso.com. The domain contains an Application server named Server1. Server1 runs Windows Server 2012 R2. 

Server1 is configured as an FTP server. 

Client computers use an FTP Application named App1.exe. App1.exe uses TCP port 21 as 

the control port and dynamically requests a data port. 

On Server1, you create a firewall rule to allow connections on TCP port 21. You need to configure Server1 to support the client connections from App1.exe. What should you do? 

A. Run netshadvfirewall set global statefulftp enable. 

B. Create an inbound firewall rule to allow App1.exe. 

C. Create a tunnel connection security rule. 

D. Run Set-NetFirewallRule -DisplayName DynamicFTP -Profile Domain 

Answer:

Explanation: 

The netsh firewall context is supplied only for backward compatibility. We recommend that you do not use this context on a computer that is running Windows Vista or a later version of Windows. In the netsh advfirewall firewall context, the add command only has one variation, the add rule command. Netsh advfirewall set global statefulftp: Configures how Windows Firewall with Advanced Security handles FTP traffic that uses an initial connection on one port to request a data connection on a different port. When statefulftp is enabled, the firewall examines the PORT and PASV requests for these other port numbers and then allows the corresponding data connection to the port number that was requested. Syntax set global statefulftp { enable | disable | notconfigured } Parameters statefulftp can be set to one of the following values: enable The firewall tracks the port numbers specified in PORT command requests and in the responses to PASV requests, and then allows the incoming FTP data traffic entering on the requested port number. disable This is the default value. The firewall does not track outgoing PORT commands or PASV responses, and so incoming data connections on the PORT or PASV requested port is blocked as an unsolicited incoming connection. notconfigured Valid only when netsh is configuring a GPO by using the set store command. 


Q44. - (Topic 1) 

Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and child.contoso.com. The forest contains two domain controllers. The domain controllers are configured as shown in the following table. 

You need to ensure that DC2 can provide authoritative responses for queries to the contoso.com namespace. 

What should you do? 

A. On DC1, create a delegation. 

B. On DC1, change the replication scope of the contoso.com zone. 

C. On DC2, create a forwarder. 

D. On DC2, modify the Zone Transfers settings. 

Answer:

Explanation: 

For DC1 to be able to provide authoritative responses to DNS queries the replication scope should be changed accordingly so that it has the zone data for the contoso.com domain. 


Q45. - (Topic 3) 

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have Windows Server 2012 R2 installed. 

You have created and linked a new Group Policy object (GPO) to an organizational unit (OU), named ENSUREPASSServ, which host the computer accounts for servers in the Contoso.com domain. 

You have been tasked with adding a group to a local group on all servers in the Contoso.com domain. This group should not, however, be removed from the local group. 

Which of the following actions should you take? 

A. You should consider adding a restricted group. 

B. You should consider adding a global group. 

C. You should consider adding a user group. 

D. You should consider adding a server group. 

Answer:

Explanation: 

Restricted groups in Group policies are a simple way of delegating permissions or group 

membership centrally to any domain computer or server. Using restricted groups it is easier 

to enforce the lowest possible permissions to any given account. 

Computer Configuration\Windows Settings\Security Settings\Restricted Groups 

Restricted groups allow an administrator to define two properties for security-sensitive 

groups (that is, “restricted” groups). The two properties are Members and Member Of . 

The Members list defines who should and should not belong to the restricted group. 

The Member Of list specifies which other groups the restricted group should belong to. 

When a restricted Group Policy is enforced, any current member of a restricted group that 

is not on the Members list is removed. 


Q46. - (Topic 3) 

You work as an administrator at ABC.com. The ABC.com network consists of a single domain named ABC.com. All servers in the ABC.com domain, including domain controllers, have Windows Server 2012 R2 installed. 

ABC.com has a domain controller, named ABC-DC01, which contains the ABC.com domain’s primary DNS zone. ABC.com’s workstations refer to ABC-DC01 as their primary DNS server. 

You have been instructed to make sure that any DNS requests that are not for the ABC.com domain, is resolved by ABC-DC01 querying the DNS server of ABC.com’s Internet Service Provider (ISP). 

Which of the following actions should you take? 

A. You should consider configuring a reverse lookup zone. 

B. You should consider configuring forward lookup zone. 

C. You should consider configuring Forwarders. 

D. You should consider configuring 019 IP Layer Forwarding. 

Answer:

Explanation: 

A forwarder is a Domain Name System (DNS) server on a network that forwards DNS queries for external DNS names to DNS servers outside that network. You can also forward queries according to specific domain names using conditional forwarders. You designate a DNS server on a network as a forwarder by configuring the other DNS servers in the network to forward the queries that they cannot resolve locally to that DNS server. By using a forwarder, you can manage name resolution for names outside your network, such as names on the Internet, and improve the efficiency of name resolution for the computers in your network. 


Q47. - (Topic 1) 

Your network contains multiple subnets. 

On one of the subnets, you deploy a server named Server1 that runs Windows Server 2012 R2. 

You install the DNS Server server role on Server1, and then you create a standard primary zone named contoso.com. 

You need to ensure that client computers can resolve single-label names to IP addresses. 

What should you do first? 

A. Create a reverse lookup zone. 

B. Convert the contoso.com zone to an Active Directory-integrated zone. 

C. Configure dynamic updates for contoso.com. 

D. Create a GlobalNames zone. 

Answer:

Explanation: 

Although a GlobalNames zone is required in order to resolve single-label names, GNZs 

must be AD-integrated. 

Since this is a standard primary zone (as opposed to an ADDS primary zone), we must first 

integrate the zone into Active Directory. 

References: 

Exam Ref: 70-410: Installing and Configuring Windows Server 2012 R2, Chapter4: 

Deploying and configuring core network services, Objective 4.3: Deploy and Configure the 

DNS service, p.233 

http://technet.microsoft.com/en-us/library/cc731744.aspx 


Q48. - (Topic 3) 

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. 

You need to ensure that the local administrator account on all computers is renamed to L.Admin. 

Which Group Policy settings should you modify? 

A. Restricted Groups 

B. Security Options 

C. User Rights Assignment 

D. Preferences 

Answer:

Explanation: 

In Group Policy Object Editor, click Computer Configuration, click Windows Settings, click Security Settings, click Local Policies, and then click Security Options. In the details pane, double-click Accounts: Rename administrator account. The Security Options node includes security settings regarding interactive logon, digital signing of data, restrictions of access to floppy and CD-ROM drives, unsigned driver installations as well as logon dialog box behavior. This category also includes options to configure authentication and communication security within Active Directory. 


Q49. HOTSPOT - (Topic 3) 

Your network contains an Active Directory domain named contoso.com. The network contains two subnets. The subnets are configured as shown in the following table: 

The network contains a member server named Server1 that runs Windows Server 2012 R2. Server1 has the DHCP Server server role installed. 

Server1 is configured to lease IP addresses to the two subnets. You add three new printers to the Warehouse subnet. The printers have static IP addresses. The IP addresses are consecutive. 

You need to create an exclusion range that contains the IP addresses of the printers. 

From which node should you configure the exclusion range? To answer, select the appropriate node in the answer area. 

Answer: 


Q50. HOTSPOT - (Topic 1) 

Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2008 R2 or Windows Server 2012 R2. All client computers run Windows 8. 

All computer accounts are located in an organizational unit (OU) named OU1. 

You create a Group Policy object (GPO) that contains several AppLocker rules. You link 

the GPO to OU1. 

You need to ensure that the AppLocker rules apply to all of the client computers. 

What should you configure in the GPO? 

To answer, select the appropriate service in the answer area. 

Answer: