70-413 Exam - Designing and Implementing a Server Infrastructure

certleader.com

Q1. - (Topic 8) 

Your company has two divisions named Division1 and Division2. 

The network contains an Active Directory domain named contoso.com. The domain contains two child domains named divisionl.contoso.com and division2.contoso.com. 

The company sells Division1 to another company. 

You need to prevent administrators in contoso.com and division2.contoso.com from gaining administrative access to the resources in divisionl.contoso.com. 

What should you recommend? 

A. Create a new tree in the forest named contoso.secure. Migrate the resources and the accounts in divisionl.contoso.com to contoso.secure. 

B. On the domain controller accounts in divisionl.contoso.com, deny the Enterprise Admins group the Allowed to Authenticate permission. 

C. Create a new forest and migrate the resources and the accounts in divisionl.contoso.com to the new forest. 

D. In divisionl.contoso.com, remove the Enterprise Admins group from the Domain Admins group and remove the Enterprise Admins group from the access control list (ACL) on the divisionl.contoso.com domain object. 

Answer:

Q2. - (Topic 2) 

You need to recommend a solution for the remote access servers. What should you include in the recommendation? 

A. Network address translation (NAT) 

B. Logging levels 

C. Packet filtering 

D. Packet tracing 

Answer:

Explanation: * Scenario: The remote access servers must be able to restrict outgoing traffic based on IP addresses. 

* Network address translation (NAT) allows you to share a connection to the public Internet through a single interface with a single public IP address. The computers on the private network use private, non-routable addresses. NAT maps the private addresses to the public address. 

Q3. - (Topic 7) 

A company has offices in multiple geographic locations. The sites have high-latency, low-bandwidth connections. You need to implement a multisite Windows Deployment Services (WDS) topology for deploying standard client device images to all sites. 

Solution: At each site, you deploy a local WDS server that runs only the Transport role. You configure local DHCP servers to direct local clients to the local WDS server. 

Does this meet the goal? 

A. Yes 

B. No 

Answer:

Reference: Windows Deployment Services Getting Started Guide for Windows Server 2012 

Q4. - (Topic 8) 

Your company has a main office that contains several servers and several users. The main office contains a file server named Server1 that runs Windows Server 2012. 

The users access a large report file that is created on Server1 each day. 

The company plans to open a new branch office. The branch office will contain only client computers. 

You need to implement a solution to reduce the amount of bandwidth used by the client computers in the branch office to download the report each day. 

What should you do? 

More than one answer choice may achieve the goal. Select the BEST answer. 

A. Install the BranchCache for network files role service on Server1. Configure the client computers to use BranchCache in hosted cache mode. 

B. Configure the offline settings of the shared folder that contains the report. 

C. Install the BranchCache for network files role service on Server1. Configure the client computers to use Branchcache in distributed mode. 

D. Enable the Background Intelligent Transfer Service (BITS) feature on Server1 and on each client computer in the branch office. Move the report to a web folder. 

Answer:

Explanation: 

Distributed cache mode. In this mode, branch office client computers download content from the content servers in the main office and then cache the content for other computers in the same branch office. 

Distributed cache mode does not require a server computer in the branch office. Reference: BranchCache Deployment Guide 

Q5. - (Topic 8) 

A new company registers the domain name of contoso.com. The company has a web presence on the Internet. All Internet resources have names that use a DNS suffix of contoso.com. 

A third-party hosts the Internet resources and is responsible for managing the contoso.com DNS zone on the Internet. The zone contains several hundred records. 

The company plans to deploy an Active Directory forest. 

You need to recommend an Active Directory forest infrastructure to meet the following requirements: 

. Ensure that users on the internal network can resolve the names of the company's Internet resources. 

. Minimize the amount of administrative effort associated with the addition of new Internet servers. 

What should you recommend? 

A. A forest that contains a single domain named contoso.local 

B. A forest that contains a root domain named contoso.com and another domain named contoso.local 

C. A forest that contains a root domain named contoso.com and another domain named ad.contoso.com 

D. A forest that contains a single domain named contoso.com 

Answer:

Explanation: Rules for Selecting a Prefix for a Registered DNS Name 

Select a prefix that is not likely to become outdated. 

Avoid names such as a business line or operating system that might change in the future. 

Generic names such as corp or ds are recommended. 

Incorrect: 

not A, not B: Using single label names or unregistered suffixes, such as .local, is not 

recommended. 

Q6. - (Topic 8) 

Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the DHCP Server server role installed. 

All of the client computers that are in a subnet named Subnet1 receive their IP address configurations from Server1. 

You plan to add another DHCP server named Server2 to Subnet1. 

You need to recommend changes to the DHCP infrastructure to ensure that the client computers continue to receive IP addressing information if a single DHCP server fails. 

What should you do? 

More than one answer choice may achieve the goal. Select the BEST answer. 

A. Create a Network Load Balancing (NLB) cluster. 

B. Configure Failover for the scope. 

C. Create a DHCP failover cluster. 

D. Create a split scope. 

Answer:

Explanation: 

One of the great features in Windows Server 2012 R2 is the DHCP failover for Microsoft DHCP scopes. Failover is where the environment suffers an outage of a service which triggers the failover of that service function to a secondary server or site. The assumption for most failover configurations is that the primary server is completely unavailable. 

Q7. - (Topic 8) 

Your company has a main office and a branch office. 

The network contains an Active Directory domain named contoso.com. The domain contains three domain controllers. The domain controllers are configured as shown in the following table. 

The domain contains two global groups. The groups are configured as shown in the following table. 

You need to ensure that the RODC is configured to meet the following requirements: 

. Cache passwords for all of the members of Branch1Users. 

. Prevent the caching of passwords for the members of Helpdesk. 

What should you do? 

A. Modify the membership of the Denied RODC Password Replication group. 

B. Install the BranchCache feature on RODC1. 

C. Modify the delegation settings of RODC1. 

D. Create a Password Settings object (PSO) for the Helpdesk group. 

Answer:

Explanation: Password Replication Policy Allowed and Denied lists 

Two new built-in groups are introduced in Windows Server 2008 Active Directory domains to support RODC operations. These are the Allowed RODC Password Replication Group and Denied RODC Password Replication Group. These groups help implement a default Allowed List and Denied List for the RODC Password Replication Policy. By default, the two groups are respectively added to the msDS-RevealOnDemandGroup and msDS-NeverRevealGroup Active Directory attributes. 

Reference: Password Replication Policy 

Q8. HOTSPOT - (Topic 4) 

You are evaluating the virtual machine environment. 

In the table below, identify which virtual machines currently support ODX and which virtual machines require a configuration change to support ODX. Make only one selection in each row. 

Answer:  

Q9. - (Topic 7) 

You need to limit the amount of disk space that is used on the client devices. 

Which Windows PowerShell cmdlet or cmdlets should you run? 

A. Add-BCDataCacheExtcnsion 

B. Set-BCDataCacheEntryMaxAge 

C. Disable-BC and Enablc-BCLocal 

D. Set-BCCache 

E. Clear-BCCache 

Answer:

Explanation: 

Scenario: File shares 

Each branch office connects to the New York data center to retrieve file shares. 

BranchCache distributed mode is enabled in each branch office. The cache on each client 

computer must be a single file. 

Reference: Set-BCCache 

Q10. - (Topic 1) 

You are evaluating the implementation of data deduplication on the planned Windows Server 2012 file servers. 

The planned servers will have the identical disk configurations as the current servers. 

You need to identify which volumes can be enabled for data deduplication. 

Which volumes should you identify? (Each correct answer presents part of the solution. Choose all that apply.) 

A. C 

B. D 

C. E 

D. The CSV 

E. DATA 

Answer: C,E 

Explanation: 

* Scenario: A mounted virtual hard disk (VHD) named DATA that is formatted NTFS A simple volume named E that is formatted NTFS * It slices, it dices, and it cleans your floors! Well, the Data Deduplication feature doesn't do everything in this version. It is only available in certain Windows Server 2012 editions and has some limitations. Deduplication was built for NTFS data volumes and it does not support boot or system drives and cannot be used with Cluster Shared Volumes (CSV). We don't support deduplicating live VMs or running SQL databases. See how to determine which volumes are candidates for deduplication on Technet.