[Free] New Updated (October) Microsoft 70-980 Real Exam 91-100

Ensurepass

 

 

QUESTION 91

DRAG DROP

Your network contains an Active Directory forest named contoso.com.

 

Your company merges with another company that has an Active Directory forest named litwareinc.com.

 

Each forest has one domain.

 

You establish a two-way forest trust between the forests.

 

The network contains three servers. The servers are configured as shown in the following table.

 

clip_image001

 

You confirm that the client computers in each forest can resolve the names of the client computers in both forests.

 

On dc1.litwareinc.com, you create a zone named GlobalNames.

 

You need to recommend changes in both forests to ensure that the users in both forests can resolve single-label names by using the GlobalNames zone in litwareinc.com.

 

Which changes should you recommend?

 

To answer, drag the appropriate configuration to the correct server in the answer area. Each configuration may be used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes or scroll to view content.

 

clip_image003

 

Correct Answer:

clip_image005

 

 

QUESTION 92

Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012.

 

The forest contains an Active Directory domain. The domain contains a global security group named GPO_Admins that is responsible for managing Group Policies in the forest.

 

A second forest named fabrikam.com contains three domains. The forest functional level is Windows Server 2003.

 

You need to design a trust infrastructure to ensure that the GPO_Admins group can create, edit, and link Group Policies in every domain of the fabrikam.com forest.

 

What should you include in the design?

 

More than one answer choice may achieve the goal. Select the BEST answer.

 

A.

A two-way forest trust

B.

A one-way forest trust

C.

Three external trusts

D.

Three shortcut trusts

 

Correct Answer: B

 

 

QUESTION 93

Your network contains an Active Directory domain named contoso.com. The domain contains 10 sites. The sites are located in different cities and connect to each other by using low-late

ncy WAN links.

 

In each site, you plan to implement Microsoft System Center 2012 Configuration Manager and to deploy multiple servers.

 

You need to recommend which Configuration Manager component must be deployed to each site for the planned deployment.

 

What should you include in the recommendation?

 

More than one answer choice may achieve the goal. Select the BEST answer.

 

A.

A management point

B.

A software update point

C.

A distribution group point

D.

A secondary site server that has all of the Configuration Manager roles installed

 

Correct Answer: C

Explanation:

http://technet.microsoft.com/en-us/library/hh427335.aspx

Distribution point groups provide a logical grouping of distribution points and collections for content distribution.

A Distribution point group is not limited to distribution points from a single site, and can contain one or more distribution points from any site in the hierarchy. When you distribute content to a distribution point group, all distribution points that are members of the distribution point group receive the content.

 

 

QUESTION 94

Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named OU1.

 

You have a Group Policy object (GPO) named GPO1 that is linked to contoso.com. GPO1 contains custom security settings.

 

You need to design a Group Policy strategy to meet the following requirements:

 

clip_image007The security settings in GPO1 must be applied to all client computers.

clip_image007[1]Only GPO1 and other GPOs that are linked to OU1 must be applied to the client computers in OU1.

 

What should you include in the design?

 

More than one answer choice may achieve the goal. Select the BEST answer.

 

A.

Enable the Block Inheritance option at the domain level. Enable the Enforced option on GPO1.

B.

Enable the Block Inheritance option on OU1. Link GPO1 to OU1.

C.

Enable the Block Inheritance option on OU1. Enable the Enforced option on all of the GPOs linked to OU1.

D.

Enable the Block Inheritance option on OU1. Enable the Enforced option on GPO1.

 

Correct Answer: D

 

 

QUESTION 95

Your network contains a Hyper-V host named Host1 that runs Windows Server 2012. Host1 contains a virtual machine named DC1. DC1 is a domain controller that runs Windows Server 2012.

 

You plan to clone DC1.

 

You need to recommend which steps are required to prepare DC1 to be cloned.

 

What should you include in the recommendation? (Each correct answer presents part of the solution. Choose all that apply.)

 

A.

Run dcpromo.exe /adv.

B.

Create a file named Dccloneconfig.xml.

C.

Add DC1 to the Cloneable Domain Controllers group.

D.

Run sysprep.exe /oobe.

E.

Run New-VirtualDiskClone.

 

Correct Answer: BC

Explanation:

http://blogs.technet.com/b/askpfeplat/archive/2012/10/01/virtual-domain-controller-cloning-in-windowsserver-2012.aspx

 

DCCloneConfig.xml is an XML configuration file that contains all of the settings the cloned DC will take when it boots. This includes network settings, DNS, WINS, AD site name, new DC name and more. This file can be generated in a few different ways. There’s a new group in town. It’s called Cloneable Domain Controllers and you can find it in the Users container. Membership in this group dictates whether a DC can or cannot be cloned. This group has some permissions set on the domain head that should not be removed. Removing these permissions will cause cloning to fail. Also, as a best practice, DCs shouldn’t be added to the group until you plan to clone and DCs should be removed from the group once cloning is complete. Cloned DCs will also end up in the Cloneable Domain Controllers group. Make sure to remove those as well

 

 

QUESTION 96

Your network contains an Active Directory domain named contoso.com. The domain contains multiple sites.

 

You plan to deploy DirectAccess.

 

The network security policy states that when client computers connect to the corporate network from the Internet, all of the traffic destined for the Internet must be routed through the corporate network.

 

You need to recommend a solution for the planned DirectAccess deployment that meets the security policy requirement

 

Solution: You set the ISATAP State to state disabled.

 

Does this meet the goal?

 

A.

Yes

B.

No

 

Correct Answer: B

 

 

QUESTION 97

Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the DHCP Server server role installed. The network contains a Virtual Desktop Infrastructure (VDI).

 

All virtual machines run Windows 8.

 

You identify the following requirements for allocating IPv4 addresses to client computers:

 

clip_image007[2]All virtual desktops must have static IP addresses.

clip_image007[3]All laptop computers must receive dynamic IP addresses.

clip_image007[4]All virtual desktops must be prevented from obtaining dynamic address.

 

You need to recommend a DHCP solution that meets the requirements for allocating IPv4 addresses.

 

The solution must use the least amount of administrative effort.

 

What should you recommend?

 

More than one answer choice may achieve the goal. Select the BEST answer.

 

A.

Configure DHCP filtering.

B.

Configure DHCP policies.

C.

Create two physical subnets. Connect the laptop computers to the subnet that contains Server1.

D.

Create two physical subnets. Configure 802.1X authentication for each subnet.

 

Correct Answer: A

 

 

QUESTION 98

DRAG DROP

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2008. Server1 is configured as an enterprise certification authority (CA).

 

You back up all of the data on Server1, and then export the private and public keys of the CA.

 

You plan to replace Server1 with a new member server that was purchased recently.

 

You need to identify which actions must be performed on the new server to restore the certificate services of Server1.

 

< font face="Arial">Which three actions should you identify?

 

To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

 

clip_image009

 

Correct Answer:

clip_image011

 

 

QUESTION 99

Your network contains an Active Directory forest named contoso.com.

 

You plan to add a new domain named child.contoso.com to the forest.

 

On the DNS servers in child.contoso.com, you plan to create conditional forwarders that point to the DNS servers in contoso.com.

 

You need to ensure that the DNS servers in contoso.com can resolve names for the servers in child.contoso.com.

 

What should you create on the DNS servers in contoso.com?

 

A.

A zone delegation

B.

A conditional forwarder

C.

A root hint

D.

A trust point

 

Correct Answer: A

 

 

QUESTION 100

Your company has a main office and a branch office.

 

The network contains an Active Directory domain named contoso.com. The domain contains three domain controllers. The domain controllers are configured as shown in the following table.

 

The domain contains two global groups. The groups are configured as shown in the following table.

 

You need to ensure that the RODC is configured to meet the following requirements:

 

Cache passwords for all of the members of Branch1Users. Prevent the caching of passwords for the members of Helpdesk.

 

What should you do?

 

A.

Modify the password replication policy of RODC1.

B.

Modify the delegation settings of RODC1.

C.

Modify the membership of the Allowed RODC Password Replication group.

D.

Modify the membership of the Denied RODC Password Replication group.

E.

Modify the delegation settings of DC1 and DC2.

F.

Install the BranchCache feature on RODC1.

G.

Create a Password Settings object (PSO) for the Helpdesk group.

H.

Create a Password Settings object (PSO) for the Branch1Users group.

 

Correct Answer: A

 

Free VCE & PDF File for Microsoft 70-980 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…