70-413 Exam
Foolproof microsoft 70 413 tips
We provide real microsoft 70 413 exam questions and answers braindumps in two formats. Download PDF & Practice Tests. Pass Microsoft microsoft 70 413 Exam quickly & easily. The microsoft 70 413 PDF type is available for reading and printing. You can print more and practice many times. With the help of our Microsoft 70 413 exam dumps pdf and vce product and material, you can easily pass the 70 413 exam exam.
Q51. - (Topic 2)
You run the Get-DNSServer cmdlet on DC01 and receive the following output:
You need to recommend changes to DC01. Which attribute should you recommend modifying?
A. EnablePollutionProtection
B. isReadOnly
C. Locking Percent
D. ZoneType
Answer: C
Explanation: * Scenario: The DNS servers must be prevented from overwriting the existing DNS entries that have been stored in cache.
* Cache locking is configured as a percent value. For example, if the cache locking value is set to 50, then the DNS server will not overwrite a cached entry for half of the duration of the TTL. By default, the cache locking percent value is 100. This means that cached entries will not be overwritten for the entire duration of the TTL. The cache locking value is stored in the CacheLockingPercent registry key. If the registry key is not present, then the DNS server will use the default cache locking value of 100.
Reference: DNS Cache Locking
Q52. - (Topic 8)
Your company has a main office and a branch office.
The network contains an Active Directory domain named contoso.com. The domain contains three domain controllers. The domain controllers are configured as shown in the following table.
The domain contains two global groups. The groups are configured as shown in the following table.
You need to ensure that the RODC is configured to meet the following requirements:
. Cache passwords for all of the members of Branch1Users.
. Prevent the caching of passwords for the members of Helpdesk.
What should you do?
A. Modify the password replication policy of RODC1.
B. Modify the delegation settings of RODC1.
C. Modify the membership of the Allowed RODC Password Replication group.
D. Modify the membership of the Denied RODC Password Replication group.
E. Modify the delegation settings of DC1 and DC2.
F. Install the BranchCache feature on RODC1.
G. Create a Password Settings object (PSO) for the Helpdesk group.
H. Create a Password Settings object (PSO) for the Branch1Users group.
Answer: A
Explanation: The Password Replication Policy acts as an access control list (ACL). It determines if an RODC should be permitted to cache a password. After the RODC receives an authenticated user or computer logon request, it refers to the Password Replication Policy to determine if the password for the account should be cached.
Reference: Password Replication Policy
Q53. - (Topic 8)
A company has a line-of-business application named Appl that runs on an internal IIS server. Ap1l uses a SQL Server 2008 database that is hosted on the same server. You move the database to a dedicated SQL Server named SQL1. Users report that they can no longer access the application by using their domain credentials. You need to ensure that users can access Appl.
Solution: You configure App1 and SQL1 to use NTLM authentication. Then you restart the IIS and SQL Server services.
Does this meet the goal?
A. Yes
B. No
Answer: B
Q54. DRAG DROP - (Topic 8)
Your network contains an Active Directory forest named adatum.com. The forest contains a single domain. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.
The DNS zone of adatum.com is Active Directory-integrated.
You need to implement DNSSEC to meet the following requirements:
Ensure that the zone is signed.
Ensure that the zone signing key (ZSK) changes every 30 days.
Ensure that the key signing key (KSK) changes every 365 days.
What should you do? To answer, drag the appropriate cmdlets to the correct requirements. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Q55. - (Topic 4)
You need to recommend a solution for GPO1.
What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.
A. In west.northwindtraders.com, create a copy of GPO1 and link the new GPO to Site2. Apply a WMI filter to the new GPO.
B. In west.northwindtraders.com, create a copy of GPO1 and link the new GPO to west.northwindtraders.com. Configure security filtering on the new GPO.
C. Link GPO1 to west.northwindtraders.com and configure security filtering on GPO1.
D. Link GPO1 to Site2 and apply a WMI filter to GPO1.
Answer: D
Explanation: * Scenario:
The northwindtraders.com domain contains a Group Policy object (GPO) named GPO1.
GP01 is applied to all of the users in the Montreal office.
Apply GPO1 to all of the San Diego users.
GPO1 must not be applied to computers that run Windows 8.1.
* WM Filter for Operating Systems. Example:
Windows 8.1 64 bit
SELECT version FROM Win32_OperatingSystem WHERE Version LIKE "6.3%" and
ProductType = "1" AND OSArchitecture = "64-bit"
Q56. - (Topic 5)
You need to perform the directory synchronization with Office 365.
What should you do first?
A. Set the domain functional level to Windows Server 2012.
B. Upgrade the Office 365 licenses to Enterprise E4.
C. Set the forest functional level to Windows Server 2012.
D. Create a site-to-site VPN.
E. Install the DirSync utility in the on-premises environment.
Answer: E
Q57. - (Topic 8)
Your network contains an Active Directory domain named contoso.com.
Your company plans to open a branch office. The branch office will have 10 client computers that run Windows 8 and at least one server that runs Windows Server 2012. The server will host
BranchCache files and manage print queues for the network print devices in the branch office.
You need to recommend a solution to ensure that the users in the branch office can print if the branch office server fails.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.
A. Printer pooling
B. Branch Office Direct Printing
C. A standby print server
D. A print server cluster
E. A secure Web Services on Devices (WSD) printer
Answer: B
Explanation:
Branch Office Direct Printing can reduce Wide Area Network (WAN) usage by printing directly to a print device instead of a server print queue. This feature can be enabled or disabled on a per printer basis and is transparent to the user. This feature requires a print server running Windows Server 2012 and clients running Windows
8. It is enabled by an administrator using the Print Management Console or Windows PowerShell on the server.
Reference: Branch Office Direct Printing Overview
Q58. - (Topic 3)
You need to recommend changes to the Active Directory site topology to support on the company's planned changes.
What should you include in the recommendation?
A. A new site
B. A new site link bridge
C. A new site link
D. A new subnet
Answer: D
Explanation:
* Scenario:
The forest contains a child domain for each office. An Active Directory site exists for each
office.
* Sites overview
Sites in AD DS represent the physical structure, or topology, of your network. AD DS uses
network topology information, which is stored in the directory as site, subnet, and site link
objects, to build the most efficient replication topology. The replication topology itself
consists of the set of connection objects that enable inbound replication from a source
domain controller to the destination domain controller that stores the connection object.
The Knowledge
Consistency Checker (KCC) creates these connection objects automatically on each
domain controller.
Reference: Understanding Sites, Subnets, and Site Links
http://technet.microsoft.com/en-us/library/cc754697.aspx
Q59. - (Topic 3)
You need to recommend changes to the Active Directory environment to support the virtualization requirements.
What should you include in the recommendation?
A. Raise the functional level of the domain and the forest.
B. Upgrade the domain controller that has the domain naming master role to Windows Server 2012.
C. Implement Administrator Role Separation.
D. Upgrade the domain controllers that have the PDC emulator master role to Windows Server 2012.
Answer: D
Explanation: From case study:
* Ensure that the additional domain controllers for the branch offices can be deployed by using domain controller cloning.
Q60. - (Topic 1)
You need to recommend changes to the DNS environment that support the implementation of the sales.contoso.com domain. The solution must ensure that the users in all of the domains can resolve both Internet names and the names of the servers in all of the internal domains.
What should you recommend?
A. On the DNS servers in contoso.com, configure a reverse lookup zone. On the DNS servers in sales.contoso.com, configure a conditional forwarder to contoso.com.
B. On the DNS servers in contoso.com, add a conditional forwarder to the sales.contoso.com zone. On the DNS servers in sales.contoso.com, add a forwarder to the DNS servers of the company's ISP.
C. On the DNS servers in contoso.com, create a zone delegation in the contoso.com zone. On the DNS servers in sales.contoso.com, add a forwarder to the contoso.com DNS servers.
D. On the DNS servers in contoso.com, configure a conditional forwarder to sales.contoso.com. On the DNS servers in sales.contoso.com, configure a reverse zone.
Answer: C
Explanation: Scenario: The client computers in sales.contoso.com will use the sales.contoso.com domain controllers as their DNS servers.