26 05 2014

QUESTION 201
In an isolated test environment, you deploy a server named Server1 that runs a Server Core Installation of Windows Server 2012 R2. The test environment does not have Active Directory Domain Services (AD DS) installed. You install the Active Directory Domain Services server role on Server1. You need to configure Server1 as a domain controller. Which cmdlet should you run?

A.    Install-ADDSDomainController
B.    Install-ADDSDomatn
C.    Install-ADDSForest
D.    Install-WindowsFeature

Answer: C
Explanation:
Install-ADDSDomainController – Installs a domain controller in Active Directory. Install-ADDSDomain – Installs a new Active Directory domain configuration. Install-ADDSForest – Installs a new Active Directory forest configuration. Install-WindowsFeature – Installs one or more Windows Server roles, role services, or features on either thelocal or a specified remote server that is running Windows Server 2012 R2. This cmdlet is equivalent to andreplaces Add-WindowsFeature, the cmdlet that was used to install roles, role services, and features.
C:\PS>Install-ADDSForest -DomainName corp.contoso.com -CreateDNSDelegation DomainMode Win2008 –
ForestMode Win 2008 R2 -DatabasePath "d:\NTDS" -SysvolPath "d:\SYSVOL" -LogPath
"e:\Logs"Installs
a new forest named corp.contoso.com, creates a DNS delegation in the contoso.com domain, setsdomain functional level to Windows Server 2008 R2 and sets forest functional level to Windows Server 2008,installs the Active Directory database and SYSVOL on the D:\ drive, installs the log files on the E:\ drive andhas the server automatically restart after AD DS installation is complete and prompts the user to provide andconfirm the Directory Services Restore Mode (DSRM) password. http://technet.microsoft.com/en-us/library/hh974720%28v=wps.620%29.aspx

QUESTION 202
Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named 0U1. You need to ensure that when new client computers join the domain, their computer accounts are created in OU1 by default. What should you do?

A.    From a command prompt, run the redircmp.exe command.
B.    From Windows PowerShell, run the Move-ADObject cmdlet.
C.    From Ldp, configure the properties of the Computers container.
D.    From ADSI Edit, configure the properties of the OU1 object.

Answer: A
Explanation:
http://technet.microsoft.com/en-us/library/cc770619.aspx
Redirects the default container for newly created computers to a specified, target organizational unit (OU) so that newly created computer objects are created in the specific target OU instead of in CN=Computers.

QUESTION 203
Drag and Drop Question
You are configuring a test network. The test network contains a subnet named LAN1. LAN1 uses the network ID of 10.10.1.0/27.
You plan to add a new subnet named LAN2 to the test network.
LAN1 and LAN2 will be connected by a router.
You need to identify a valid network ID for LAN2 that meets the following requirements:
– Ensures that hosts on LAN2 can communicate with hosts on LAN1.
– Supports at least 100 IPv4 hosts.
– Uses only private IP addresses.
Which network ID should you use?
To answer, drag the appropriate network ID and subnet mask to the correct location in the answer area.
 
Answer:
 

QUESTION 204
Hotspot Question
You have a Hyper-V host named HYPERV1. HYPERV1 hosts a virtual machine named DC1. You need to prevent the clock on DC1 from synchronizing from the clock on HYPERV1. What should you configure? To answer, select the appropriate object in the answer area.
 
Answer:
 

QUESTION 205
Hotspot Question
Your network contains a subnet named Subnet1. Subnet1 contains a DHCP server named Server1. You deploy a new subnet named Subnet2. On Subnet2, you deploy a new server named 5erver2 that runs Windows Server 2012 R2. You need to configure Server2 to route DHCP broadcast from Subnet2 to Server1. Which server role should you install on Server2? To answer, select the appropriate role in the answer area.
 
Answer:
 

QUESTION 206
Your network contains an Active Directory domain named contoso.com. The domain contains a user account named User1 that resides in an organizational unit (OU) named OU1. A Group Policy object (GPO) named GPO1 is linked to OU1. GPO1 is used to publish several applications to a user named User1. In the Users container, you create a new user named User2. You need to ensure that the same applications are published to User2. What should you do?

A.    Modify the security of GPO1.
B.    Modify the settings in GPO1.
C.    Link a WMI filter to GPO1.
D.    Move User2 to OU1.

Answer: D
Explanation:
Moving user2 to OU1 will give him the same access as User1

QUESTION 207
Drag and Drop Question
Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2012 and has the File Server server role installed. On Server1, you create a share named Documents. The Share permission for the Documents share is configured as shown in the following table.
 
The NTFS permission for the Documents share is configured as shown in the following table.
 
You need to configure the Share and NTFS permissions for the Documents share. The permissions must meet the following requirements:
– Ensure that the members of a group named Group1 can read files and run programs in – Documents. Ensure that the members of Group1 can modify the permissions on their own files in Documents.
– Ensure that the members of Group1 can create folders and files in Documents.
– Minimize the number of permissions assigned to users and groups.
How should you configure the permissions?
To answer, drag the appropriate permission to the correct location. Each permission may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
 
Answer:
 

QUESTION 208
Hotspot Question
Your network contains an Active Directory forest. The forest contains two domains named Domain1 and Domain2.
Domain1 contains a file server named Server1. Server1 has a shared folder named Share1. Domain2 contains 50 users who require access to Share1. You need to create groups in each domain to meet the following requirements:
– In Domain1, create a group named Group1. Group1 must be granted access to Share1.
– In Domain2, create a group named Group2. Group2 must contain the user accounts of the 50 users.
– Permission to Share1 must only be assigned directly to Group1.
Which type of groups should you create and which group nesting strategy should you use? To answer, select the appropriate configuration in the answer area.
 

 
Answer:
 

Explanation:
Any group, whether it is a security group or a distribution group, is characterized by a scope that identifies the extent to which the group is applied in the domain tree or forest. The boundary, or reach, of a group scope is also determined by the domain functional level setting of the domain in which it resides. There are three group scopes:
universal, global, and domain local.
 
http://support.microsoft.com/default.aspx?scid=kb;EN-US;231273 http://technet.microsoft.com/en-us/library/cc772723%28WS.10%29.aspx http://technet.microsoft.com/pt-br/library/cc728188%28WS.10%29.aspx http://technet.microsoft.com/en-us/library/cc755692%28WS.10%29.aspx

QUESTION 209
You work as an administrator at L2P.com. The L2P.com network consists of a single domain named L2P.com. All servers on the L2P.com network have Windows Server 2012 installed.
L2P.com has a server, named L2P-SR07, which has the AD DS, DHCP, and DNS server roles installed. L2P.com also has a server, named L2P-SR08, which has the DHCP, and Remote Access server roles installed. You have configured a server, which has the File and Storage Services server role installed, to automatically acquire an IP address. The server is named L2PSR09.
You then create a filter on L2P-SR07.
Which of the following is a reason for this configuration?

A.    To make sure that L2P-SR07 issues L2P-SR09 an IP address.
B.    To make sure that L2P-SR07 does not issue L2P-SR09 an IP address.
C.    To make sure that L2P-SR09 acquires a constant IP address from L2P-SR08 only.
D.    To make sure that L2P-SR09 is configured with a static IP address.

Answer: B
Explanation:
Enable and Configure MAC Address Filtering MAC address filtering (aka link-layer filtering) is a feature for IPv4 addresses that allows you to include or exclude computers and devices based on their MAC address.
Denying a Single MAC Address You can see from the first figure that we’ve got a system that this DHCP server has given an address lease. Just to demonstrate the simplest possible case of MAC filtering in DHCP, let’s block that system from ever getting an IP address from this DHCP server again. To deny MAC ADDRESS from getting an IP address, right-click the PC entry in the "Address Leases" folder, then choose Add to Filter / Deny, as you see in the following figure:
 
At this point, the "Deny" folder has a rule in it, as you can see by opening the Filters / Deny folder:
 
If you had more than one existing lease that you wanted to add to the "deny" filter (or, for that matter, the "allow" filter) then you could also multi-select or block-select any number of existing leases, right-click and then deny (or allow) them en masse.
You must enable Deny filter for it to work.
http://technet.microsoft.com/en-us/magazine/ff521761.aspx
http://blogs.technet.com/b/teamdhcp/archive/2012/11/10/dhcp-mac-address-filter-management-made- easy-with-dhcp-powershell.aspx
http://technet.microsoft.com/en-us/library/hh831825.aspx
http://technet.microsoft.com/en-us/library/jj200226.aspx

QUESTION 210
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2. You need to create 3-TB virtual hard disk (VHD) on Server1. Which tool should you use?

A.    New-StorageSubsytemVirtualDisk
B.    File Server Resource Manager (FSRM)
C.    Server Manager
D.    Computer Management

Answer: D
Explanation:
For other questions to create a VHD (file) you can use computer management. 
– Share and storage management (2008 only)
– New-storagesubsystemVirtualDisk (this is a virtual disk, NOT a virtual hard disk)
– Server Manager (you would use this to create virtual disks, not virtual hard disks)

Passing Microsoft 70-410 Exam successfully in a short time! Just using Braindump2go’s Latest Microsoft 70-410 Dump:

http://www.braindump2go.com/70-410.html

70-410, 70-410 exam dumps, 70-410 exam questions, 70-410 practice tests, Microsoft 70-410 Exam

Official 2014 Latest Microsoft 70-410 Exam Dump Free Download(191-200)! Official 2014 Latest Microsoft 70-410 Exam Dump Free Download(211-220)!