Where to find mcp 70 411

70-411 Exam

Proper study guides for Refresh Microsoft Administering Windows Server 2012 certified begins with Microsoft 70 411 exam questions preparation products which designed to deliver the Top Quality 70 411 exam questions by making you pass the 70 411 exam dumps test at your first time. Try the free exam ref 70 411 administering windows server 2012 r2 pdf demo right now.

Q31. HOTSPOT

Your network contains an Active Directory domain named contoso.com.

You have several Windows PowerShell scripts that execute when client computers start.

When a client computer starts, you discover that it takes a long time before users are prompted to log on.

You need to reduce the amount of time it takes for the client computers to start. The solution must not prevent scripts from completing successfully.

Which setting should you configure? To answer, select the appropriate setting in the answer area.

Answer:

Q32. HOTSPOT

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Access server role installed.

You need to configure the ports on Server1 to ensure that client computers can establish VPN connections to Server1. The solution must NOT require the use of certificates or pre-shared keys.

What should you modify?

To answer, select the appropriate object in the answer area.

Answer:

Q33. Your company has a main office and two branch offices. The main office is located in New York. The branch offices are located in Seattle and Chicago.

The network contains an Active Directory domain named contoso.com. An Active Directory site exists for each office. Active Directory site links exist between the main office and the branch offices. All servers run Windows Server 2012 R2.

The domain contains three file servers. The file servers are configured as shown in the following table.

You implement a Distributed File System (DFS) replication group named ReplGroup.

ReplGroup is used to replicate a folder on each file server. ReplGroup uses a hub and spoke topology. NYC-SVR1 is configured as the hub server.

You need to ensure that replication can occur if NYC-SVR1 fails.

What should you do?

A. Create an Active Directory site link bridge.

B. Create an Active Directory site link.

C. Modify the properties of Rep1Group.

D. Create a connection in Rep1Group.

Answer: D

Explanation:

Unsure about this answer.

The Bridge all site links option in Active Directory must be enabled. (This option is available in the Active Directory Sites and Services snap-in.) Turning off Bridge all site links can affect the ability of DFS to refer client computers to target computers that have the least expensive connection cost. An Intersite Topology Generator that is running Windows Server 2003 relies on the Bridge all site links option being enabled to generate the intersite cost matrix that DFS requires for its site-costing functionality. If you turn off this option, you must create site links between the Active Directory sites for which you want DFS to calculate accurate site costs. Any sites that are not connected by site links will have the maximum possible cost. For more information about site link bridging, see “Active Directory Replication Topology Technical Reference.”

Reference:

http: //faultbucket. ca/2012/08/fixing-a-dfsr-connection-problem/

http: //technet. microsoft. com/en-us/library/cc771941. aspx

Q34. You have Windows Server 2012 R2 installation media that contains a file named Install.wim. You need to identify the permissions of the mounted images in Install.wim.

What should you do?

A. Run dism.exe and specify the /get-mountedwiminfo parameter.

B. Run imagex.exe and specify the /verify parameter.

C. Run imagex.exe and specify the /ref parameter.

D. Run dism.exe and specify the/get-imageinfo parameter.

Answer: A

Explanation:

/Get-MountedWimInfo Lists the images that are currently mounted and information about the mounted image such as read/write permissions, mount location, mounted file path, and mounted image index.

References:

http: //technet. microsoft. com/en-us/library/cc749447(v=ws. 10). aspx

http: //technet. microsoft. com/en-us/library/dd744382(v=ws. 10). aspx

http: //technet. microsoft. com/en-us/library/hh825224. aspx

Q35. HOTSPOT

Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2012 R2. You enable the EventLog-Application event trace session.

You need to set the maximum size of the log file used by the trace session to 10 MB. From which tab should you perform the configuration? To answer, select the appropriate tab in the answer area.

Answer:

Q36. Your network contains two Active Directory domains named contoso.com and adatum.com.

The network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the DNS Server server role installed. Server1 has a copy of the contoso.com DNS zone.

You need to configure Server1 to resolve names in the adatum.com domain. The solution must meet the following requirements:

Prevent the need to change the configuration of the current name servers that host zones for adatum.com. Minimize administrative effort.

Which type of zone should you create?

A. Secondary

B. Stub

C. Reverse lookup

D. Primary

Answer: B

Explanation:

When a zone that this DNS server hosts is a stub zone, this DNS server is a source only for information about the authoritative name servers for this zone. The zone at this server must be obtained from another DNS server that hosts the zone. This DNS server must have network access to the remote DNS server to copy the authoritative name server information about the zone.

A stub zone is a copy of a zone that contains only necessary resource records (Start of Authority (SOA), Name Server (NS), and Address/Host (A) record) in the master zone and acts as a pointer to the authoritative name server. The stub zone allows the server to forward queries to the name server that is authoritative for the master zone without going up to the root name servers and working its way down to the server. While a stub zone can improve performance, it does not provide redundancy or load sharing.

You can use stub zones to:

Keep delegated zone information current. By updating a stub zone for one of its child zones regularly, the DNS server that hosts both the parent zone and the stub zone will maintain a current list of authoritative DNS servers for the child zone.

Improve name resolution. Stub zones enable a DNS server to perform recursion using the stub zone's list of name servers, without having to query the Internet or an internal root server for the DNS namespace.

Simplify DNS administration. By using stub zones throughout your DNS infrastructure, you can distribute a list of the authoritative DNS servers for a zone without using secondary zones. However, stub zones do not serve the same purpose as secondary zones, and they are not an alternative for enhancing redundancy and load sharing.

There are two lists of DNS servers involved in the loading and maintenance of a stub zone:

The list of master servers from which the DNS server loads and updates a stub zone. A master server may be a primary or secondary DNS server for the zone. In both cases, it will have a complete list of the DNS servers for the zone.

The list of the authoritative DNS servers for a zone. This list is contained in the stub zone using name server (NS) resource records.

When a DNS server loads a stub zone, such as widgets. tailspintoys.com, it queries the master servers, which can be in different locations, for the necessary resource records of the authoritative servers for the zone widgets. tailspintoys.com. The list of master servers may contain a single server or multiple servers, and it can be changed anytime.

References: http: //technet.microsoft.com/en-us/library/cc771898.aspx http: //technet.microsoft.com/en-us/library/cc754190.aspx http: //technet.microsoft.com/en-us/library/cc730980.aspx

Q37. You have a server named Server1 that runs Windows Server 2012 R2.

On Server1, you configure a custom Data Collector Set (DCS) named DCS1. DCS1 is configured to store performance log data in C:\Logs.

You need to ensure that the contents of C:\Logs are deleted automatically when the folder reaches 100 MB in size.

What should you configure?

A. A File Server Resource Manager (FSRM) file screen on the C:\Logs folder

B. The Data Manager settings of DCS1

C. A schedule for DCS1

D. A File Server Resource Manager (FSRM) quota on the C:\Logs folder

Answer: B

Explanation:

To configure data management for a Data Collector Set

1. In Windows Performance Monitor, expand Data Collector Sets and click User Defined.

2. In the console pane, right-click the name of the Data Collector Set that you want to configure and click Data Manager.

3. On the Data Manager tab, you can accept the default values or make changes according to your data retention policy. See the table below for details on each option. When Minimum free disk or Maximum folders is selected, previous data will be deleted according to the Resource policy you choose (Delete largest or Delete oldest) when the limit is reached. When Apply policy before the data collector set starts is selected, previous data will be deleted according to your selections before the data collector set creates its next log file. When Maximum root path size is selected, previous data will be deleted according to your selections when the root log folder size limit is reached.

4. Click the Actions tab. You can accept the default values or make changes. See the table below for details on each option.

5. When you have finished making your changes, click OK.

Q38. DRAG DROP

Your network contains an Active Directory forest named contoso.com. The forest contains a Network Policy Server (NPS) server named NPS1 and a VPN server named VPN1. VPN1 forwards all authentication requests to NPS1.

A partner company has an Active Directory forest named adatum.com. The adatum.com forest contains an NPS server named NPS2.

You plan to grant users from adatum.com VPN access to your network.

You need to authenticate the users from adatum.com on VPN1.

What should you create on each NPS server?

To answer, drag the appropriate objects to the correct NPS servers. Each object may be

used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Q39. DRAG DROP

You are a network administrator of an Active Directory domain named contoso.com.

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Web Server (IIS) server role installed.

Server1 will host a web site at URL https: //secure.contoso.com. The application pool identity account of the web site will be set to a domain user account named AppPool1.

You need to identify the setspn.exe command that you must run to configure the appropriate Service Principal Name (SPN) for the web site.

What should you run?

To answer, drag the appropriate objects to the correct location. Each object may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Q40. Your network contains an Active Directory domain named contoso.com. The domain contains three servers. The servers are configured as shown in the following table.

You need to ensure that end-to-end encryption is used between clients and Server2 when the clients connect to the network by using DirectAccess.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. From the Remote Access Management Console, reload the configuration.

B. Add Server2 to a security group in Active Directory.

C. Restart the IPSec Policy Agent service on Server2.

D. From the Remote Access Management Console, modify the Infrastructure Servers settings.

E. From the Remote Access Management Console, modify the Application Servers settings.

Answer: B,E

Explanation:

Unsure about these answers:

A public key infrastructure must be deployed.

Windows Firewall must be enabled on all profiles.

ISATAP in the corporate network is not supported. If you are using ISATAP, you should remove it and use native IPv6.

Computers that are running the following operating systems are supported as DirectAccess clients:

Windows Server. 2012 R2

Windows 8.1 Enterprise

Windows Server. 2012

Windows 8 Enterprise

Windows Server. 2008 R2

Windows 7 Ultimate

Windows 7 Enterprise

. Force tunnel configuration is not supported with KerbProxy authentication.

. Changing policies by using a feature other than the DirectAccess management console or Windows PowerShell cmdlets is not supported.

. Separating NAT64/DNS64 and IPHTTPS server roles on another server is not supported.