This page was exported from 100% Valid Exam Dumps on Lead2pass [ ] Export date:Thu Feb 20 23:34:39 2020 / +0000 GMT ___________________________________________________ Title: [January 2018] 2018 Latest Lead2pass 70-411 Questions & Answers PDF Free Download 449q --------------------------------------------------- 2018 Latest Updated 70-411 Dumps Free Download In Lead2pass: QUESTION 21Your network contains a single Active Directory domain named domain contains a domain controller named DC1 that hosts the primary DNS zone for servers dynamically register their host names.You install the new Web servers that host identical copies of your company's intranet website. The servers are configured as shown in the following table. You need to use DNS records to load balance name resolution queries for between the two Web servers.What is the minimum number of DNS records that you should create manually? A.    1B.    3C.    4D.    6 Answer: B QUESTION 22You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Access server role installed.You need to configure the ports on Server1 to ensure that client computers can establish VPN connections to Server1. The solution must NOT require the use of certificates or pre-shared keys.What should you modify?To answer, select the appropriate object in the answer area. Answer: Explanation:The four types of tunneling protocols used with a VPN/RAS server running on Windows Server 2012 include:Point-to-Point Tunneling Protocol (PPTP):A VPN protocol based on the legacy Point-to-Point protocol used with modems.The PPTP specification does not describeencryption or authentication features and relies on the Point-to-Point Protocol being tunneled to implement security functionality.Layer 2 Tunneling Protocol (L2TP): Used with IPsec to provide security.L2TP supports either computer certificates or a preshared key as the authentication method for IPsec. IKEv2: IKE is short for Internet Key Exchange, which is a tunneling protocol that uses IPsec Tunnel Mode protocol. The message is encrypted with one of the following protocols by using encryption keys that are generated from the IKEv2 negotiation process.Secure Socket Tunneling Protocol (SSTP): Introduced with Windows Server 2008, which uses the HTTPS protocol over TCP port 443 to pass traffic through firewalls QUESTION 23Hotspot QuestionYou have a server named Servers that runs Windows Server 2012 R2. Servers has the Windows Deployment Services server role installed.Server5 contains several custom images of Windows 8.You need to ensure that when 32-bit client computers start by using PXE, the computers automatically install an image named Image 1.What should you configure?To answer, select the appropriate tab in the answer area. Answer: QUESTION 24You have a cluster named Cluster1 that contains two nodes. Both nodes run Windows Server 2012 R2. Cluster1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2.You configure a custom service on VM1 named Service1.You need to ensure that VM1 will be moved to a different node if Service1 fails.Which cmdlet should you run on Cluster1? A.    Add-ClusterVmMonitoredItemB.    Add-ClusterGenericServiceRoleC.    Set-ClusterResourceDependencyD.    Enable VmResourceMetering Answer: AExplanation:The Add-ClusterVMMonitoredItem cmdlet configures monitoring for a service or an EventTracing for Windows (ETW) event so that it is monitored on a virtual machine. If the service fails or the event occurs, then the system responds by taking an action based on the failover configuration for the virtual machine resource. For example, the configuration might specify that the virtual machine be restarted. QUESTION 25Your company has a main office and a branch office.The main office contains a server that hosts a Distributed File System (DFS) replicated folder.You plan to implement a new DFS server in the branch office.You need to recommend a solution that minimizes the amount of network bandwidth used to perform the initial synchronization of the folder to the branch office.You recommend using the Export-DfsrClone and Import-DfsrClonecmdlets.Which additional command or cmdlet should you include in the recommendation? A.    Robocopy.exeB.    Synchost.exeC.    Export-BcCachePackageD.    Sync-DfsReplicationGroup Answer: AExplanation:By preseeding files before you set up DFS Replication, add a new replication partner, or replace a server, you can speed up initial synchronization and enable cloning of the DFS Replication database in Windows Server 2012 R2. The Robocopy method is one of several preseeding methods QUESTION 26Your network contains an Active Directory domain named have several Windows PowerShell scripts that execute when users log on to their client computer.You need to ensure that all of the scripts execute completely before the users can access their desktop.Which setting should you configure?To answer, select the appropriate setting in the answer area. Answer: Explanation: logon scripts synchronouslyDirects the system to wait for logon scripts to finish running before it starts the Windows Explorer interface program and creates the desktop.If you enable this policy, Windows Explorer does not start until the logon scripts have finished running. This setting assures that logon script processing is complete before the user starts working, but it can delay the appearance of the desktop.If you disable this policy or do not configure it, the logon scripts and Windows Explorer are not synchronized and can run simultaneously. QUESTION 27Your network contains an Active Directory domain named All domain controllers run Windows Server 2012 R2.An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8 Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1.You make a change to GPO1.You need to force all of the computers in OU1 to refresh their Group Policy settings immediately. The solution must minimize administrative effort.Which tool should you use? A.    Server ManagerB.    Active Directory Users and ComputersC.    The Gpupdate commandD.    Group Policy Management Console (GPMC) Answer: D QUESTION 28Your network contains an Active Directory domain named Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2.You have a Password Settings object (PSOs) named PSO1.You need to view the settings of PSO1.Which tool should you use? A.    Group Policy ManagementB.    Server ManagerC.    Get-ADAccountResultantPasswordReplicationPolicyD.    Active Directory Administrative Center Answer: DExplanation:* Get-ADFineGrainedPasswordPolicyGets one or more Active Directory fine grained password policies.* To store fine-grained password policies, Windows Server 2008 includes two new object classes in the Active Directory Domain Services (AD DS) schema:Password Settings ContainerPassword SettingsThe Password Settings Container (PSC) object class is created by default under the System container in the domain. It stores the Password Settings objects (PSOs) for that domain. QUESTION 29Your network contains an Active Directory domain named The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs.You need to prevent all of the GPOs at the site level and at the domain level from being applied to users and computers in an organizational unit (OU) named OU1.You want to achieve this goal by using the minimum amount of Administrative effort.What should you use? A.    dcgpofixB.    Get-GPOReportC.    GpfixupD.    GpresultE.    Gptedit.mscF.    Import-GPOG.    Import-GPOH.    Restore-GPOI.    Set-GPInheritanceJ.    Set-GPLinkK.    Set-GPPermissionL.    GpupdateM.    Add-ADGroupMember Answer: IExplanation:The cmdlet Set-GPInheritance enable or disable inheritance for a given organizational unit and thus prevents GPOs that are linked to a higher level, are applied to the objects of being surrounded OU.The following call disables inheritance parent GPOs for OU CBTest the root of the domain:Set-GPinheritance -target "ou = contosoTest, dc = contoso, dc = com" -IsBlocked Yes QUESTION 30Your network contains an Active Directory domain named The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs.You have two GPOs linked to an organizational unit (OU) named OU1.You need to change the precedence order of the GPOs.What should you use? A.    DcgpofixB.    Get-GPOReportC.    GpfixupD.    GpresultE.    Gptedit.mscF.    Import-GPOG.    Restore-GPOH.    Set-GPInheritanceI.    Set-GPLinkJ.    Set-GPPermissionK.    GpupdateL.    Add-ADGroupMember Answer: IExplanation:The Set-GPLink cmdlet sets the properties of a GPO link.You can set the following properties:-- Enabled. If the GPO link is enabled, the settings of the GPO are applied when Group Policy is processed for the site, domain or OU.-- Enforced. If the GPO link is enforced, it cannot be blocked at a lower-level (in the Group Policy processing hierarchy) container.-- Order. The order specifies the precedence that the settings of the GPO take over conflicting settings in other GPOs that are linked (and enabled) to the same site, domain, or OU. 70-411 dumps full version (PDF&VCE): Large amount of free 70-411 exam questions on Google Drive: You may also need: 70-410 exam dumps: 70-412 exam dumps: 70-413 exam dumps: 70-414 exam dumps: --------------------------------------------------- Images: --------------------------------------------------- --------------------------------------------------- Post date: 2018-01-31 03:30:55 Post date GMT: 2018-01-31 03:30:55 Post modified date: 2018-01-31 03:30:55 Post modified date GMT: 2018-01-31 03:30:55 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from