[Free] Download New Updated (October 2016) Microsoft 70-411 Real Exam 201-210

Ensurepass

QUESTION 201

Your network is configured as shown in the exhibit. (Click the Exhibit button.)

 

clip_image002

 

Server1 regularly accesses Server2.

 

You discover that all of the connections from Server1 to Server2 are routed through Routerl.

 

You need to optimize the connection path from Server1 to Server2.

 

Which route command should you run on Server1?

 

A.

Route add -p 192.168.2.0 MASK 255.255.255.0 192.168.2.1 METRIC 50

B.

Route add -p 192.168.2.12 MASK 255.255.255.0 192.168.2.1 METRIC 100

C.

Route add -p 192.168.2.12 MASK 255.255.255.0 192.168.2.0 METRIC 50

D.

Route add -p 192.168.2.0 MASK 255.255.255.0 192.168.1.2 METRIC 100

 

Correct Answer: D

 

 

QUESTION 202

Your company has a main office and a branch office.

 

The network contains an Active Directory domain named contoso.com.

 

The main office contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1 is a DNS server and hosts a primary zone for contoso.com. The branch office contains a member server named Server1 that runs Windows Server 2012 R2. Server1 is a DNS server and hosts a secondary zone for contoso.com.

 

The main office connects to the branch office by using an unreliable WAN link.

 

You need to ensure that Server1 can resolve names in contoso.com if the WAN link in unavailable for three days.

 

Which setting should you modify in the start of authority (SOA) record?

 

A.

Retry interval

B.

Refresh interval

C.

Expires after

D.

Minimum (default) TTL

 

Correct Answer: C

Explanation:

Used by other DNS servers that are configured to load and host the zone to determine when zone data expires if it is not renewed

 

 

QUESTION 203

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

 

DirectAccess is deployed to the network.

 

Remote users connect to the DirectAccess server by using a variety of network speeds.

 

The remote users report that sometimes their connection is very slow.

 

You need to minimize Group Policy processing across all wireless wide area network (WWAN) connections.

 

Which Group Policy setting should you configure?

 

A.

Configure Group Policy slow link detection.

B.

Configure Direct Access connections as a fast network connection.

C.

Configure wireless policy processing.

D.

Change Group Policy processing to run asynchronously when a slow network connection is detected.

 

Correct Answer: A

 

 

 

 

 

QUESTION 204

Your network contains an Active Directory domain named contoso.com.

 

All user accounts reside in an organizational unit (OU) named OU1. All of the users in the marketing department are members of a group named Marketing. All of the users in the human resources department are members of a group named HR.

 

You create a Group Policy object (GPO) named GPO1. You link GPO1 to OU1. You configure the Group Policy preferences of GPO1 to add two shortcuts named Link1 and Link2 to the desktop of each user.

 

You need to ensure that Link1 only appears on the desktop of the users in Marketing and that Link2 only appears on the desktop of the users inHR.

 

What should you configure?

 

A.

Security Filtering

B.

WMI Filtering

C.

Group Policy Inheritance

D.

Item-level targeting

 

Correct Answer: D

Explanation:

You can use item-level targeting to change the scope of individual preference items, so they apply only to selected users or computers. Within a single Group Policy object (GPO), you can include multiple preference items, each customized for selected users or computers and each targeted to apply settings only to the relevant users or computers.

http://technet.microsoft.com/en-us/library/cc733022.aspx

 

 

QUESTION 205

Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 is configured as a Network Policy Server (NPS) server and as a DHCP server.

 

You need to ensure that only computers that send a statement of health are checked for Network Access Prote
ction (NAP) health requirements.

 

Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)

 

A.

The Called Station ID constraints

B.

The MS-Service Class conditions

C.

The Health Policies conditions

D.

The NAS Port Type constraints

E.

The NAP-Capable Computers conditions

 

Correct Answer: CE

Explanation:

http://technet.microsoft.com/en-us/library/cc753603.aspx

http://technet.microsoft.com/en-us/library/cc731220(v=ws.10).aspx

http://technet.microsoft.com/en-us/library/cc731560.aspx

 

 

QUESTION 206

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.

 

Each time a user receives an access-denied message after attempting to access a folder on Server1, an email notification is sent to a distribution list named DLL.

 

You create a folder named Folder1 on Server1, and then you configure custom NTFS permissions for Folder1.

 

You need to ensure that when a user receives an access-denied message while attempting to access Folder1, an email notification is sent to a distribution list named DL2. The solution must not prevent DL1 from receiving notifications about other access-denied messages.

 

What should you do?

 

A.

From the File Server Resource Manager console, create a local classification property.

B.

From Server Manager, run the New Share Wizard to create a share for Folder1 by selecting the SMB Share – Applications option.

C.

From the File Server Resource Manager console, modify the Access-Denied Assistance settings.

D.

From the File Server Resource Manager console, set a folder management property.

 

Correct Answer: D

 

 

QUESTION 207

DRAG DROP

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2.

 

You generalize Server2.

 

You install the Windows Deployment Services (WDS) server role on Server1.

 

You need to capture an image of Server2 on Server1.

 

Which three actions should you perform?

 

To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

 

clip_image004

 

Correct Answer:

clip_image006

 

 

QUESTION 208

Your network contains a single Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

 

The domain contains 400 desktop computers that run Windows 8 and 10 desktop computers that run Windows XP Service Pack 3 (SP3). All new desktop computers that are added to the domain run Windows 8.

 

All of the desktop computers are located in an organizational unit (OU) named OU1.

 

You create a Group Policy object (GPO) named GPO1. GPO1 contains startup script settings. You link GPO1 to OU1.

 

You need to ensure that GPO1 is applied only to computers that run Windows XP SP3.

 

What should you do?

 

A.

Create and link a WML filter to GPO1

B.

Run the Set-GPInheritance cmdlet and specify the -target parameter.

C.

Run the Set-GPLink cmdlet and specify the -target parameter.

D.

Modify the Security settings of OU1.

 

Correct Answer: A

Explanation:

WMI Filtering is used to get information of the system and apply the GPO on it with the condition is met.

Security filtering: apply a GPO to a specific group (members of the group)

 

 

QUESTION 209

Your network contains an Active Directory domain named contoso.com. The network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Network Policy and Access Services server role installed.

 

You plan to deploy additional servers that have the Network Policy and Access Services server role installed. You must standardize as many settings on the new servers as possible.

 

You need to identify which settings can be standardized by using Network Policy Server (NPS) templates.

 

Which three settings should you identify? (Each correct answer presents part of the solution. Choose three.)

 

A.

IP filters

B.

shared secrets

C.

health policies

D.

network policies

E.

connection request policies

 

Correct Answer: ABC

 

 

QUESTION 210

Your network contains an Active Directory domain named contoso.com.

 

Network Policy Server (NPS) is deployed to the domain.

 

You plan to deploy Network Access Protection (NAP).

 

You need to configure the requirements that are validated on the NPS client computers.

 

What should you do?

 

A.

From the Network Policy Server console, configure a network policy.

B.

From the Network Policy Server console, configure a health policy.

C.

From the Network Policy Server console, configure a Windows Security Health Validator (WSHV) policy.

D.

From a Group Policy object (GPO), configure the NAP Client Configuration security setting.

E.

From a Group Policy object (GPO), configure the Network Access Protection Administrative Templates setting.

 

Correct Answer: C

 

Free VCE & PDF File for Microsoft 70-411 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…