Microsoft Exam 70-413: Designing and Implementing a Server Infrastructure — Questions and Answers

Question 1: How should 70-413 Exam professionals prioritize identified risks?

Based on likelihood of occurrence combined with severity of potential impact (Correct answer)
Randomly
Alphabetically
By cost to mitigate only

Correct answer: Based on likelihood of occurrence combined with severity of potential impact

This is fundamental to 70-413 Exam practice. Based on likelihood of occurrence combined with severity of potential impact represents the professional standard for risk management in the 70-413 Exam certification framework.

Question 2: Which VPN protocol provides seamless reconnection when a client switches between network interfaces, such as moving from Wi-Fi to a cellular connection?

SSTP
IKEv2 (Correct answer)
PPTP
L2TP/IPsec

Correct answer: IKEv2

IKEv2 supports the MOBIKE extension, which allows VPN sessions to persist across changes in the client's IP address or network interface, providing seamless reconnection.

Question 3: After a server outage, a post-incident review (PIR) is scheduled. What is the primary purpose of this meeting from a stakeholder relations perspective?

Assign blame to the team responsible for the outage
Review vendor SLA penalty clauses
Communicate root cause, remediation steps taken, and preventive actions to stakeholders (Correct answer)
Terminate the project that caused the outage

Correct answer: Communicate root cause, remediation steps taken, and preventive actions to stakeholders

A PIR's primary stakeholder communication goal is to transparently share root cause, remediation, and prevention measures.

Question 4: An auditor requires proof that privileged account usage on domain controllers is monitored. Which audit policy logs when a user exercises a user right such as 'Act as part of the operating system'?

Audit Security State Change
Audit Privilege Use (Correct answer)
Audit Account Management
Audit Special Logon

Correct answer: Audit Privilege Use

Audit Privilege Use generates events when a user account exercises a user right, capturing privileged operations for compliance reporting on domain controller activity.

Question 5: What is the importance of data security in 70-413 Exam digital applications?

Only financial data needs protection
Protecting sensitive information from unauthorized access, breaches, and loss is essential (Correct answer)
Security slows down work
Security is unnecessary for professional data

Correct answer: Protecting sensitive information from unauthorized access, breaches, and loss is essential

This is fundamental to 70-413 Exam practice. Protecting sensitive information from unauthorized access, breaches, and loss is essential represents the professional standard for technology in the 70-413 Exam certification framework.

Question 6: HIPAA requires covered entities to have a contingency plan, including data backup. Which Windows Server role provides automated, policy-driven backup to meet this requirement?

Data Deduplication
Distributed File System Replication (DFSR)
Storage Spaces Direct
Windows Server Backup (Correct answer)

Correct answer: Windows Server Backup

Windows Server Backup provides scheduled, policy-driven backup of server data and system state, fulfilling HIPAA's contingency plan data backup requirement.

Question 7: What is the benefit of interdisciplinary collaboration in 70-413 Exam practice?

It creates confusion
It slows down decision making
It is only for complex projects
It brings diverse expertise and perspectives that improve outcomes and innovation (Correct answer)

Correct answer: It brings diverse expertise and perspectives that improve outcomes and innovation

This is fundamental to 70-413 Exam practice. It brings diverse expertise and perspectives that improve outcomes and innovation represents the professional standard for practical in the 70-413 Exam certification framework.

Question 8: What Windows Server DNS feature enables administrators to control DNS responses based on client subnet, allowing traffic management by network location?

DNS Scavenging
DNS Policies (Correct answer)
GlobalNames Zone
Round Robin DNS

Correct answer: DNS Policies

DNS Policies allow administrators to define rules that return different DNS responses based on client subnet, time of day, or query type.

Question 9: A risk assessment reveals that a single administrator account is used by multiple IT staff members. What type of risk does this shared account create?

Availability risk — the account may be locked out
Repudiation risk — inability to attribute actions to specific individuals (Correct answer)
Confidentiality risk — the password is written down
Integrity risk — password complexity cannot be enforced

Correct answer: Repudiation risk — inability to attribute actions to specific individuals

Shared accounts eliminate non-repudiation because actions cannot be attributed to a specific individual, creating significant accountability and audit gaps.

Question 10: A 70-413 scenario involves migrating a server workload to a new platform. At which stage should the architect perform a formal security review?

After the hypervisor vendor completes their own internal review
Only when requested by the security team
After deployment, during the first production incident
As an integrated step during the design phase, before implementation begins (Correct answer)

Correct answer: As an integrated step during the design phase, before implementation begins

Integrating security review during the design phase (shift-left security) is the professional standard that minimizes costly remediation after deployment.

Question 11: An organization wants to use Windows Server 2012 R2 to deliver virtual desktops to thin clients. Which RDS deployment model streams a full desktop from a shared OS session to multiple users?

RemoteApp deployment
RD Web Access with RD Gateway
Virtual machine-based desktop deployment using RD Virtualization Host
Session-based desktop deployment using RD Session Host (Correct answer)

Correct answer: Session-based desktop deployment using RD Session Host

Session-based desktops use RD Session Host, where multiple users share a single OS instance with isolated sessions, making it more resource-efficient than per-user VMs.

Question 12: In a research study, the 'p-value' of 0.03 indicates that:

The effect size is small
The confidence interval is 97%
The study has a 3% chance of being replicated
There is a 3% probability the results occurred by chance (Correct answer)

Correct answer: There is a 3% probability the results occurred by chance

A p-value of 0.03 means there is a 3% probability that the observed results are due to random chance, suggesting statistical significance at the α=0.05 level.

Question 13: Which NAP enforcement method restricts non-compliant clients by assigning them a limited DHCP scope that only allows access to remediation servers?

802.1X enforcement
VPN enforcement
IPsec enforcement
DHCP enforcement (Correct answer)

Correct answer: DHCP enforcement

DHCP NAP enforcement integrates with the DHCP server to assign non-compliant clients a restricted IP configuration with limited routes, preventing access to production resources while allowing remediation.

Question 14: How do continuing education requirements benefit 70-413 Exam certified professionals?

They only benefit training providers
They are unnecessary formalities
They ensure professionals stay current with evolving industry practices and knowledge (Correct answer)
They reduce practical skills

Correct answer: They ensure professionals stay current with evolving industry practices and knowledge

This is fundamental to 70-413 Exam practice. They ensure professionals stay current with evolving industry practices and knowledge represents the professional standard for professional standards in the 70-413 Exam certification framework.

Question 15: What is the role of the Health Registration Authority (HRA) in a NAP with IPsec enforcement deployment?

To validate client health statements and issue health certificates to compliant clients (Correct answer)
To monitor all network traffic and identify non-compliant devices in real time
To authenticate remote VPN connections using digital certificates
To automatically assign restricted IP addresses to non-compliant NAP clients

Correct answer: To validate client health statements and issue health certificates to compliant clients

The HRA is an IIS-based component that receives health statements from NAP clients, forwards them to NPS for validation, and issues health certificates to clients that pass health checks.

Question 16: Which communication method best ensures that all stakeholders receive and acknowledge a critical infrastructure maintenance window announcement?

Update the project plan and assume stakeholders will read it
Announce it verbally in a team standup
Post a notice on the intranet homepage only
Send a direct email with read receipt and follow up with verbal confirmation for critical stakeholders (Correct answer)

Correct answer: Send a direct email with read receipt and follow up with verbal confirmation for critical stakeholders

Direct email with read receipt combined with verbal follow-up provides both a documented trail and confirmed acknowledgment for critical announcements.

Question 17: Which type of reliability measures the consistency of a test or tool across two administrations to the same group over time?

Parallel-forms reliability
Test-retest reliability (Correct answer)
Inter-rater reliability
Internal consistency

Correct answer: Test-retest reliability

Test-retest reliability assesses the stability of a measurement instrument by administering the same test to the same participants at two different time points and correlating the scores.

Question 18: What is the most effective communication approach for 70-413 Exam professionals?

Adapting communication style to the audience while maintaining accuracy and clarity (Correct answer)
Only written communication
Minimizing all communications
Using technical language exclusively

Correct answer: Adapting communication style to the audience while maintaining accuracy and clarity

This is fundamental to 70-413 Exam practice. Adapting communication style to the audience while maintaining accuracy and clarity represents the professional standard for communication in the 70-413 Exam certification framework.

Question 19: A server infrastructure plan is being reviewed by stakeholders who have conflicting requirements. What professional technique best resolves competing priorities while keeping all parties aligned?

Delay the project until consensus forms naturally
Facilitate a requirements prioritization workshop using MoSCoW or similar method (Correct answer)
Let the project manager decide unilaterally
Implement the most technically elegant solution regardless of stakeholder input

Correct answer: Facilitate a requirements prioritization workshop using MoSCoW or similar method

Structured prioritization techniques like MoSCoW give all stakeholders a voice and produce a documented, agreed-upon priority list.

Question 20: During a post-incident review (PIR) of a server outage, the team discovers the root cause was an undocumented manual change. Which professional process, if followed, would most likely have prevented this?

Enforcing a formal change management process requiring pre-approval and documentation (Correct answer)
Implementing RAID on all production servers
Running weekly vulnerability scans
Increasing the number of monitoring agents

Correct answer: Enforcing a formal change management process requiring pre-approval and documentation

A formal change management process requires documentation and approval before any production change, creating an audit trail that prevents undocumented modifications.

Question 21: When a researcher uses the same instrument to collect data in the same way every time, this is referred to as:

Transferability
Reliability (Correct answer)
Internal validity
Construct validity

Correct answer: Reliability

Reliability refers to the consistency and repeatability of a measurement instrument or data collection procedure across time and conditions.

Question 22: Which statistic is used in a meta-analysis to represent the combined effect of multiple studies?

Pooled effect size (Correct answer)
Relative risk reduction
Standard deviation
Cronbach's alpha

Correct answer: Pooled effect size

A pooled effect size (such as a weighted mean difference or odds ratio) combines results from multiple individual studies in a meta-analysis to produce an overall estimate.

Question 23: Which of the following best describes 'separation of duties' in a Windows Server environment?

Configuring distinct VLAN segments for each server role
Assigning separate GPOs to workstations and servers
Ensuring no single person can complete a sensitive task without another person's involvement (Correct answer)
Splitting network traffic across multiple NICs for redundancy

Correct answer: Ensuring no single person can complete a sensitive task without another person's involvement

Separation of duties requires that critical processes involve multiple individuals, reducing the risk of fraud or error by a single administrator.

Question 24: Which command-line tool is the primary utility for viewing replication status, forcing replication, and diagnosing replication failures between domain controllers?

repadmin (Correct answer)
Active Directory Sites and Services
ADSI Edit
dcdiag

Correct answer: repadmin

Repadmin is the command-line tool designed specifically for managing and diagnosing Active Directory replication between domain controllers.

Question 25: How should an 70-413 Exam professional respond to a compliance violation?

Wait for an external audit to find it
Conceal it if minor
Blame the regulatory framework
Report it promptly, investigate the root cause, and implement corrective actions (Correct answer)

Correct answer: Report it promptly, investigate the root cause, and implement corrective actions

This is fundamental to 70-413 Exam practice. Report it promptly, investigate the root cause, and implement corrective actions represents the professional standard for regulatory in the 70-413 Exam certification framework.

Question 26: How do 70-413 Exam professionals ensure compliance in daily practice?

By integrating compliance requirements into standard operating procedures and regular audits (Correct answer)
Compliance is checked only annually
By memorizing all regulations
By hiring a compliance officer

Correct answer: By integrating compliance requirements into standard operating procedures and regular audits

This is fundamental to 70-413 Exam practice. By integrating compliance requirements into standard operating procedures and regular audits represents the professional standard for regulatory in the 70-413 Exam certification framework.

Question 27: How should an 70-413 Exam professional approach a novel situation not covered by standard procedures?

Refuse to proceed
Improvise without documentation
Follow the closest standard procedure exactly
Apply foundational principles, assess risks, consult resources, and document the rationale for decisions (Correct answer)

Correct answer: Apply foundational principles, assess risks, consult resources, and document the rationale for decisions

This is fundamental to 70-413 Exam practice. Apply foundational principles, assess risks, consult resources, and document the rationale for decisions represents the professional standard for practical in the 70-413 Exam certification framework.

Question 28: How should 70-413 Exam professionals stay current with regulatory changes?

Wait until audited
Monitor regulatory updates, participate in professional associations, and attend continuing education (Correct answer)
Regulations rarely change
Rely on colleagues for updates

Correct answer: Monitor regulatory updates, participate in professional associations, and attend continuing education

This is fundamental to 70-413 Exam practice. Monitor regulatory updates, participate in professional associations, and attend continuing education represents the professional standard for regulatory in the 70-413 Exam certification framework.

Question 29: An Active Directory domain with the name contoso.com is present on your network. All domain controllers use Windows Server 2012 R2. Windows Server 2012 is the functional level of the forest. <br> -Your business intends to roll out an application allowing employees access to a search interface. The employee-number attribute will be searched for in the application's global catalog. <br> -The program needs to be able to get the employee number value from the global catalog, so you must provide a fix. <br> What should the recommendation contain?

The Set-ADServerSettings cmdlet
The Ldifde command (Correct answer)
The Set-ADUser cmdlet
The Csvde command

Correct answer: The Ldifde command

To make the `employee-number` attribute searchable in the Global Catalog, its schema definition must be modified to mark it for replication to the GC. The `Ldifde` command-line tool is used for importing and exporting Active Directory objects and attributes, including schema modifications. It can be used to update the schema to include the `employee-number` attribute in the Global Catalog, making it accessible for the application's search interface.

Question 30: A company's security policy requires that all communications between its web servers and internal application servers be encrypted, but certificates must be issued by an internal CA. Which Windows Server component should they deploy?

Third-party HSM with externally trusted certificates
Active Directory Certificate Services (AD CS) with an Enterprise CA (Correct answer)
Self-signed certificates generated on each server individually
Public CA-issued wildcard certificate on all servers

Correct answer: Active Directory Certificate Services (AD CS) with an Enterprise CA

AD CS with an Enterprise CA issues and manages internally-trusted certificates integrated with Active Directory for automated enrollment.

Question 31: During a Windows Server 2012 R2 migration project, a stakeholder requests weekly status reports. Which artifact best satisfies this requirement?

A status report covering milestones completed, upcoming tasks, risks, and issues (Correct answer)
An updated ITSM ticket backlog export
Raw Active Directory replication logs
A full network topology diagram updated weekly

Correct answer: A status report covering milestones completed, upcoming tasks, risks, and issues

A structured status report covering milestones, upcoming work, risks, and issues is the standard stakeholder communication artifact.

Microsoft Exam 70-413: Designing and Implementing a Server Infrastructure

Microsoft 70-413 is a retired MCSE certification exam that tests candidates' ability to design and implement a comprehensive Windows Server infrastructure, including server deployment, Active Directory, network infrastructure services, and network access services.

Questions

150 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds