Free Microsoft 70-411 Exam Dumps Questions & Answers

Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify whether deleted objects can be recovered from the Active Directory Recycle Bin.
Which cmdlet should you use?

• A.  Get-ADDomainControllerPasswordReplicationPolicyUsage
• B.  Get-ADDomainControllerPasswordReplicationPolicy
• C.  Get-ADAccountAuthorizationGroup
• D.  Get-ADDomain
• E.  Get-ADOptionalFeature
• F.  Get-ADGroupMember

Your network contains one Active Directory domain named contoso.com.
You pilot DirectAccess on the network.
During the pilot deployment, you enable DirectAccess only (or a group named Contoso\Test Computers.
Once the pilot is complete, you need to enable DirectAccess for all of the client computers in the domain.
What should you do?

• A.  From Group Policy Management, modify the security filtering of an object named Direct Access Client Setting Group Policy.
• B.  From Group Policy Management, modify the security filtering of an object named Direct Access Server Setting Group Policy
• C.  From Windows PowerShell, run the Set-DAServer cmdlet.
• D.  From Remote Access Management Console, run the remote access Server Setup wizard.

HOTSPOT
Your network contains one Active Directory forest. The forest contains a server named Server01.
Server01 runs Windows Server 2012 R2.
You need to list which global object access auditing entries apply to the files and folders on Server01.
What command should you run? To answer, select the appropriate options in the answer are a.

Correct Answer:

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Server1 has the Network Policy Server server role installed.
Server2 has the DHCP Server server role installed. Both servers run Windows Server 2012 R2.
You are configuring Network Access Protection (NAP) to use DHCP enforcement.
You configure a DHCP scope as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that non-compliant NAP clients receive different DHCP options than compliant NAP clients.
What should you configure on each server? To answer, select the appropriate options for each server in the answer area.

DRAG DROP
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Network Policy and Access Services server role installed.
All of the VPN servers on your network use Server1 for RADIUS authentication.
You create a security group named Group1.
You need to configure Network Policy and Access Services (NPAS) to meet the following requirements:
Ensure that only the members of Group1 can establish a VPN connection to the VPN servers.
Allow only the members of Group1 to establish a VPN connection to the VPN servers if the members are using client computers that run Windows 8 or later.
Which type of policy should you create for each requirement?
To answer, drag the appropriate policy types to the correct requirements. Each policy type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Correct Answer: