Achieve New Updated (September) Microsoft 70-410 Examination Questions 81-90

Ensurepass

 

QUESTION 81

Your network contains an Active Directory domain named contoso.com.

You need to prevent users from installing a Windows Store app named App1.

What should you create?

 

A.

An application control policy executable rule

B.

An application control policy packaged app rule

C.

A software restriction policy certificate rule

D.

An application control policy Windows Installer rule

 

Correct Answer: B

Explanation:

Windows 8 is coming REALLY SOON and of course one of the big new things to computer with that is the newPackaged Apps that run in the start screen. However these apps are very different and do not install liketraditional apps to a path or have a true “executable” file to launch the program. Ofcourse enterprises need a way to control these packaged apps and therefore Microsoft has added a newfeature Packaged Apps option to the App1ocker feature.

A. For .exe or .com

B. A publisher rule for a Packaged app is based on publisher, name and version

C. You can create a certificate rule that identifies software and then allows or does not allow the software torun, depending on the security level.

D. For .msi or .msp

Packaged apps (also known as Windows 8 apps) are new to Windows Server 2012 R2 and Windows 8. They are based on the new app model that ensures that all the files within an app package share the sameidentity.

Therefore, it is possible to control the entire Application using a single App1ocker rule as opposed to the nonpackagedapps where each file within the app could have a unique identity. Windows does not support unsigned packaged apps which implies all packaged apps must be signed. App1ocker supports only publisher rules for Packaged apps. A publisher rule for a Packaged app is based on the following information:

Publisher of the package

Package name

Package version

Therefore, an App1ocker rule for a Packaged app controls both the installation as well as the running of theapp. Otherwise, the publisher rules for Packaged apps are no different than the rest of the rule collections; theysupport exceptions, can be increased or decreased in scope, and can be assigned to users and groups.

http://technet.microsoft.com/en-us/library/dd759068.aspx

http://technet.microsoft.com/en-us/library/hh994588.aspx

http://www.grouppolicy.biz/2012/08/how-manage-published-a-k-a-metro-ap
ps-in-windows8-using- grouppolicy/

http://technet.microsoft.com/en-us/library/hh994597.aspx#BKMK_Cert_Rules Packaged

Apps run in the start screen.

However these apps are very different and do not install like traditional apps to a path or have a true”executable” file to launch the program.

Enterprises need a way to control these packaged apps and therefore Microsoft has added a new featurePackaged Apps option to the App1ocker feature.

 

 

 

 

 

 

 

 

QUESTION 82

Your network contains an Active Directory domain named contoso.com. The domain contains 500 servers that run Windows Server 2012 R2. You have a written security policy that states the following:

 

– Only required ports must be open on the servers.

– All of the servers must have Windows Firewall enabled.

– Client computers used by Administrators must be allowed to access all of the ports on all of the servers.

– Client computers used by the Administrators must be authenticated before the client computers can access the servers.

 

You have a client computer named Computer1 that runs Windows 8. You need to ensure that you can use Computer1 to access all of the ports on all of the servers successfully. The solution must adhere to the security policy.

Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

 

A.

On Computer1, create a connection security rule

B.

On all of the servers, create an outbound rule and select the Allow the connection if it is secureoption.

C.

On all of the servers, create an inbound rule and select the Allow the connection if it is secureoption.

D.

On Computer1, create an inbound rule and select the Allow the connection if it is secureoption.

E.

On Computer1, create an outbound rule and select the Allow the connection if it is secureoption

F.

On all of the servers, create a connection security rule

 

Correct Answer: ACF

Explanation:

http://technet.microsoft.com/en-us/library/cc772017.aspx

Unlike firewall rules, which operate unilaterally, connection security rules require that both communicating computers have a policy with connection security rules or another compatible IPsec policy.

http://technet.microsoft.com/en-us/library/cc753463.aspx

Traffic that matches a firewall rule that uses the Allow connection if it is secure setting bypasses Windows Firewall. The rule can filter the traffic by IP address, port, or protocol. This method is supported on Windows Vista or Windows Server 2008.

 

 

QUESTION 83

Your company’s security policy states that all of the servers deployed to a branch office must not have the graphical user interface (GUI) installed. In a branch office, a support technician installs a server with a GUI installation of Windows Server 2012 on a new server, and then configures the server as a DHCP server.

You need to ensure that the new server meets the security policy. You want to achieve this goal by using the minimum amount of Administrative effort.

What should you do?

 

A.

Reinstall Windows Server 2012 on the server.

B.

From Windows PowerShell, run Uninstall-WindowsFeature Desktop-Experience.

C.

From Windows PowerShell, run Uninstall-WindowsFeature PowerShell-ISE.

D.

From Server Manager, uninstall the User Interfaces and Infrastructure feature.

 

Correct Answer: D

Explanation:

A. Not least effort

B. Uninstalls desktop experience not the full GUI

C. Uninstalls the powershell ISE

D. Least effort and removes full GUI

 

 

clip_image001

 

http://www.howtogeek.com/111967/how-to-turn-the-gui-off-and-on-in-windows-server-2012/ http://technet.microsoft.com/en-us/library/cc772567.aspx http://blogs.technet.com/b/server_core/archive/2012/05/09/configuring-the-minimal- serverinterface.aspx

 

 

 

 

 

 

 

 

 

 

 

 

 

QUESTION 84

Your network contains three servers. The servers are configured as shown in the following table.

 

clip_image002

 

Your company plans to standardize all of the servers on Windows Server 2012 R2.

You need to recommend an upgrade path for each server. The solution must meet the following requirements:

 

Upgrade the existing operating system whenever possible.

Minimize hardware purchases.

 

Which upgrade path should you recommend for each server?

To answer, drag the appropriate upgrade path to each server in the answer area. Each upgrade path may be used once, more than once, or not at all.

 

clip_image004

 

Correct Answer:

 

clip_image006

 

Explanation:

Server1 not 64-bit processor

Server2 not 64-bit processor

Server3 64-bit processor, needs 2008 SP1

 

clip_image008

 

http://blogs.technet.com/b/askcore/archive/2012/10/23/upgrading-to-windows-server-2012-part-1.aspx

http://technet.microsoft.com/en-us/library/jj134246.aspx

 

 

QUESTION 85

Your network contains a file server named Server1 that runs Windows Server 2012 R2. All client computers run Windows 8. Server1 contains a folder named Folder1. Folder1 contains the installation files for the company’s desktop applications. A network technician shares Folder1 as Share 1.

You need to ensure that the share for Folder1 is not visible when users browse the network.

What should you do?

 

A.

From the properties of Folder1, deny the List Folder Contents permission for the Everyone group.

B.

From the properties of Folder1, remove Share1, and then share Folder1 as Share1$.

C.

From the properties of Folder1, configure the hidden attribute.

D.

From the properties of Share1, configure access-based enumeration

 

Correct Answer: B

Explanation:

A. Will deny everyone list of folder content

B. Remove share and re-add using $ for Hidden/Administrative share

C. This will hide the physical folder

D. lists only the files and folders to which they have access when browsing content on the file server A hidden share is identified by a dollar sign ($) at the end of the share name

Hidden shares are not listed when you look through the shares on a computer or use the “net view” command

Why Use Hidden Shares?

Using hidden shares on your network is useful if you do not want a shared folder or drive on the network to beeasily accessible. Hidden shares can add another layer of protection for shared files against unauthorizedpeople connecting to your network. Using hidden shares helps eliminate the chance for people to guess yourpassword (or be logged into an authorized Windows account) and then receive access to the shared resource.

 

clip_image009

 

http://support.microsoft.com/kb/314984

http://technet.microsoft.com/en-us/library/cc784710(v=ws.10).aspx

 

 

QUESTION 86

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and a server named Server2 that runs Windows Server 2008 R2 Service Pack 1 (SP1). Both servers are member servers. On Server2, you install all of the software required to ensure that Server2 can be managed remotely from Server Manager.

You need to ensure that you can manage Server2 from Server1 by using Server Manager.

Which two tasks should you perform on Server2? (Each correct answer presents part of the solution. Choose two.)

 

A.

Run the systempropertiesremote.execommand

B.

Run the Enable-PsRemotingcmdlet.

C.

Run the Enable-PsSessionConfigurationcmdlet

D.

Run the Confiqure-SMRemoting.ps1script

E.

Run the Set-ExecutionPolicycmdlet.

 

Correct Answer: DE

Explanation:

To configure Server Manager remote management by using Windows PowerShell On the computer that you want to manage remotely, open a Windows PowerShell session with elevated user rights. To do this, click Start, click All Programs, click Accessories, click Windows PowerShell, right-click the Windows PowerShell shortcut, and then click Run as administrator. In the Windows PowerShell session, type the following, and then press Enter.

Set-ExecutionPolicy -ExecutionPolicyRemoteSigned

Type the following, and then press Enter to enable all required firewall rule exceptions.

Configure-SMRemoting.ps1 -force -enable

http://technet.microsoft.com/en-us/library/dd759202.aspx A)

Run the systempropertiesremote.exe command

B) Enable-PSRemotingcmdlet configures the computer to receive Windows PowerShell remote commandsthat are sent by using the WS-Management technology.

C) Enable-PSSessionConfigurationcmdlet enables registered session configurations that have been disabled.

D) Configure-SMRemoting.ps1 -force -enable

E) Set-ExecutionPolicy -ExecutionPolicyRemoteSigned

To configure Server Manager remote management by using Windows PowerShell On the computer that you want to manage remotely, open a Windows PowerShell session with elevated userrights, type the following:

 

clip_image011

 

To configure Server Manager remote management by using Windows PowerShell. On the computer that youwant to manage remotely, open a Windows PowerShell session with elevated user rights. To do this, click Start, click All Programs, click Accessories, click Windows PowerShell, right-click the WindowsPowerShell shortcut, and then click Run as administrator. In the Windows PowerShell session, type thefollowing, and then press Enter. Set-ExecutionPolicy –

ExecutionPolicyRemoteSigned Type the following, and then press Enter to enable allrequired firewall rule exceptions.

Configure-SMRemoting.ps1 -force -enable

http://technet.microsoft.com/en-us/library/dd759202.aspx

 

 

 

 

 

 

QUESTION 87

Your network contains an Active Directory domain named contoso.com. The domain contains a print server named Server1 that runs Windows Server 2012 R2. You share several printers on Server1. You need to ensure that you can view the printer objects associated to Server1 in Active Directory Users and Computers.

Which option should you select? To answer, select the appropriate option in the answer area.

 

clip_image012

 

Correct Answer:

 

clip_image013

 

Explanation:

You can view printer objects in Active Directory by clicking Users, Groups, and Computers as containers from the View menu in the Active Directory Users and Computers snap-in.

By default, printer objects are created under the machine object in which they are shared. After you turn on the Users, Groups, and Computers as containers option, you can see printers by expanding the printer’s host computer.

http://support.microsoft.com/kb/235925

 

 

QUESTION 88

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012 R2. You log on to Server1. You need to retrieve the IP configurations of Server2. Which command should you run from Server1?

 

A.

winrs -r:server2 ipconfig

B.

winrm get server2

C.

dsquery *-scope base-attr ip, server2

D.

ipconfig > server2.ip

 

Correct Answer: A

Explanation:

A. Windows Remote Management allows you to manage and execute programs remotely

B. winrm is the server side services for remote mgmt

C. dsquery * finds any objects in the directory according to criteria using a LDAP query.

D. Would output server1 ipconfig info to server2.ip file

 

clip_image014

 

http://technet.microsoft.com/en-us/library/dd349801(v=ws.10).aspx

 

 

 

 

QUESTION 89

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed. The disks on Server1 are configured as shown in the exhibit. (Click the Exhibit button.) You create a virtual machine on Server1. You need to ensure that you can configure a pass-through disk for the virtual machine. What should you do?

 

clip_image016

 

A.

Delete partition E.

B.

Convert Disk 1 to a GPT disk

C.

Convert Disk 1 to a dynamic disk.

D.

Take Disk 1 offline.

 

Correct Answer: D

Explanation:

Pass-Through Disk must be offline

Pass-through Disk Configuration

Hyper-V allows virtual machines to access storage mapped directly to the Hyper-V server without requiring thevolume be configured. The storage can either be a physical disk internal to the Hyper-V server or it can be aStorage Area Network (SAN) Logical Unit (LUN) mapped to the Hyper-V server. To ensure the Guest hasexclusive access to the storage, it must be placed in an Offline state from the Hyper-V serverperspective

http://blogs.technet.com/b/askcore/archive/2008/10/24/configuring-pass-through-disks-inhyper- v.aspx

http://technet.microsoft.com/pt-pt/library/ff404147%28v=ws.10%29.aspx

 

 

 

 

 

QUESTION 90

You work as an administrator at ENSUREPASS.com. The ENSUREPASS.com network consists of a single domain named ENSUREPASS.com. All servers on the ENSUREPASS.com network have Windows Server 2008 R2 installed. Some of ENSUREPASS.com’s workstations have Windows 7 installed, while the rest have Windows 8 installed.

After installing a new Windows Server 2012 computer in the ENSUREPASS.com domain, you configure it to run the File and Storage Services server role. You are instructed to create a shared folder on the new server, and configure the use of Previous Versions for restoring files located in the shared folder.

Which of the following actions should you take?

 

A.

You should consider configuring the Shadow Copies settings on the new server.

B.

You should consider configuring the Snapshot settings on the new server.

C.

You should consider configuring the Background Copy settings on the new server.

D.

You should consider configuring the Permission settings on the new server.

 

Correct Answer: A

Explanation:

What are previous versions?

Previous versions are either backup copies (copies of files and folders that you back up by using the Back Up Files wizard, or shadow copies) copies of files and folders that Windows automatically saves as part of a restore point. (Shadow copies can be copies of files on your computer or shared files on acomputer on a network.) You can use previous versions of files to restore files that you accidentally modified or deleted, or that were damaged. Depending on the type of file or folder, you can open, save to a different location, or restore a previous version.

ATT: ( nothing to do with question but cool to know ) File Server Volume Copy Shadow Service (VSS) Agent Service Enables consistency of application snaphots (shadow copies). With previous versions of Windows Server, VSS only supported shadow copies of data on the local server. With WS2012, Microsoft has added VSS for SMB File Shares which extends shadow copy support for network volumes.Administrators install the FS VSS Agent on the file server where the application data is located. They then install the VSS provider in the server where the application is located. The provider talks to the agent using the new File Server Remote VSS protocol in order to manage the shadow copies of the data.

http://windows.microsoft.com/en-gb/windows-vista/previous-versions-of-files-frequently-asked-questions

Free VCE & PDF File for Microsoft 70-410 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…