[Download] 70-410 Microsoft exam 301-315 (Mar 2016)

Question No. 301

- (Topic 3) 

You install Windows Server 2012 R2 on a standalone server named Server1. You configure Server1 as a VPN server. 

You need to ensure that client computers can establish PPTP connections to Server1. 

Which two firewall rules should you create? (Each correct answer presents part of the solution. Choose two.) 

A. An inbound rule for protocol 47 

B. An outbound rule for protocol 47 

C. An inbound rule for TCP port 1723 

D. An inbound rule for TCP port 1701 

E. An outbound rule for TCP port 1723 

F. An outbound rule for TCP port 1701 

Answer: A,C 

Explanation: 

The following is a list of firewall ports which need to be opened for the various VPN tunnel 

protocols: 

For PPTP: 

IP Protocol=TCP, TCP Port number=1723 <- Used by PPTP control path 

IP Protocol=GRE (value 47) <- Used by PPTP data path 

For L2TP: 

IP Protocol Type=UDP, UDP Port Number=500 <- Used by IKEv1 (IPSec control path) 

IP Protocol Type=UDP, UDP Port Number=4500 <- Used by IKEv1 (IPSec control path) 

IP Protocol Type=ESP (value 50) <- Used by IPSec data path 

For SSTP: 

IP Protocol=TCP, TCP Port number=443 <- Used by SSTP control and data path 

For IKEv2: 

IP Protocol Type=UDP, UDP Port Number=500 <- Used by IKEv2 (IPSec control path) 

IP Protocol Type=UDP, UDP Port Number=4500 <- Used by IKEv2 (IPSec control path) 

IP Protocol Type=ESP (value 50) <- Used by IPSec data path 


Question No. 302

- (Topic 1) 

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012 R2. 

You log on to Server1. 

You need to retrieve a list of the active TCP connections on Server2. 

Which command should you run from Server1? 

A. winrm get server2 

B. netstat> server2 

C. dsquery * -scope base -attrip, server2 

D. winrs -r:server2 netstat 

Answer:

Explanation: 

This command line tool enables administrators to remotely execute most Cmd.exe commands using the WSManagement protocol. 



Question No. 303

- (Topic 3) 

Your company’s security policy states that all of the servers deployed to a branch office must not have the graphical user interface (GUI) installed. In a branch office, a support technician installs a server with a GUI installation of Windows Server 2012 on a new server, and then configures the server as a DHCP server. 

You need to ensure that the new server meets the security policy. You want to achieve this goal by using the minimum amount of Administrative effort. 

What should you do? 

A. Reinstall Windows Server 2012 on the server. 

B. From Windows PowerShell, run Uninstall-WindowsFeature Desktop-Experience. 

C. From Windows PowerShell, run Uninstall-WindowsFeature PowerShell-ISE. 

D. From Server Manager, uninstall the User Interfaces and Infrastructure feature. 

Answer:


Question No. 304

- (Topic 2) 

You have a server named dc2.contoso.com that runs Windows Server 2012 R2 and has the DNS Server server role installed. 

You open DNS Manager as shown in the exhibit. (Click the Exhibit button.) 


You need to view the DNS server cache from DNS Manager. 

What should you do first? 

A. From the View menu, click Filter... 

B. From the Action menu, click Configure a DNS Server... 

C. From the Action menu, click Properties. 

D. From the View menu, click Advanced. 

Answer:

Explanation: 

To view the contents of the DNS cache, perform the following steps: 

1. Start the Microsoft Management Console (MMC) DNS snap-in (Go to Start, Programs, Administrative Tools, and click DNS). 

2. From the View menu, select Advanced. 

3. Select the Cached Lookups tree node from the left-hand pane to display the top-level domains (e.g., com, net) under.(root). Expand any of these domains to view the cached DNS information (the actual records will appear in the right-hand pane). 

Navigating the DNS Manager console you should go to the View menu and click the Advanced tab. That will yield the DNS server cache. 

: http://technet.microsoft.com/en-us/library/ee683892%28v=WS.10%29.aspx 


Question No. 305

- (Topic 2) 

Your network contains a production Active Directory forest named contoso.com and a test Active Directory forest named contoso.test. A trust relationship does not exist between the forests. 

In the contoso.test domain, you create a backup of a Group Policy object (GPO) named GPO1. 

You transfer the backup of GPO1 to a domain controller in the contoso.com domain. 

You need to create a GPO in contoso.com based on the settings of GPO1.You must achieve this goal by using the minimum amount of Administrative effort. 

What should you do? 

A. From Windows PowerShell, run the Get- GPO cmdlet and the Copy- GPO cmdlet. 

B. From Windows PowerShell, run the New- GPO cmdlet and the Import- GPO cmdlet. 

C. From Group Policy Management, create a new starter GPO. Right-click the new starter GPO, and then click Restore from Backup. 

D. From Group Policy Management, right-click the Croup Policy Objects container, and then click Manage Backups. 

Answer:

Explanation: 

A. Copy-GPO requires domain trust / copy from one domain to another domain within the same forest. 

B. The Import-GPO cmdlet imports the settings from a GPO backup into a specified target GPO. The target GPO can be in a different domain or forest than that from which the backup was made and it does not have to exist prior to the operation. 

C. This would create a starter GPO, not a GPO. 

D: You can also restore GPOs. This operation takes a backed-up GPO and restores it to the same domain from rom the GPO’s original which it was backed up. You cannot restore a GPO from backup into a domain different f domain. The New-GPO cmdlet creates a new GPO with a specified name. By default, the newly created GPO is not linked to a site, domain, or organizational unit (OU). The Import-GPO cmdlet imports the settings from a GPO backup into a specified target GPO. The target GPO can be in a different domain or forest than that from which the backup was made and it does not have to exist prior to the operation. The Restore-GPO cmdlet restores a GPO backup to the original domain from which it was saved. If the original domain is not available, or if the GPO no longer exists in the domain, the cmdlet fails. 

Since the GPO’s original domain is different and there is no trust relationship between forests, you should execute the New-GPO command and import the already existing command into the ‘new’ domain. 


Question No. 306

- (Topic 3) 

Which of the following groups do you use to consolidate groups and accounts that either span multiple domains or the entire forest? 

A. Global 

B. Domain local 

C. Built-in 

D. Universal 

Answer:

Explanation: 

A. Incorrect: Global groups cannot contain users from other domains. 

B. Incorrect: Domain local groups cannot have permissions for resources in other domains. 

C. Incorrect: Built-in groups have no inherent cross-domain qualities. 

D. Correct: Universal groups, like global groups, are used to organize users according to their resource access needs. You can use them to organize users to facilitate access to any resource located in any domain in the forest through the use of domain local groups. Universal groups are used to consolidate groups and accounts that either span multiple domains or the entire forest. 


Question No. 307

- (Topic 3) 

You perform a Server Core Installation of Windows Server 2012 R2 on a server named Server1. 

You need to add a graphical user interface (GUI) to Server1. 

Which tool should you use? 

A. the dism.exe command 

B. the Add-WindowsFeature cmdlet 

C. the imagex.exe command 

D. the setup.exe command 

E. the ocsetup.exe command 

F. the Add-WindowsPackage cmdlet 

G. the Install-Module cmdlet 

H. the Install-RoleService cmdlet 

Answer: A,B 

Explanation: 

Add-WindowsFeature -The Add-WindowsFeature cmdlet allows you to install specified roles, role services, and features on a computer that is running Windows Server 2008 R2. Install-WindowsFeature -Installs one or more Windows Server roles, role services, or features on either the local or a specified remote server that is running Windows Server 2012 R2. This cmdlet is equivalent to and replaces Add-WindowsFeature, the cmdlet that was used to install roles, role services, and features in Windows Server 2008 R2. dism /online /get-features PS C:\> Install-WindowsFeature -Name Web-Server – IncludeAllSubFeature -ComputerName Server1 –WhatIf 


Question No. 308

HOTSPOT - (Topic 2) 

You have a server named DHCP1 that runs Windows Server 2012 R2. DHCP1 does not 

have access to the Internet. 

All roles are removed completely from DHCP1. 

You mount a Windows Server 2012 R2 installation image to the C:\Mount folder. 

You need to install the DHCP Server server role on DHCP1 by using Server Manager. 

Which folder should you specify as the alternate path for the source files? 

To answer, select the appropriate folder in the answer area. 


Answer: 



Question No. 309

- (Topic 3) 

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed. You need to log the amount of system resources used by each virtual machine. What should you do? 

A. From Windows PowerShell, run the Enable-VMResourceMetering cmdlet. 

B. From Windows System Resource Manager, enable Accounting. 

C. From Windows System Resource Manager, add a resource allocation policy. 

D. From Windows PowerShell, run the Measure-VM cmdlet. 

Answer:

Explanation: 

Enable-VMResourceMetering – The Enable-VMResourceMeteringcmdlet starts collecting 

resourceutilization data for a virtual machine or resource pool. 

Measure-VM – The Measure-VM cmdlet reports data on processor usage, memory usage, 

network traffic, and disk capacity for one or more virtual machines. 


Question No. 310

- (Topic 1) 

Your network contains an Active Directory forest. The forest functional level is Windows Server 2012 R2. The forest contains a single domain. The domain contains a member server named Server1. Server1 runs windows Server 2012 R2. 

You purchase a network scanner named Scanner1 that supports Web Services on Devices (WSD). 

You need to share the network scanner on Server1. 

Which server role should you install on Server1? 

A. Web Server (IIS) 

B. Fax Server 

C. Print and Document Services 

D. File and Storage Services 

Answer:

Explanation: 

The Print and Document Services role allows for the configuration to share printers, 

scanners and fax devices. 

References: 

Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2, Chapter 1: 

Installing and Configuring servers, Objective 1.2: Configure servers, p. 8 

http://technet.microsoft.com/en-us/library/hh831468.aspx 


Question No. 311

- (Topic 3) 

Your infrastructure divided in 2 sites. You have a forest root domain and child domain. There is only one DC on site 2 with no FSMO roles. The link goes down to site 2 and no users can log on. What FSMO roles you need on to restore the access? 

A. Infrastructure master 

B. RID master 

C. Domain Naming master 

D. PDC Emulator 

Answer:

Explanation: 

D. The PDC emulator is used as a reference DC to double-check incorrect passwords and it also receives new password changes. PDC Emulator is the most complicated and least understood role, for it runs a diverse range of critical tasks. It is a domain-specific role, so exists in the forest root domain and every child domain. Password changes and account lockouts are immediately processed at the PDC Emulator for a domain, to ensure such changes do not prevent a user logging on as a result of multi-master replication delays, such as across Active Directory sites. 


Question No. 312

HOTSPOT - (Topic 2) 

You deploy a Server with a GUI installation of Windows Server 2012 R2 Datacenter. 

From Windows PowerShell, you run the following command: 

Remove-WindowsFeature ServerGui-Shell. 

In the table below, identify which tools are available on Server1 and which tools are 

unavailable on Server1. 

Make only one selection in each row. Each correct selection is worth one point. 


Answer: 



Question No. 313

- (Topic 3) 

You have a file server named Server1 that runs Windows Server 2012 R2. Server1 has following hardware configurations: 

-16GB of RAM 

-A single quad-core CPU 

-Three network teams that have two network adapters each 

You add additional CPUs and RAM to Server 1. 

You repurpose Server1 as a virtualization host. You install the Hyper-V server role on Server1. You need to create four external virtual switches in Hyper-V. Which cmdlet should you run first? 

A. Set-NetAdapter. 

B. Add-Net1.bfoTeamNic 

C. Add-VMNetworkAdapter 

D. Remove-NetLbfoTeam 

Answer:


Question No. 314

HOTSPOT - (Topic 2) 

Your company has a main office and a sales office. The main office has 2,000 users. The sales office has 20 users. All client computers in the sales office run Windows 8. 

The sales office contains a print server named App1 that runs Windows Server 2012 R2. App1 has a shared printer named Printer1. Printer1 connects to a network-attached print device. 

You plan to connect all of the users in the sales office to Printer1 on App1. 

You need to ensure that if App1 fails, the users can continue to print to Printer1. 

What should you configure on App1? To answer, select the appropriate option in the answer area. 


Answer: 



Question No. 315

- (Topic 3) 

Your company has a remote office that contains 1,600 client computers on a single subnet. You need to select a subnet mask for the network that will support all of the client 

computers. The solution must minimize the number of unused addresses. Which subnet mask should you select? 

A. 255.255.248.0 

B. 255.255.252.0 

C. 255.255.254.0 

D. 255.255.240.0 

Answer:


Microsoft 70-410 Certification Sample Questions and Answers: http://www.braindumpsall.net/70-410-dumps/

P.S. New 70-410 dumps PDF: http://www.4easydumps.com/70-410-dumps-download.html