[Free] Download New Updated (October 2016) Microsoft 70-410 Real Exam 281-290

Ensurepass

QUESTION 281

HOTSPOT

You deploy a Server with a GUI installation of Windows Server 2012 R2 Datacenter. From Windows PowerShell, you run the following command: Remove-WindowsFeature ServerGui-Shell. In the table below, identify which tools are available on Server1 and which tools are unavailable on Server1. Make only one selection in each row. Each correct selection is worth one point.

 

 

Correct Answer:

 

 

QUESTION 282

DRAG DROP

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Server1 and Server2 run a Server with a GUI installation of Windows Server 2012 R2. You remove the Graphical Management Tools and Infrastructure feature on Server2. You need to restart Server2. What should you do? (To answer, drag the appropriate tools to the correct statements. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)

 

 

Correct Answer:

 

QUESTION 283

DRAG DROP

You have a server that runs Windows Server 2012 R2. You need to create a volume that will remain online if two disks in the volume fail. The solution must minimize the number of disks used to create the volume.

Which three actions should you perform in sequence? (To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order.)

 

 

Correct Answer:

< p class="MsoNormal" style="cursor: auto; text-justify: inter-ideograph; margin: 0cm 0cm 0pt; line-height: normal; text-autospace: ; mso-pagination: none; mso-layout-grid-align: none" align="justify"> 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

QUESTION 284

HOTSPOT

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server that runs Windows Server 2012 R2. You perform a Server Core Installation of Windows Server 2012 R2 on a new server. You need to ensure that you can add the new server to Server Manager on Server1. What should you configure on the new server?

To answer, select the appropriate setting in the answer area.

 

 

Correct Answer:

 

 

 

 

QUESTION 285

You work as an administrator at ENSUREPASS.com. The ENSUREPASS.com network consists of a single domain named ENSUREPASS.com. All servers in the ENSUREPASS.com domain, including domain controllers, have Windows Server 2012 installed.

You have been instructed to modify the name of the local Administrator account on all ENSUREPASS.com workstations. You want to achieve this using as little administrative effort as possible.

Which of the following actions should you take?

You should consider configuring the Security Options settings via the Group Policy

 

A.	You should consider configuring the Security Options settings via the Group Policy Management Console (GPMC).
B.	You should consider navigating to Local Users and Groups via Computer
C.	You should consider configuring the replication settings.
D.	You should consider navigating to Local Users and Groups via Computer Management on each workstation.

 

Correct Answer: A

Explanation:

Rename administrator account policy setting determines whether a different account name is associated with the security identifier (SID) for the Administrator account.

Because the Administrator account exists on all Windows server versions, renaming the account makes it slightly more difficult for attackers to guess this user name and password combination. By default, the built-in Administrator account cannot be locked out no matter how many times a malicious user might use a bad password. This makes the Administrator account a popular target for brute-force password-guessing attacks. The value of this countermeasure is lessened because this account has a well-known SID and there are non-Microsoft tools that allow you to initiate a brute-force attack over the network by specifying the SID rather than the account name. This means that even if you have renamed the Administrator account, a malicious user could start a brute-force attack by using the SID.

Rename the Administrator account by specifying a value for the Accounts: Rename administrator account policy setting.

Location: GPO_nameComputer ConfigurationWindows SettingsSecurity SettingsLocal

PoliciesSecurity Options

http://technet.microsoft.com/en-us/library/jj852273%28v=ws.10%29.aspx http://windowsitpro.com/group-policy/securing-administrator-account

 

 

QUESTION 286

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2. An administrator creates a security template named Template1. You need to App1y Template1 to Server1. Which snap-in should you use?

 

A.	Security Templates
B.	Authorization Manager
C.	Security Configuration and Analysis
D.	Resultant Set of Policy

 

Correct Answer: C

 

 

QUESTION 287

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012 R2. The domain contains a user named User1 and three global security groups named Group1, Group2 and, Group3. You need to add User1 to Group1, Group2, and Group3. Which cmdlet should you run?

 

A.	Add-AdPrincipalGroupMembership
B.	Install- AddsDomainController
C.	Install- WindowsFeature
D.	Install-AddsDomain
E.	Rename-AdObject
F.	Set-AdAccountControl
G.	Set-AdGroup
H.	Set-User

 

Correct Answer: A

Explanation:

http://technet.microsoft.com/en-us/library/ee617203.aspx

The Add-ADPrincipalGroupMembership cmdlet adds a user, group, service account, or computer as a new member to one or more Active Directory groups.

 

 

 

QUESTION 288

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012 R2. The domain contains a user named User1 and a global security group named Group1. You need to ensure that User1 can manage the group membership of Group1. The solution must minimize the number of permissions assigned to User1. Which cmdlet should you run?

 

A.	Add-AdPrincipalGroupMembership
B.	Install- AddsDomainController
C.	Install- WindowsFeature
D.	Install-AddsDomain
E.	Rename-AdObject
F.	Set-AdAccountControl
G.	Set-AdGroup
H.	Set-User

 

Correct Answer: G

Explanation:

http://technet.microsoft.com/en-us/library/ee617199.aspx

The Set-ADGroup cmdlet modifies the properties of an Active Directory group. You can modify commonly used property values by using the cmdlet parameters.

 

 

QUESTION 289

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012 R2. The domain contains a user named User1 and a global security group named Group1. You need to prevent User1 from changing his password. The solution must minimize administrative effort. Which cmdlet should you run?

 

A.	Add-AdPrincipalGroupMembership
B.	Install- AddsDomainController
C.	Install- WindowsFeature
D.	Install-AddsDomain
E.	Rename-AdObject
F.	Set-AdAccountControl
G.	Set-AdGroup
H.	Set-User

 

Correct Answer: F

Explanation:

http://technet.microsoft.com/en-us/library/ee617249.aspx

Set-ADAccountControl

The Set-ADAccountControl cmdlet modifies the user account control (UAC) values for an Active Directory user or computer account. UAC values are represented by cmdlet parameters.

CannotChangePassword

Modifies the ability of an account to change its password. To disallow password change by the account set this to $true.. This parameter changes the Boolean value of the CannotChangePassword property of an account.

The following example shows how to specify the PasswordCannotChange parameter.

-CannotChangePassword $false

 

 

 

QUESTION 290

You have a Hyper-V host named Host1 that connects to a SAN by using a hardware Fibre Channel adapter. Host1 contains two virtual machines named VM1 and VM2. You need to provide VM1 with direct access to the SAN. VM2 must not require access to the SAN. Which two configurations should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.	On VM1, configure a Fibre Channel adapter.
B.	On Host1, configure a new virtual switch.
C.	On VM1, add a network adapter.
D.	On Host1, configure a new Virtual Fibre Channel SAN.
E.	On Host1, modify the Hyper-V settings.

 

Correct Answer: AD

Explanation:

Step 1:

D: Building a Virtual SAN

The process of setting up virtual Fibre Channel starts with building a virtual SAN. The easiest way to accomplish this is to open the Hyper-V Manager, right click on the listing for your Hyper-V server in the console tree, and then choose the Virtual SAN Manager command from the shortcut menu.

Step 2:

A: Once you have created a virtual SAN, the next step in the process is to link a virtual machine to the virtual SAN. To do so, right click on the virtual machine for which you want to provide Fibre Channel connectivity and select the Settings command from the resulting shortcut menu. Next, select the Add Hardware container, as shown in the figure above, and then select the Fibre Channel Adapter option from the list of available hardware. Etc.

Note:

* Virtual Fibre Channel for Hyper-V (also referred to as Synthetic Fibre Channel) provides VM guest operating systemswith direct access to a Fibre Channel SAN by using a standard World Wide Name (WWN) associated with a virtual machine

 

Free VCE & PDF File for Microsoft 70-410 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…