70-413 Exam Case Studies & Practical Application 5 — Questions and Answers
Question 1: Litware Inc. has multiple datacenters. They need virtual machines to be movable between datacenters without downtime, even when those datacenters are on different subnets. Which Hyper-V feature enables this?
- Hyper-V Replica with planned failover
- Live Migration with Hyper-V Network Virtualization (HNV) providing subnet independence (Correct answer)
- Storage Live Migration only
- Shared Nothing Live Migration without network virtualization
Correct answer: Live Migration with Hyper-V Network Virtualization (HNV) providing subnet independence
Hyper-V Network Virtualization decouples VM network addresses from the physical subnet, enabling Live Migration across datacenters with different IP subnets.
Question 2: A company needs to deploy a read-only copy of Active Directory to a branch office where physical security cannot be guaranteed. Which AD component should they deploy?
- A full writable domain controller with BitLocker enabled
- Read-Only Domain Controller (RODC) (Correct answer)
- AD LDS instance with a password filter
- A domain controller with the PDC Emulator role
Correct answer: Read-Only Domain Controller (RODC)
An RODC holds a read-only copy of AD, and even if compromised, attackers cannot modify directory data or obtain passwords for accounts not cached there.
Question 3: A company's storage team reports that their SAN is running at 90% capacity. The virtualization team wants to thin-provision new VMs to avoid immediate storage purchases. Which Hyper-V disk format supports thin provisioning?
- Fixed-size VHD
- Dynamically expanding VHDX (Correct answer)
- Pass-through disk
- Fixed-size VHDX
Correct answer: Dynamically expanding VHDX
Dynamically expanding VHDX files consume only the space actually used by the VM, enabling thin provisioning on the storage backend.
Question 4: An enterprise runs a mix of physical and virtual servers. The security team needs to monitor all servers for compliance violations and receive real-time alerts. Which System Center product provides this unified monitoring?
- System Center Configuration Manager
- System Center Operations Manager (SCOM) (Correct answer)
- System Center Virtual Machine Manager
- System Center Service Manager
Correct answer: System Center Operations Manager (SCOM)
SCOM provides agent-based monitoring for both physical and virtual servers, with management packs that define compliance rules and alert thresholds.
Question 5: A company needs to ensure that Group Policy settings are applied to servers based on their function (web servers, database servers) rather than their OU location. They do not want to reorganize the OU structure. What should they use?
- Move servers into role-specific OUs and link separate GPOs
- Use WMI filters on GPOs to target servers by role-specific attributes (Correct answer)
- Apply GPOs at the domain level and use loopback processing
- Use Security Group filtering with separate GPOs per role
Correct answer: Use WMI filters on GPOs to target servers by role-specific attributes
WMI filters query computer properties (like installed roles) and apply GPOs only to machines that match the filter, without reorganizing OUs.
Question 6: Fabrikam has a 2-node Hyper-V cluster. During maintenance, they need to drain all VMs from one node to the other without downtime. Which action should they perform?
- Power off the maintenance node and let the cluster fail the VMs over
- Use Cluster-Aware Updating (CAU) to auto-migrate VMs
- Put the node into Maintenance Mode (Pause and Drain Roles) in Failover Cluster Manager (Correct answer)
- Manually Live Migrate each VM one at a time using Hyper-V Manager
Correct answer: Put the node into Maintenance Mode (Pause and Drain Roles) in Failover Cluster Manager
Pausing a cluster node and draining roles automatically Live Migrates all running VMs to other nodes before the node enters maintenance.
Question 7: A company's security policy requires that all outbound internet traffic from servers pass through a proxy for inspection and logging. Servers must not be able to bypass the proxy. Which Windows Server feature enforces proxy usage at the OS level?
- Configure proxy settings via Internet Options on each server manually
- Deploy Windows Firewall rules blocking direct internet access combined with WPAD/Group Policy proxy settings (Correct answer)
- Use NAT on the edge router to redirect all port 80/443 traffic
- Install a VPN client on each server routing traffic through a central inspection point
Correct answer: Deploy Windows Firewall rules blocking direct internet access combined with WPAD/Group Policy proxy settings
Blocking direct internet access via Windows Firewall and enforcing proxy settings via GPO ensures servers cannot bypass the proxy.
70-413 Exam Case Studies & Practical Application 5
Litware Inc. has multiple datacenters.
They need virtual machines to be movable between datacenters without downtime, even when those datacenters are on different subnets.
Which Hyper-V feature enables this?