Ensurepass

 

QUESTION 291

Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2012. You need to create a custom Active Directory application partition. Which tool should you use?

 

A.

Dsadd

B.

Dsmod

C.

Netdom

D.

Ntdsutil

 

Correct Answer: D

 

 

QUESTION 292

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. The domain contains two servers. The servers are configured as shown in the following table.

 

clip_image001

 

Server1 and Server2 host a load-balanced website named Web1. Web1 runs by using an application pool named WebApp1. WebApp1 uses a group Managed Service Account named gMSA1 as its identity. Domain users connect to Web1 by using either the name webl.contoso.com or the alias myweb.contoso.com. You discover the following:

 

clip_image003When the users access Web1 by using webl.contoso.com, they authenticate by using Kerberos.

clip_image003[1]When the users access Web1 by using myweb.contoso.com, they authenticate by using NTLM.

 

You need to ensure that the users can authenticate by using Kerberos when they connect by using myweb.contoso.com. What should you do?

 

A.

Modify the properties of the WebApp1 application pool.

B.

Run the Add-ADComputerServiceAccount cmdlet.

C.

Modify the properties of the Web1 website.

D.

Modify the properties of the gMSA1 service account.

 

Correct Answer: B

 

 

QUESTION 293

How to configure IIS to change the authentication (kerberos or ntlm)

 

Solution:

cscript adsutil.vbs set w3svc/WebSite/root/NTAuthenticationProviders “Negotiate,NTLM”

 

A.

True

B.

False

 

Correct Answer: A

 

 

QUESTION 294

You need to enable three of your domain controllers as global catalog servers. Where would you configure the domain controllers as global catalogs?

 

A.

Forest, NTDS settings

B.

Domain, NTDS settings

C.

Site, NTDS settings

D.

Server, NTDS settings

 

Correct Answer: D

 

 

QUESTION 295

You are the network administrator for your organization. Your company uses a Windows Server 2012 Enterprise certification authority to issue certificates. You need to start using key archival. What should you do?

 

A.

Implement a distribution CRL.

B.

Install the smart card key retrieval.

C.

Implement a Group Policy object (GPO) that enables the Online Certificate Status Protocol (OCSP) responder.

D.

Archive the private key on the server.

 

Correct Answer: D

 

 

 

 

 

 

 

QUESTION 296

You wants to change the memory of a virtual machine that is currently powered up. What does he need to do?

 

A.

Shut down the virtual machine, use the virtual machine’s settings to change the memory, and start it again.

B.

Use the virtual machine’s settings to change the memory.

C.

Pause the virtual machine, use the virtual machine’s settings to change the memory, and resume it.

D.

Save the virtual machine, use the virtual machine’s settings to change the memory, and resume it.

 

Correct Answer: A

 

 

QUESTION 297

You need to stop an application from running in Task Manager. Which tab would you use to stop an application from running?

 

A.

Performance

B.

Users

C.

Options

D.

Details

 

Correct Answer: D

 

 

QUESTION 298

You upgraded all of your locations to Windows Server 2012 and implemented the routing capability built into the servers. You chose to implement RIP. After implementing the routers, you discover that routes that you don’t want your network to consider are updating your RIP routing tables. What can you do to control which networks the RIP routing protocol will communicate with on your network?

 

A.

Configure TCP/IP filtering.

B.

Configure RIP route filtering.

C.

Configure IP packet filtering.

D.

Configure RIP peer filtering.

E.

There is no way to control this behavior.

 

Correct Answer: B

 

 

QUESTION 299

Your company has offices in five locations around the country. Most of the users’ activity is local to their own network. Occasionally, some of the users in one location need to send confidential information to one of the other four locations or to retrieve information from one of them. The communication between the remote locations is sporadic and relatively infrequent, so you have configured RRAS to use demand-dial lines to set up the connections. Management’s only requirement is that any communication between the office locations be appropriately secured. Which of the following steps should you take to ensure compliance with this requirement? (Choose all that apply.)

 

A.

Configure CHAP on all the RRAS servers.

B.

Configure PAP on all the RRAS servers.

C.

Configure MPPE on all the RRAS servers.

D.

< p class="MsoNormal" style="margin: 0cm 0cm 0pt; line-height: normal; text-autospace: ; mso-layout-grid-align: none" align="left">Configure L2TP on all the RRAS servers.

E.

Configure MS-CHAPv2 on all the RRAS servers.

 

Correct Answer: CE

 

 

QUESTION 300

Which parameter do you need to use to import GUID and MAC address?

 

A.

/get-AutoAddDevices

B.

/get-Device

C.

/add

D.

/enable

 

Correct Answer: B

Free VCE & PDF File for Microsoft 70-411 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…

Comments are closed.