[Free] Download New Updated (October 2016) Microsoft 70-411 Real Exam 231-240

Ensurepass

QUESTION 231

Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012. You have a Password Settings object (PSOs) named PSO1. You need to view the settings of PSO1. Which tool should you use?

 

A.

Group Policy Management

B.

Get-ADFineGrainedPasswordPolicy

C.

Get-ADDefaultDomainPasswordPolicy

D.

Server Manager

 

Correct Answer: B

 

 

QUESTION 232

HOTSPOT

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012. The domain contains some test client computers that run either Windows XP, Windows Vista, Windows 7, or Windows 8. The computer accounts for the test computers are located in an organizational unit (OU) named OU1. You have a Group Policy object (GPO) named GP01 linked to OU1. GPO1 is used to assign several applications to the test computers. You need to ensure that when the test computers in OU1 restart, you can see which application installation is running currently. Which setting should you modify in GPO1?

 

To answer, select the appropriate setting in the answer area.

 

clip_image002

 

Correct Answer:

clip_image004

 

 

QUESTION 233

You have a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. On Server1, you create a network policy named Policy1. You need to configure Policy1 to apply only to VPN connections that use the L2TP protocol. What should you configure in Policy1?

 

A.

The Tunnel Type

B.

The Service Type

C.

The NAS Port Type

D.

The Framed Protocol

 

Correct Answer: A

 

 

QUESTION 234

Your network contains an Active Directory domain named contoso.com. You have a standard primary zone names contoso.com. You need to ensure that only users who are members of a group named Group1 can create DNS records in the contoso.com zone. All other users must be prevented from creating, modifying, or deleting DNS records in the zone. What should you do first?

 

A.

Run the Zone Signing Wizard for the zone.

B.

From the properties of the zone, change the zone type.

C.

Run the new Delegation Wizard for the zone.

D.

From the properties of the zone, modify the Start of Authority (SOA) record.

Correct Answer: B

 

 

QUESTION 235

HOTSPOT

Your network contains an Active Directory domain named fabrikam.com. You implement DirectAccess and an IKEv2 VPN. You need to view the properties of the VPN connection. Which connection properties should you view?

 

To answer, select the appropriate connection properties in the answer area.

 

clip_image006

 

Correct Answer:

clip_image008

 

 

 

 

 

 

 

 

 

 

 

QUESTION 236

The contoso.com domain contains a DNS server named Server1 that host a primary zone. Server2 contains a secondary zone for the contoso.com domain. You need to configure how long Server2 queries Server1 to renew the zone. What should you configure?

 

A.

Refresh interval

B.

Restart DNS

C.

Forwarders

D.

Stub zone

 

Correct Answer: A

 

 

QUESTION 237

You have a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. On Server1, you create a network policy named PPTP_Policy. You need to configure PPTP_Policy to apply only to VPN connections that use the PPTP protocol.

What should you configure in PPTP_Policy?

 

A.

The Service Type

B.

The Tunnel Type

C.

The Framed Protocol

D.

The NAS Port Type

 

Correct Answer: B

 

 

QUESTION 238

HOTSPOT

Your network contains an Active Directory domain named fabrikam.com. You implement DirectAccess. You need to view the properties of the DirectAccess connection. Which connection properties should you view?

 

To answer, select the appropriate connection properties in the answer area.

 

clip_image010

 

Correct Answer:

clip_image012

 

 

QUESTION 239

Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8. Your company has users who work from home. Some of the home users have desktop computers. Other home users have laptop computers. All of the computers are joined to the domain. All of the computer accounts are members of a group named Group1. Currently, the home users access the corporate network by using a PPTP VPN. You implement DirectAccess by using the default configuration and you specify Group1 as the DirectAccess client group. The home users who have desktop computers report that they cannot use DirectAccess to access the corporate network. The home users who have laptop computers report that they can use DirectAccess to access the corporate network. You need to ensure that the home users who have desktop computers can access the network by using DirectAccess. What should you modify?

 

A.

The security settings of the computer accounts for the desktop computers

B.

The membership of the R.AS and IAS Servers group

C.

The WMI filter for Direct Access Client Settings GPO

D.

The conditions of the Connections to Microsoft Routing and Remote Access server policy

 

Correct Answer: C

 

 

QUESTION 240

Your network contains a single Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that hosts the primary DNS zone for contoso.com. All servers dynamically register their host names. You install the new Web servers that host identical copies of your company’s intranet website. The servers are configured as shown in the following table.

 

clip_image014

 

You need to use DNS records to load balance name resolution queries for intranet.contoso.com between the two Web servers. What is the minimum number of DNS records that you should create manually?

 

A.

1

B.

2

C.

3

D.

4

 

Correct Answer: B

 

Free VCE & PDF File for Microsoft 70-411 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…