Lead2pass give latest exam questions for 70-411 lab certification and because of that, all of our candidates pass 70-411 certification without any problem. The biggest feature is the regular update of these latest exam questions, which keeps our candidates’ knowledge up to date and ensures their success.

QUESTION 71
Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8.1.
The network contains a shared folder named FinancialData that contains five files.
You need to ensure that the FinancialData folder and its contents are copied to all of the client computers.
Which two Group Policy preferences should you configure?
(Each correct answer presents part of the solution. Choose two.)

A.    Shortcuts
B.    Network Shares
C.    Environment
D.    Folders
E.    Files

Answer: DE

QUESTION 72
Your network contains an Active Directory domain named contoso.com. The domain contains three servers. The servers are configured as shown in the following table.

You need to ensure that end-to-end encryption is used between clients and Server2 when the clients connect to the network by using DirectAccess.
Which two actions should you perform?
(Each correct answer presents part of the solution.
Choose two.)

A.    From the Remote Access Management Console, reload the configuration.
B.    Add Server2 to a security group in Active Directory.
C.    Restart the IPSec Policy Agent service on Server2.
D.    From the Remote Access Management Console, modify the Infrastructure Servers settings.
E.    From the Remote Access Management Console, modify the Application Servers settings.

Answer: BE

QUESTION 73
Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2003, Windows Server 2008 R2, or Windows Server 2012 R2.
A support technician accidentally deletes a user account named User1.
You need to use tombstone reanimation to restore the User1 account.
Which tool should you use?

A.    Ntdsutil
B.    Ldp
C.    Esentutl
D.    Active Directory Administrative Center

Answer: B

QUESTION 74
Your network contains an Active Directory domain named contoso.com.
You need to install and configure the Web Application Proxy role service.
What should you do?

A.    Install the Active Directory Federation Services server role and the Remote Access server role on different servers.
B.    Install the Active Directory Federation Services server role and the Remote Access server role on the same server.
C.    Install the Web Server (IIS) server role and the Application Server server role on the same server.
D.    Install the Web Server (IIS) server role and the Application Server server role on different servers.

Answer: A

QUESTION 75
Your network contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1.
You run ntdsutil {as shown in the exhibit}.
You need to ensure that you can access the contents of the mounted snapshot.
What should you do?

A.    From a command prompt, run dsamain.exe -dbpath c:\$snap_201204131056_volumec$\windows\ntds \ntds.dit – Idapport 33389.
B.    From a command prompt, run dsamain.exe -dbpath c:\$snap_201204131056_volumec$\windows\ntds \ntds.dit – Idapport 389.
C.    From the snapshot context of ntdsutil, run activate instance “NTDS”.
D.    From the snapshot context of ntdsutil, run mount (79f94f82-5926-4f44-8af0-2f56d827a57d).

Answer: A

 

QUESTION 76
Your network contains an Active Directory domain named contoso.com. The domain contains a read-only domain controller (RODC) named RODC1.
You create a global group named RODC_Admins.
You need to provide the members of RODC_Admins with the ability to manage the hardware and the software on R0DC1. The solution must not provide RODC_Admins with the ability to manage Active Directory objects.
What should you do?

A.    From Active Directory Site and Services, configure the Security settings of the RODC1 server object.
B.    From Windows PowerShell, run the Set-ADAccountControlcmdlet.
C.    From a command prompt, run the dsmgmt local roles command.
D.    From Active Directory Users and Computers, configure the Member Of settings of the RODC1 account.

Answer: C

QUESTION 77
You have a server named Server1 that has the Web Server (IIS) server role installed.
You obtain a Web Server certificate.
You need to configure a website on Server1 to use Secure Sockets Layer (SSL).
To which store should you import the certificate?

Answer:

QUESTION 78
Your network contains an Active Directory domain named contoso.com.
You create a user account named User1.
The properties of User1 are shown in the exhibit. (Click the Exhibit button.)
You plan to use the User1 account as a service account. The service will forward authentication requests to other servers.
You need to ensure that you can view the Delegation tab from the properties of the User1 account.
What should you do first?

A.    Modify the Security settings of User1.
B.    Modify the user principal name (UPN) of User1.
C.    Configure a Service Principal Name (SPN) for User1.
D.    Configure the Name Mappings of User1.

Answer: C

QUESTION 79
Your network contains an Active Directory domain named contoso.com.
All domain controllers run Windows Server 2012 R2. On all of the domain controllers, Windows is installed in C:\Windows and the Active Directory database is located in D:\Windows\NTDS\. All of the domain controllers have a third-party application installed. The operating system fails to recognize that the application is compatible with domain controller cloning.
You verify with the application vendor that the application supports domain controller cloning.
You need to prepare a domain controller for cloning.
What should you do?

A.    In D:\Windows\NTDS\, create an XML file named DCCloneConfig.xml and add the application information to the file.
B.    In D:\Windows\NTDS\, create an XML file named CustomDCCloneAllowList.xml and add the application information to the file.
C.    In the root of a USB flash drive, add the application information to an XML file named DefaultDCCloneAllowList.xml.
D.    In D:\Windows\NTDS, create an XML file named DefaultDCCloneAllowList.xml and add the applicationinformation to the file.

Answer: B

QUESTION 80
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. On all of the domain controllers, Windows is installed in C:\Windows and the Active Directory database is located in D:\Windows\NTDS\. All of the domain controllers have a third-party application installed. The operating system fails to recognize that the application is compatible with domain controller cloning.
You verify with the application vendor that the application supports domain controller cloning.
You need to prepare a domain controller for cloning.
What should you do?

A.    In the root of a USB flash drive, add the application information to an XML file named DefaultDCCloneAllowList.xml.
B.    In C:\Windows\system32\sysprep\actionfiles\, add the application information to an XML file named Specialize .xml.
C.    In D:\Windows\NTDS\, create an XML file named CustomDCCloneAllowList.xml and add the application information to the file.
D.    In C:\Windows\system32\sysprep\actionfiles\add the application information to an XML file named Respecialize .xml.

Answer: C

Microsoft 70-411 learning programs are the most accepted certification in the present era and its entire module is extremely valued by many IT organizations and for 70-411 simulations experts there is a very huge chance of getting a job in Microsoft IT fields. Many candidates attempt for 70-411 answers guides whereas most of them face the problem of unavailability of quality in training matters. Luckily for all the Microsoft 70-411 experts, Lead2pass is now here to help you with your IT certification problems, as we are the best 70-411 actual tests exam questions training material providing vendor.

www.lead2pass.com/70-411.html