Online Access Free 070-411 Exam Questions

DRAG DROP
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.
The domain contains an organizational unit (OU) named OU1. OU1 contains an OU named OU2. OU2 contains a user named user1.
User1 is the member of a group named Group1. Group1 is in the Users container.
You create five Group Policy objects (GPO). The GPOs are configured as shown in the following table.

The Authenticated Users group is assigned the default permissions to all of the GPOs.
There are no site-level GPOs.
You need to identify which three GPOs will be applied to User1 and in which order the GPOs will be applied to User1.
Which three GPOs should you identify in sequence? To answer, move the appropriate three GPOs from the list of GPOs to the answer area and arrange them in the correct order.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.
You enable and configure Routing and Remote Access (RRAS) on Server1.
You create a user account named User1.
You need to ensure that User1 can establish VPN connections to Server1.
What should you do?

• A.Add a RADIUS client.
• B.Modify the members of the Remote Management Users group.
• C.Create a connection request policy.
• D.Modify the Dial-in setting of User1.

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2.
You mount an Active Directory snapshot on DC1.
You need to expose the snapshot as an LDAP server.
Which tool should you use?

• A.ADSI Edit
• B.Ldp
• C.Ntdsutil
• D.Dsamain

Your network contains one Active Directory domain named controso.com. The domain contains a file server named Server01 that runs Windows Server 2012 R2. Server01 has an operating system drive and a data drive. Server01 has a Trusted Platform Module (TPM).
You need to enable BitLocker Drive Encryption (BitLocker) for the data drive on Server01.
Which cmdlet should you run first?

• A.Lock-Bitlocker
• B.Enable-WindowsOptionalFeature
• C.Enable- TPMAutoProvisioning
• D.Unblock-TPM

Your network contains an Active Directory domain named contoso.com. All domain controllers in the domain are configured as shown in the following table.

You deploy a new domain controller named DC3 that runs Windows Server 2012 R2.
You discover that you cannot create Password Settings objects (PSOs) by using Active Directory Administrative Center.
You need to ensure that you can create PSOs from Active Directory Administrative Center.
What should you do?

• A.Upgrade DC1.
• B.Raise the functional level of the domain.
• C.Transfer the infrastructure master operations master role.
• D.Transfer the PDC emulator operations master role.