This page was exported from Free Braindump2go Latest Microsoft Exam Dumps PDF&VCE [ http://www.comptiadumps.com ] Export date:Thu Aug 16 6:45:31 2018 / +0000 GMT ___________________________________________________ Title: Official 2014 Latest Microsoft 70-410 Exam Dump Free Download(251-260)! --------------------------------------------------- QUESTION 251 Hotspot Question Your network contains two Active Directory forests named contoso.com and adatum.com. A two-way forest trust exists between the forests. You have custom starter Group Policy objects (GPOs) defined in contoso.com. You need to ensure that the same set of custom starter GPOs are available in adatum.com. In the table below, identify which action must be performed for the starter GPOs container in each forest. Make only one selection in two of the rows. Each correct selection is worth one point.   Answer:   QUESTION 252 Hotspot Question You have a server named Server1 that runs Windows Server 2012 R2. Server1 is a member of a workgroup. You need to ensure that only members of the Administrators group and members of a group named Group1 can log on locally to Server1. Which settings should you modify from the Local Security Policy? To answer, select the appropriate settings in the answer area.   Answer:   Explanation: UAC Is controlled by local security policy. Computer ConfigurationWindows SettingsSecurity SettingsLocal PoliciesSecurity Option You can use the Local Security Policy console to modify the behavior of UAC. Start Local Security Policy (Secpol.msc) and open Security SettingsLocal PoliciesSecurity Options.   User Account Control (UAC) helps prevent malicious programs (also called malware) from damaging a computer and helps organizations deploy a better-managed desktop. With UAC, applications and tasks always run in the security context of a non-administrator account, unless an administrator specifically authorizes administrator-level access to the system. UAC can block the automatic installation of unauthorized applications and prevent inadvertent changes to system settings. http://technet.microsoft.com/en-us/library/jj574202.aspx QUESTION 253 You have a server named Server1. Server1 runs Windows Server 2012 R2 and is located in a perimeter network. You need to configure a custom connection security rule on Server1. The rule must encrypt network communications across the Internet to a computer at another company. Which authentication method should you configure in the connection security rule? A.    Advanced B.    User (Kerberos V5) C.    Computer (Kerberos V5) D.    Computer and user (Kerberos V5) E.    Default Answer: A Explanation: You need to make use of Advanced authentication method to ensure that communication is encrypted over the network to the other company from your custom connection security rule on Server1. QUESTION 254 Your network contains two Active Directory forests named contoso.com and adatum.com. All servers run Windows Server 2012 R2. A one-way external trust exists between contoso.com and adatum.com. Adatum.com contains a universal group named Group1. You need to prevent Group1 from being used to provide access to the resources in contoso.com. What should you do? A.    Modify the Managed By settings of Group1. B.    Modify the Allowed to Authenticate permissions in adatum.com. C.    Change the type of Group1 to distribution. D.    Modify the name of Group1. Answer: B Explanation: * Accounts that require access to the customer Active Directory will be granted a special right called Allowed to Authenticate. This right is then applied to computer objects (Active Directory domain controllers and AD RMS servers) within the customer Active Directory to which the account needs access. * For users in a trusted Windows Server 2008 or Windows Server 2003 domain or forest to be able to access resources in a trusting Windows Server 2008 or Windows Server 2003 domain or forest where the trust authentication setting has been set to selective authentication, each user must be explicitly granted the Allowed to Authenticate permission on the security descriptor of the computer objects (resource computers) that reside in the trusting domain or forest. QUESTION 255 Your network contains an Active Directory forest named contoso.com. The forest contains a child domain named corp.contoso.com. The network has Microsoft Exchange Server 2010 deployed. You need to create a mail-enabled distribution group. Which type of group should you create? A.    Domain local B.    Global C.    Local D.    Universal Answer: D Explanation: http://technet.microsoft.com/en-us/library/bb726978.aspx Universal groups Groups that are used to grant permissions on a wide scale throughout a domain tree or forest. Members of global groups include accounts and groups from any domain in the domain tree or forest. Microsoft Exchange Server 2007: Implementation and Administration By Jim McBee, Benjamin Craig page 248: Only universal groups should be used as mail-enabled groups. QUESTION 256 Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012 R2. The domain contains a user named User1 and a global security group named Group1. You need to add a new domain controller to the domain. You install Windows Server 2012 on a new server named DC3. Which cmdlet should you run next? A.    Add-AdPrincipalGroupMembership B.    Install-AddsDomainController C.    Install WindowsFeature D.    Install AddsDomain E.    Rename-AdObject F.    Set-AdAccountControl G.    Set-AdGroup H.    Set-User Answer: C Explanation: http://www.mustbegeek.com/install-domain-controller-in-server-2012-using-windows-powershell/ It is the 2nd step when installing a DC by powershell on a fresh server. QUESTION 257 Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012 R2. The domain contains a user named User1 and a global security group named Group1. User1 logs on to a client computer named Computer1. You need to disable the computer account of Computer1. Which cmdlet should you run? A.    Add-AdPrincipalGroupMembership B.    Install-AddsDomainController C.    Install WindowsFeature D.    Install AddsDomain E.    Rename-AdObject F.    Set-AdAccountControl G.    Set-AdGroup H.    Set-User Answer: F Explanation: http://technet.microsoft.com/en-us/library/ee617249.aspx Set-ADAccountControl Enabled Specifies if an account is enabled. An enabled account requires a password. This parameter sets the Enabled property for an account object. This parameter also sets the ADS_UF_ACCOUNTDISABLE flag of the Active Directory User Account Control (UAC) attribute. Possible values for this parameter include: $false or 0 $true or 1 The following example shows how to set this parameter to enable the account. -Enabled $true QUESTION 258 Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012 R2. The domain contains a user named User1 and a global security group named Group1. You reconfigure DC2 as a member server in the domain. You need to add DC2 as the first domain controller in a new domain in the forest. Which cmdlet should you run? A.    Add-AdPrincipalGroupMembership B.    Install-AddsDomainController C.    Install WindowsFeature D.    Install AddsDomain E.    Rename-AdObject F.    Set-AdAccountControl G.    Set-AdGroup H.    Set-User Answer: D Explanation: http://technet.microsoft.com/en-us/library/hh974722.aspx QUESTION 259 Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed. You create an external virtual switch named Switch1. Switch1 has the following configurations: - Connection type: External network - Single-root I/O visualization (SR-IOV): Enabled - Ten virtual machines connect to Switch1. You need to ensure that all of the virtual machines that connect to Switch1 are isolated from the external network and can connect to each other only. The solution must minimize network downtime for the virtual machines. What should you do? A.    Change the Connection type of Switch1 to Internal network. B.    Change the Connection type of Switch1 to Private network. C.    Remove Switch1 and recreate Switch1 as an internal network. D.    Remove Switch1 and recreate Switch1 as a private network. Answer: D Explanation: Original answer is B. But the correct answer is D. You cannot change the type of vswitch from external to private when SR-IOV is enabled at vswitch creation -> you need to recreate the vswitch. QUESTION 260 You have a Hyper-V host named Server1 that runs Windows Server 2012 R2. Server1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2. VM1 has several snapshots. You need to modify the snapshot file location of VM1. What should you do? A.    Right-click VM1, and then click Export... B.    Modify the Hyper-V settings. C.    Delete the existing snapshots, and then modify the settings of VM1. D.    Shut down VM1, and then modify the settings of VM1. Answer: C In order for snapshot file location to be changed, all previous snapshots need to be deleted:     Passing Microsoft 70-410 Exam successfully in a short time! Just using Braindump2go's Latest Microsoft 70-410 Dump: http://www.braindump2go.com/70-410.html --------------------------------------------------- Images: http://examgod.com/l2pimages/81e1d59efa0a_7768/clip_image00125_thumb.jpg http://examgod.com/l2pimages/81e1d59efa0a_7768/clip_image00212_thumb.jpg http://examgod.com/l2pimages/81e1d59efa0a_7768/clip_image00127_thumb.jpg http://examgod.com/l2pimages/81e1d59efa0a_7768/clip_image00129_thumb.jpg http://examgod.com/l2pimages/81e1d59efa0a_7768/clip_image00214_thumb.jpg http://examgod.com/l2pimages/81e1d59efa0a_7768/clip_image00131_thumb.jpg http://examgod.com/l2pimages/81e1d59efa0a_7768/clip_image00216_thumb.jpg --------------------------------------------------- --------------------------------------------------- Post date: 2014-05-27 01:40:29 Post date GMT: 2014-05-27 01:40:29 Post modified date: 2014-05-27 01:40:29 Post modified date GMT: 2014-05-27 01:40:29 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com