70-411 - Administering Windows Server 2012

Go back to Microsoft

Exam FAQ

How much does the 70-411 exam cost? What is the best way to study for the 70-411 exam?

Example Questions

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Admin1 that runs Windows Server 2012. You enable and configure Routing and Remote Access (RRAS) on Admin1. You create a user account named User1. You need to ensure that User1 can establish VPN connections to Admin1. What should you do? The contoso.com domain contains 2 domain controllers running Server 2012, AD recycle bin is enabled for the domain. DC1 is configured to take AD snapshots daily, DC2 is set to take snapshots weekly. Someone deletes a group containing 100 users, you need to recover this group. What should you do? Your network contains multiple Active Directory sites. You have a Distributed File System (DFS) namespace that has a folder target in each site. You discover that some client computers connect to DFS targets in other sites. You need to ensure that the client computers only connect to a DFS target in their respective site. What should you modify? Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. A domain controller named DC1 has the ADMX Migrator tool installed. You have a custom Administrative Template file on DC1 named Template1.adm. You need to add a custom registry entry to Template1.adm by using the ADMX Migrator tool. Which action should you run first? Your network contains two servers named Admin1 and Server2. Both servers run Windows Server 2012 and have the DNS Server server role installed. On Admin1, you create a standard primary zone named contoso.com. You need to ensure that Server2 can host a secondary zone for contoso.com. What should you do from Admin1? Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2003, Windows Server 2008 R2, or Windows Server 2012. A support technician accidentally deletes a user account named User1. You need to use tombstone reanimation to restore the User1 account. Which tool should you use? Your network contains an Active Directory domain named contoso.com. The domain contains 30 organizational units (OUs). You need to ensure that a user named Admin 1 can link Group Policy objects (GPOs) in the domain. What should you do? You have a server named Admin1 that runs Windows Server 2012. Admin1 has the Windows Server Update Services server role installed. You need to configure Windows Server Update Services (WSUS) to support Secure Sockets Layer (SSL). Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.) Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. One of the domain controllers is named DC1. The DNS zone for the contoso.com zone is Active Directory-integrated and has the default settings. A server named Server1 is a DNS server that runs a UNIX-based operating system. You plan to use Server1 as a secondary DNS server for the contoso.com zone. You need to ensure that Server1 can host a secondary copy of the contoso.com zone. What should you do? You have a VHD that contains an image of Windows Server 2012. You plan to apply updates to the image. You need to ensure that only updates that can install without requiring a restart are installed. Which DISM option should you use? You have a server named Admin1 that has a Server Core Installation on Windows Server 2012. You need to view the time-to-live (TTL) value of a host name that is cached on Admin1. What should you run? Your network contains two servers named Server1 and Server2. Both servers run Windows Server 2012 and have the DNS Server server role installed. Server1 hosts a primary zone for contoso.com. Server2 hosts a secondary zone for contoso.com. The zone is not configure to notify secondary servers of changes automatically. You update several records on Server1. You need to force the replication of the contoso.com zone records from Server1 to Server2. What should you do from Server2? Your network contains an Active Directory domain named contoso.com. The domain contains a RADIUS server named Server1 that runs Windows Server 2012. You add a VPN server named Server2 to the network. On Server1, you create several network policies. You need to configure Server1 to accept authentication requests from Server2. Which tool should you use on Server1? You have a server named VPN1 that runs Windows Server 2012. VPN1 has the Remote Access server role installed. On VPN1, you create a network policy named PPTP_Policy. You need to configure PPTP_Policy to apply only to VPN connections that use the PPTP protocol. What should you configure in PPTP_Policy? Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012. You have a Password Settings object (PSOs) named PSO1. You need to view the settings of PSO1. Which tool should you use? You are the network administrator for your organization. Your company uses a Windows Server 2012 Enterprise certification authority to issue certificates. You need to start using key archival. What should you do? Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. You pre-create a read-only domain controller (P.QDC) account named RODC1. You export the settings of RODC1 to a file named Filel.txt. You need to promote RODC1 by using Filel.txt. Which tool should you use? Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Admin1 and Server2. Both servers run Windows Server 2012. Both servers have the File and Storage Services server role, the DFS Namespaces role service, and the DFS Replication role service installed. Admin1 and Server2 are part of a Distributed File System (DFS) Replication group named Group1. Admin1 and Server2 are separated by a low-speed WAN connection. You need to limit the amount of bandwidth that DFS can use to replicate between Admin1 and Server2. What should you modify? Your network contains an Active Directory domain named contoso.com. The domain contains 2 WSUS servers, ServerA and ServerB. ServerB is a replica server of ServerA. You need to configure WSUS to report data from SERVERB to SERVERA. What should you configure? Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. On Dc1, you add a new volume and you stop the Active Directory Domain Services (AD DS) service. You run ntdsutil.exe and you set NTDS as the active instance. You need to move the Active Directory database to the new volume. Which Ntdsutil context should you use? You have a server named Server1 that runs Windows Server 2012. Server1 has the Windows Server Update Services server role installed. You need to configure Windows Server Update Services (WSUS) to support Secure Sockets Layer (SSL). Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.) You have installed Routing and Remote Access on Server1 what should you configure next to use it as a NAT server. You have a server named Server1 that has a Server Core Installation on Windows Server 2012. You need to view the time-to-live (TTL) value of a host name that is cached on Server1. What should you run? Your network contains an Active Directory domain named contoso.com. The domain contains a server named Admin1 that runs Windows Server 2012. Admin1 has the Network Policy Server role service installed. You plan to configure Admin1 as a Network Access Protection (NAP) health policy server for VPN enforcement by using the Configure NAF wizard. You need to ensure that you can configure the VPN enforcement method on Admin1 successfully. What should you install on Admin1 before you run the Configure NAP wizard? You have a server named Admin1 that runs Windows Server 2012. You create a custom Data Collector Set (DCS) named DCS1. You need to configure DCS1 to meet the following requirements: - Automatically run a program when the amount of total free disk space onAdmin1drops below 10 percent of capacity. - Log the current values of several registry settings. Which two should you configure in DCS1? (Each correct answer presents part of the solution. Choose two.) Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8. Your company has users who work from home. Some of the home users have desktop computers. Other home users have laptop computers. All of the computers are joined to the domain. All of the computer accounts are members of a group named Group1. Currently, the home users access the corporate network by using a PPTP VPN. You implement DirectAccess by using the default configuration and you specify Group1 as the DirectAccess client group. The home users who have desktop computers report that they cannot use DirectAccess to access the corporate network. The home users who have laptop computers report that they can use DirectAccess to access the corporate network. You need to ensure that the home users who have desktop computers can access the network by using DirectAccess. What should you modify? Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012. Server1 and Server2 are nodes in a Hyper-V cluster named Cluster1. Cluster1 hosts 10 virtual machines. All of the virtual machines run Windows Server 2012 and are members of the domain. You need to ensure that the first time a service named Service1 fails on a virtual machine, the virtual machine is moved to a different node. You configure Service1to be monitored from Failover Cluster Manager. What should you configure on the virtual machine? Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named IT and a OU named Sales. All of the help desk user accounts are located in the IT OU. All of the sales user accounts are located in the Sales OU. The Sales OU contains a global security group named G_Sales. The IT OU contains a global security group named G_HelpDesk. You need to ensure that members of G_HelpDesk can perform the following tasks: Reset the passwords of the sales users. Force the sales users to change their password at their next logon. What should you do? Your network contains an Active Directory domain named contoso.com. All client computers connect to the Internet by using a server that has Microsoft Forefront Threat Management Gateway (TMG) installed. You deploy a server named Admin1 that runs Windows Server 2012. You install the Windows Server Update Services server role on Admin1. From the Windows Server Update Services Configuration Wizard, you click Start Connecting and you receive an HTTP error message. You need to configure Admin1 to download Windows updates from the Internet. What should you do? Your network contains two Active Directory forests named contoso.com and adatum.com. The contoso.com forest contains a server named Admin1.contoso.com. The adatum.com forest contains a server named server2.adatum.com. Both servers have the Network Polic Server role service installed. The network contains a server named Server3. Server3 is located in the perimeter network and has the Network Policy Server role servic installed. You plan to configure Server3 as an authentication provider for several VPN servers. You need to ensure that RADIUS requests received by Server3 for a specific VPN server are always forwarded to Admin1.contoso.com. Which two should you configure on Server3? (Each correct answer presents part of the solution. Choose two.) Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. All of the DNS servers in both of the domains run Windows Server 2012. The network contains two servers named Server1 and Server2. Server1 hosts an Active Directory- integrated zone for contoso.com. Server2 hosts an Active Directory-integrated zone for fabrikam.com. Server1 and Server2 connect to each other by using a WAN link. Client computers that connect to Server1 for name resolution cannot resolve names in fabrikam.com. You need to configure Server1 to support the resolution of names in fabrikam.com. The solution must ensure that users in contoso.com can resolve names in fabrikam.com if the WAN link fails. What should you do on Server1? You have a DNS server named Admin1 that has a Server Core Installation on Windows Server 2012. You need to view the time-to-live (TTL) value of a name server (NS) record that is cached by the DNS Server service on Admin1. What should you run? Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has the Network Policy Server role service installed. You plan to configure Server1 as a Network Access Protection (NAP) health policy server for VPN enforcement by using the Configure NAP wizard. You need to ensure that you can configure the VPN enforcement method on Server1 successfully. What should you install on Server1 before you run the Configure NAP wizard? You deploy two servers named Server1 and Server2. You install Network Policy Server (NPS) on both servers. On Server1, you configure the following NPS settings: RADIUS Clients Network Policies Connection Request Policies SQL Server Logging Properties You export the NPS configurations to a file and import the file to Server2. You need to ensure that the NPS configurations on Server2 are the same as the NPS configurations on Server1. Which settings should you manually configure on Server2? You have a server named Admin1 that runs Windows Server 2012. Admin1 has the File Server Resource Manager role service installed. Admin1 has a folder named Folder1 that is used by the human resources department. You need to ensure that an email notification is sent immediately to the human resources manager when a user copies an audio file or a video file to Folder1. What should you configure on Admin1? Your network contains an Active Directory domain named contoso.com. All client computers run Windows Vista Service Pack 2 (SP2). All client computers are in an organizational unit (OU) named 0U1. All user accounts are in an OU named OU2. All users log on to their client computer by using standard user accounts. A Group Policy object (GPO) named GPO1 is linked to OU1. A GPO named GP02 is linked to 0U2. You need to apply advanced audit policy settings to all of the client computers. What should you do? You have a DNS server named Server1. Server1 has a primary zone named contoso.com. Zone Aging/ Scavenging is configured for the contoso.com zone. One month ago, an Administrator removed a server named Server2 from the network. You discover that a static resource record for Server2 is present in contoso.com. Resource records for decommissioned client computers are removed automatically from contoso.com. You need to ensure that the static resource records for all of the servers are removed automatically from contoso.com. What should you modify? Your network contains an Active Directory domain named adatum.com. The domain contains a server named Admin1 that runs Windows Server 2012. Admin1 is configured as a Network Policy Server (NPS) server and as a DHCP server. You need to ensure that only computers that send a statement of health are checked for Network Access Protection (NAP) health requirements. Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.) Your company has a main office and a branch office. The main office is located in Seattle. The branch office is located in Montreal. Each office is configured as an Active Directory site. The network contains an Active Directory domain named adatum.com. The Seattle office contains a file server named Server1. The Montreal office contains a file server named Server2. The servers run Windows Server 2012 and have the File and Storage Services server role, the DFS Namespaces role service, and the DFS Replication role service installed. Server1 and Server2 each have a share named Share1 that is replicated by using DFS Replication. You need to ensure that users connect to the replicated folder in their respective office when they connect to \\contoso.com\Share1. Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.) You have a server named Server1 that runs Windows Server 2012. On Server1, you configure a custom Data Collector Set (DCS) named DCS1. You need to ensure that all performance log data that is older than 30 days is deleted automatically. What should you configure? Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. You enable and configure Routing and Remote Access (RRAS) on Server1. You create a user account named User1. You need to ensure that User1 can establish VPN connections to Server1. What should you do? You have a server named Admin1 that runs Windows Server 2012. Admin1 has the File Server Resource Manager role service installed. Admin1 has a folder named Folder1 that is used by the sales department. You need to ensure that an email notification is sent to the sales manager when a File Screening Audit report is generated. What should you configure on Admin1? You have Windows Server 2012 installation media that contains a file named Install.wim. You need to identify which images are present in Install.wim. What should you do? Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. On all of the domain controllers, Windows is installed in C:\Windows and the Active Directory database is located in D:\Windows\NTDS\. All of the domain controllers have a third-party application installed. The operating system fails to recognize that the application is compatible with domain controller cloning. You verify with the application vendor that the application supports domain controller cloning. You need to prepare a domain controller for cloning. What should you do? Your network contains an Active Directory domain named adatum.com. The domain contains a domain controller named Admin1. On Admin1, you create a new volume named E. You restart Admin1 in Directory Service Restore Mode. You open ntdsutil.exe and you set NTDS as the active instance. You need to move the Active Directory logs to E:\NTDS\. Which Ntdsutil context should you use? Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. You pre-create a read-only domain controller (RODC) account named RODC1. You export the settings of RODC1 to a file named Filel.txt. You need to promote RODC1 by using Filel.txt. Which tool should you use? Your company has offices in five locations around the country. Most of the users’ activity is local to their own network. Occasionally, some of the users in one location need to send confidential information to one of the other four locations or to retrieve information from one of them. The communication between the remote locations is sporadic and relatively infrequent, so you have configured RRAS to use demand-dial lines to set up the connections. Management’s only requirement is that any communication between the office locations be appropriately secured. Which of the following steps should you take to ensure compliance with this requirement? (Choose all that apply.) You have a server named Admin1 that runs Windows Server 2012. On Admin1, you configure a custom Data Collector Set (DCS) named DCS1. DCS1 is configured to store performance log data in C:\Logs. You need to ensure that the contents of C:\Logs are deleted automatically when the folder reaches 100 MB in size. What should you configure? Your network contains an Active Directory domain named contoso.com. The domain contains a Web server named www.contoso.com. The Web server is available on the Internet. You implement DirectAccess by using the default configuration. You need to ensure that users never attempt to connect to www.contoso.com by using DirectAccess. The solution must not prevent the users from using DirectAccess to access other resources in contoso.com. Which settings should you configure in a Group Policy object (GPO)? Your network contains an Active Directory domain named adatum.com. The domain contains a server named WDS1 that runs Windows Server 2012. You install the Windows Deployment Services server role on WDS1. You have a virtual machine named VM1 that runs Windows Server 2012. VM1 has several line-of-business applications installed. You need to create an image of VM1 by using Windows Deployment Services. Which type of image should you add to VM1 first?

Study Guides