Online Access Free 070-413 Exam Questions

You are planning the implementation of two new servers that will be configured as RADIUS servers.
You need to recommend which configuration must be performed on the VPN servers. The solution must meet the technical requirements.
What should you do on each VPN server?

• A.Modify the authentication provider.
• B.Add a RADIUS client.
• C.Install the Health Registration Authority role service.
• D.Enable DirectAccess.

Your network contains an Active Directory domain named contoso.com.
On several organizational units (OUs), an administrator named Admin1 plans to delegate control of custom tasks. You need to ensure that Admin1 can delegate a custom task named Task1 by using the Delegation of Control Wizard.
What should you do?

• A.Configure a custom MMC console.
• B.Configure a new authorization store by using Authorization Manager.
• C.Modify the Delegwiz.inf file.
• D.Add a new class to the Active Directory schema.

You need to implement a solution for DNS replication.
Which cmdlets should you run?

• A.Set-DnsServerDnsSecZoneSetting and Invoke-DnsServerZoneSign
• B.Set-DnsServer and Invoke-DnsServerZoneSign
• C.UnRegister-DnsServerDirectoryPartition and Add-DnsServerForwarder
• D.ConvertTo-DnsServerPrimaryZone and Register-DnsServerDirectoryPartition

Your network contains an Active Directory forest named contoso.com. The forest is managed by using Microsoft System Center 2012.
Web developers must be able to use a self-service portal to request the deployment of virtual machines based on predefined templates. The requests must be approved by an administrator before the virtual machines are deployed.
You need to recommend a solution to deploy the virtual machines.
What should you include in the recommendation?
More than one answer choice may achieve the goal. Select the BEST answer.

• A.A Virtual Machine Manager (VMM) service template, an Operations Manager dashboard, and an Orchestrator runbook
• B.A Virtual Machine Manager (VMM) service template, a Service Manager service offering, and an Orchestrator runbook
• C.A Service Manager service offering, an Orchestrator runbook, and Configuration Managerpackages
• D.A Service Manager service offering, an Orchestrator runbook, and an Operations Manager dashboard

HOT SPOT
Your network contains an Active Directory domain named contoso.com. The domain contains four servers. The servers are configured as shown in the following table.

You plan to provide users with the ability to use Workplace Join for their personal device when they connect to the internal network.
You need to recommend a certificate configuration for the planned deployment.
What should you include in the recommendation? To answer, select the appropriate names in the answer area.

Correct Answer:

Box 1, Box 2: Server3.contoso.com
Workplace Join client devices will attempt to discover the Device Registration Server by combining the user account name with a well-known Device Registration server name. This would be the AD FS server name, which is Server3.contoso.com here.
Note: For the Workplace Join client to discover the Device Registration server using a well-known DNS CNAME record, AD FS must be configured with a server SSL certificate that includes the well-known Device Registration server names Box 3: Enterpriseregistration.contoso.com You must create a DNS CNAME record that points to the A record associated with your AD FS farm. The CNAME record must use the well-known prefix EnterpriseRegistration followed by the UPN suffix used by the user accounts at your organization.
Reference: Configuring Device Registration
https://technet.microsoft.com/en-us/library/dn614658.aspx