Online Access Free 070-414 Exam Questions

You network contains an Active Directory domain named adatum.com. The network has an Active Directory Certificate Services (AD CS) infrastructure.
You need to issue a certificate to users to meet the following requirements:
* Ensure that the users can encrypt files by using Encrypting File System (EFS).
* Ensure that the default key length is 4096 bits for all users.
* Ensure that the domain administrator can recover EFS encrypted files.
What should you do first?

• A.Create a copy of the basic EFS certificate template, and then modify the key length of the copy.
• B.From the properties of the EFS Recovery Agent certificate template, assign the Allow-Enroll permission to the Domain Admins group.
• C.From the properties of the Basic EFS template, assign the Full Control permission to the Domain Admins group.
• D.Create a copy of the Key Recovery Agent certificate template, and then modify the permissions of the copy.

Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2012 R2. The forest contains two servers.
The servers are configured as shown in the following table.

You prepare the forest to support Workplace Join and you enable the Device Registration Service (DRS) on Server1.
You need to ensure that Workplace Join meets the following requirements:
* Application access must be based on device claims.
* Users who attempt to join their device to the workplace through Server2 must be prevented from locking out their Active Directory account due to invalid credentials.
Which cmdlet should you run to achieve each requirement? To answer, select the cmdlet for each requirement in the answer area.

Correct Answer:

Explanation

Your network contains an Active Directory domain named Adatum.com. All servers run Windows Server
2012.
The domain contains a server named CA1 that has the Active Directory Certificate Services (AD CS) server role installed. CA1 is configured as a standalone root certification authority (CA).
You have a server named Web1 that has the Web Server (IIS) server role installed. You publish the certificate revocation list (CRL) from CA1 to Web1.
You are creating a disaster recovery plan for CA1.
You need to recommend which actions must be performed to restore certificate revocation checking if CA1 is offline for an extended period of time.
Which three actions should you recommend? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation

References:
https://blogs.technet.microsoft.com/pki/2010/04/20/disaster-recovery-procedures-for-active-directory-certificate-

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server
2012 R2. The network contains a System Center 2012 R2 Data Protection Manager (DPM) deployment.
The domain contains six servers. The servers are configured as shown in the following table.

You install System Center 2012 R2 Virtual Machine Manager (VMM) on the nodes in Cluster2.
You configure VMM to use a database in Cluster1. Server5 is the first node in the cluster.
You need to back up the VMM encryption key.
What should you back up?

• A.a system state backup of Server5
• B.a full system backup of Server6
• C.a full system backup of Server3
• D.a system state backup of Server2

You have a server named Server1 that runs Windows Server 2012 R2. You plan to enable Hyper-V Network Virtualization on Server1. You need to install the Windows Network Virtualization Filter Driver on Server1.
Which Windows PowerShell cmdlet should you run?

• A.Set-NetVirtualizationGlobal
• B.Add - WindowsFeature
• C.Set-NetAdapterVmq
• D.Enable-NetAdapterBinding