http://https://www.lead1pass.com/Microsoft/70-410-practice-exam-dumps.html (498 Q&As Dumps, 30%OFF Special Discount: 30free )
NEW QUESTION NO: 10
Your network contains an Active Directory forest named contoso.com. The forest contains a single domain.
The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012 R2.
The domain contains a user named User1 and a global security group named Group1.
You need to modify the SAM account name of Group1.
Which cmdlet should you run?
A. Install-AddsDomainController
B. Set-User
C. Set AdAccountControl
D. Set-AdGroup
E. Add-AdPrincipalGroupMembership
F. Rename-AdObject
G. Install-WindowsFeature
H. Install-AddsDomain
Answer: D
NEW QUESTION NO: 11
Your
network contains an Active Directory domain named contoso.com. All
client computer accounts are in an organizational unit (OU) named
AllComputers. Client computers run either Windows 7 or Windows 8.1.
You create a Group Policy object (GPO) named GP1.
You link GP1 to the AllComputers OU.
You need to ensure that GP1 applies only to computers that have more than 8 GB of memory.
What should you configure?
A. The Security settings of GP1
B. The Block Inheritance option for AllComputers
C. The Security settings of AllComputers
D. The WMI filter for GP1
Answer: D
Explanation/Reference:
Explanation:
Windows
Management Instrumentation (WMI) filters allow you to dynamically
determine the scope of Group Policy objects (GPOs) based on attributes
of the target computer.
When a GPO that is linked to a WMI filter is
applied on the target computer, the filter is evaluated on the target
computer. If the WMI filter evaluates to false, the GPO is not applied
(except if the client computer is running Windows Server, in which case
the filter is ignored and the GPO is always applied). If the WMI filter
evaluates to true, the GPO is applied. WMI filters, like GPOs, are
stored on a per-domain basis. A WMI filter and the GPO it is linked to
must be in the same domain.
References:
Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 10: Implementing Group Policy, p.470, 482
http://technet.microsoft.com/en-us/library/jj134176
WMI filtering using GPMC
NEW QUESTION NO: 12
Your
network contains an Active Directory domain named contoso.com. The
domain contains two servers named Server1 and Server2 that run Windows
Server 2012 R2. Server1 has the Group Policy Management feature
installed. Server2 has the Print and Document Services server role
installed.
On Server2, you open Print Management and you deploy a
printer named Printer1 by using a Group Policy object (GPO) named
GPO1.When you open GPO1 on Server1, you discover that the Deployed
Printers node does not appear.
You need to view the Deployed Printers node in GPO1.
What should you do?
A. On Server1, modify the Group Policy filtering options of GPO1.
B. On a domain controller, create a Group Policy central store.
C. On Server2, install the Group Policy Management feature.
D. On Server1, configure the security filtering of GPO1.
Answer: C
Explanation/Reference:
Explanation:
Pre-Requisites
To
use Group Policy for printer deployment you will need to have a Windows
Active Directory domain, and this article assumes that your Domain
Controller is a Windows 2008 R2 Server. You will also need the Print
Services role installed on a server (can be on your DC), and you will be
using the Print Management and Group Policy Management consoles to
configure the various settings. It's assumed that you have already
followed Part One and have one or more printers shared on your server
with the necessary drivers, ready to deploy to your client computers.
NEW QUESTION NO: 13
You have a server that runs Windows Server 2012 R2.
You need to create a volume that will remain online if two disks in the volume fail.
The solution must minimize the number of disks used to create the volume.
Which three actions should you perform in sequence?
A. Add five physical disks
B. Create a storage space and set the disk allocation of one of the disks to "Hot Spare"
C. Create a virtual disk
D. Create a storage space by using the default disk allocation
E. Add three physical disks
Answer: A,C,D
Explanation/Reference:
Explanation:
A storage space with three-way mirroring can tolerate two disk failures but requires a minimum of five disks.
References:
http://technet.microsoft.com/en-us/library/hh831739.aspx
http://technet.microsoft.com/en-us/library/jj822938.aspx
http://technet.microsoft.com/en-us/library/jj899886.aspx
http://technet.microsoft.com/en-us/library/5de72fb5-e1e3-43a7-a176-d17cdf4d312e
NEW QUESTION NO: 14
HOTSPOT
A printer named Printer1 is configured as shown in the exhibit. (Click the Exhibit button.)

To
answer, complete each statement according to the information presented
in the exhibit. Each correct selection is worth one point.
Hot Area:

Answer:

Explanation/Reference:
Explanation:
* The printer is paused.
* Jobs can always be permitted (even if the printer is paused, or printer not started).
Note:
StartTime
Date
and time that a printer can start to print a job - if the printer is
limited to print at specific times. This value is expressed as the time
elapsed since 12:00 AM GMT (Greenwich Mean Time).
This is sort of a trick question. As it stands, when the PowerShell script was executed, the printer is in
"Paused" status, so any submitted job will go to the queue and remain there until the status is "Available".
As
for the ability to submit a job, a user can SUBMIT the job at any time.
If it is outside of the printer's availability range, it will simply
remain in the queue until the printer's start time is reached.
NEW QUESTION NO: 15
HOTSPOT
Your network contains an Active Directory domain named adatum.com.
You create an account for a temporary employee named User1.
You need to ensure that User1 can log on to the domain only between 08:00 and 18:00 from a client computer named Computer1.
From which tab should you perform the configuration?
To answer, select the appropriate tab in the answer area.
Hot Area:

Answer:

Explanation/Reference:
Explanation:
The
User account properties contains the Logon Hours settings that you can
use to change the hours that this selected object can log on to the
domain. By default, domain logon is allowed 24 hours a day, 7 days a
week. Note that this control does not affect the user's ability to log
on locally to a computer using a local computer account instead of a
domain account.
To set logon hours
1. Open Active Directory Users and Computers.
2. In the console tree, click Users.
Where?
Active Directory Users and Computers/domain
node/Users Or, click the folder that contains the user account.
3. Right-click the user account, and then click Properties.
4. On the Account tab, click Logon Hours, and then set the permitted or denied logon hours for the user.


Reference: http://technet.microsoft.com/en-us/library/dd145547.aspx
NEW QUESTION NO: 16
You have a server named Server1 that runs Windows Server 2012 R2.
You
plan to use Windows PowerShell Desired State Configuration (DSC) to
confirm that the Application Identity service is running on all file
servers.
You define the following configuration in the Windows PowerShell Integrated Scripting Environment (ISE):

You need to use DSC to configure Server1 as defined in the configuration.
What should you run first?
A. Service1
B. Start DscConfiguration
C. Test-DscConfigu ration
D. Configuration1
Answer: D
NEW QUESTION NO: 17
Your
network contains a production Active Directory forest named contoso.com
and a test Active Directory forest named contoso.test. A trust
relationship does not exist between the forests.
In the contoso.test domain, you create a backup of a Group Policy object (GPO) named GPO1.
You transfer the backup of GPO1 to a domain controller in the contoso.com domain.
You
need to create a GPO in contoso.com based on the settings of GPO1.You
must achieve this goal by using the minimum amount of Administrative
effort.
What should you do?
A. From Windows PowerShell, run the Get- GPO cmdlet and the Copy- GPO cmdlet.
B. From Windows PowerShell, run the New- GPO cmdlet and the Import- GPO cmdlet.
C. From Group Policy Management, create a new starter GPO. Right-click the new starter GPO, and then click Restore from Backup.
D. From Group Policy Management, right-click the Croup Policy Objects container, and then click Manage Backups.
Answer: B
Explanation/Reference:
Explanation:
The
Import-GPO cmdlet imports the settings from a GPO backup into a
specified target GPO. The target GPO can be in a different domain or
forest than that from which the backup was made and it does not have to
exist prior to the operation.
Incorrect Answers:
A: Copy-GPO requires domain trust / copy from one domain to another domain within the same forest.
C: This would create a starter GPO, not a GPO.
D:
You can also restore GPOs. This operation takes a backed-up GPO and
restores it to the same domain from rom the GPO's original which it was
backed up. You cannot restore a GPO from backup into a domain different f
domain.
The New-GPO cmdlet creates a new GPO with a specified name.
By default, the newly created GPO is not linked to a site, domain, or
organizational unit (OU). The Import-GPO cmdlet imports the settings
from a GPO backup into a specified target GPO. The target GPO can be in a
different domain or forest than that from which the backup was made and
it does not have to exist prior to the operation.
The Restore-GPO
cmdlet restores a GPO backup to the original domain from which it was
saved. If the original domain is not available, or if the GPO no longer
exists in the domain, the cmdlet fails.
Since the GPO's original
domain is different and there is no trust relationship between forests,
you should execute the New-GPO command and import the already existing
command into the 'new' domain.
NEW QUESTION NO: 18
Your network contains an Active Directory domain named contoso.com.
All of the AppLocker policy settings for the member servers are configured in a Group Policy object (GPO) named GPO1.
A member server named Server1 runs Windows Server 2012 R2.
On Server1, you test a new set of AppLocker policy settings by using a local computer policy.
You need to merge the local AppLocker policy settings from Server1 into the AppLocker policy settings of GPO1.
What should you do?
A. From Local Group Policy Editor on Server1, export an .inf file. Import the .inf file by using Group Policy Management Editor.
B. From Server1, run the Set-ApplockerPolicy cmdlet.
C. From Local Group Policy Editor on Server1, export an .xml file. Import the .xml file by using Group Policy Management Editor.
D. From Server1, run the New-ApplockerPolicy cmdlet.
Answer: B
Explanation/Reference:
Explanation:
The
Set-AppLockerPolicy cmdlet sets the specified Group Policy Object (GPO)
to contain the specified AppLocker policy. If no Lightweight Directory
Access Protocol (LDAP) is specified, the local GPO is the default.
When
the Merge parameter is used, rules in the specified AppLocker policy
will be merged with the AppLocker rules in the target GPO specified in
the LDAP path. The merging of policies will remove rules with duplicate
rule IDs, and the enforcement setting specified by the AppLocker policy
in the target GPO will be preserved. If the Merge parameter is not
specified, then the new policy will overwrite the existing policy.
References:
http://technet.microsoft.com/en-us/library/ee791816(v=ws.10).aspx
Exam
Ref 70-410: Installing and configuring Windows Server 2012 R2, Chapter
10: Implementing Group Policy, Lesson1: Planning, Implementing and
managing Group Policy, p. 479
NEW QUESTION NO: 19
Your network
contains an Active Directory domain named contoso.com. The domain
contains a DHCP server named Server1 that runs Windows Server 2012 R2.
You
create a DHCP scope named Scope1. The scope has a start address of
192.168.1.10, an end address of 192.168.1.50, and a subnet mask of
255.255.255.192.
You need to ensure that Scope1 has a subnet mask of 255.255.255.0.
What should you do first?
A. From the DHCP console, reconcile Scope1.
B. From the DHCP console, delete Scope1.
C. From the DHCP console, modify the Scope Options of Scope1.
D. From Windows PowerShell, run the Set-DhcpServerv4Scope cmdlet.
Answer: B
Explanation/Reference:
Explanation:
You cannot change the subnet mask of a DHCP scope without deleting the scope and recreating it with the new subnet mask.
Set-DhcpServerv4Scope does not include a parameter for the subnet mask.
NEW QUESTION NO: 20
Your
network contains an Active Directory domain named contoso.com. The
domain contains a domain controller named DC1 that runs Windows Server
2012 R2 and a client computer named Computer1 that runs windows 8.
DC1 is configured as a DHCP server as shown in the exhibit. (Click the Exhibit button.)

Computer1 is configured to obtain an IP address automatically.
You notice that Computer1 is unable to obtain an IP address from DC1.
You need to ensure that Computer1 can receive an IP address from DC1.
What should you do?
A. Disable the Allow filters.
B. Disable the Deny filters.
C. Authorize DC1.contoso.com.
D. Activate Scope [10.1.1.0] Contoso.com.
Answer: A
Explanation/Reference:
Explanation:
A
red down arrow indicates an unauthorized DHCP server. A DHCP server
that is a domain controller or a member of an Active Directory domain
queries Active Directory for the list of authorized servers (identified
by IP address). If its own IP address is not in the list of authorized
DHCP servers, the DHCP Server service does not complete its startup
sequence and automatically shuts down.