Printable 70-413 Dumps 2021

NEW QUESTION 1

This question consists of two statements: One is named Assertion and the other is named Reason. Both of these statements may be true; both may be false; or one may be true, while the other may be false.
To answer this question, you must first evaluate whether each statement is true on its own. If both statements are true, then you must evaluate whether the Reason (the second statement) correctly explains the Assertion (the first statement). You will then select the answer from the list of answer choices that matches your evaluation of the two statements.
Assertion:
You must host the DNS zone research.contoso.com on MADSRV1.
Reason:
You must host Domain Name System Security Extensions (DNSSEQ zones on Active Directory Domain Services-integrated DNS servers.
Evaluate the Assertion and Reason statements and choose the correct answer option.

• A. Both the Assertion and Reason are true, and the Reason is the correct explanation for the Assertion,
• B. Both the Assertion and Reason are true, but the Reason is not the correct explanation for the Assertion.
• C. The Assertion is true, but the Reason is false.
• D. The Assertion is false, but the Reason is true.
• E. Both the Assertion and the Reason are false.

Answer: C

NEW QUESTION 2

Your company has a main office that contains several servers and several users. The main office contains a file server named Server1 that runs Windows Server 2012.
The users access a large report file that is created on Server1 each day.
The company plans to open a new branch office. The branch office will contain only client computers.
You need to implement a solution to reduce the amount of bandwidth used by the client computers in the branch office to download the report each day.
What should you do?
More than one answer choice may achieve the goal. Select the BEST answer.

• A. Install the BranchCache for network files role service on Server1. Configure the client computers to use BranchCache in hosted cache mode.
• B. Configure the offline settings of the shared folder that contains the report.
• C. Install the BranchCache for network files role service on Server1. Configure the client computers to use Branchcache in distributed mode.
• D. Enable the Background Intelligent Transfer Service (BITS) feature on Server1 and on each client computer in the branch offic
• E. Move the report to a web folder.

Answer: C

Explanation:
Distributed cache mode. In this mode, branch office client computers download content from the content servers in the main office and then cache the content for other computers in the same branch office.
Distributed cache mode does not require a server computer in the branch office.
Reference: BranchCache Deployment Guide https://technet.microsoft.com/en-us/library/ee649232(v=ws.10).aspx

NEW QUESTION 3
HOTSPOT
You are evaluating the virtual machine environment.
In the table below, identify which virtual machines currently support ODX and which virtual machines require a configuration change to support ODX. Make only one selection in each row.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
* VM1 uses IDE and does not support ODX. The other VMs are ok.
* ID requirements include:
Must be connected by using one of the following protocols: iSCSI
Fibre Channel
Fibre Channel over Ethernet Serial Attached SCSI (SAS)
Note: Windows Offloaded Data Transfer (ODX) functionality in Windows maximizes an enterprise’s investment in intelligent storage arrays by enabling the arrays to directly transfer data within or between compatible storage devices, bypassing the host computer.

NEW QUESTION 4
HOTSPOT
You need to design the acquisition strategy for Margie's Travel.
What should you do? To answer, select the appropriate option for each action in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 5
DRAG DROP
Your network contains multiple servers that run Windows Server 2012.
You plan to implement three virtual disks. The virtual disks will be configured as shown in the following table.

You need to identify the minimum number of physical disks required for each virtual disk. How many disks should you identify?
To answer, drag the appropriate number of disks to the correct virtual disk in the answer area. Each number of disks may be used once, more than once, or not at all. Additionally,
you may need to drag the split bar between panes or scroll to view content.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
http://technet.microsoft.com/es-es/library/jj822938.aspx
They are not talking about Clusters, a single server only, so a standalone server.

NEW QUESTION 6

Your network contains an Active Directory domain named contoso.com. The domain contains a Microsoft System Center 2012 infrastructure.
You deploy a service named Service1 by using a service template. Service1 contains two virtual machines. The virtual machines are configured as shown in the following table.

You need to recommend a monitoring solution to ensure that an administrator can review the availability information of Service1.
Solution: From Operations Manager, you create a Distributed Application and a Monitor Override.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 7
DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2008. Server1 is configured as an enterprise certification authority (CA).
You back up all of the data on Server1, and then export the private and public keys of the CA.
You plan to replace Server1 with a new member server that was purchased recently. You need to identify which actions must be performed on the new server to restore the
certificate services of Server1.
Which three actions should you identify?
To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Box 1: We will need the Active Directory Certificate Services role to import the key, and later restore the certificate services database.
Box 2: Import the private key with the help of the AD CS Configuration Wizard.
The private key will be needed in the next step when you restore the certificate services registry settings and the certificate services database.
Box 3: Restore the certificate services registry settings and the certificate services database-

NEW QUESTION 8

You have a Windows Server 2012 R2 failover cluster that contains four nodes. The cluster has Dynamic Optimization enabled. You deploy three highly available virtual machines to the cluster by using System Center 2012 R2 Virtual Machine Manager (VMM).
You need to prevent Dynamic Optimization from placing any of the three virtual machines in the same node.
What should you do?

• A. From the Virtual Machine Manager console, modify the Compatibility settings in the Hardware Configuration properties of the virtual machines.
• B. Set the Priority property of the virtual machine cluster role.
• C. From the Virtual Machine Manager console, modify the Servicing Windows settings of the virtual machines.
• D. From the Virtual Machine Manager console, modify the Availability settings in the Hardware Configuration properties of the virtual machines.

Answer: D

NEW QUESTION 9
HOTSPOT
You plan to implement a virtualization solution to host 10 virtual machines. All of the virtual machines will be hosted on servers that run Windows Server 2012.
You need to identify which servers must be deployed for the planned virtualization solution. The solution must meet the following requirements:
• Minimize the number of servers.
• Ensure that live migration can be used between the hosts.
Which servers should you identify?
To answer, select the appropriate servers in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Just two server with Hyper-V installed is enough to perform a Live Migration. (Minimize the number of servers)

NEW QUESTION 10
DRAG DROP
Your network contains an Active Directoy domain named adatum.com. The domain contains a server named RAS1 that runs Windows Server 2012 and has the Remote Access Server role installed. RAS1 resides I the perimeter network.
Some remote users have domain-joined computers and some remote users are in a workgroup. Remote users have computers that run either Windows XP or Windows 8.
You need to configure the client computers for remote access.
Which three actions should perform? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 11
HOTSPOT
You have a domain controller that hosts an Active Directory-integrated zone. On the domain controller, you run the following cmdlet:
PS C:> Get-DnsServerScavenging
NoRefreshInterval:2.00:00:00 RefreshInterval:3.00:00:00 ScavengingInterval:4.00:00:00 ScavengingState:True LastScavengeTime:1/30/2014 9:10:36 AM
Use the drop-down menus to select the answer choice that completes each statement.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
First answer
* -NoRefreshInterval<TimeSpan>
Specifies a length of time as a TimeSpan object. NoRefreshInterval sets a period of time in which no refreshes are accepted for dynamically updated records. Zones on the server inherit this value automatically.
This value is the interval between the last update of a timestamp for a record and the earliest time when the timestamp can be refreshed. The minimum value is 0. The maximum value is 8760 hours (seven days).
* Here it is set to 2 days: NoRefreshInterval:2.00:00:00
Second answer
-ScavengingState<Boolean> (In this question it is set to true)
Enables or disables automatic scavenging of stale records. ScavengingState determines whether the DNS scavenging feature is enabled by default on newly created zones. The acceptable values for this parameter are:
-- $False. Disables scavenging. This is the default setting.
-- $True. Enables scavenging

NEW QUESTION 12
HOTSPOT
Your network contains an Active Directory forest named contoso.com. The forest contains one domain. All domain controllers run Windows Server 2012. The functional level of the forest and the domain is Windows Server 2012.
The domain contains three domain controllers. The domain controllers are configured as shown in the following table.

In the forest, you plan to add a new domain controller that runs Windows Server 2012 R2. You need to prepare the environment before you add the new domain controller.
Which domain controllers must be available to run each command? To answer, select the appropriate domain controllers in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
* adprep /forestprep
Must be run on the schema operations master for the forest (here DC1). Once for the entire forest
* adprep /domainprep
Must be run on the infrastructure operations (DC2) master for the domain.
* adprep /rodcprep
Can be run from any computer. This command performs operations remotely. For the operations to complete successfully, the domain naming operations master (DC1) for the forest and the infrastructure operations master (DC2) for each application directory partition and each domain partition must be accessible.

NEW QUESTION 13

Your network contains an Active Directory forest. The forest contains two Active Directory domains named contoso.com and child.contoso.com. The forest functional level is Windows Server 2003. The functional level of both domains is Windows Server 2008.
The forest contains three domain controllers. The domain controllers are configured as shown in the following table.

DC1 and DC2 have the DNS Server server role installed and are authoritative for both contoso.com and child.contoso.com.
The child.contoso.com domain contains a server named serverl.child.contoso.com that runs Windows Server 2012.
You plan to deploy server1.child.contoso.com as a read-only domain controller (RODC). You run the adprep.exe /rodcprep command on DC3 and receive the following error
message:

You need to identify what prevents you from successfully running Adprep /rodcprep on DC3.
What should you identify?

• A. The domain functional level of child.contoso.com is set to the wrong level.
• B. DC3 cannot connect to the infrastructure master on DC2.
• C. DC3 cannot connect to the domain naming master on DC1.
• D. The forest functional level is set to the wrong level.

Answer: B

Explanation:
Adprep could not contact a replica…
This problem occurs when the Adprep /rodcprep command tries to contact the infrastructure master for each application partition in the forest.
Reference: Error message when you run the "Adprep /rodcprep" command in Windows Server 2008: "Adprep could not contact a replica for partition DC=DomainDnsZones,DC=Contoso,DC=com"
https://support.microsoft.com/en-us/kb/949257

NEW QUESTION 14
DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains five servers. The servers are configured as shown in the following table.

You plan to implement Network Access Protection (NAP) with IPSec enforcement on all client computers.
You need to identify on which servers you must perform the configurations for the NAP deployment.
Which servers should you identify? To answer, drag the appropriate servers to the correct actions. Each server may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.)

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Box 1: Server 3 (Network Policy Server)
We use a Network Policy Server, Server3, to configure health policies. Box 2: Server 1
* Server1 (Domain Controller)
‘You can configure NAP clients through Group Policy or local computer policy. This feature is installed automatically on a domain controller running Windows Server 2008 and Windows Server 2008 R2. This feature can be installed on a member server running Windows Server 2008 or Windows Server 2008 R2. You can use Group Policy to configure NAP settings on NAP clients running Windows Server 2008, Windows Server 2008 R2, Windows Vista, Windows 7, and Windows XP SP3.
Box 3: Server 3 (Network Policy Server)
You configure remediation server groups on the Network Policy Server and reference a particular remediation server group as part of the network policy for non-compliant computers

NEW QUESTION 15
DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains an IP Address Management (IPAM) server.
You plan to delegate the administration of IPAM as shown in the following table.

You need to recommend which IPAM security group must be used for each department. The solution must minimize the number of permissions assigned to each group.
What should you recommend?
To answer, drag the appropriate group to the correct department in the answer area. Each group may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Box 1:

Box 2:

Box 3:

* IPAM IP Audit Administrators: Members of this group have IPAM Users privileges and can perform IPAM common management tasks and can view IP address tracking information.
* IPAM Users: Members of this group can view all information in server discovery, IP address space, and server management. They can view IPAM and DHCP server operational events, but cannot view IP address tracking information.
* IPAM ASM Administrators: IPAM address space management (ASM) administrators have IPAM Users privileges and can perform IPAM common management tasks and IP address space tasks.

NEW QUESTION 16
HOTSPOT
You are planning the certificates for Northwind Traders.
You need to identify the certificate configurations required for App1.
How should you configure the certificate request? To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Box 1: App1.public.northwindtraders.com
* From the scenario:
Users must be able to access App1 from the Internet.
The servers in the perimeter network are accessible from the Internet by using a domain name suffix of public.northwindtraders.com.
Configure a web application proxy on Server6.
Box 2: Server Authentication
Certificates that server programs use to authenticate themselves to clients
* From the scenario:
Configure a web application proxy on Server6.

NEW QUESTION 17

You need to configure the connection between the new remote branch office and the existing branch offices.
What should you create?

• A. SMTP site link
• B. Forest trust
• C. Certification authority
• D. IP subnet

Answer: A

NEW QUESTION 18

You need to plan the expansion of the Los Angeles office. What should you do?

• A. Install a read-only domain controller in Los Angeles.
• B. Install a domain controller in Los Angeles.
• C. Create and apply a filtered attribute set to the Los Angeles site.
• D. Create and apply a Group Policy object to the Los Angeles site.

Answer: D

NEW QUESTION 19

Your network contains an Active Directory domain named contoso.com.
On several organizational units (OUs), an administrator named Admin1 plans to delegate control of custom tasks. You need to ensure that Admin1 can delegate a custom task named Task1 by using the Delegation of Control Wizard.
What should you do?

• A. Add a new class to the Active Directory schema.
• B. Configure a custom MMC console.
• C. Modify the Delegwiz.inf file.
• D. Configure a new authorization store by using Authorization Manager.

Answer: C

Explanation:
To add a task to the Delegation Wizard, you must create a task template by using the following syntax in the Delegwiz.inf file
;---------------------------------------------------------
[template1]
AppliesToClasses=<comma delimited list of object types to which this template applies; for example, if "organizationalUnit" is in the list,
this template will be shown when the Delegation Wizard is invoked on an OU>
Description = "<task description which will appear in the wizard>" Etc.
Reference: How to customize the task list in the Delegation Wizard http://support.microsoft.com/kb/308404

NEW QUESTION 20
HOTSPOT
You need to protect the personal data of employees.
What should you do? To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Scenario: Active Directory
The company plans to use Active Directory to store personal information for employees. Users in the branch offices must not be able to view the confidential data that is stored for other users.
Active Directory Domain Services
The company plans to use the Employee-Number user property to store personal identification numbers.

NEW QUESTION 21

Your network contains an Active Directory forest named contoso.com. The forest is managed by using Microsoft System Center 2012.
Web developers must be able to use a self-service portal to request the deployment of virtual machines based on predefined templates. The requests must be approved by an administrator before the virtual machines are deployed.
You need to recommend a solution to deploy the virtual machines. What should you include in the recommendation?
More than one answer choice may achieve the goal. Select the BEST answer.

• A. A Virtual Machine Manager (VMM) service template, an Operations Manager dashboard, and an Orchestrator runbook
• B. A Service Manager service offering, an Orchestrator runbook, and an Operations Manager dashboard
• C. A Virtual Machine Manager (VMM) service template, a Service Manager service offering, and an Orchestrator runbook
• D. A Service Manager service offering, an Orchestrator runbook, and Configuration Managerpackages

Answer: C

Explanation:
As a practical example, a user could initiate an Orchestrator runbook by requesting a service in a self-service portal. The runbook would then await approval by IT. Once approved, it would then automatically provision the necessary virtual machines through System Center Virtual Machine Manager, deploy the required software via Configuration Manager, arrange backup through System Center Data Protection Manager and integrate monitoring with a third-party system.
Reference: Microsoft System Center Orchestrator 2012: Lead the System Center Band

NEW QUESTION 22

Your network contains an Active Directory forest named adatum.com. All domain controllers run Windows Server 2008 R2. The functional level of the domain and the forest is Windows Server 2008.
You deploy a new Active Directory forest named contoso.com. All domain controllers run Windows Server 2012 R2. The functional level of the domain and the forest is Windows Server 2012 R2.
You establish a two-way, forest trust between the forests. Both networks contain member servers that run either Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 or Windows Server 2008.
You plan to use the Active Directory Migration Tool 3.2 (ADMT 3.2) to migrate user accounts from adatum.com to contoso.com. SID history will be used in contoso.com and passwords will be migrated by using a Password Export Server (PES).
You need to recommend which changes must be implemented to support the planned migration.
Which two changes should you recommend? Each correct answer presents part of the solution.

• A. In the contoso.com forest, deploy a domain controller that runs Windows Server 2008 R2.
• B. In the adatum.com forest, upgrade the functional level of the forest and the domain.
• C. In the contoso.com forest, downgrade the functional level of the forest and the domain.
• D. In the adatum.com forest, deploy a domain controller that runs Windows Server 2012 R2.

Answer: AC

NEW QUESTION 23

Your network contains an Active Directory domain named contoso.com. Client computers run either Windows 7 or Windows 8.
You plan to implement several Group Policy settings that will apply only to laptop computers.
You need to recommend a Group Policy strategy for the planned deployment.
What should you include in the recommendation?
More than one answer choice may achieve the goal. Select the BEST answer.

• A. Loopback processing
• B. WMI filtering
• C. Security filtering
• D. Block inheritance

Answer: B

Explanation:
Group Policy WMI Filter – Laptop or Desktop Hardware
A method to detect hardware as laptop only is to look for the presence of a battery based on the BatteryStatus property of the Win32_Battery class. By using the Win32_Battery class, we can search to see if there is a battery present. If the battery status is not equal to zero (BatteryStatus <> 0 ) then you know that it is a laptop.
Reference: Group Policy WMI Filter – Laptop or Desktop Hardware http://discoposse.com/2012/04/05/group-policy-wmi-filter-laptop-or-desktop-hardware/

NEW QUESTION 24
DRAG DROP
You manage an Active Directory Domain Services forest that contains a root domain named contoso.com and a child domain named branch.contoso.com. You have three servers named SRV01, SRV02, and SRV03. All servers run Windows Server 2012 R2. SRV01 and SRV02 are domain controllers for the domain contoso.com. SRV03 is the domain controller for branch.contoso.com. User accounts and resources exist in both domains. All resources in branch.contoso.com are physically located in a remote branch office.
The remote branch office must be configured as Read-Only Domain Controller (RODC). The solution must minimize the impact on users and the number of servers deployed in the branch office.
You need to configure the environment.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Box 1: We export all resources from the branch office, and import them into the main domain.
Ldidfe creates, modifies, and deletes directory objects. You can also use ldifde to extend the schema, export Active Directory user and group information to other applications or services, and populate Active Directory Domain Services (AD DS) with data from other directory services.
Box 2: We decommission the domain controller SRV03 Box 3: And make it a RODC instead.
Incorrect:
We should not use an additional server SRV04.

NEW QUESTION 25

Your network contains a Hyper-V cluster named Cluster1.
You install Microsoft System Center 2012 Virtual Machine Manager (VMM). You create a user account for another administrator named User1.
You plan to provide User1 with the ability to manage only the virtual machines that User1 creates.
You need to identify what must be created before you delegate the required permissions. What should you identify?

• A. A service template
• B. A Delegated Administrator
• C. A cloud
• D. A host group

Answer: D

NEW QUESTION 26

You need to resolve the access issue at the newly acquired office. What should you do.

• A. Install a domain Controller and configure Universal Group Membership Caching.
• B. Install a domain Controller and add the Global Catalog role.
• C. Install a read-only domain controller.
• D. Install a domain controller and enable BranchCache.

Answer: C

NEW QUESTION 27

Your network contains on Active Directory domain named adatum.com.
An administrator plans to delegate control of custom tasks on several organizational units (OUs).
You need to ensure that the custom tasks appear in the list of tasks that can be delegated from the Delegation of Control Wizard.
What should you do?

• A. Configures custom MMC console.
• B. Add a new class to the Active Directory schema.
• C. Configure a new authorization store by using Authorization Manager.
• D. Modify the Delegwiz.inf file.

Answer: D

NEW QUESTION 28
......