Microsoft

70-411
Exam
Real Exam Questions
Answers
 About Microsoft 70-411 Exam

This exam measures your ability to accomplish the technical

tasks listed below. The percentages indicate the relative weight
of each major topic area on the exam. The higher the
percentage, the more questions you are likely to see on that
content area on the exam. View video tutorials about the variety
of question types on Microsoft exams.

https://www.braindumps4it.com/braindumps-70-411.html
 Dont take any tension for the
preparation of 70-411 Exam because
we provide you 70-411 real Exam
questions answers, 70-411 Testified
dumps and updated 70-411 Practice
test engine.
https://www.braindumps4it.com/braindumps-70-411.html
Features
Free Demo

PDF + Practice Test

Desktop Practice test

Real Exam Questions Answers

https://www.braindumps4it.com/braindumps-70-411.html
 Microsoft 70-411 Questions Answers
QUESTION 1
You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS)
domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed.
You want to clone a domain controller to create another domain controller. Which two of the following steps
should you perform first? (Choose two).

A. You should run the Install-ADDSDomainController PowerShell cmdlet.

B. You should run the New-ADDCCloneConfigFile PowerShell cmdlet.
C. You should run the sysprep.exe /oobe command.
D. You should run the dcpromo.exe /adv command.
E. You should place a DCCloneConfig.xml file in the %Systemroot%\NTDS folder.
F. You should place an Unattend.xml file in the %Systemroot%\SYSVOL folder.

Answer: BE

https://www.braindumps4it.com/braindumps-70-411.html
 Microsoft 70-411 Questions Answers
QUESTION 2
You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS)
domain named Site.com. The Site.com network has
a Windows Server 2012 R2 domain controller named Site-DC10 which hosts the Web Server, DNS and DHCP
services. You create a snapshot backup of Site-DC10 using the Ntdsutil utility and mount the snapshot.
How would you access the contents of the snapshot?

A. You should run the Ntdsutil.exe utility with the partition management parameter.
B. You should run the Dsamain.exe utility with the /allowupgrade parameter.
C. You should run the Dsamain.exe /dbpath command from the command prompt.
D. You should run the Ntdsutil.exe utility with the files parameter.

Answer: C

https://www.braindumps4it.com/braindumps-70-411.html
 Microsoft 70-411 Questions Answers
QUESTION 3
You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS)
domain named Site.com. All domain controllers in the Site.com domain have Microsoft Windows Server 2012 R2
installed. Several Sales users spend most of their time away from the office. You implement DirectAccess to
enable the Sales users to connect to the network when they are away from the office. All computers used by the
Sales users are joined to the domain. You create a DirectAccess client group named SalesDirectAccess and add all
the computer accounts for the Sales users' computers to the SalesDirectAccess group. Some Sales users report
that they are unable to access the network using DirectAccess. Other Sales report that they can connect
successfully. You discover that only users using laptop computers can connect using DirectAccess. Sales users are
unable to connect when they use desktop computers. How can you enable all Sales users to access the network
using DirectAccess?

A. You should add the computer accounts for the Sales user computers to the RAS and IAS Servers group.
B. You should add the user accounts for the Sales users to the SalesDirectAccess group.
C. You should modify the group that the Direct Access Client Settings GPO applies to.
D. You should modify the WMI filter that the Direct Access Client Settings GPO is linked to.

Answer: D
https://www.braindumps4it.com/braindumps-70-411.html
 Microsoft 70-411 Questions Answers
QUESTION 4
You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS)
domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed.
Sales users often work away from the office. The Sales users have portable computers that have Windows 7,
Windows Vista or Windows XP installed. All client computers are members of the Site.com domain.
You have been asked to implement a remote access solution to enable the Sales users to connect to the network
when they are working away from the office. The remote access solution must ensure that all Sales users can
connect to the network. Which VPN solution should you implement?

A. Point-to-Point Tunneling Protocol (PPTP).

B. Layer 2 Tunneling Protocol (L2TP).
C. Secure Socket Tunneling Protocol (SSTP).
D. DirectAccess.

Answer: B

https://www.braindumps4it.com/braindumps-70-411.html
 Microsoft 70-411 Questions Answers
QUESTION 5
You are hired by Site.com to administrate a DNS server named Site-SR08 which is currently equipped with a
Server Core Installation on Windows Server 2012. Which of the following commands will need to be run if you are
required to have the time-to-live (TTL) value of a name server (NS) record displayed, taking into account that the
time-to-live (TTL) value is currently being cached by the DNS Server service on Site-SR08?

A. You will need to run the Show-DNSServerCache command.

B. You will need to run the ipconfig.exe /display command.
C. You will need to run the nslookup.exe command.
D. You will need to run the ipconfig.exe/register command.

Answer: A

https://www.braindumps4it.com/braindumps-70-411.html
 Microsoft 70-411 Questions Answers
QUESTION 6
You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS)
domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed.
Site.com has a main office and a branch office. The two offices are connected by a slow WAN link.
A server in the main office named Site-SR21 runs the File and Storage Services and Distributed File System roles.
A server in the branch office named Site-SR22 also runs the File and Storage Services and Distributed File System
roles. Shared folders on Site-SR21 and Site-SR22 are replicated to each other using DFS Replication (DFSR).
You discover that DFS replication between the two servers is using too much bandwidth over the WAN link.
How can you limit the amount of bandwidth used by DFS replication?

A. You should run the Set-DfsrConnectionSchedule cmdlet.

B. You should run the Set-DfsrGroupSchedule cmdlet.
C. You should run the Set-DfsReplicatedFolder cmdlet.
D. You should run the Set-DfsReplicationGroup cmdlet.

Answer: B

https://www.braindumps4it.com/braindumps-70-411.html
 Microsoft 70-411 Questions Answers
QUESTION 7
You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS)
domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed.
Site.com has a Research department. A server in the Research department named Site-SR25 runs the File and
Storage Services role and the File Server Resource Manager role service. Sensitive information is stored in shared
folders on Site-SR25. You want to be notified by e-mail when an executable file is stored in a shared folder on Site-
SR25. The notification must include information about the user who stored the file and the exact location of the
file. What should you do?

A. You should enable Encrypted File System (EFS) on Site-SR25.

B. You should modify the permissions of the shared folders on Site-SR25.
C. You should configure a File Screen Exception on Site-SR25.
D. You should configure a File Screen on Site-SR25.

Answer: D

https://www.braindumps4it.com/braindumps-70-411.html
QUESTION 8
Microsoft 70-411 Questions Answers
You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS) domain
named Site.com. All servers in the Site.com domain have Microsoft Windows Server 2012 R2 installed. Site.com has a
Research department. All user and computer accounts in the Research department are located in an organizational unit
(OU) named ResearchOU. A server in the Research department named Site-SR23 runs the File and Storage Services role
and the File Server Resource Manager role service. Sensitive information is stored in shared folders on Site-SR23. All users
in the Research department are members of a global security group named ResearchUsers. The ResearchUsers group has
full control access to a folder named D:\Data which is shared as \\Site-SR23\Data. You link a group policy object (GPO) to
the ResearchOU. The GPO configures the Audit File System and Audit File Share settings to Success and Failure. You need
to ensure that all file deletions in \\Site-SR23\Data by members of the ResearchUsers group are logged. You delete a test
file in the shared folder and verify that an event log entry is added. You discover that when a user in the ResearchUsers
group deletes a file, no event log entry is added. What should you modify?

A. You should modify the share permissions of \\Site-SR23\Data.

B. You should modify the audit settings in the GPO.
C. You should modify the discretionary access control list (DACL) D:\Data.
D. You should modify the system access control list (SACL) of D:\Data.

Answer: D

https://www.braindumps4it.com/braindumps-70-411.html
 Microsoft 70-411 Questions Answers
QUESTION 9
Your role of Network Administrator at Site.com includes the management of the Active Directory Domain
Services (AD DS) domain named Site.com. All servers in the Site.com domain have Microsoft Windows Server
2012 R2 installed. Site.com has a Sales department and a Production department. An OU exists for each
department. The OUs contain the user and computer accounts for the respective departments. A shadow group
named SalesSG is configured for the Sales OU and contains all objects within the Sales OU. A password settings
object (PSO) named SalesPSO is applied to the SalesSG group and applies a minimum password
length of 6 characters. You want to modify the PSO to require a minimum password length of 8 characters.
Which of the following cmdlets should you use?

A. You should use the Get-ADAccountResultantPasswordReplicationPolicy cmdlet.

B. You should use the Set-ADDefaultDomainPasswordPolicy cmdlet.
C. You should use the Set-ADFineGrainedPasswordPolicy cmdlet.
D. You should use the Set-ADAccountPassword cmdlet.
E. You should use the Set-ADDefaultDomainPasswordPolicy cmdlet.

Answer: C

https://www.braindumps4it.com/braindumps-70-411.html
 Microsoft 70-411 Questions Answers
QUESTION 10
You work as a Network Administrator at Site.com. Site.com has an Active Directory Domain Services (AD DS)
domain named Site.com. All domain controllers in the Site.com domain have Microsoft Windows Server 2012 R2
installed. You implement DirectAccess. You leave the connection name as the default when you run the
DirectAccess wizard. You want to view the properties of a DirectAccess connection. In the Networks window, what
is the name of the DirectAccess connection?

A. VPN Connection.
B. Remote Access Connection.
C. Local Area Connection.
D. CertKingdom.com.
E. Workplace Connection.

Answer: E

https://www.braindumps4it.com/braindumps-70-411.html
Offering Effective PDF Tests Training to Individuals and Companies

100% Money Back Guarantee on All Dumps

Special Student Discount Available

Printable and Searchable PDF Braindumps

User Interactive Exams Software

Get Free Live Updates Exams Software

Real Exam Environment Like Actual Tests

https://www.braindumps4it.com/braindumps-70-411.html
 Download Your Exam In PDF with Practice Test
And Pass Your Exam In First Attempt

https://www.braindumps4it.com/braindumps-70-411.html