70-413 practice test

1. Question 1 · 1

   Your network contains an Active Directory domain named contoso.com. The domain contains three VLANs. The VLANs are configured as shown in the following table. All client computers run either Windows 7 or Windows 8. Goal: You need to implement a solution to ensure that only the client computers that have all of the required security updates installed can connect to VLAN 1. The solution must ensure that all other client computers connect to VLAN 3. Solution: You implement the 802.1x Network Access Protection (NAP) enforcement method. Does this meet the goal?

   Choose one answer.

   

   • Yes
   • No

   Read explanation

   NAP supports a variety of what we call enforcement methods. In the NAP space, and enforcement method is simply a term that defines the way a machine connects to a network. In NAP, these are DHCP, 802.1x (wired or wireless), VPN, IPsec, or via a Terminal Services Gateway.

2. Question 2 · 1

   DRAG DROP - Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2008 R2. You plan to replace the domain controllers with new servers that run Windows Server 2012 R2. The new servers will be named DC3 and DC4. You need to recommend a strategy to replace DC1 and DC2 with DC3 and DC4. The solution must minimize the amount of disruption to the users. Which three actions should you recommend? To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

   Arrange the options in the correct order.

   

   • Run dcpromo.exe on DC1 and DC2.
   • Transfer the operations master roles and create a new global catalog server.
   • Run the Active Directory Domain Services Configuration Wizard on DC3 and DC4.
   • Install the Active Directory Domain Services server role on DC3 and DC4.
   • Run ntdsutil.exe and specify the metadata cleanup parameter.

   Read explanation

   Step 1-2: AD DS can be installed in Windows Server 2012 by using the Add Roles Wizard in Server Manager, followed by the Active Directory Domain Services Configuration Wizard, which is new beginning in Windows Server 2012. Step 3: dcpromo - Installs and removes Active Directory Domain Services (AD DS). In this case we want to remove AD DS from DC1 and DC2.

3. Question 3 · 1

   This question consists of two statements: One is named Assertion and the other Is named Reason. Both of these statements may be true; both may be false; or one may be true, while the other may be false. To answer this question, you must first evaluate whether each statement is true on its own. If both statements are true, then you must evaluate whether the Reason (the second statement) correctly explains the Assertion (the first statement). You will then select the answer from the list of answer choices that matches your evaluation of the two statements. Assertion: DHCP failover clustering provides load balancing when you use multiple DHCP servers to distribute IP addresses to the network clients. Clients can renew their IP leases even if some of the DCHP servers become unavailable. DHCP failover clustering supports stateless and stateful IPv4 and IPv6 IP addresses, as well as DHCP policies and filtering. Reason: The cluster health monitoring mechanism ensures the fault tolerance of the DCHP service and all configured DHCP settings. It also protects the DHCP database from failures and corruptions. Evaluate the Assertion and Reason statements and choose the correct answer option.

   Choose one answer.

   • Both the Assertion and Reason are true, and the Reason is the correct explanation for the Assertion
   • Both the Assertion and Reason are true, but the Reason is not the correct explanation for the Assertion.
   • The Assertion is true, but the Reason is false.
   • The Assertion is false, but the Reason is true.
   • Both the Assertion and the Reason are false.

   Read explanation

   The assertion is false. DHCP failover cluster does not provide load balancing. It places the DHCP server in a cluster with an additional server configured with the DHCP service that assumes the load if the primary DHCP server fails. The reason is false. The cluster health monitoring mechanism is known as the cluster heartbeat. The heartbeat detects if a cluster node is down, but it does not help in protecting the DHCP database.

4. Question 4 · 1

   Your network contains an Active Directory forest that has three domains. All domain controllers run Windows Server 2012. You need to recommend a solution to control which attributes are replicated to global catalog servers in the forest. What should you include in the recommendation?

   Choose one answer.

   • the filtered attribute set
   • application directory partitions
   • the partial attribute set
   • constrained delegation

   Read explanation

   RODC filtered attribute set ג€" Some applications that use AD DS as a data store might have credential-like data (such as passwords, credentials, or encryption keys) that you do not want to be stored on an RODC in case the RODC is compromised. For these types of applications, you can dynamically configure a set of attributes in the schema for domain objects that will not replicate to an RODC. This set of attributes is called the RODC filtered attribute set. Attributes that are defined in the RODC filtered attribute set are not allowed to replicate to any RODCs in the forest.

5. Question 5 · 1

   Your network contains an Active Directory forest named adatum.com. The forest contains three domains. You plan to deploy 75 new physical servers during the next nine months by using Windows Deployment Services (WDS). You identify four server builds for the 75 servers as shown in the following table. You need to recommend the minimum number of images that must be created for the planned deployment. How many images should you recommend?

   Choose one answer.

   

   • 1
   • 2
   • 3
   • 4

6. Question 6 · 1

   DRAG DROP - Your network contains an Active Directory domain named adatum.com. The domain contains a file server named File2 that runs Windows Server 2008 R2. You deploy a new member server named File1 that runs Windows Server 2012 and has the File and Storage Services server role installed. You plan to migrate file shares from File2 to File1. File share and NTFS permissions are assigned only to global groups. You need to identify which actions are required to perform the migration. Which five actions should you identify? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

   Arrange the options in the correct order.

   

   • On File2, create a deployment folder.
   • On File1, register the Windows Server Migration Tools.
   • On File2, run the Send-SmigServerData cmdlet.
   • On File2, register the Windows Server Migration Tools.
   • On File1, install the Windows Server Migration Tools.
   • On File1, create a deployment folder.
   • On File1, run the Receive-SmigServerData cmdlet.
   • On File2, install the Windows Server Migration Tools.

   Read explanation

   Windows Server Migration Tools installation and preparation can be divided into the following stages. ✑ Installing Windows Server Migration Tools on destination servers that run Windows Server 2012. ✑ Creating deployment folders on destination servers that run Windows Server 2012, for copying to source servers. ✑ Copying deployment folders from destination servers to source servers. Registering Windows Server Migration Tools on source servers. Registering Windows Server Migration Tools on source computers Before you can use a technology's Windows PowerShell snap-in for the first time, it must be registered with Windows PowerShell. You can use SmigDeploy.exe to register the Windows Server Migration Tools snap-in on a migration source computer Send-SmigServerData - This cmdletmigrates folders, files, and associated permissions and share properties from the local server to a target server. Send-SmigServerData must be run on the source server at the same time thatthe Receive-SmigServerDatacmdlet is running on the destination server. Receive-SmigServerData - This cmdlet allows a targetserver to receive shares, folders, files, and associated permissions and share properties that are migrated from a source server.Receive-SmigServerData must be running on the destination server at the same time that theSend-SmigServerData cmdlet is runningon the source server. File server or data migration can be achieved by migrating the data from the existing server using tools such as Microsoft Robocopy and Microsoft File Server Migration Tool (FSMT), or directly presenting the storage Logical Unit Number (LUNs) onto a new server. Windows Server Migration Tools is a feature that is available for installation on computers that are running Windows Server 2008 R2 by using the Add Features Wizard in Server Manager. Windows Server Migration Tools can be removed from Windows Server 2008 R2 by using the Remove Features Wizard. To migrate roles, features, and other data by using Windows Server Migration Tools, you must also deploy Windows Server Migration Tools on source servers from which you want to migrate data. Windows Server Migration Tools is deployed on source servers by creating a deployment folder on a computer that is running Windows Server 2008 R2, and then copying it to the pre-Windows Server 2008 R2 source computer operating systems shown in the table in this topic.

7. Question 7 · 1

   HOTSPOT - Your network contains an Active Directory domain named contoso.com. The domain has a certification authority (CA). You create four certificate templates. The templates are configured as shown in the following table: You install the Remote Access server role in the domain. You need to configure DirectAccess to use one-time password (OTP) authentication. What should you do? To answer, select the appropriate options in the answer area. Hot Area:

   Choose an option for each prompt.

   

   

   Software to deploy to contoso.com:

   • • Network Device Enrollment Service (NDES)
   • • Network Policy Server (NPS)
   • • Windows Identity Foundation (WIF) 3.5

   Certificate template to use for OTP:

   • • Template1
   • • Template2
   • • Template3
   • • Template4

8. Question 8 · 1

   Your network contains an Active Directory domain named adatum.com. The domain contains a Microsoft System Center 2012 infrastructure. The domain contains two sites named Site1 and Site2. The sites connect to each other by using a WAN link. The domain contains two servers that are configured as shown. In Site2, you plan to deploy 50 Hyper-V hosts. You need to recommend a solution to deploy the Hyper-V hosts by using VMM. The solution must minimize the amount of traffic between Site1 and Site2 during deployment. What should you recommend?

   Choose one answer.

   

   • On VMM2, install WDS. From the Virtual Machine Manager console, add VMM2 as a PXE server and add VMM1 as a library server.
   • On VMM2, install VMM. From the Virtual Machine Manager console, add VMM1 as a PXE server and a library server.
   • On VMM2, install VMM. From the Virtual Machine Manager console, add VMM1 as a PXE server and add VMM2 as a library server.
   • On VMM2, install WDS. From the Virtual Machine Manager console, add VMM2 as a PXE server and a library server.

9. Question 9 · 1

   A company has offices in multiple geographic locations. The sites have high-latency, low-bandwidth connections. You need to implement a multisite Windows Deployment Services (WDS) topology for deploying standard client device images to all sites. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   Choose one answer.

   • At each site, create a multicast deployment. Pre-stage the client images that you plan to deploy and point them to the local WDS server.
   • At each site, deploy a WDS Server and apply the same configuration settings to each WDS Server. Configure Distributed File Server Replication (DFSR) to synchronize install images.
   • At each site, deploy a WDS server that runs only the Transport role and configure the local DHCP servers to direct local clients to the local WDS server.
   • At one site, create a multicast deployment. Pre-stage the client images that you plan to deploy and point them to a WDS server.
   • At one site, install four WDS servers and configure them as a load-balanced cluster.

10. Question 10 · 1

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named contoso.com. The domain contains multiple sites. You plan to deploy DirectAccess. The network security policy states that when client computers connect to the corporate network from the Internet, all of the traffic destined for the Internet must be routed through the corporate network. You need to recommend a solution for the planned DirectAccess deployment that meets the security policy requirement Solution: You set the ISATAP State to state enabled. Does this meet the goal?

    Choose one answer.

    • Yes
    • No

    Read explanation

    With NAT64 and DNS64, the DirectAccess server now has the ability to take those IPv6 packets and spin them down into IPv4 packets, so you can simply leave your internal network all IPv4. So back in the beginning it was standard practice to enable ISATAP globally. Today, because of the known issues, it is recommended not to use ISATAP at all, unless you have a specific reason for needing it Note: ISATAP defines a method for generating a link-localIPv6 address from an IPv4 address, and a mechanism to perform Neighbor Discovery on top of IPv4.

11. Question 11 · 1

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an IP Address Management (IPAM) server that runs Windows Server 2012 SP1. You need to integrate the IPAM server with System Center Virtual Machine Manager (SCVMM). Solution: You create a dedicated user account named IPAM_svc, and add it to the IPAM ASM Administrators local group on the IPAM server. Does this meet the goal?

    Choose one answer.

    • Yes
    • No

12. Question 12 · 1

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an IP Address Management (IPAM) server that runs Windows Server 2012 SP1. You need to integrate the IPAM server with System Center Virtual Machine Manager (SCVMM). Solution: You add a virtual switch extension manager to SCVMM. You remove the provider software from the vendor, and then add the Microsoft Network Abstraction Layer provider software. Does this meet the goal?

    Choose one answer.

    • Yes
    • No

13. Question 13 · 1

    Your company is a hosting provider that provides cloud-based services to 20 customers. Each customer has its own Active Directory forest located in your company's datacenter. You plan to provide VPN services to each customer. The VPN solution will use RADIUS for authentication, authorization and accounting services. You need to recommend a solution to forward authentication, authorization and accounting messages from the perimeter network to the Active Directory forest of each customer. What should you recommend? More than one answer choice may achieve the goal. Select the BEST answer.

    Choose one answer.

    • 20 VPN servers, one RADIUS proxy, 20 RADIUS servers
    • one VPN server, one RADIUS proxy, and 20 RADIUS servers
    • one VPN server, 20 RADIUS proxies, and 20 RADIUS server
    • one VPN server, one RADIUS proxy, and one RADIUS server

14. Question 14 · 1

    DRAG DROP - You have an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012 and has the Remote Access server role installed. Client computers run either Windows XP or Windows 8. Your company has defined requirements for three departments as shown in the table. You need to identify which remote access solution should be assigned for each group. Which solutions should you identify for each group? To answer, drag the appropriate solution to the correct requirements in the answer area. Each solution may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content. Select and Place:

    Match each destination with an option.

    

    

    Sales

    • • DirectAccess
    • • PPTP VPN
    • • SSTP VPN

    Research

    • • DirectAccess
    • • PPTP VPN
    • • SSTP VPN

    Finance

    • • DirectAccess
    • • PPTP VPN
    • • SSTP VPN

15. Question 15 · 1

    Your network contains an Active Directory forest named adatum.com. All domain controllers run Windows Server 2008 R2. The functional level of the domain and the forest is Windows Server 2008. You deploy a new Active Directory forest named contoso.com. All domain controllers run Windows Server 2012 R2. The functional level of the domain and the forest is Windows Server 2012 R2. You establish a two-way, forest trust between the forests. Both networks contain member servers that run either Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 or Windows Server 2008. You plan to use the Active Directory Migration Tool 3.2 (ADMT 3.2) to migrate user accounts from adatum.com to contoso.com. SID history will be used in contoso.com and passwords will be migrated by using a Password Export Server (PES). You need to recommend which changes must be implemented to support the planned migration. Which two changes should you recommend? Each correct answer presents part of the solution.

    Choose all answers that apply.

    • In the contoso.com forest, deploy a domain controller that runs Windows Server 2008 R2.
    • In the adatum.com forest, upgrade the functional level of the forest and the domain.
    • In the contoso.com forest, downgrade the functional level of the forest and the domain.
    • In the adatum.com forest, deploy a domain controller that runs Windows Server 2012 R2.

Paid access to all 27 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.