ENSUREPASS 70-410 PDF
Free Microsoft MCSA Exam Dumps% Free MCSA PDF and VCE Files With Latest and Real Questions & Answers From. Latest-Microsoft-EnsurePassDumps-PDF_pdf - Ebook download as PDF File .pdf), Text File .txt) or read book online. myavr.info Easy Test! Easy Pass! Download the complete collection of Exam's Real Q&As myavr.info Vendor: Microsoft. Exam Code:
|Language:||English, Spanish, Japanese|
|Genre:||Children & Youth|
|ePub File Size:||24.62 MB|
|PDF File Size:||17.48 MB|
|Distribution:||Free* [*Regsitration Required]|
The practice exam is written and formatted by Certified Senior IT Professionals working in . also has a server, named ENSUREPASS-SR08, which has the DHCP, and Remote Questions / Answers are downloadable in PDF format. Collect Microsoft Exam Dumps for candidates. % Free pdf Files With Updated and Accurate Questions & Answers for passing the exam. View Latest-Microsoft-EnsurePassDumps-PDF_20 from IT at TAFE NSW - Sydney Institute. Vendor: Microsoft Exam Code: Exam.
Each correct answer presents part of the solution. Choose two. An inbound rule for protocol 47 B. An outbound rule for protocol 47 C. An inbound rule for TCP port D. An inbound rule for TCP port E. An outbound rule for TCP port F. The computer accounts for all member servers are located in an organizational unit OU named Servers.
You need to ensure that the domain's Backup Operators group is a member of the local Backup Operators group on each member server. The solution must not remove any groups from the local Backup Operators groups.
What should you do? Add Backup Operators to the This group is a member of list. Add Backup Operators to the Members of this group list. Add a restricted group named Backup Operators. Correct Answer: A Explanation: A. The Member Of list specifies which other groups the restricted group should belong to B. Needs to be added to member of list C. Wrong group Restricted groups allow an administrator to define two properties for security-sensitive groups that is,"restricted" groups. The two properties are Members and Member Of.
The Members list defines who should and should not belongto the restricted group. The Member Of list specifies which other groups the restricted group should belong to. When a restricted Group Policy is enforced, any current member of a restricted group that is not on theMembers list is removed.
Any user on the Members list which is not currently a member of the restrictedgroup is added. You need to join Server 1 to the contoso. Creates a new Active Directory computer.
70-410 UP TO Date Exam Questions & Answers (PDF) 2015 -...
You have a file server named Server2. While the original server is still running. Publishes all printers in the directory. To produce a listing of all the users and their last logon date. Each cmdlet or property may be used once. The list must include the last time each user was authenticated successfully. You need to retrieve a list of all the user accounts. Server1 runs Windows Server and is configured as the only domain controller. You may need to drag the split bar between panes or scroll to view content.
Which Windows PowerShell command should you run? The domain contains a server named Server1. General settings only allow you to stop. Server1 contains a single virtual machine named VM1. You need to configure a service named Service1 to run as the gservice1 account.
From the Services console. The solution must minimize the number of permissions assigned to User1. From a command prompt. You need to ensure that a user named User1 can manage the virtual machine settings of VM1. Add users to this group instead of thelocal Administrators group to provide them with access to Hyper-V.
How should you configure Service1? Set-Service provides a way for you to change the Description. Modifies service configuration D. The domain contains a server named Windows Server R2. Members of the Hyper-V Administrators have complete and unrestricted access to all features of Hyper-V. Administrators C. Hyper-V Administrators Correct Answer: This group can reduce the number of users that belong to the local Administrators group while providing users with access to Hyper-VSimplified authorization: The Hyper-V Administrators group is introduced and is implemented as a local security group.
Power Users D. Server Operators B. To which group should you add User1? What works differently? The Hyper-V Administrators group is a new local security group. What value does this change add? This group can reduce the number of users that belong to the local Administrators group while providingusers with access to Hyper-V.
From Windows PowerShell. Print Operators. Windows Settings. Double-click Allow Logon Locally. Backup Operators.
Security Settings. If you want to grant a user account theability to log on locally to a domain controller. Local Policies. Modify the Account is sensitive and cannot be delegated setting of the User1 account. Modify the Logon Workstations setting of the User1 account.
Grant User1 the Allow log on locally user right. Domain controllers. You need to ensure that User1 can log on to DC1. Add User1 to the Remote Management Users group. A user named User1 attempts to log on to DO.
By default. The network contains two subnets. The subnets are configured as shown in the following table. The network contains a member server named Server1 that runs Windows Server R2. Server1 is configured to lease IP addresses to the two subnets.
You discover that computers on the Warehouse subnet that have static IP addresses can communicate with the computers on the MainOffice subnet.
Computers on the Warehouse subnet that obtain an IP address automatically can only communicate with other computers on the Warehouse subnet.
You need to ensure that all of the computers on the Warehouse subnet can communicate with the computers on the MainOffice subnet. This option is normally used to assign a default gateway to DHCP clients on a subnet. A DHCP clientrequests this option. This option specifies a list of IP addresses for resource location servers C. This option specifies whether the DHCP client enables or disables the forwarding at the IP layer ofdatagrams that contain source routing information and were sent by a non-local host.
The network contains client computers that run Windows 8. All of the client computers connect to the Internet by using a web proxy. You deploy a server named Server1 that runs Windows Server R2. Server1 has the DNS Server server role installed.
You configure all of the client computers to use Server1 as their primary DNS server. You need to prevent Server1 from attempting to resolve Internet host names for the client computers. Configure the Security settings of the contoso. Remove all root hints. Create a primary zone named ". Create a primary zone named "root".
Create a primary zone named "GlobalNames". Create a forwarder that points to Create a stub zone named "root". Create a zone delegation for GlobalNames. BC Explanation: If there is a root zone, there are no other zones other than those that are listed with DNS, and you cannot configure forwarders or root hint servers.
Root domain This is the top of the tree, representing an unnamed level; it is sometimes shown as two empty quotation marks "" , indicating a null value. When used in a DNS domain name, it is stated by a trailing period. In this instance, the DNS domain name is considered to be complete and points to an exact location in the tree of names.
Names stated this way are called fully qualified domain names FQDNs. You need to select a subnet mask for the network that will support all of the client computers.
The solution must minimize the number of unused addresses. Which subnet mask should you select? The servers are configured as shown in the following table.
A filter C. A scope option D. Using a subnet mask of An exclusion Correct Answer: You need to prevent Server3 from receiving an IP address from Server1.
Server3 is configured to obtain an IP address automatically. A reservation B. What should you create on Server1? Range of allowed IP's to be assigned D. For clients that require a constant IP address B. DC4 Correct Answer: DC1 B. Wrong Domain B. The forest contains two domains named contoso.
For example. All domain controllers are DNS servers. DC3 D. In the corp. You need to identify which domain controller must be online to ensure that DCS can be promoted successfully to a domain controller. DC2 C. Which domain controller should you identify?
Reservation and Exclusion. The forest contains four domain controllers. Each DC in a domain is allocated a pool of RIDs that it is allowed to assign to the security principals it creates. You log on to a domain controller by using an account named Admin1. Right domain.
When a DC creates a security principal object such as a user or group. What should you do from Active Directory Users and Computers? RID Master must be online D. Group1 is located in an organizational unit OU named OU1. Admin1 is a member of the Domain Admins group. You need to ensure that users from Group1 can modify the Security settings of OU1 only.
You view the properties of a group named Group1 as shown in the exhibit. Allocates active and standby RID pools to replica domain controllers in the same domain. Would delegate control to the whole domain C. Modify the Security settings of Group1.
The distinguished name of the user that is assigned to manage this object. Right-click contoso. Modify the Managed By settings on OU1. Both of these tools allow you to assign rights or permissions to particular users or groups.
Wrong Feature An organizational unit is the smallest scope or unit to which you can assign Group Policy settings or delegate administrative authority.
Administrative control can be assigned to a user or group by using the Delegation of Control Wizard or through the Authorization Manager console. You can delegate administrative control to any level of a domain tree by creating organizational units within a domain and delegating administrative control for specific organizational units to particular users or groups. Right-click OU1 and select Delegate Control. A user can have administrative authority for all organizational units in a domain or for a single organizational unit.
Global catalog server. DNS Server server role. Which two configurations should you identify? Each correct answer presents part of the solution. AD Explanation: Transfer the schema master. Enable the global catalog server. Install the Active Directory Certificate Services role. ADCS and schema must be done separately.
Schema master. The new domain controller will have the following configurations: Choose two. All domain controllers currently run Windows Server R2. You also use it to insert the computer account data intothe Windows directory of the destination computer. In the perimeter network. Server1 is in a workgroup. To perform an offline domain join. Run the djoin. You use Djoin. A two-way trust exists between the forests. Run the dsadd.
The contoso. You need to perform an offline domain join of Server1 to the contoso. Both forests contain multiple domains. Adds specific types of objects to the directory. Which three actions should you perform? Use djoin for offline join in the perimeter network C. What should you do first? Transfer the infrastructure master role to DC1.
You need to ensure that Group1 can only contain users from the contoso. Transfer the PDC emulator role to Dc1. Universal groups can only include objects from its own forest Groups can have -. Domain local -Groups that are used to grant permissions within a single domain.
A universal group is a security or distribution group that contains users. You can give domain local security groups rights and permissions on resources that reside only in the same domain where the domain local group is located.. Universal groups are not supported.. A domain local group is a security or distribution group that can contain universal groups. In all those locations.. You can give universal security groups rights and permissions on resources in any domain in the forest.
Members of domain local groups can include only accounts both user and computer accounts and groups from thedomain in which they are defined.. A global group is a group that can be used in its own domain. Domain local Groups that are used to grant permissions within a single domain. That is. You discover that when you join client computers to the domain manually. You can only modify built-in local groups. Groups that are used to grant permissions on a wide scale throughout a domain tree or forest.
You need to ensure that new computer accounts are created automatically in an organizational unit OU named Corp. Redirects the default container for newly created computers to a specified.
Global to universal. Members of global groups include accounts and groups from any domain in the domain tree or forest. Universal to global. This conversion is allowed only if the group that you want to change is not a member of another global scope group.
Universal to domain local. Domain local to universal. The difference between built-in local groups and other groups is that built-in local groups can't be created or deleted. Groups that have a special group scope that have domain local permissions and. This conversion is allowed only if the group that you want to change does not have another domain local group as a member. Members of global groups can include only accounts and groups from the domain in which they are defined.
Modify local registry entries D. Adds specific types of objects to the directory Redirects the default container for newly created computers to a specified. Built-in local. You must be a member of the Domain Admins group or the Enterprise Admins group to use this tool. There are no restrictions for this operation. Global -Groups that are used to grant permissions to objects in any domain in the domain tree or forest. References to domain local groups apply to built-in local groups unless otherwise noted.
You must run the redircmp command from an elevated command prompt. This conversion is allowed only if the group that you want to change does not have another universal group as a member. The disks on Server2 are configured as shown in the exhibit.
Convert Disk 1 to a basic disk. Create a partition on Disk 1. You create a virtual machine on Server2 named VM1. You need to ensure that you can configure a pass-through disk for VM1. Server2 has the Hyper-V server role installed. Take Disk 1 offline. Convert Disk 1 to a MBR disk.
To ensure the Guest has exclusive access to the storage. This allows you to use your existing Fibre Channel investments to support virtualized workloads. Create a Hyper-V virtual switch. Server1 has the Hyper-V server role installed. WindowsServer provides Fibre Channel ports within the guest operating system. Support for Fibre Channel in Hyper-V guests also includes support for many related features.
You need your virtualized workloads to connect easily and reliably to your existing storage arrays. Add one HBA B. With this Hyper-V virtual Fibre Channel feature. Configure network adapter teaming. This feature protects your investments inFibre Channel.
The user can always override the automatic mode selection by manually switching to manual offline mode. You are running a training exercise for junior administrators. To determine the connection speed two pings with default packet size are sent to the file server. To enable Always Offline Mode. If the average round-trip time is below 80 ms Windows 7 or 35 ms Windows 8. AC Explanation: Offline Files have four modes of operation: Online Slow link Auto offline Manual offline Offline Files transition between the three modes online.
Choose all that apply. It allows for swifter access to cached files and redirected folders. You are currently discussing the Always Offline Mode. It allows for lower bandwidth usage due to users are always working offline. From Server Manager. No synchronization occurs. Windows 7. FQDN is a fully qualified domain name. The Central Store is a file location that is checked by the Group Policy tools. The files that are in the Central Store are laterreplicated to all domain controllers in the domain.
By placing the ADMX files in this directory. In manual offline mode. No synchronization occurs by default. From Windows Explorer. Whether you are a single DC or several thousand. Writes and Synchronization In online mode. It really does work well. The GroupPolicy tools use any. In slow link mode.
The Central Store To take advantage of the benefits of. To create a Central Store for. What should you do on DC1?
Reads are satisfied from the local cache if in sync. You need to configure a central store for the Group Policy Administrative Templates.
Create Disk Storage Pool B. In auto offline mode. The local cache is background- synchronized with the file server every 6 hours Windows 7 or 2 hours Windows 8. Add a restricted group named Backup Operators. An outbound rule for TCP port F. Which two firewall rules should you create?
An inbound rule for TCP port E. The solution must not remove any groups from the local Backup Operators groups. An inbound rule for TCP port D. Needs to be added to member of list C. Add Backup Operators to the Members of this group list. To allow PPTP tunneled data to pass through router. An inbound rule for protocol 47 B. The Member Of list specifies which other groups the restricted group should belong to B. An outbound rule for protocol 47 C. You need to ensure that the domain's Backup Operators group is a member of the local Backup Operators group on each member server.
You configure Server1 as a VPN server. To enable VPN tunnels between individual host computers or entire networks that have a firewall between them.
Add Backup Operators to the This group is a member of list. The computer accounts for all member servers are located in an organizational unit OU named Servers. When a restricted Group Policy is enforced. Wrong group Restricted groups allow an administrator to define two properties for security-sensitive groups that is. Any user on the Members list which is not currently a member of the restrictedgroup is added. The Members list defines who should and should not belongto the restricted group.
The Restricted Groups folder is available only in Group Policy objects associated with domains. The two properties are Members and Member Of. In short. If the Member Of list is emptyno changes are made to any groups that the restricted group belongs to. The Member Of list specifies which other groups the restricted group should belong to.
If a Restricted Group is defined such that it has no members that is. With software restriction policies. You need to ensure that only the latest version of Appl. A publisher rule for a Packaged app is based on publisher.
In order for certificate rules to take effect. An application control policy executable rule Correct Answer: You can create a certificate rule that identifies software and then allows or does not allow the software torun. On Trusted Publishers Properties. All servers run Windows Server R2. This security settings is used to enable or disable certificate rules. When certificate rules are enabled. You can disable this feature. Executable Rules. An application named Appl.
A software restriction policy certificate rule C. An application control policy packaged app rule B. An application control policy Windows Installer rule D. This may decrease performance when start signedprograms. Product name. Use Certificate Rules on Windows Executables for Software Restriction Policies This security setting determines if digital certificates are processed when a user or process attempts to runsoftware with an. What should you create? Multiple versions of Appl.
In the details pane. Preferences Correct Answer: Restricted Groups D. Security Options B. Restricted Groups defines what member or groups should exist as part of a group D. With Preferences. All domain controllers run Windows Server R2.
User Rights Assignment policies determines which users or groups have logon rights or privileges on thecomputer C. Which Group Policy settings should you modify? Rename administrator account. User Rights Assignment C. Allows configuration of computers B. Create a volume on Disk 2 Correct Answer: Convert the disk to a dynamic disk.
You need to ensure that you can create a 3-TB volume on Disk 5. You have a server that runs Windows Server R2. Convert the disk to a GPT disk. You need to create a storage pool that contains Disk 1 and Disk 2. Create a storage pool. Convert Disk 1 and Disk 2 to dynamic disks C. Delete volume E B. Storage pools are only a collection ofdrives that are managed by windows.
You add a 4-TB disk named Disk 5 to Server1. The disks on the server are configured as shown in the exhibit. Create a VHD.
Storage Pools use unallocated space There is no way to create a storage pool with existing data. Server is on R2 core. The solution must meet the following requirements: Not least effort D. On Server1. Upgrade to R2 and install GUI shell http: The Server Manager console C. Not least effort C. When the installation is complete. MBR max is 2TB.
If you have a disk larger than 2TB size. For more information about these installation options. It is not possible to boot to a GPT partition. Reinstall Windows Server R2 on the server.
You need to uninstall the graphical user interface GUI on Server1. Performs prerequisite checks for DirectAccess DA to ensure that it can be installed.
Get FREE access by uploading your study materials
Remote Desktop Gateway RD Gateway is a role service that enables authorized remote users to connectto resources on an internal corporate or private network. You must achieve this goal by using the minimum amount of Administrative effort. Quick and Easy C. Server1 is configured as shown in the following table. Server1 hosts four virtual machines named VM1. Doesn't remove all GUI components http: Not least effort B. Resource control C. Which virtual machine setting should you configure for VM2?
Integration Services J. The startup order H. NUMA topology B. Virtual Machine Chimney E. Port mirroring K. Processor Compatibility G. Automatic Start Action I.
Resource metering D. G Explanation: You need to ensure that the next time VM2 restarts. Installation of Windows Server R2. You need to join Server1 to the contoso. The djoin. The Add-Computer cmdlet. The domain contains three domain DC3 loses network connectivity due to a hardware failure.
You plan to remove DC3 from the domain. You log on to DC3. Netlogon service creates a log file that contains all the locator resource records and places the logfile in the following location: Analyzes the state of domain controllers in a forest or enterprise and reports any problems to help introubleshooting.
SRV resource records are used to locate domain controllers for Active Directory. You can use Notepad, to view this file. This record should appear similar to the following:. A group named Group1 is configured as a domain local distribution group in the forest root domain.
You plan to grant Group1 read-only access to a shared folder named Share1. Share1 is located in a child domain. You need to ensure that the members of Group1 can access Share1. Convert Group1 to a global distribution group. Convert Group1 to a universal security group. Convert Group1 to a universal distribution group. Convert Group1 to a domain local security group. Distribution Groups only used for email B, Universal can be used for any domain or forest C.
Distribution Groups only used for email D. Permissions can be assigned only within the same domain as the parent domain local group Group scope Universal can be assigned permissions in any domain or forest. One of the domain controllers is named DCI. You need to promote Server1 to a domain controller by using install from media IFM. Create a system state backup of DC1. Backs up system state data to be restored C.
Only valid option. Wrong server Installation from media does not work across different operating system versions. In other words, you must use a Windows Server R2 domain controller to generate installation media to usefor another Windows Server R2 domain controller installation. We can use the Install from media IFM option to install an Additional Domain Controller in an existing domainis the best option such as a branch office scenario where network is slow, unreliable and costly.
IFM will minimize replication traffic during the installation because it uses restored backup files to populate theAD DS database. This will significantly reduce the amount of traffic copied over the WAN link. Things to remember: The domain contains servers. You need to create a group named Group1 on all of the servers in the domain. You must ensure that Group1 is added only to the servers. What should you configure? This would add the group to the wrong OU B.
This would affect the whole domain and would effect member of the group C. Restricted Groups defines what member or groups should exist as part of a group Why use Group Policy preferences? You use preferences to configure many areas of theOS, including: System devices, such as USB ports, floppy drives and removable media Network shares and mapping network shares to drive letters System and user environment variables User and group accounts for the local computer VPN and dial-up networking connections Printer configuration and mapping Registry settings, schedule tasks and system services Settings for Folder Options, Internet Options and Regional and Language Options Settings for power schemes and power management Start Menu properties and menu items.
The domain contains several thousand member servers that run Windows Server R2. All of the computer accounts for the member servers are in an organizational unit OU named ServersAccounts. Servers are restarted only occasionally. You need to identify which servers were restarted during the last two days. Run dsquery computerand specify the -staiepwdpara meter. Run dsquery serverand specify the -oparameter. From the View menu, select Advanced Features.
These basic containers include the only organizational unit OU , which is the Domain Controllers OU, as wellas the other containers such as Users and Computers. To see more in-depth containers, you need to configure the ADUC by going to the View option on thetoolbar, then selecting Advanced Features. This will refresh the view within the ADUC and add some new containers.
Active Directory Domains and Trusts D. You install Windows Server on a new computer named DC3. The domain contains two domain controllers named DC1 and DC2. You need to manually configure DC3 as a domain controller. Server Manager B. In Windows Server R2. New-NetSwitchTeam B.
Adds a network adapter member to an existing switch team C. Not a valid cmdlet D. You need to configure network traffic failover to prevent connectivity loss if a network adapter fails.
Creates a new switch team B. Core1 has the Hyper-V server role installed Core1 has two network adapters from different third- party hardware vendors. Install-Feature D. Here is the systax for DISM: A mirrored space D. The setup. The dism. A parity space Correct Answer: Maximize the amount of files that can be stored in the storage space.
A spanned volume C. Parity spaces are best suited for archival data and streaming media. Provide fault tolerance if a single disk fails. Stripes data across a set of pool disks. You need to create a storage space that contains the three disks. A simple space B. Fault tolerant and better space ratio Parity spaces are designed for capacity efficiency and increased resiliency.
The imagex. Fault tolerant but Not max space D. You connect three new hard disks to Server1. A spanned volume is a dynamic volume consisting of disk space on more than one physical disk and not fault tolerant C.
You need to add a graphical user interface GUI to Server1. You need to create a network adapter team from the three network adapters connected to LAN 1. Routing and Remote Access B. Three of the network adapters an connected to a network named LAN1.
Network and Sharing Center C. Server Manager D. Server1 has five network adapters. The two other network adapters are connected to a network named LAN2. Windows Explorer. Would leave components D.
Would be a server core install B. If the server has a full installation of Windows Server. What should you run on Server1? You need to remove Windows Explorer.
This is similar to a Server with a GUI installation. No IE or taskbar. Windows Internet Explorer. Server Manager. Would leave components In Windows Server R2. Remove the legacy network adapter. You need to assign a specific amount of available network bandwidth to VM1. The legacy network adapter doesn't support bandwidth management D. The legacy network adapter doesn't support bandwidth management C. Add a second legacy network adapter. Set-VMNetworkAdaptercmdlet configures features of the virtual network adapter in a virtual machine or the management operating system B.
VM1 has a legacy network adapter. Run the Enable-NetFirewallRulecmdlet. You need to ensure that you can use Event Viewer on Server1 to view the event logs on Core1. Run the Disable-NetFirewallRulecmdlet. What should you do on Core1? Run sconfiq. Run sconfig.
You join Core1 to the adatum. On a server named Core1. Modifies service entries C. All client computers run Windows 8. Configure slow-link mode. Which Group Policy setting should you configure? Offline Files uses the slow-link mode if the network throughput between theclient and the server is below slower than the Throughput threshold parameter. Lists network files and folders that are always available for offline use. Offline Files to provide faster access to cached files and redirected folders.
Would Disable a firewall rule which was enabled D. Enable file synchronization on costed networks D. Turn on economical application of Administratively assigned Offline Files.
Defines a slow connection for purposes of App1ying and updating Group Policy. Configure Slow link speed C. This is similar to a user working offline.
When Offline Files is operating in the slow-link mode. If you enable this policy setting. This policy makes the specified filesand folders available offline to users of the computer. You need to ensure that when users are connected to the network. Enable and schedule shadow copies for Share1 B. This is useful in a network with a high volume of printing because it decreases the time users wait for theirdocuments. You need to ensure that users can use Previous Versions to restore the files in Share1.
No settings for file version http:Create either a program rule. You also use it to insert the computer account data intothe Windows directory of the destination computer. Multiple versions of Appl. You need to ensure that when users are connected to the network. They are highly qualified individuals, who have many years of professional experience related to the subject of the exam. The provider talks to the agent using the new File Server Remote VSS protocol in order to manage the shadow copies of the data.
Which two configurations should you identify? User Rights Assignment D.
Add Backup Operators to the Members of this group list.