Latest MCSE 70-411 Real Exam Download 41-50

Ensurepass

QUESTION 41

You deploy two servers named Server1 and Server2. You install Network Policy Server (NPS) on both servers.

On Server1, you configure the following NPS settings:

· RADIUS Clients

· Network Policies

· Connection Request Policies

· SQL Server Logging Properties

You export the NPS configurations to a file and import the file to Server2.

You need to ensure that the NPS configurations on Server2 are the same as the NPS configurations on

Server1.

Which settings should you manually configure on Server2?
A. SQL Server Logging Properties

B. Connection Request Policies

C. RADIUS Clients

D. Network Policies

Answer: A

QUESTION 42

You have a server named Server1 that has the Network Policy and Access Services server role installed. You plan to configure Network Policy Server (NPS) on Server1 to use certificate-based authentication for VPN connections. You obtain a certificate for NPS.

You need to ensure that NPS can perform certificate-based authentication.

To which store should you import the certificate? To answer, select the appropriate store in the answer area.

Hot Area:

Answer:

QUESTION 43

Your network contains a RADIUS server named Server1. You install a new server named Server2 that runs

Windows Server 2012 and has Network Policy Server (NPS) installed.

You need to ensure that all accounting requests for Server2 are forwarded to Server1.

On Server2, you create a new remote RADIUS server group named Group1 that contains Server1.

What should you configure next on Server2? To answer, select the appropriate node in the answer area.

Hot Area:

Answer:

QUESTION 44

Your network contains an Active Directory domain named contoso.com. The domain contains more than

100 Group Policy objects (GPOs).

Currently, there are no enforced GPOs. A network Administrator accidentally deletes the Default Domain

Policy GPO.

You do not have a backup of any of the GPOs.

You need to recreate the Default Domain Policy GPO.

What should you use?
A. dcgpofix

B. Get-GPOReport

C. Gpfixup

D. Gptedit.msc
E. Import-GPO
F. Restore-GPO

G. Set-GPInheritance

H. Set-GPLink

I. Set-GPPermission

J. Gpupdate

K. Add-ADGroupMember

Answer: A

QUESTION 45

Your network contains an Active Directory domain named contoso.com. The domain contains more than

100 Group Policy objects (GPOs).

Currently, there are no enforced GPOs. The domain is renamed to adatum.com. Group Policies no longer function correctly.

You need to ensure that the existing GPOs are applied to users and computers.

You want to achieve this goal by using the minimum amount of Administrative effort.

What should you use?
A. dcgpofix

B. Get-GPOReport

C. Gpfixup

D. Gpresult

E. Gptedit.msc

F. Import-GPO

G. Restore-GPO

H. Set-GPInheritance

I. Set-GPLink

J. Set-GPPermission

K. Gpupdate

L. Add-ADGroupMember

Answer: C

QUESTION 46

Your network contains an Active Directory domain named contoso.com. The domain contains more than

100 Group Policy objects (GPOs).

Currently, there are no enforced GPOs. The domain contains a top-level organizational unit (OU) for each department.

A group named Group1 contains members from each department. You have a GPO named GPO1 that is linked to the domain.

You need to configure GPO1 to apply settings to Group1 only.

What should you use?
A. dcgpofix

B. Get-GPOReport

C. Gpfixup

D. Gpresult

E. Gptedit.msc
F. Import-GPO
G. Restore-GPO

H. Set-GPInheritance

I. Set-GPLink

J. Set-GPPermission

K. Gpupdate

L. Add-ADGroupMember

Answer: J

QUESTION 47

Your network contains an Active Directory domain named contoso.com. The domain does not contain a certification authority (CA).

All servers run Windows Server 2012. All client computers run Windows 8.

You need to add a data recovery agent for the Encrypting File System (EFS) to the domain.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. From Windows PowerShell, run Get-Certificate.

B. From the Default Domain Controllers Policy, select Create Data Recovery Agent.

C. From the Default Domain Policy, select Add Data Recovery Agent.
D. From a command prompt, run cipher.exe.

E. From the Default Domain Policy, select Create Data Recovery Agent.

F. From the Default Domain Controllers Policy, select Add Data Recovery Agent.

Answer: AC

QUESTION 48

Your network contains an Active Directory domain named contoso.com. You need to audit access to removable storage devices.

Which audit category should you configure? To answer, select the appropriate category in the answer area.

Hot Area:

Answer:

QUESTION 49

Your network contains an Active Directory domain named contoso.com. The domain contains three domain controllers.

The domain controllers are configured as shown in the following table.

You are creating a Distributed File System (DFS) namespace as shown in the exhibit. (Click the Exhibit button.)

You need to identify which configuration prevents you from creating a DFS namespace in Windows Server

2008 mode.

Which configuration should you identify?

Exhibit:

A. The location of the PDC emulator role

B. The functional level of the domain

C. The operating system on Server1 and Server3

D. The location of the RID master role

Answer: B

QUESTION 50

Your network contains an Active Directory domain named adatum.com.

You need to audit changes to the files in the SYSVOL shares on all of the domain controllers. The solution must minimize the amount of SYSVOL replication traffic caused by the audit.

Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)
A. Audit PolicyAudit system events

B. Advanced Audit Policy ConfigurationDS Access

C. Advanced Audit Policy ConfigurationGlobal Object Access Auditing

D. Audit PolicyAudit object access

E. Audit PolicyAudit directory service access

F. Advanced Audit Policy ConfigurationObject Access

Answer: DF

 

Download Latest 70-411 Real Free Tests , help you to pass exam 100%.