[Free] Download New Updated (October 2016) Microsoft 70-411 Real Exam 211-220

Ensurepass

QUESTION 211

Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 is configured as a Network Policy Server (NPS) server and as a DHCP server.

 

The network contains two subnets named Subnet1 and Subnet2. Server1 has a DHCP scope for each subnet.

 

You need to ensure that noncompliant computers on Subnet1 receive different network policies than noncompliant computers on Subnet2.

 

Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)

 

A.

The NAP-Capable Computers conditions

B.

The NAS Port Type constraints

C.

The Health Policies conditions

D.

The MS-Service Class conditions

E.

The Called Station ID constraints

 

Correct Answer: CD

Explanation:

The NAP health policy server uses the NPS role service with configured health policies and system health validators (SHVs) to evaluate client health based on administrator-defined requirements. Based on results of this evaluation, NPS instructs the DHCP server to provide full access to compliant NAP client computers and to restrict access to client computers that are noncompliant with health requirements.

 

If policies are filtered by DHCP scope, then MS-Service Class is configured in policy conditions.

 

 

QUESTION 212

Your network contains an Active Directory domain named contoso.com. The functional level of the forest is Windows Server 2008 R2.

 

Computer accounts for the marketing department are in an organizational unit (OU) named DepartmentsMarketingComputers. User accounts for the marketing department are in an OU named DepartmentsMarketingUsers.

 

All of the marketing user accounts are members of a global security group named MarketingUsers. All of the marketing computer accounts are members of a global security group named MarketingComputers.

 

In the domain, you have Group Policy objects (GPOs) as shown in the exhibit. (Click the Exhibit button.)


 

clip_image002

 

You create two Password Settings objects named PSO1 and PSO2. PSO1 is applied to MarketingUsers. PSO2 is applied to MarketingComputers.

 

The minimum password length is defined for each policy as shown in the following table.

 

clip_image004

 

You need to identify the minimum password length required for each marketing user.

 

What should you identify?

 

A.

5

B.

6

C.

7

D.

10

E.

12

 

Correct Answer: D

 

 

QUESTION 213

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012.

 

You have a Group Policy object (GPO) named GPO1 that contains several custom Administrative templates.

 

You need to filter the GPO to display only settings that will be removed from the registry when the GPO falls out of scope. The solution must only display settings that are either enabled or disabled and that have a comment.

 

How should you configure the filter?

 

To answer, select the appropriate options below. Select three.

 

clip_image005

clip_image006

 

A.

Set Managed to: Yes

B.

Set Managed to: No

C.

Set Managed to: Any

D.

Set Configured to: Yes

E.

Set Configured to: No

F.

Set Configured to: Any

G.

Set Commented to: Yes

H.

Set Commented to: No

I.

Set Commented to: Any

 

Correct Answer: AFG

 

 

 

 

 

 

 

 

 

 

QUESTION 214

Your network contains an Active Directory domain named adatum.com.

 

You need to audit changes to the files in the SYSVOL shares on all of the domain controllers. The solution must minimize the amount of SYSVOL replication traffic caused by the audit.

 

Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)

 

A.

Audit PolicyAudit system events

B.

Advanced Audit Policy ConfigurationDS Access

C.

Advanced Audit Policy ConfigurationGlobal Object Access Auditing

D.

Audit PolicyAudit object access

E.

Audit PolicyAudit directory service access

F.

Advanced Audit Policy ConfigurationObject Access

 

Correct Answer: DF

 

 

QUESTION 215

Your network contains multiple Active Directory sites.

 

You have a Distributed File System (DFS) namespace that has a folder target in each site.

 

You discover that some client computers connect to DFS targets in other sites.

 

You need to ensure that the client computers only connect to a DFS target in their respective site.

 

What should you modify?

 

A.

The properties of the Active Directory sites

B.

The properties of the Active Directory site links

C.

The delegation settings of the namespace

D.

The referral settings of the namespace

 

Correct Answer: D

Explanation:

http://www.windowsnetworking.com/articles_tutorials/Configuring-DFS-Namespaces.html

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

QUESTION 216

Your network contains an Active Directory domain named adatum.com. The domain contains five servers. The servers are configured as shown in the following table.

 

clip_image008

 

All desktop computers in adatum.com run Windows 8 and are configured to use BitLocker Drive Encryption (BitLocker) on all local disk drives.

 

You need to deploy the Network Unlock feature. The solution must minimize the number of features and server roles installed on the network.

 

To which server should you deploy the feature?

 

A.

Server3

B.

Server1

C.

DC2

D.

Server2

E.

DC1

 

Correct Answer: B

Explanation:

The BitLocker-NetworkUnlock feature must be installed on a Windows Deployment Server (which does not have to be configured–the WDSServer service just needs to be running).

 

 

QUESTION 217

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012.

 

You pre-create a read-only domain controller (P.QDC) account named RODC1.

 

You export the settings of RODC1 to a file named Filel.txt.

 

You need to promote RODC1 by using File1.txt.

 

Which tool should you use?

 

A.

The Install-WindowsFeature cmdlet

B.

The Add-WindowsFeature cmdlet

C.

The Dism command

D.

The Install-ADDSDomainController cmdlet

E.

The Dcpromo command

 

Correct Answer: E

 

 

QUESTION 218

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named dcl.contoso.com. You discover that the Default Domain Policy Group Policy objects (GPOs) and the Default Domain Controllers Policy GPOs were deleted. You need to recover the Default Domain Policy and the Default Domain Controllers Policy GPOs. What should you run?

 

A.

dcgpofix.exe /target:domain

B.

gpfixup.exe /dc:dc1.contoso.co,n

C.

dcgpofix.exe /target:both

D.

gptixup.exe /oldnb:contoso /newnb:dc1

 

Correct Answer: C

 

 

QUESTION 219

Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs. You need to prevent all of the GPOs at the site level and at the domain level from being applied to users and computers in an organizational unit (OU) named OU1. You want to achieve this goal by using the minimum amount of Administrative effort. What should you use?

 

A.

dcgpofix

B.

Get-GPOReport

C.

Gpfixup

D.

Gpresult

E.

Gptedit.msc

F.

Import-GPO

G.

Import-GPO

H.

Restore-GPO

I.

Set-GPInheritance

J.

Set-GPLink

K.

Set-GPPermission

L.

Gpupdate

M.

Add-ADGroupMember

 

Correct Answer: I

 

 

 

 

 

 

 

QUESTION 220

Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs. You need to provide an Administrator named Admin1 with the ability to create GPOs in the domain. The solution must not provide Admin1 with the ability to link GPOs. What should you use?

 

A.

dcgpofix

B.

Get-GPOReport

C.

Gpfixup

D.

Gpresult

E.

Gptedit.msc

F.

Import-GPO

G.

Restore-GPO

H.

Set-GPInheritance

I.

Set-GPLink

J.

Set-GPPermission

K.

Gpupdate

L.

Add-ADGroupMember

 

Correct Answer: J

 

Free VCE & PDF File for Microsoft 70-411 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…