Online Access Free 070-414 Exam Questions

Your network contains an Active Directory domain named contoso.com.
Your company has an enterprise root certification authority (CA) named CA1.
You plan to deploy Active Directory Federation Services (AD FS) to a server named Server1.
The company purchases a Microsoft Office 365 subscription.
You plan to register the company's SMTP domain for Office 365 and to configure single sign-on for all users.
You need to identify which certificate is required for the planned deployment.
Which certificate should you identify?

• A.a server authentication certificate that is issued by a trusted third-party root CA and that contains the subject name serverl.contoso.com
• B.a server authentication certificate that is issued by CA1 and that contains the subject name Server1
• C.a self-signed server authentication certificate for server1.contoso.com
• D.a server authentication certificate that is issued by a trusted third-party root CA and that contains the subject name Server1

Your network contains an Active Directory domain named Adatum.com. All servers run Windows Server
2012.
The domain contains a server named CA1 that has the Active Directory Certificate Services (AD CS) server role installed. CA1 is configured as a standalone root certification authority (CA).
You have a server named Web1 that has the Web Server (IIS) server role installed. You publish the certificate revocation list (CRL) from CA1 to Web1.
You are creating a disaster recovery plan for CA1.
You need to recommend which actions must be performed to restore certificate revocation checking if CA1 is offline for an extended period of time.
Which three actions should you recommend? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation

References:
https://blogs.technet.microsoft.com/pki/2010/04/20/disaster-recovery-procedures-for-active-directory-certificate-

Your network contains an Active Directory domain named contoso.com. You currently have an intranet web site that is hosted by two Web servers named Web1 and Web2. Web1 and Web2 run Windows Server 2012.
Users use the name intranet.contoso.com to request the web site and use DNS round robin.
You plan to implement the Network Load Balancing (NLB) feature on Web1 and Web2.
You need to recommend changes to the DNS records for the planned implementation.
What should you recommend?

• A.Delete both host (A) records named Intranet. Create a pointer (PTR) record for each Web server.
• B.Create one alias (CNAME) record named Intranet. Map the CNAME record to Intranet.
• C.Delete one of the host (A) records named Intranet. Modify the remaining host (A) record named Intranet.
• D.Create a new host (A) record named Intranet. Remove both host (A) records for Web1 and Web2.

What is the minimum number of certificate servers you need to deploy?

• A.3
• B.5
• C.2
• D.4

You need to recommend a monitoring solution for Northwind Traders.
What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

• A.Two Operations Manager management servers and three Operations Manager gateway servers
• B.Three Operations Manager management servers and two Operations Manager gateway servers
• C.One Operations Manager management server
• D.Five Operations Manager management servers