Microsoft 70-411 Administering Windows Server 2012 Exam Dumps Question Answers Updated Apr 2017

This exam is part two of a series of three exams that test the skills and knowledge necessary to administer a Windows Server 2012 infrastructure in an enterprise environment. environment. Passing this t his exam validates a candidate’s candidate’s ability to administer the tasks required to maintain a Windows Server2012 infrastructure, such as user and group management, network access, and data security. security. Passing this exam along with the other two exams confirms that a candidate has the skills and knowledge necessary for implementing , managing, maintaining, and provisioning services and infrastructure in a Windows Server 2012 environment Read more… more… 

This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam: Deploy, manage, and maintain servers (15 –20%) Configure File and Print Services (15 –20%) Configure network services and access (15 –20%) Configure a Network Policy Server (NPS) infrastructure (10 –15%) Configure and manage Active Directory (10 –15%) Configure and manage Group Policy (15 –20%)

You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed. You You want to clone a domain controller to create another domain controller. controller. Which two of the following following steps should you you perform first? (Choose two).

 A. You You should run the Install-ADDSDomainController Install-ADDSDomainController PowerShell cmdlet. B. You You should run r un the New-ADDCCloneConfigFile New-ADDCCloneConfigFile PowerShell cmdlet. C. You You should run the sysprep.exe /oobe command. c ommand. D. You You should run the dcpromo.exe /adv command. E. You You should place a DCCloneConfig.xml file in the %Systemroot%\NTDS folder. F. You should place an Unattend.xml file in the %Systemroot%\SYSVOL folder.

Answer: B,E

You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. The Site.com network has a Windows Server 2012 R2 domain controller named Site-DC10 which hosts the Web Server, Server, DNS and DHCP DH CP services. You You create a snapshot backup of Site-DC10 using usi ng the Ntdsutil utility and mount the snapshot. How would you acc ess the contents of the snapshot?  A. You You should run the Ntdsutil.exe utility with the partition management management parameter. parameter. B. You You should run the Dsamain.exe utility utili ty with the /allowupgrade parameter. C. You You should run the Dsamain.exe /dbpath command from the command prompt. D. You You should run the Ntdsutil.exe utility with the files parameter. Answer: C

You are hired by Site.com to administrate an Active Directory domain named Site.com Site.com which encompasses a RADIUS server by the name of Site -SR08 running an installation of Windows Server 2012. Your Your senior network administrator has provisioned a VPN server added t o the ne twork named Site-VPN05 and thereafter orders the creation of numerous network policies on Site-SR08. Which of the following actions need to be taken if you are assigned the task of havi ng Site configured to accept appeals for authentication authentication from Site-VPN05?  A. You You will need to run the Add-RemoteAccessRadius command on Site-SR08. B. You You will need to run the t he Get-NpsRadiusClient command on Site-SR08. C. You You will need to run the t he Set-RemoteAccessRadius command on Site-SR08. D. You You will need to configure the Routing and Remote Access Service (RRAS) role service on Site-SR08. Answer: B

You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsof  t Windows Server 2012 R2 installed. A group policy object object (GPO) is assigned to an organizat ional unit (OU) named Sales. The GPO assigns several settings to the c omputers in the Sale s department. You You unlink the GPO from the Sales OU. You You discover that some of the settings applied by the GPO are still in effect on the Sales computers while other setting applied by th e GPO have been removed. Which of the following statements is true?  A. The Restricted Groups Groups security settings still in in effect. B. The unmanaged Administrative Template Template settings are still in effect. C. The managed Administrative Template Template settings are still in effect. D. The System Services security settings have been removed. Answer: B

You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed. A technician has create d a vhdx file fi le containing Windows Server 2012 R2 installation images. You You need to view information about the images contained in the vhdx file. You You plan to use Depl oyment Image Servicing and Management (DISM.exe). Which parameter should y ou use with DISM.exe?  A. You You should use the get-imageinfo parameter. parameter. B. You You should use the get-mountedwiminfo parameter. C. You You should use the list-image parameter. parameter. D. You should use the mount-image parameter. Answer: A

You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Windows W indows Server 2012 R2 installed. You You need to configure a remote access solution to enable client computers to access network r esources. You install a Windows Wi ndows Server 2012 R2 server named Site-SR09. You You install the Re mote Access server role on Site-SR09. Si te-SR09. You You need to configure Site-SR09 to accept authentication requests from computers using 802.1X. Which authentication metho d should you configure Site-SR09 to use?  A. EAP B. MS-CHAP v2 C. CHAP D. PAP E. Machine certificate authentication for IKEv2 Answer: A

 You  You work as a Network Administrator Administrator at Site.com. Site.com has an Active Active Directory Domain Services ( AD DS) domain named Site.com. All All servers in the Site.com domain have Microsoft Windows Server 20 12 R2 installed. Mia works w orks as an IT Technician at Site.com. Mia is not a member of the Domain Admins group. You need to enable Mia to link existing Group Policy objects (GPOs) in the domain. Mia must n ot be able to modify existing GPOs. Your solution must minimize the administrative privileges assigne d to Mia. Which two of the following actions would achieve the desired result? (Choose two possible a nswers). A. Click the Group Policy Objects node in Group Policy Management and add Mia under the Delegatio n tab. B. Click the domain node in Group Policy Management and add Mia under the Delegation tab. C. Right-click the domain node in Active Directory Users and Computers and select Delegate Control. D. Add Mia to the Group Policy Creator Owners group in Active Directory Users and Computers. E. In Active Directory Users and Computers, add Mia to the Managed By tab in the properties of the Do main Controllers group. Answer: B,C

You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Se rvices (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Wi ndows Server 2012 R2 installed. Site.com has a Sales department. An OU exists for the Sales department. The OU contains the user us er and computer accounts for the Sales department. A sha dow group named SalesSG is configured for the Sales OU and contains all objects within the Sales OU. A password settings object (PSO) named SalesPSO is applied to the SalesSG grou p. You You want to view the settings of SalesPSO. How can you view the sett settings ings of SalesPSO?  A. You You should run the Get-ADDefaultDomainPasswordPol Get-ADDefaultDomainPasswordPolicy icy cmdlet. B. You You should run the Get- ADAccountPassword cmdlet. C. You You should run the Get-ADFineGrainedPassw Get-ADFineGrainedPasswordPolicy ordPolicy cmdlet. D. You You should run the Get-ADDefaultDomainPass Get-ADDefaultDomainPasswordPolicy wordPolicy cmdlet. Answer: C

You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain named Site.com. All servers on the network have Windows Server 2012 R2 installed. Direct Access Access is enabled on the network using the default configuration. You You want the Direct Access clients to use Direct Ac cess whenever they access the Internet. Which Whic h of the following actions should you take?  A. You You should run the Set-DAClientExperienceConfiguration cmdlet. B. You You should run the run the netsh -c - c advfirewall command. C. You You should modify the external IP address assigned to the Web server. D. You You should configure the force tunneling settings for DirectAccess clients.  Answer: D

Your network contains an Active Directory domain named contoso.com. The doma in contains 30 organizational units (OUs). You need to ensure that a user named User1 can link Group Policy Objects (GPOs) in the domain. What should you do?  A. From the Active Directory Directory Users and Computers, add User1 to the Network Co nfiguration Operators group. B. From the Group Policies Management, click cli ck the contoso.com node and modify the Delegation settings. C. From the Group Policies Polic ies Management, click the Group policy Objects node and modify the Delegation settings. D. From the Active Directory Users and Computers, add User1 to the Group Polic y Creator Owners group. Answer: B