[Free] Get all latest Microsoft 70-411 Actual Tests 171-180

Ensurepass

QUESTION 171

You have a RODC named Server1 running Server 2012. You need to add a RODC Administrator. How do you complete the task?

 

A.      dsmgmt.exe

B.      ntdsutil

C.      Add user to Local Administrator Group on Server1

D.      Use Security Group and modify RODC Delegated Administrator

 

Correct Answer: D

 

 

QUESTION 172

DRAG DROP

Your network contains an Active Directory domain named contoso.com. You need to create an AD Snapshot. Which four actions should you perform?

 

To answer, move the four appropriate actions from the list of actions to the answer area and arrange them in the correct order.

 

Select and Place:

clip_image002

 

Correct Answer:

clip_image004

 

 

 

 

 

 

 

 

 

 

QUESTION 173

DRAG DROP

Your network contains an Active Directory forest named contoso.com. All domain controllers run Windows Server 2008 R2. The schema is upgraded to Windows Server 2012. Contoso.com contains two servers. The servers are configured as shown in the following table.

 

clip_image006

 

Server 1 and Server2 host a load-balanced application pool named AppPool1. You need to ensure that AppPool1 uses a group Managed Service Account as its identity. Which 3 actions should you perform?

 

Select and Place:

clip_image008

 

Correct Answer:

clip_image010

 

 

 

 

QUESTION 174

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012. The domain contains two domain controllers. The domain controllers are configured as shown in the following table.

 

clip_image012

 

Active Directory Recycle Bin is enabled. You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago. You need to restore the membership of Group1. What should you do?

 

A.      Recover the items by using Active Directory Recycle Bin.

B.      Modify the Recycled attribute of Group1.

C.      Perform tombstone reanimation.

D.      Perform an authoritative restore.

 

Correct Answer: C

 

 

QUESTION 175

Your network contains an Active Directory domain named contoso.com. The domain contains a read-only domain controller (RODC) named RODC1. You create a global group named RODC_Admins. You need to provide the members of RODC_Admins with the ability to manage the hardware and the software on RODC1. The solution must not provide RODC_Admins with the ability to manage Active Directory objects. What should you do?

 

A.      From Active Directory Users and Computers, configure the Managed By settings of the RODC1 account.

B.      From Active Directory Sites and Services, run the Delegation of Control Wizard

C.      From a command prompt, run the dsmgmt local roles command.

D.      From a command prompt, run the dsadd computer command.

 

Correct Answer: C

 

 

 

 

QUESTION 176

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. In a remote site, a support technician installs a server named DC10 that runs Windows Server 2012. DC10 is currently a member of a workgroup. You plan to promote DC10 to a read-only domain controller (RODC). You need to ensure that a user named Contoso/User1 can promote DC10 to a RODC in the contoso.com domain. The solution must minimize the number of permissions assigned to User1. What should you do?

 

A.      Join DC10 to the domain. Modify the properties of the DC10 computer account.

B.      From Active Directory Administrative Center, pre-create an RODC computer account.

C.      Join DC10 to the domain. Run dsmod and specify the /server switch.

D.      From Active Directory Administrative Center, modify the security settings of the Domain Controllers organizational unit (OU).

 

Correct Answer: B

 

 

QUESTION 177

HOTSPOT

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 and are configured as DNS servers. All DNS zones are Active Directory-integrated. Active Directory Recycle Bin is enabled. You need to modify the amount of time deleted objects are retained in the Active Directory Recycle Bin. Which naming context should you use?

 

To answer, select the appropriate naming context in the answer area.

 

Hot Area:

clip_image014

Correct Answer:

clip_image016

 

 

QUESTION 178

Your network contains an Active Directory domain named contoso.com. The domain contains six domain controllers. The domain controllers are configured as shown in the following table.

 

clip_image017

 

The network contains a server named Server1 that has the Hyper-V server role installed. DC6 is a virtual machine that is hosted on Server1. You need to ensure that you can clone DC6. What should you do?

 

A.      Transfer the schema master to DC6.

B.      Transfer the schema master to DC4.

C.      Transfer the PDC emulator to DC2.

D.      Transfer the PDC emulator to DC5.

Correct Answer: C

 

 

QUESTION 179

Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2012. You need to create a custom Active Directory application partition. Which tool should you use?

 

A.      Dsadd

B.      Dsmod

C.      Netdom

D.      Ntdsutil

 

Correct Answer: D

 

 

QUESTION 180

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. The domain contains two servers. The servers are configured as shown in the following table.

 

clip_image018

 

Server1 and Server2 host a load-balanced website named Web1. Web1 runs by using an

application pool named WebApp1. WebApp1 uses a group Managed Service Account named

gMSA1 as its identity. Domain users connect to Web1 by using either the name

webl.contoso.com or the alias myweb.contoso.com. You discover the following:

 

Ÿ   When the users access Web1 by using webl.contoso.com, they authenticate by using

Kerberos.

Ÿ   When the users access Web1 by using myweb.contoso.com, they authenticate by using

NTLM.

 

You need to ensure that the users can authenticate by using Kerberos when they connect by

using myweb.contoso.com. What should you do?

 

A.      Modify the properties of the WebApp1 application pool.

B.      Run the Add-ADComputerServiceAccount cmdlet.

C.      Modify the properties of the Web1 website.

D.      Modify the properties of the gMSA1 service account.

 

Correct Answer: B

 

Instant Access to Download Testing Software & PDF File for Microsoft 70-411 Real Exam

Instant Access to Try Microsoft 70-411 Free Demo