70-413 Exam Quality Control & Assurance 5 — Questions and Answers
Question 1: A post-deployment audit requires verifying that all servers are enrolled in System Center Operations Manager (SCOM) monitoring. Which SCOM feature confirms agent health and identifies servers not yet monitored?
- Operations Manager Pending Management view
- SCOM Reporting — Agent Health State report (Correct answer)
- SCOM Discovery Wizard results
- Management Pack Health Explorer
Correct answer: SCOM Reporting — Agent Health State report
The SCOM Agent Health State report identifies which managed computers have healthy, warning, or missing agent states, allowing QA to confirm complete monitoring coverage.
Question 2: During infrastructure acceptance testing, a Windows Server 2012 R2 failover cluster node unexpectedly leaves the cluster. Which event log should you examine first to identify the eviction reason?
- System log filtering for source 'Microsoft-Windows-FailoverClustering' (Correct answer)
- Application log for ClusterSvc errors
- Security log for privileged access events
- Setup log for node configuration changes
Correct answer: System log filtering for source 'Microsoft-Windows-FailoverClustering'
The System event log filtered for the FailoverClustering source captures detailed cluster node events including heartbeat loss, resource failures, and node evictions with reason codes.
Question 3: Your QA policy requires all server deployments to include a completed Configuration Management Database (CMDB) entry before go-live. Which System Center product is specifically designed to provide CMDB functionality integrated with Windows infrastructure?
- System Center Data Protection Manager
- System Center Service Manager (Correct answer)
- System Center Orchestrator
- System Center Virtual Machine Manager
Correct answer: System Center Service Manager
System Center Service Manager provides ITIL-aligned service management including a CMDB (Configuration Items) that integrates with Active Directory and other SCCM/SCOM data sources.
Question 4: A QA engineer discovers that a newly deployed DNS server is returning incorrect responses for split-brain DNS zones. Which DNS diagnostic command verifies which zone version a specific DNS server is authoritative for?
- nslookup -type=SOA <zone> <server>
- Resolve-DnsName -Type SOA -Server <server>
- dnscmd /zoneinfo <server> <zone> (Correct answer)
- ipconfig /displaydns
Correct answer: dnscmd /zoneinfo <server> <zone>
Dnscmd /zoneinfo queries a specific DNS server for detailed zone information including the zone type, serial number, and source (AD-integrated vs. file-backed), revealing split-brain configuration.
Question 5: A deployment quality gate requires that all new servers have Windows Firewall profiles correctly configured and only approved rules are active. Which PowerShell cmdlet exports the current firewall rule set for comparison against the approved baseline?
- Get-NetFirewallRule | Export-Csv
- netsh advfirewall export <filename> (Correct answer)
- Export-NetFirewallPolicy
- Backup-NetFirewallProfile
Correct answer: netsh advfirewall export <filename>
Netsh advfirewall export saves the complete Windows Firewall with Advanced Security policy to a .wfw file that can be compared against an approved baseline or imported to other servers.
Question 6: During DR testing, you need to verify that a DFS Replication group is fully synchronized between primary and secondary sites before the DR exercise begins. Which command checks DFS-R backlog between replication partners?
- Dfsrdiag ReplicationState /member:<server>
- Dfsrdiag Backlog /RGName:<group> /RFName:<folder> /SendingMember:<s> /ReceivingMember:<r> (Correct answer)
- Get-DfsrState -ComputerName <server>
- dfscmd /view <namespace>
Correct answer: Dfsrdiag Backlog /RGName:<group> /RFName:<folder> /SendingMember:<s> /ReceivingMember:<r>
Dfsrdiag Backlog reports the number of files pending replication between a specific sending and receiving DFS-R member, confirming whether replication is current before DR testing.
Question 7: A quality control review finds that server deployment scripts are not idempotent — running them twice causes configuration drift. Which Windows Server technology enables idempotent configuration by declaring desired state rather than scripting procedural steps?
- Group Policy Preferences with Replace action
- PowerShell Desired State Configuration (DSC) (Correct answer)
- Windows Server Update Services (WSUS) compliance reporting
- Task Scheduler with conditional triggers
Correct answer: PowerShell Desired State Configuration (DSC)
PowerShell DSC uses declarative configuration documents (MOF files) that the Local Configuration Manager applies idempotently — re-applying only corrects drift without causing duplicate configuration.
A post-deployment audit requires verifying that all servers are enrolled in System Center Operations Manager (SCOM) monitoring.
Which SCOM feature confirms agent health and identifies servers not yet monitored?