QUESTION 71
Your network contains an Active Directory domain named contoso.com. The Active Directory site topology is configured as shown in the exhibit. (Click the Exhibit button.)
DC1 and DC2 run Windows Server 2003 R2. All FSMO roles are located on DC2. You plan to deploy a read-only domain controller (RODC) to Site3. You need to recommend changes to the network to support the planned RODC implementation.
What should you recommend? More than one answer choice may achieve the goal. Select the BEST answer.
A. To Site1, add an RODC that runs Windows Server 2012.
B. Replace DC2 with a domain controller that runs Windows Server 2012.
C. To Site2, add an RODC that runs Windows Server 2012.
D. Replace DC1 with a domain controller that runs Windows Server 2012.
Answer: D
QUESTION 72
Your network contains a Hyper-V host named Host1 that runs Windows Server 2012. Host1 contains a virtual machine named DC1. DC1 is a domain controller that runs Windows Server 2012. You plan to clone DC1. You need to recommend which steps are required to prepare DC1 to be cloned. What should you include in the recommendation? (Each correct answer presents part of the solution.
Choose all that apply.)
A. Run sysprep.exe /oobe.
B. Run New-VirtualDiskClone.
C. Create a file named Dccloneconfig.xml.
D. Add DC1 to the Cloneable Domain Controllers group.
E. Run dcpromo.exe /adv.
Answer: CD
QUESTION 73
Your network contains an Active Directory domain named contoso.com. Your company plans to open a branch office. The branch office will have 10 client computers that run Windows 8 and at least one server that runs Windows Server 2012. The server will host BranchCache files and manage print queues for the network print devices in the branch office. You need to recommend a solution to ensure that the users in the branch office can print if the branch office server fails. What should you recommend? More than one answer choice may achieve the goal. Select the BEST answer.
A. Printer pooling
B. Branch Office Direct Printing
C. A standby print server
D. A print server cluster
E. A secure Web Services on Devices (WSD) printer
Answer: B
QUESTION 74
Your company has a main office that contains several servers and several users. The main office contains a file server named Server1 that runs Windows Server 2012. The users access a large report file that is created on Server1 each day. The company plans to open a new branch office. The branch office will contain only client computers. You need to implement a solution to reduce the amount of bandwidth used by the client computers in the branch office to download the report each day. What should you do? More than one answer choice may achieve the goal. Select the BEST answer.
A. Install the BranchCache for network files role service on Server1. Configure the client computers
to use BranchCache in hosted cache mode.
B. Configure the offline settings of the shared folder that contains the report.
C. Install the BranchCache for network files role service on Server1. Configure the client computers
to use Branchcache in distributed mode.
D. Enable the Background Intelligent Transfer Service (BITS) feature on Server1 and on each client
computer in the branch office. Move the report to a web folder.
Answer: C
QUESTION 75
You deploy an Active Directory domain named contoso.com to the network. The domain is configured as an Active Directory-integrated zone. All domain controllers run Windows Server 2012 and are DNS servers. You plan to deploy a child domain named operations.contoso.com. You need to recommend changes to the DNS infrastructure to ensure that users in the operations department can access the servers in the contoso.com domain.
What should you include in the recommendation?
A. A zone delegation for _msdcs.contoso.com
B. Changes to the replication scope of contoso.com
C. Changes to the replication scope of _msdcs.contoso.com
D. Changes to the replication scope of operations.contoso.com Answer:B
Answer: B
QUESTION 76
Your network contains an Active Directory domain named contoso.com. You deploy several servers that have the Remote Desktop Session Host role service installed. You have two organizational units (OUs).
The OUs are configured as shown in the following table.
GPO1 contains the Folder Redirection settings for all of the users. You need to recommend a solution to prevent the sales users’ folders from being redirected when the users log on to a Remote Desktop session.
What should you include in the recommendation?
A. From GPO2, set the loopback processing mode.
B. Apply a WMI filter to GP02.
C. Configure security filtering for GPO1.
D. From GPO1, set the loopback processing mode.
Answer: A
QUESTION 77
Your network contains an Active Directory domain named contoso.com. The functional level of the domain and the forest is Windows Server 2008 R2. All domain controllers run Windows Server 2008 R2. You plan to deploy a new line-of-business application named App1 that uses claims-based authentication. You need to recommend changes to the network to ensure that Active Directory can provide claims for App1. What should you include in the recommendation? (Each correct answer presents part of the solution.
Choose all that apply.)
A. Deploy Active Directory Lightweight Directory Services (AD LDS).
B. From the Default Domain Controllers Policy, enable the Support for Dynamic Access Control and
Kerberos armoring setting.
C. From the properties of the computer accounts of the domain controllers, enable Kerberos constrained
delegation.
D. Raise the domain functional level to Windows Server 2012.
E. Add domain controllers that run Windows Server 2012.
Answer: BE
QUESTION 78
Your company has two divisions named Division1 and Division2. The network contains an Active Directory domain named contoso.com. The domain contains two child domains named division1.contoso.com and division2.contoso.com. The company sells division1 to another company. You need to prevent administrators in contoso.com and division2.contoso.com from gaining administrative access to the resources in division1.contoso.com.
What should you recommend?
A. Create a new tree in the forest named contoso.secure.
Migrate the resources and the accounts in division1.contoso.com to contoso.secure.
B. On the domain controller accounts in division1.contoso.com, deny the Enterprise Admins group the
Allowed to Authenticate permission.
C. Create a new forest and migrate the resources and the accounts in division1.contoso.com to the new forest.
D. In division1.contoso.com, remove the Enterprise Admins group from the Domain Admins group and remove
the Enterprise Admins group from the access control list (ACL) on the division1.contoso.com domain object.
Answer: C
QUESTION 79
Your network contains an Active Directory domain named contoso.com. On several organizational units (OUs), an administrator named Admin1 plans to delegate control of custom tasks. You need to ensure that Admin1 can delegate a custom task named Task1 by using the Delegation of Control Wizard.
What should you do?
A. Add a new class to the Active Directory schema.
B. Configure a custom MMC console.
C. Modify the Delegwiz.inf file.
D. Configure a new authorization store by using Authorization Manager.
Answer: C
QUESTION 80
Your network contains an Active Directory forest. The forest contains two Active Directory domains named contoso.com and child.contoso.com. The forest functional level is Windows Server 2003. The functional level of both domains is Windows Server 2008. The forest contains three domain controllers. The domain controllers are configured as shown in the following table.
DC1 and DC2 have the DNS Server server role installed and are authoritative for both contoso.com and child.contoso.com. The child.contoso.com domain contains a server named serverl.child.contoso.com that runs Windows Server 2012. You plan to deploy server1.child.contoso.com as a read-only domain controller (RODC). You run the adprep.exe /rodcprep command on DC3 and receive the following error message:
You need to identify what prevents you from successfully running Adprep /rodcprep on DC3.
What should you identify?
A. The domain functional level of child.contoso.com is set to the wrong level.
B. DC3 cannot connect to the infrastructure master on DC2.
C. DC3 cannot connect to the domain naming master on DC1.
D. The forest functional level is set to the wrong level.
Answer: B
If you want to pass Microsoft 70-413 successfully, donot missing to read latest lead2pass Microsoft 70-413 practice tests.
If you can master all lead2pass questions you will able to pass 100% guaranteed.