Microsoft 70-410 Exam Practice Test Instant Access

Question 1

Your network contains a production Active Directory forest named contoso.com and a test Active Directory forest named contoso.test. A trust relationship does not exist between the forests.

In the contoso.test domain, you create a backup of a Group Policy object (GPO) named GPO1.

You transfer the backup of GPO1 to a domain controller in the contoso.com domain.

You need to create a GPO in contoso.com based on the settings of GPO1.You must achieve this goal by using the minimum amount of Administrative effort.

What should you do?

AFrom Windows PowerShell, run the Copy-GPO cmdlet and the Restore-GPO cmdlet.

BFrom Windows PowerShell, run the Get-GPO cmdlet and the Copy-GPO cmdlet.

CFrom Group Policy Management, create a new GPO. Right-click the new GPO, and then click Import Settings.

DFrom Group Policy Management, create a new starter GPO. Right-click the new starter GPO, and then click Restore from Backup.

Answer : C

References:

https://technet.microsoft.com/en-us/library/dn789193(v=ws.11).aspx

Question 2

You have a server named Server1 that runs Windows Server 2012 R2.

You need to create a virtual hard disk (VHD) named Disk1.vhdx on Server1.

Which two tools can you use to achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Athe New-VirtualDisk cmdlet

Bthe New-VHD cmdlet

Cthe Disk Management console

Dthe diskpart.exe command

Ethe Server Manager console

Answer : D

You can create a VHD from either the Disk Management snap-in or the command line (diskpart).

From the DiskPart command-line tool at an elevated command prompt, run the create vdisk command and specify the file (to name the file) and maximum (to set the maximum size in megabytes) parameters. The following code demonstrates how to create a VHD file at C:\vdisks\disk1.vdh with a maximum file size of 16 GB (or 16,000 MB).

DiskPart

Microsoft DiskPart version 6.1.7100

On computer: WIN7

DISKPART> create vdisk file='C:\vdisks\disk1.vhd' maximum=16000

Question 3

Your network contains an Active Directory domain. You deploy two servers named Server1 and Server2 that run Windows Server 2012 R2 to the domain.

You sign in to Server1.

From Server1, you need to add the DNS Server role to Server2 by using the Server Manager console.

What should you do first?

AOn Server2, add Server1 to Server Manager.

BOn Server1, add Server2 to Server Manager.

COn Server1, run Enable-PSRemoting in Windows PowerShell.

DOn Server2, run Enable-PSRemoting in Windows PowerShell.

Answer : B

References:

https://docs.microsoft.com/en-us/windows-server/administration/server-manager/add-servers-to-server-manager

http://www.tomsitpro.com/articles/configure-dns-windows-server-2012,2-793.html

Question 4

You have a server named Server1 that runs a Server Core installation of Windows Server 2012 R2 Standard. You establish a remote management session to Server1.

You need to identify which task can be performed on Server1 from within the Remote management session.

Which tasks can you perform?

AInstall a feature by using Server Manager.

BModify the network settings by using Sconfig.

CDisable services by using Msconfig.

DJoin a domain by using the System Properties.

Answer : C

In Windows Server 2012 R2, you can use the Server Configuration tool (Sconfig.cmd) to configure and manage several common aspects of Server Core installations. You must be a member of the Administrators group to use the tool. Sconfig.cmd is available in the Minimal Server Interface and in Server with a GUI mode.

Question 5

Your network contains an Active Directory domain named adatum.com. The network contains a member server that runs Windows Server 2012 R2. You log on the member server by using the built-in domain Administrator account.

When you run the Active Directory Administrator Center and attempt to move an Organizational unit (OU) named OU-01, you receive an Access Denied message.

The permissions for OU-01 are shown in the exhibit.

You need to ensure that you can move OU-01.

ALog on to a domain controller by using an account that is a member of the Domain Admin group.

BAdd the administrator account to the MAnaged by Property of OU-01.

CRemove the Everyone access control list (ACL) of OU-01.

DLog on to a domain controller by using an account that is a member of the Enterprise Admins group.

Answer : A

Question 6

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2.

You create a group Managed Service Account named gservice1.

You need to configure a service named Service1 to run as the gservice1 account.

How should you configure Service1?

AFrom the Services console, configure the Log On settings.

BFrom a command prompt, run sc.exe and specify the privs parameter.

CFrom a command prompt, run sc.exe and specify the sdset parameter.

CFrom Windows PowerShell, run Set-Service and specify the -StartupType parameter.

Answer : C, C

Setting permissions on specific services can be achieved by using the sc command.

The sc command has two parameters for this task:

sdshow -- Displays the security descriptor for a specific service

sdset -- Changes the security descriptor for a service

To set permissions use the following syntax:

sc <server> sdset <service name> <SD in SDDL format>

http://blogs.msmvps.com/erikr/2007/09/26/set-permissions-on-a-specific-service-windows/

Question 7

You have a server named Server1 that runs Windows Server 2012 R2.

Your network has IPSec policies configured.

You need to exempt ICMP and router discovery traffic from the IPSec rules in Windows Firewall with Advanced Security.

Which cmdlet should you use?

ARemove-NetFirewallRule

BDisable-NetAdapterBinding

CSet-NetFirewallSetting

DUpdate-NetIPSecRule

Answer : C

The Set-NetFirewallSetting cmdlet configures properties that apply to the firewall and IPsec settings, regardless of which network profile is currently in use. This cmdlet allows the administrator to specify global firewall behavior.

https://technet.microsoft.com/en-us/library/jj554878(v=wps.630).aspx

Microsoft 70-410 Installing and Configuring Windows Server Exam Practice Test