Online Access Free 70-411 Exam Questions

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2012 R2.
You enable the EventLog-Application event trace session.
You need to set the maximum size of the log file used by the trace session to 10 MB.
From which tab should you perform the configuration? To answer, select the appropriate tab in the answer area.

Correct Answer:

Explanation:
Note: By default, logging stops only if you set an expiration date as part of the logging schedule.
Using the options on the Stop Condition tab, you can configure the log file to stop automatically after a specified period of time, such as seven days, or when the log file is full (if you've set a maximum size limit).
Reference: http: //technet. microsoft. com/en-us/magazine/ff458614. aspx

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.
You configure a quota threshold as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that a user named User1 receives an email notification when the threshold is exceeded.
What should you do?

• A.Configure the File Server Resource Manager Options.
• B.Create a performance counter alert.
• C.Create a classification rule.
• D.Modify the members of the Performance Log Users group.

Your network contains an Active Directory domain named contoso.com. All domain controllers in the domain are configured as shown in the following table.

You deploy a new domain controller named DC3 that runs Windows Server 2012 R2.
You discover that you cannot create Password Settings objects (PSOs) by using Active Directory Administrative Center.
You need to ensure that you can create PSOs from Active Directory Administrative Center.
What should you do?

• A.Transfer the infrastructure master operations master role.
• B.Upgrade DC1.
• C.Transfer the PDC emulator operations master role.
• D.Raise the functional level of the domain.

HOTSPOT
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Access server role installed.
You need to configure the ports on Server1 to ensure that client computers can establish VPN connections to Server1. The solution must NOT require the use of certificates or pre-shared keys.
What should you modify?
To answer, select the appropriate object in the answer area.

Correct Answer:

The four types of tunneling protocols used with a VPN/RAS server running on Windows Server 2012 include:
Point-to-Point Tunneling Protocol (PPTP): A VPN protocol based on the legacy Point-to-Point protocol used with modems. The PPTP specification does not describeencryption or authentication features and relies on the Point-to-Point Protocol being tunneled to implement security functionality.
Layer 2 Tunneling Protocol (L2TP): Used with IPsec to provide security. L2TP supports either computer certificates or a preshared key as the authentication method for IPsec.
IKEv2: IKE is short for Internet Key Exchange, which is a tunneling protocol that uses IPsec Tunnel Mode protocol. The message is encrypted with one of the following protocols by using encryption keys that are generated from the IKEv2 negotiation process.
Secure Socket Tunneling Protocol (SSTP): Introduced with Windows Server 2008, which uses the HTTPS protocol over TCP port 443 to pass traffic through firewalls References:
http://en.wikipedia.org/wiki/Point-to-Point_Tunneling_Protocol

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.
An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8 Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1.
You make a change to GPO1.
You need to force all of the computers in OU1 to refresh their Group Policy settings immediately. The solution must minimize administrative effort.
Which tool should you use?

• A.Group Policy Object Editor
• B.Server Manager
• C.The Secedit command
• D.The Invoke-GpUpdate cmdlet