Online Access Free 70-410 Exam Questions

Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers.
The domain controllers are configured as shown in the following table.

In the perimeter network, you install a new server named Server1 that runs Windows Server 2012 R2. Server1 is in a workgroup.
You need to perform an offline domain join of Server1 to the contoso.com domain.
What should you do first?

• A.Run the dsadd.exe command.
• B.Transfer the PDC emulator role to Dc1.
• C.Transfer the infrastructure master role to DC1.
• D.Run the djoin.exe command.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2.
You create a group Managed Service Account named gservice1.
You need to configure a service named Service1 to run as the gservice1 account.
How should you configure Service1?

• A.From a command prompt, run sc.exe and specify the config parameter
• B.From the Services Console, configure the recovery settings
• C.From Windows PowerShell, run Set-Service and specify the -PassThrough parameter
• D.From a command prompt, run sc.exe and specify the sdset parameter

You work as an administrator at ABC.com. The ABC.com network consists of a single domain named ABC.com. All servers in the ABC.com domain, including domain controllers, have Windows Server 2012 R2 installed.
You have installed the DNS Server Role on an ABC.com server, named ABC-SR13. ABC.com's workstations make use of a web proxy to access the Internet, and refer to ABC-SR13 as a primary DNS server.
You have been instructed to make sure that Internet host names for ABC.com's workstations are not resolved by ABC-SR13.
Which of the following actions should you take?

• A.You should consider configuring a forward lookup zone on ENSUREPASS-SR13.
• B.You should consider configuring a primary zone on ENSUREPASS-SR13.
• C.You should consider configuring a secondary zone on ENSUREPASS-SR13.
• D.You should consider configuring a reverse lookup zone on ENSUREPASS-SR13.

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server
2012 R2. A server named Server1 is configured to encrypt all traffic by using IPSec.
You need to ensure that Server1 can respond to ping requests from computers that do not support IPSec.
What should you do?

• A.From a command prompt, run netsh set global autotuninglevel
  highlyrestrictedcongestionprovider=none.
• B.From Windows Firewall with Advanced Security, exempt ICMP from IPSec.
• C.From Windows Firewall with Advanced Security, allow unicast responses for the Domain Profile.
• D.From a command prompt, run netsh set global autotuninglevel = restricted congestionprovider = ctcp.

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server
2012 R2.
When a domain user named User3 attempts to log on to a client computer named Client10, User3 receives the message shown in the following exhibit. (Click the Exhibit button.)

You need to ensure that User3 can log on to Client10.
What should you do?

• A.From Active Directory Users and Computers, configure the Personal Virtual Desktop property of User3.
• B.From Active Directory Users and Computers, configure the Logon Workstations setting of User3.
• C.On Client10, modify the Deny log on locally User Rights Assignment.
• D.On Client10, modify the Allow log on locally User Rights Assignment.