70-410 Exam - Installing and Configuring Windows Server 2012

certleader.com

P.S. Vivid 70-410 testing software are available on Google Drive, GET MORE: https://drive.google.com/open?id=1kvP726ODa9zZg32kCD3kLoR5Zt7aQQnX


New Microsoft 70-410 Exam Dumps Collection (Question 12 - Question 21)

New Questions 12

Your network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server1that runs Windows Server 2012 R2.

You create a DHCP scope named Scope1. The scope has a start address of 192168.1.10, an end address of 192.168.1.50, and a subnet mask of 255.255.255.192.

You need to ensure that Scope1 has a subnet mask of 255.255.255.0. What should you do first?

A. From Windows PowerShell, run the Remove-DhcpServerv4PolicyIPRange cmdlet.

B. From the DHCP console, modify the Scope Options of Scope1.

C. From Windows PowerShell, run the Remove-DhcpServerv4Scope cmdlet.

D. From Windows PowerShell, run the Set-DhcpServerv4Scope cmdlet.

Answer: C

Explanation:

u2711 Set-DhcpServerv4Scope

Sets the properties of an existing IPv4 scope on the Dynamic Host Configuration Protocol (DHCP) server service.

u2711 Syntax:

Parameter Set: WithoutRange

Set-DhcpServerv4Scope [-ScopeId] <IPAddress> [-ActivatePolicies <Boolean> ] [-AsJob] [- CimSession <CimSession[]> ] [-ComputerName <String> ] [-Delay <UInt16> ] [-Description

<String> ] [-LeaseDuration <TimeSpan> ] [-MaxBootpClients <UInt32> ] [-Name <String> ] [-NapEnable <Boolean> ] [-NapProfile <String> ] [-PassThru] [-State <String> ] [- SuperscopeName <String> ] [-ThrottleLimit <Int32> ] [-Type <String> ] [-Confirm] [-WhatIf] [

<CommonParameters>] Parameter Set: WithRange

Set-DhcpServerv4Scope [-ScopeId] <IPAddress> -EndRange <IPAddress> -StartRange

<IPAddress> [-ActivatePolicies <Boolean> ] [-AsJob] [-CimSession <CimSession[]> ] [- ComputerName <String> ] [-Delay <UInt16> ] [-Description <String> ] [-LeaseDuration

<TimeSpan> ] [-MaxBootpClients <UInt32> ] [-Name <String> ] [-NapEnable <Boolean> ] [- NapProfile <String> ] [-PassThru] [-State <String> ] [-SuperscopeName <String> ] [- ThrottleLimit <Int32> ] [-Type <String> ] [-Confirm] [-WhatIf] [ <CommonParameters>]


New Questions 13

You have a server named Server1 that runs Windows Server 2012 R2. You plan to create an image of Server1.

You need to remove the source files for all server roles that are not installed on Server1. Which tool should you use?

A. servermanagercmd.exe

B. imagex.exe

C. ocsetup.exe

D. dism.exe

Answer: D

Explanation:

servermanagercmd.exe u2013 The ServerManagerCmd.exe command-line tool has been deprecated in

Windows Server 2008 R2. imagex.exe u2013 ImageX is a command-line tool in Windows Vista

that you can use to create and manage Windows image (.wim) files. A .wim file contains one or more volume images, disk volumes that contain images of an installed Windows operating system. dism.exe u2013 Deployment Image Servicing and Management (DISM.exe) is a command-line tool that can be used to service a Windows image or to prepare a Windows Preinstallation Environment (Windows PE) image. It replaces Package Manager (Pkgmgr.exe), PEimg, and Intlcfg that were included in Windows Vista.

The functionality that was included in these tools is now consolidated in one tool (DISM.exe), and new functionality has been added to improve the experience for offline servicing. DISM can Add, remove, and enumerate packages. ocsetup.exe u2013 The Ocsetup.exe tool is used as a wrapper for Package Manager (Pkgmgr.exe) and for Windows Installer (Msiexec.exe). Ocsetup.exe is a command-line utility that can be used to perform scripted installs and scripted uninstalls of Windows optional components. The Ocsetup.exe tool replaces the Sysocmgr.exe tool that Windows XP and Windows Server 2003i use.

The Dism utility can be used to create and mount an image of Server1. References:

http://technet.microsoft.com/en-us/library/cc749447(v=ws.10).aspx

http://technet.microsoft.com/en-us/library/dd744382(v=ws.10).aspx

Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 2: Deploying Servers, p. 44

Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Chapter 1: Installing and Configuring Servers, p. 19-22


New Questions 14

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed.

On Server1, you create a virtual machine named VM1.

When you try to add a RemoteFX 3D Video Adapter to VM1, you discover that the option is unavailable as shown in the following exhibit. (Click the Exhibit button.)

You need to add the RemoteFX 3D Video Adapter to VM1. What should you do first?

A. On Server1, run the Add-VMRemoteFx3dVideoAdapter cmdlet

B. On Server1, install the Media Foundation feature.

C. On Server1, run the Enable-VMRemoteFxPhysicalVideoAdaptercmdlet.

D. On Server1, install the Remote Desktop Visualization Host (RD Visualization Host) role service.

Answer: D

Explanation:

Remote Desktop services are not available in server core installation; you need to add the role.

References:

Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2, Chapter 1:

Installing and Configuring servers, Objective 1.2: Configure servers, p. 19 http://technet.microsoft.com/en-us/library/hh848506(v=wps.620).aspx http://technet.microsoft.com/en-us/library/hh848520(v=wps.620).aspx http://technet.microsoft.com/en-us/library/ff817586(v=ws.10).aspx


New Questions 15

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Server1 runs Windows Server 2012 R2. Server2 runs Windows Server 2008 R2 Service Pack 1 (SP1) and has the DHCP Server

server role installed.

You need to manage DHCP on Server2 by using the DHCP console on Server1. What should you do first?

A. From Windows Firewall with Advanced Security on Server2, create an inbound rule.

B. From Internet Explorer on Server2, download and install Windows Management Framework 3.0.

C. From Server Manager on Server1, install a feature.

D. From Windows PowerShell on Server2, run Enable PSRemoting.

Answer: C

Explanation:

The Enable-PSRemoting cmdlet configures the computer to receive Windows PowerShell remote commands that are sent by using the WS-Management technology. On Windows Server 2012 R2, Windows PowerShell remoting is enabled by default. You can use Enable- PSRemoting to enable Windows PowerShell remoting on other supported versions of Windows and to re-enable remoting on Windows Server 2012 if it becomes disabled. You need to run this command only once on each computer that will receive commands. You do not need to run it on computers that only send commands. Because the configuration activates listeners, it is prudent to run it only where it is needed.

Note: (not B) You can use Server Manager to manage remote servers that are running Windows Server 2008 and Windows Server 2008 R2, but the following updates are required to fully manage these older operating systems.


New Questions 16

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 installed.

Contoso.com has a server, named ENSUREPASS-SR07, which has the AD DS, DHCP, and DNS server roles installed. Contoso.com also has a server, named ENSUREPASS- SR08, which has the DHCP, and Remote Access server roles installed. You have configured a server, which has the File and Storage Services server role installed, to automatically acquire an IP address.

The server is named ENSUREPASS-SR09. You then create a filter on ENSUREPASS- SR07.

Which of the following is a reason for this configuration?

A. To make sure that ENSUREPASS-SR07 issues ENSUREPASS-SR09 an IP address.

B. To make sure that ENSUREPASS-SR07 does not issue ENSUREPASS-SR09 an IP address.

C. To make sure that ENSUREPASS-SR09 acquires a constant IP address from ENSUREPASS-SR08 only.

D. To make sure that ENSUREPASS-SR09 is configured with a static IP address.

Answer: B


New Questions 17

You have a server named Server2 that runs Windows Server 2012 R2. Server2 has the Hyper-V server role installed.

The disks on Server2 are configured as shown in the exhibit. (Click the Exhibit button.)

You create a virtual machine on Server2 named VM1.

You need to ensure that you can configure a pass-through disk for VM1. What should you do?

A. Convert Disk 1 to a basic disk.

B. Take Disk 1 offline.

C. Create a partition on Disk 1.

D. Convert Disk 1 to a MBR disk.

Answer: B

Explanation:

Pass-through Disk Configuration

Hyper-V allows virtual machines to access storage mapped directly to the Hyper-V server without requiring the volume be configured. The storage can either be a physical disk internal to the Hyper-V server or it can be a Storage Area Network (SAN) Logical Unit (LUN) mapped to the Hyper-V server. To ensure the Guest has exclusive access to the storage, it must be placed in an Offline state from the Hyper-V server perspective


New Questions 18

Your company has a remote office that contains 1,600 client computers on a single subnet.

You need to select a subnet mask for the network that will support all of the client computers. The solution must minimize the number of unused addresses. Which subnet mask should you select?

A. 255.255.248.0

B. 255.255.252.0

C. 255.255.254.0

D. 255.255.240.0

Answer: A


New Questions 19

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have Windows Server 2012 R2 installed.

You have configured a server, named ENSUREPASS-SR07, as a VPN server. You are required to configure new firewall rules for workstation connections.

You want to achieve this using the least amount of administrative effort. Which of the following actions should you take?

A. You should consider making use of the Enable-NetFirewallRule cmdlet.

B. You should consider making use of the New-NetFirewallRule cmdlet.

C. You should consider making use of dism.exe from the command prompt.

D. You should consider making use of dsadd.exe from the command prompt.

Answer: B

Explanation:

New-NetFirewallRule u2013 Creates a new inbound or outbound firewall rule and adds the rule to the target computer.

You canu2021t Enable what doesnu2021t exist yet, you must use New-NetFirewallRule


New Questions 20

Your network contains an Active Directory domain named contoso.com. The network contains a member server named Server1 that runs Windows Server 2012 R2. Server1 has the DNS Server server role installed and has a primary zone for contoso.com.

The Active Directory domain contains 500 client computers. There are an additional 20 computers in a workgroup.

You discover that every client computer on the network can add its record to the contoso.com zone.

You need to ensure that only the client computers in the Active Directory domain can register records in the contoso.com zone.

What should you do first?

A. Move the contoso.com zone to a domain controller that is configured as a DNS server.

B. Configure the Dynamic updates settings of the contoso.com zone.

C. Sign the contoso.com zone by using DNSSEC

D. Configure the Security settings of the contoso.com zone.

Answer: A

Explanation:

If you install DNS server on a non-DC, then you are not able to create AD-integrated zones. DNS update security is available only for zones that are integrated into AD DS. When you directory- integrate a zone, access control list (ACL) editing features are available in DNS Managerso that you can add or remove users or groups from the ACL for a specified zone or resource record.

1. Active Directoryu2021s DNS Domain Name is NOT a single label name (u201cDOMAINu201d vs. the minimal requirement ofu201ddomain.com.u201d u201cdomain.localu201d, etc.).

2. The Primary DNS Suffix MUST match the zone name that is allowing updates. Otherwise the client doesnu2021t know what zone name to register in. You can also have a different Conneciton Specific Suffix in addition to the Primary DNS Suffix to register into that zone as well.

3. AD/DNS zone MUST be configured to allow dynamic updates, whether Secure or Secure and Non-Secure. For client machines, if a client is not joined to the domain, and the zone is set to Secure, it will not register either.

4. You must ONLY use the DNS servers that host a copy of the AD zone name or have a

1. reference to get to them. Do not use your ISPu2021s, an external DNS address, your router as a DNS address, or any other DNS that does not have a copy of the AD zone. Internet resolution for your machines will be accomplished by the Rootservers (Root Hints), however itu2021s recommended to configure a forwarder for efficient Internet resolution.

5. The domain controller is multihomed (which means it has more than one unteamed, active NIC, more than one IP address, and/or RRAS is installed on the DC).

6. The DNS addresses configured in the clientu2021s IP properties must ONLY reference the DNS server(s) hosting the AD zone you want to update in. This means that you must NOT use an external DNS in any machineu2021s IP property in an AD environment. You canu2021t mix them either. Thatu2021s because of the way the DNS Client side resolver service works. Even if you mix up internal DNS and ISPu2021s DNS addresses, the resolver algorithm can still have trouble asking the

correct DNS server. It will ask the first one first. If it doesnu2021t get a response, it removes the first one from the eligible resolvers list and goes to the next in the list. It will not go back to the first one unless you restart the machine, restart the DNS Client service, or set a registry entry to cut the query TTL to 0. The rule is to ONLY use your internal DNS server(s) and configure a forwarder to your ISPu2021s DNS for efficient Internet resolution.

This is the reg entry to cut the query to 0 TTL:

The DNS Client service does not revert to using the first server. The Windows 2000 Domain Name System (DNS) Client service (DNS cache) follows a certain algorithm when it decides the order in which to use the DNS servers. http://support.microsoft.com/kb/286834

For more info, please read the following on the client side resolver service:

DNS, WINS NetBIOS & the Client Side Resolver, Browser Service, Disabling NetBIOS, Direct Hosted SMB (Direct SMB), If One DC is Down Does a Client logon to Another DC, and DNS Forwarders Algorithm if you have multiple forwarders. http://msmvps.com/blogs/acefekay/archive/2009/11/29/dns-wins-netbios-amp-the- clientside- resolverbrowserservice-disabling-netbios-direct-hosted-smb-directsmb-if-one- dc-isdown-does-a- client-logon-toanother-dcand-dns-forwarders-algorithm.aspx

7. For DHCP clients, DHCP Option 006 for the clients are set to the same DNS server.

8. If using DHCP, DHCP server must only be referencing the same exact DNS server(s) in its own IP properties in order for it to u2021forceu2021 (if you set that setting) registration into DNS. Otherwise, how would it know which DNS to send the reg data to?

9. If the AD DNS Domain name is a single label name, such as u201cEXAMPLEu201d, and not the proper format of u201dexample.comu201d and/or any child of that format, such as u201cchild1.example.comu201d, then we have a real big problem.

DNS will not allow registration into a single label domain name. This is for two reasons:

1. Itu2021s not the proper hierarchal format. DNS is hierarchal, but a single label name has no hierarchy. Itu2021s just a single name.

1. 2. Registration attempts cause major Internet queries to the Root servers. Why? Because it thinks the single label name, such as u201cEXAMPLEu201d, is a TLD (Top Level Domain), such as u201ccomu201d, u201cnetu201d, etc. It will now try to find what Root name server out there handles that TLD. In the end it comes back to itself and then attempts to register. Unfortunately it does NOT ask itself first for the mere reason it thinks itu2021s a TLD. (Quoted from Alan Woods, Microsoft, 2004):

u201cDue to this excessive Root query traffic, which ISC found from a study that discovered Microsoft DNS servers are causing excessive traffic because of single label names, Microsoft, being an internet friendly neighbor and wanting to stop this problem for their neighbors, stopped the ability to register into DNS with Windows 2000SP4, XP SP1, (especially XP, which cause lookup problems too), and Windows 2003. After all, DNS is hierarchal, so therefore why even allow single label DNS domain names?u201d The above also

*especially* applies to Windows Vista, 7, 2008, 2008 R2, and newer.

10. u2021Register this connectionu2021s addressu201d on the client is not enabled under the NICu2021s IP properties, DNS tab.

11. Maybe thereu2021s a GPO set to force Secure updates and the machine isnu2021t a joined member of the domain.

12. ON 2000, 2003 and XP, the u201cDHCP clientu201d Service not running. In 2008/Vista and newer, itu2021s the DNS Client Service. This is a requirement for DNS registration and DNS resolution even if the client is not actually using DHCP.

13. You can also configure DHCP to force register clients for you, as well as keep the DNS zone clean of old or duplicate entries. See the link I posted in my previous post.


New Questions 21

A laptop with server 2012 R2 OS, you need to ensure that server 2012 R2 can use wireless network adapter.

What should you do first?

A. use server manager to install the Wireless Lan Service Role

B. use server manager to install the Wireless Network Role

C. use server manager to install the Wireless Lan Service Feature

D. use server manager to install the Wireless Network Feature

Answer: C


100% Abreast of the times Microsoft 70-410 Questions & Answers shared by Examcollectionplus, Get HERE: https://www.examcollectionplus.net/vce-70-410/ (New 496 Q&As)