Ensurepass

QUESTION 141

Force an authoritative and non-authoritative synchronization for DFSR-replicated SYSVOL

 

A.      dfsgui.msc

B.      ultrasound

C.      rplmon

D.      frsutil

 

Correct Answer: C

 

 

QUESTION 142

I am using a Domain Admins account to run the console and the service is running under local system. I try approve Requests from Pending devices, then I got notice Access Denied, (Windows Server 2003 R2). And why Architecture x64, clients are x86? Is that the reason and how to fix it?

 

A.        Open WDS and right click on the server and select properties. Then click on the tab “PXE Response settings” and select respond to all (known and unknown) client. And also select the little checkbox below.

 

B.        You need to grant permissions on the OU in which you want to create machine accounts for the WDS Server Machine Account.

 

C.        To grant permissions to approve a pending computer.

Open Active Directory Users and Computers.

Right-click the OU where you are creating prestaged computer accounts, and then select Delegate Control.

On the first screen of the wizard, click Next.

Change the object type to include computers.

Add the computer object of the Windows Deployment Services server, and then click Next.

Select Create a Custom task to delegate.

Select Only the following objects in the folder. Then select the Computer Objects check box, select Create selected objects in this folder, and click Next.

In the Permissions box, select the Write all Properties check box, and click Finish.

 

D.        Define the OU path to add systems in WDS.

Delegate Computer object create or greater rights to the WDS server for the OU.

Delegate computer object create rights to your account or simply use a domain admin account to logon.

 

Correct Answer: C

 

 

QUESTION 143

Force an authoritative and non-authoritative synchronization for DFSR-replicated SYSVOL

 

A.      ldp

B.      dfsgui.msc

C.      ultrasound

D.      rplmon

 

Correct Answer: D

 

 

QUESTION 144

How to give the minimum required permission to a user who wants to promote a RODC.

 

A.      member of the Domain Admins group

B.      allowed to attach the server to the RODC computer account

C.      Local admin

D.      organization admin

 

Correct Answer: BC

 

 

QUESTION 145

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. A domain controller named DC1 has the ADMX Migrator tool installed. You have a custom Administrative Template file on DC1 named Template1.adm. You need to add a custom registry entry to Template1.adm by using the ADMX Migrator tool. Which action should you run first?

 

A.      New Category

B.      Load Template

C.      New Policy Setting

D.      Generate ADMX from ADM

 

Correct Answer: D

 

 

QUESTION 146

Your network contains an Active Directory domain named contoso.com. You need to audit access to removable storage devices. Which audit category should you configure?

 

To answer, select the appropriate category in the answer area.

 

Hot Area:

clip_image001

 

Correct Answer:

clip_image002

 

 

QUESTION 147

Your network contains an Active Directory domain named adatum.com. You need to audit changes to the files in the SYSVOL shares on all of the domain controllers. The solution must minimize the amount of SYSVOL replication traffic caused by the audit. Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)

 

A.      Audit PolicyAudit system events

B.      Advanced Audit Policy ConfigurationDS Access

C.      Advanced Audit Policy ConfigurationGlobal Object Access Auditing

D.      Audit PolicyAudit object access

E.       Audit PolicyAudit directory service access

F.       Advanced Audit Policy ConfigurationObject Access

 

Correct Answer: DF

 

 

QUESTION 148

Your network contains an Active Directory domain named contoso.com. You have several Windows PowerShell scripts that execute when client computers start. When a client computer starts, you discover that it takes a long time before users are prompted to log on. You need to reduce the amount of time it takes for the client computers to start. The solution must not prevent scripts from completing successfully. Which setting should you configure?

 

To answer, select the appropriate setting in the answer area.

 

Hot Area:

clip_image004

 

Correct Answer:

clip_image006

 

 

QUESTION 149

You are a network administrator of an Active Directory domain named contoso.com. You have a server named Server1 that runs Windows Server 2012. Server1 has the Web Server (IIS) server role installed. Server1 will host a web site at URL https://secure.contoso.com. The application pool identity account of the web site will be set to a domain user account named AppPool1. You need to identify the setspn.exe command that you must run to configure the appropriate Service Principal Name (SPN) for the web site. What should you run?

 

To answer, drag the appropriate objects to the correct location. Each object may be used once, more than once, or not at all.

 

Select and Place:

clip_image008

 

Correct Answer:

clip_image010

 

 

QUESTION 150

Your network contains an Active Directory domain named contoso.com. You deploy a web-based application named App1 to a server named Server1. App1 uses an application pool named AppPool1. AppPool1 uses a domain user account named User1 as its identity. You need to configure Kerberos constrained delegation for User1. Which three actions should you perform?

 

To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order

 

Select and Place:

clip_image012

 

Correct Answer:

clip_image014

 

Comments are closed.