Microsoft Designing and Implementing a Server Infrastructure - 070-413 Exam Practice Test
Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the DHCP Server server role installed. The network contains a Virtual Desktop Infrastructure (VDI).
All virtual machines run Windows 8.
You identify the following requirements for allocating IPv4 addresses to client computers:
All virtual desktops must have static IP addresses.
All laptop computers must receive dynamic IP addresses.
All virtual desktops must be prevented from obtaining dynamic address.
You need to recommend a DHCP solution that meets the requirements for allocating IPv4 addresses.
The solution must use the least amount of administrative effort.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.
All virtual machines run Windows 8.
You identify the following requirements for allocating IPv4 addresses to client computers:
All virtual desktops must have static IP addresses.
All laptop computers must receive dynamic IP addresses.
All virtual desktops must be prevented from obtaining dynamic address.
You need to recommend a DHCP solution that meets the requirements for allocating IPv4 addresses.
The solution must use the least amount of administrative effort.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com. The domain contains several domain controllers. The domain controllers run either Windows Server 2012 or Windows Server 2008 R2.
The domain functional level is Windows Server 2008 R2. The forest functional level is Windows Server
2008.
The corporate compliance policy states that all items deleted from Active Directory must be recoverable from a Recycle Bin.
You need to recommend changes to the current environment to meet the compliance policy.
Which changes should you recommend? (Each correct answer presents part of the solution. Choose all that apply.)
The domain functional level is Windows Server 2008 R2. The forest functional level is Windows Server
2008.
The corporate compliance policy states that all items deleted from Active Directory must be recoverable from a Recycle Bin.
You need to recommend changes to the current environment to meet the compliance policy.
Which changes should you recommend? (Each correct answer presents part of the solution. Choose all that apply.)
Correct Answer: D,E
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com. The network has an Active Directory Certificate Services (AD CS) infrastructure.
You need to issue a certificate to users to meet the following requirements:
Ensure that the users can encrypt files by using Encrypting File System (EFS).
Ensure that all of the users reenroll for their certificate every six months.
Solution: You create a copy of the Basic EFS certificate template, and then you modify the validity period of the copy.
Does this meet the goal?
You need to issue a certificate to users to meet the following requirements:
Ensure that the users can encrypt files by using Encrypting File System (EFS).
Ensure that all of the users reenroll for their certificate every six months.
Solution: You create a copy of the Basic EFS certificate template, and then you modify the validity period of the copy.
Does this meet the goal?
Correct Answer: B
Vote an answer
DRAG DROP
Your network contains an Active Directory forest named contoso.com.
Your company merges with another company that has an Active Directory forest named litwareinc.com.
Each forest has one domain.
You establish a two-way forest trust between the forests.
The network contains three servers. The servers are configured as shown in the following table.
You confirm that the client computers in each forest can resolve the names of the client computers in both forests.
On dc1.litwareinc.com, you create a zone named GlobalNames.
You need to recommend changes in both forests to ensure that the users in both forests can resolve single-label names by using the GlobalNames zone in litwareinc.com.
Which changes should you recommend?
To answer, drag the appropriate configuration to the correct server in the answer area. Each configuration may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content.
Your network contains an Active Directory forest named contoso.com.
Your company merges with another company that has an Active Directory forest named litwareinc.com.
Each forest has one domain.
You establish a two-way forest trust between the forests.
The network contains three servers. The servers are configured as shown in the following table.
You confirm that the client computers in each forest can resolve the names of the client computers in both forests.
On dc1.litwareinc.com, you create a zone named GlobalNames.
You need to recommend changes in both forests to ensure that the users in both forests can resolve single-label names by using the GlobalNames zone in litwareinc.com.
Which changes should you recommend?
To answer, drag the appropriate configuration to the correct server in the answer area. Each configuration may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content.
Correct Answer:
Explanation:
Deploying a GlobalNames zone
The specific steps for deploying a GlobalNames zone can vary somewhat, depending on the AD DS topology of your network.
Step 1: Create the GlobalNames zone
Step 2(Box 1, box 3) : Enable GlobalNames zone support
The GlobalNames zone is not available to provide name resolution until GlobalNames zone support is explicitly enabled by using the following command on every authoritative DNS server in the forest:
dnscmd <ServerName> /config /enableglobalnamessupport 1
Step 3:Replicate the GlobalNames zone
Step 4: Populate the GlobalNames zone
Step 5 (box 2) : Publish the location of the GlobalNames zone in other forests If you want DNS clients in other forests to use the GlobalNames zone for resolving names, add service location (SRV) resource records to the forest-wide DNS application partition, using the service name
_globalnames._msdcs and specifying the FQDN of the DNS server that hosts the GlobalNames zone.
Reference: Deploying a GlobalNames Zone
http://technet.microsoft.com/en-us/library/cc731744.aspx
You need to recommend a server virtualization strategy that meets the technical requirements and the virtualization requirements.
What should you include in the recommendation?
What should you include in the recommendation?
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
DRAG DROP
You manage a server named WAP01 that has the Web Application Proxy feature deployed. You deploy a web application named WebApp1 to a server named WEB01. WAP01 and WEB01 both run Microsoft Windows Server 2012 R2 and are members of the Active Directory Domain Services (AD DS) domain named corp.contoso.com.
You have the following requirements:
WebApp1 must be available internally at URL https://webappl.corp.contoso.com by using Kerberos authentication.
WebApp1 must be available externally at URL https://webappl.contoso.net by using Active Directory Federation Services (AD FS) authentication.
You need to configure computer accounts.
How should you complete the relevant Windows PowerShell commands? To answer, drag the appropriate Windows PowerShell segment to the correct location. Each Windows PowerShell segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
You manage a server named WAP01 that has the Web Application Proxy feature deployed. You deploy a web application named WebApp1 to a server named WEB01. WAP01 and WEB01 both run Microsoft Windows Server 2012 R2 and are members of the Active Directory Domain Services (AD DS) domain named corp.contoso.com.
You have the following requirements:
WebApp1 must be available internally at URL https://webappl.corp.contoso.com by using Kerberos authentication.
WebApp1 must be available externally at URL https://webappl.contoso.net by using Active Directory Federation Services (AD FS) authentication.
You need to configure computer accounts.
How should you complete the relevant Windows PowerShell commands? To answer, drag the appropriate Windows PowerShell segment to the correct location. Each Windows PowerShell segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:
Box 1: WEB01
Box 2: https://webappl.contoso.net,
Box 3: WAP01
Box 4: WEB01
Explanation:
Box 1: WEB01
The Set-ADComputer cmdlet modifies the properties of an Active Directory computer object. The computer is Web01 which hosts the web application Box 2: https://webappl.corp.contoso.com The ServicePrincipalNames specifies the service principal names for the account. This parameter sets the ServicePrincipalNames property of the account. We set it to the URL of the service.
Box 3: WAP01
Box 4: WEB01
We now set up Kerberos delegation for the WAP01 application through the WEB01 server.
Reference: Set-ADComputer Kerberos
https://technet.microsoft.com/en-us/library/ee617263.aspx
Box 2: https://webappl.contoso.net,
Box 3: WAP01
Box 4: WEB01
Explanation:
Box 1: WEB01
The Set-ADComputer cmdlet modifies the properties of an Active Directory computer object. The computer is Web01 which hosts the web application Box 2: https://webappl.corp.contoso.com The ServicePrincipalNames specifies the service principal names for the account. This parameter sets the ServicePrincipalNames property of the account. We set it to the URL of the service.
Box 3: WAP01
Box 4: WEB01
We now set up Kerberos delegation for the WAP01 application through the WEB01 server.
Reference: Set-ADComputer Kerberos
https://technet.microsoft.com/en-us/library/ee617263.aspx
After the planned upgrade to Windows Server 2012, you restore a user account from the Active Directory Recycle Bin.
You need to replicate the restored user account as quickly as possible.
Which cmdlets should you run?
You need to replicate the restored user account as quickly as possible.
Which cmdlets should you run?
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
HOT SPOT
You run the ldifde command and receive the following output:
The command completes successfully.
Use the drop-down menus to select the answer choice that completes each statement.
You run the ldifde command and receive the following output:
The command completes successfully.
Use the drop-down menus to select the answer choice that completes each statement.
Correct Answer:
Box 1: Schema
Box 2: Domain Users
Explanation:
Box 1: Schema
The -d parameter the sets the distinguished name of the search base for data export. Here the distinguished name is Schem a.configuration.contoso.com Box 2: Domain user No special permissions are required to export the schema from the source forest, and any domain user can perform this task.
Reference: Export, Compare, and Synchronize Active Directory Schemas
https://technet.microsoft.com/en-us/magazine/2009.04.schema.aspx
Box 2: Domain Users
Explanation:
Box 1: Schema
The -d parameter the sets the distinguished name of the search base for data export. Here the distinguished name is Schem a.configuration.contoso.com Box 2: Domain user No special permissions are required to export the schema from the source forest, and any domain user can perform this task.
Reference: Export, Compare, and Synchronize Active Directory Schemas
https://technet.microsoft.com/en-us/magazine/2009.04.schema.aspx
Your network contains an Active Directory domain named adatum.com
You plan to implement Network Access protection (NAP) by using VPN enforcement.
You need to recommend which Windows Server 2012 components must be deployed for the planned implementation.
Which two components should you include in the recommendation?
You plan to implement Network Access protection (NAP) by using VPN enforcement.
You need to recommend which Windows Server 2012 components must be deployed for the planned implementation.
Which two components should you include in the recommendation?
Correct Answer: A,C
Vote an answer
A company has offices in multiple geographic locations, The sites have high-latency, low-bandwidth connecbons, You need to implement a multiple Windows Deployment Server (WDS) topology for deploying standard client device images to all sites.
Solution: You install four WDS servers and configure them as load-balanced cluster Does this meet you goal?
Solution: You install four WDS servers and configure them as load-balanced cluster Does this meet you goal?
Correct Answer: A
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Your company has a main office, ten regional datacenters and 100 branch offices.
You are designing the site topology for an Active Directory forest named contoso.com.
The forest will contain the following servers:
* In each regional datacenter and in the main office, a domain controller that runs Windows Server 2012
* In each branch office, a file server that runs Windows Server 2012
You have a shared folder that is accessed by using the path \\contoso.com\shares\software. The folder will be replicated to a local file server in each branch office by using Distributed File System (DFS) replication.
You need to recommend an Active Directory site design to meet the following requirements:
* Ensure that users in the branch offices will be authenticated by a domain controller in the closest regional datacenter.
* Ensure that users automatically connect to the closest file server when they access
\\contoso.com\shares\software.
How many Active Directory sites should you recommend?
You are designing the site topology for an Active Directory forest named contoso.com.
The forest will contain the following servers:
* In each regional datacenter and in the main office, a domain controller that runs Windows Server 2012
* In each branch office, a file server that runs Windows Server 2012
You have a shared folder that is accessed by using the path \\contoso.com\shares\software. The folder will be replicated to a local file server in each branch office by using Distributed File System (DFS) replication.
You need to recommend an Active Directory site design to meet the following requirements:
* Ensure that users in the branch offices will be authenticated by a domain controller in the closest regional datacenter.
* Ensure that users automatically connect to the closest file server when they access
\\contoso.com\shares\software.
How many Active Directory sites should you recommend?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Your company is a hosting provider that provides cloud-based services to multiple customers.
Each customer has its own Active Directory forest located in your company's datacenter.
You plan to provide VPN access to each customer. The VPN solution will use RADIUS for authentication services and accounting services.
You need to recommend a solution to forward authentication and accounting messages from the perimeter network to the Active Directory forest of each customer.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.
Each customer has its own Active Directory forest located in your company's datacenter.
You plan to provide VPN access to each customer. The VPN solution will use RADIUS for authentication services and accounting services.
You need to recommend a solution to forward authentication and accounting messages from the perimeter network to the Active Directory forest of each customer.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
You have a server named DNS1 that runs Windows Server 2012. DNS1 has the DNS server role installed.
You need to recommend changes to the DNS I to prevent several names from being registered in DNS.
What should you configure on DNS1?
You need to recommend changes to the DNS I to prevent several names from being registered in DNS.
What should you configure on DNS1?
Correct Answer: D
Vote an answer
Your company has a main office and a branch office.
The main office and Two The branch office
main office contains 25000 users.
The branch office contains 1800 users in each
Each office contains two IP subnets.
The company plans to deploy an Active Directory forest.
You need to recommend an Active Directory infrastructure to meet the following requirements:
(Remeber these two requirement need help wat & how mny domain site they need)
- Ensure that the users are authenticated by using a domain controller in their respective office.
- Minimize the amount of Active Directory replication traffic between the offices.
Select the BEST answer.
The main office and Two The branch office
main office contains 25000 users.
The branch office contains 1800 users in each
Each office contains two IP subnets.
The company plans to deploy an Active Directory forest.
You need to recommend an Active Directory infrastructure to meet the following requirements:
(Remeber these two requirement need help wat & how mny domain site they need)
- Ensure that the users are authenticated by using a domain controller in their respective office.
- Minimize the amount of Active Directory replication traffic between the offices.
Select the BEST answer.
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
HOT SPOT
You have a domain controller that hosts an Active Directory-integrated zone.
On the domain controller, you run the following cmdlet:
PS C:\> Get-DnsServerScavenging
NoRefreshInterval:2.00:00:00
RefreshInterval:3.00:00:00
ScavengingInterval:4.00:00:00
ScavengingState:True
LastScavengeTime:1/30/2014 9:10:36 AM
Use the drop-down menus to select the answer choice that completes each statement.
You have a domain controller that hosts an Active Directory-integrated zone.
On the domain controller, you run the following cmdlet:
PS C:\> Get-DnsServerScavenging
NoRefreshInterval:2.00:00:00
RefreshInterval:3.00:00:00
ScavengingInterval:4.00:00:00
ScavengingState:True
LastScavengeTime:1/30/2014 9:10:36 AM
Use the drop-down menus to select the answer choice that completes each statement.
Correct Answer:
First answer
* -NoRefreshInterval<TimeSpan>
Specifies a length of time as a TimeSpan object. NoRefreshInterval sets a period of time in which no refreshes are accepted for dynamically updated records. Zones on the server inherit this value automatically.
This value is the interval between the last update of a timestamp for a record and the earliest time when the timestamp can be refreshed. The minimum value is 0. The maximum value is 8760 hours (seven days).
* Here it is set to 2 days: NoRefreshInterval:2.00:00:00
Second answer
-ScavengingState<Boolean> (In this question it is set to true)
Enables or disables automatic scavenging of stale records. ScavengingState determines whether the DNS scavenging feature is enabled by default on newly created zones. The acceptable values for this parameter are:
-- $False. Disables scavenging. This is the default setting.
-- $True. Enables scavenging