[Free] Download Latest (March 2016) Microsoft 70-413 Real Exam 81-90

Ensurepass

QUESTION 81

Your network contains multiple servers that run Windows Server 2012. All client computers run Windows 8.

 

You need to recommend a centralized solution to download the latest antivirus definitions for Windows Defender.

 

What should you include in the recommendation?

 

A.

Microsoft System Center 2012 Endpoint Protection

B.

Network Access Protection (NAP)

C.

Microsoft System Center Essentials

D.

Windows Server Update Services (WSUS)

 

Correct Answer: D

Explanation:

To use WSUS to deploy Windows Defender definition updates to client computers, follow these steps:

1. Open the WSUS Administrator console, and then click Options at the top of the console.

2. Click Synchronization Options.

3. Under Products and Classifications, click Change under Products.

4. Verify that the Windows Defender check box is selected, and then click OK.

5. Under Products and Classifications, click Change under Update Classifications.

6. Verify that the Definition Updates check box is selected, and then click OK.

7. Optional Update the automatic approval rule. To do this, follow these steps:

a. At the top of the console, click Options.

b. Click Automatic Approval Options.

c. Make sure that the Automatically approve updates for installation by using the following rule check box is selected.

d. Under Approve for Installation, click Add/Remove Classification.

e.Verify that the Definition Updates check box is selected, and then click OK.

8. At the top of the console, click Options.

9. Click Synchronization Options.

10. On the taskbar on the left, click Synchronize now.

11. At the top of the console, click Updates.

12. Approve any Windows Defender updates that WSUS should deploy.

 

Reference: How to use Windows Server Update Services (WSUS) to deploy definition updates to computers that are running Windows Defender

 

 

QUESTION 82

DRAG DROP

Your network contains an Active Directory forest named adatum.com. The forest contains a single domain. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.

 

The DNS zone of adatum.com is Active Directory-integrated.

 

You need to implement DNSSEC to meet the following requirements:

 

clip_image002Ensure that the zone is signed.

clip_image002[1]Ensure that the zone signing key (ZSK) changes every 30 days.

clip_image002[2]Ensure that the key signing key (KSK) changes every 365 days.

 

What should you do?

 

To answer, drag the appropriate cmdlets to the correct requirements. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

 

clip_image004

 

Correct Answer:

clip_image006

 

 

QUESTION 83

Your company has a main office and a branch office. The main office contains 2,000 users. The branch office contains 800 users. Each office contains three IP subnets.

 

The company plans to deploy an Active Directory forest.

 

You need to recommend an Active Directory infrastructure to meet the following requirements:

 

clip_image002[3]Ensure that the users are authenticated by using a domain controller in their respective office.

clip_image002[4]Minimize the amount of Active Directory replication traffic between the offices.

 

Which Active Directory infrastructure should you recommend?

 

More than one answer choice may achieve the goal. Select the BEST answer.

 

A.

Two domains and one site

B.

Two domains and two sites

C.

One domain and two sites

D.

One domain and six sites

 

Correct Answer: B

Explanation:

To minimize the amount of replication traffic, create 2 sites. To ensure that users are authentication by using a local domain controller, use two domains.

 

Reference: Active Directory Replication Traffic

 

 

QUESTION 84

HOTSPOT

Your network contains an Active Directory forest named contoso.com. The forest contains one domain. All domain controllers run Windows Server 2012. The functional level of the forest and the domain is Windows Server 2012.

 

The domain contains three domain controllers. The domain controllers are configured as shown in the following table.

 

clip_image008

 

In the forest, you plan to add a new domain controller that runs Windows Server 2012 R2.

 

You need to prepare the environment before you add the new domain controller.

 

Which domain controllers must be available to run each command?

 

To answer, select the appropriate domain controllers in the answer area.

 

clip_image010

 

Correct Answer:

clip_image012

 

 

 

QUESTION 85

Your network contains an Active Directory forest named contoso.com.

 

You plan to deploy 200 Hyper-V hosts by using Microsoft System Center 2012 Virtual Machine Manager (VMM) Service Pack 1 (SP1).

 

You add a PXE server to the fabric.

 

You need to identify which objects must be added to the VMM library for the planned deployment.

 

What should you identify? (Each correct answer presents part of the solution. Choose all that apply.)

 

A.

A host profile

B.

A capability profile

C.

A hardware profile

D.

A generalized image

E.

A service template

 

Correct Answer: AD

Explanation:

Templates and profiles are used to standardize the creation of virtual machines and services.

These configurations are stored in the VMM database but are not represented by physical configuration files.

(D) There are several new types of templates and profiles in VMM, most of which are used for service creation.

(A) There are also host profiles, used for deploying a Hyper-V host from a bare-metal computer, and capability profiles, used to specify the capabilities of virtual machines on each type of supported hypervisor when virtual machines are deployed to a private cloud.

 

Note:

* host profile:

A Virtual Machine Manager library resource that contains hardware and operating system configuration settings to convert a bare-metal computer to a managed Hyper-V host.

*capability profile:

A Virtual Machine Manager library resource that defines which resources (for example, number of processors or maximum memory) are available to a virtual machine that is created in a private cloud.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

QUESTION 86

Your network contains an Active Directory forest. The forest contains two Active Directory domains named contoso.com and child.contoso.com. The forest functional level is Windows Server 2003. The functional level of both domains is Windows Server 2008.

 

The forest contains three domain controllers. The domain controllers are configured as
shown in the following table.

 

clip_image014

 

DC1 and DC2 have the DNS Server server role installed and are authoritative for both contoso.com and child.contoso.com.

 

The child.contoso.com domain contains a server named serverl.child.contoso.com that runs Windows Server 2012.

 

You plan to deploy server1.child.contoso.com as a read-only domain controller (RODC).

 

You run the adprep.exe /rodcprep command on DC3 and receive the following error message:

 

clip_image016

 

You need to identify what prevents you from successfully running Adprep /rodcprep on DC3.

 

What should you identify?

 

A.

The domain functional level of child.contoso.com is set to
the wrong level.

B.

DC3 cannot connect to the infrastructure master on DC2.

C.

DC3 cannot connect to the domain naming master on DC1.

D.

The forest functional level is set to the wrong level.

 

Correct Answer: B

Explanation:

Adprep could not contact a replica… This problem occurs when the Adprep /rodcprep command tries to contact the infrastructure master for each application partition in the forest.

 

Reference: Error message when you run the “Adprep /rodcprep” command in Windows Server 2008: “Adprep could not contact a replica for partition DC=DomainDnsZones,DC=Contoso,DC=com”

 

 

QUESTION 87

Your network contains an Active Directory domain named contoso.com. The domain contains three VLANs. The VLANs are configured as shown in the following table.

 

clip_image018

 

All client computers run either Windows 7 or Windows 8.

 

The corporate security policy states that all of the client computers must have the latest security updates installed.

 

You need to implement a solution to ensure that only the client computers that have all of the required security updates installed can connect to VLAN 1. The solution must ensure that all other client computers connect to VLAN 3.

 

Solution: You implement the DHCP Network Access Protection (NAP) enforcement method.

 

Does this meet the goal?

 

A.

Yes

B.

No

 

Correct Answer: A

Explanation:

Implementing DHCP NAP to Enforce WSUS Updates

 

 

QUESTION 88

DRAG DROP

You manage a server named WAP01 that has the Web Application Proxy feature deployed. You deploy a web application named WebApp1 to a server named WEB01. WAP01 and WEB01 both run Microsoft Windows Server 2012 R2 and are members of the Active Directory Domain Services (AD DS) domain named corp.contoso.com.

 

You have the following requirements:

 

clip_image002[5]WebApp1 must be available internally at URL https://webappl.corp.contoso.com by using Kerberos authentication.

clip_image002[6]WebApp1 must be available externally at URL https://webappl.contoso.net by using Active Directory Federation Services (AD FS) authentication.

 

You need to configure computer accounts.

 

How should you complete the relevant Windows PowerShell commands?

 

To answer, drag the appropriate Windows PowerShell segment to the correct location. Each Windows PowerShell segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

 

clip_image020

 

Correct Answer:

clip_image022

 

 

QUESTION 89

DRAG DROP

Your network contains an Active Directory domain named contoso.com. The domain contains five servers. The servers are configured as shown in the following table.

 

clip_image024

You plan to implement Network Access Protection (NAP) with IPSec enforcement on all client computers.

 

You need to identify on which servers you must perform the configurations for the NAP deployment.

 

Which servers should you identify?

 

To answer, drag the appropriate servers to the correct actions. Each server may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

 

clip_image026

 

Correct Answer:

clip_image028

 

 

 

 

 

 

 

 

 

 

 

QUESTION 90

Your company has a main office and a branch office.

 

The network contains an Active Directory domain named contoso.com. The domain contains three domain controllers. The domain controllers are configured as shown in the following table.

 

clip_image030

 

The domain contains two global groups. The groups are configured as shown in the following table.

 

clip_image032

 

You need to ensure that the RODC is configured to meet the following requirements:

 

Cache passwords for all of the members of Branch1Users. Prevent the caching of passwords for the members of Helpdesk.

 

What should you do?

 

A.

Modify the password replication policy of RODC1.

B.

Modify the delegation settings of RODC1.

C.

Modify the membership of the Allowed RODC Password Replication group.

D.

Modify the membership of the Denied RODC Password Replication group.

E.

Modify the delegation settings of DC1 and DC2.

F.

Install the BranchCache feature on RODC1.

G.

Create a Password Settings object (PSO) for the Helpdesk group.

H.

Create a Password Settings object (PSO) for the Branch1Users group.

 

Correct Answer: A

Explanation:

The Password Replication Policy acts as an access control list (ACL). It determines if an RODC should be permitted to cache a password. After the RODC receives an authenticated user or computer logon request, it refers to the Password Replication Policy to determine if the password for the account should be cached.

 

Reference: Password Replication Policy

 

< strong>Free VCE & PDF File for Microsoft 70-413 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…