70-413 Exam Technology & Digital Applications 3 — Questions and Answers
Question 1: Your company is deploying Remote Desktop Services. Which role service must you install to allow users to launch applications through a web browser without installing an RDP client?
- RD Web Access (Correct answer)
- RD Gateway
- RD Connection Broker
- RD Session Host
Correct answer: RD Web Access
RD Web Access provides a website from which users can launch RemoteApp programs and Remote Desktop connections using a browser.
Question 2: A company uses Windows Server Update Services (WSUS). An administrator notices client computers are not receiving updates. Which tool should be run on a client to force a detection cycle?
- wuauclt /detectnow (Correct answer)
- gpupdate /force
- wsusutil reset
- sfc /scannow
Correct answer: wuauclt /detectnow
wuauclt /detectnow (or usoclient StartScan on newer OS) forces the Windows Update Agent to contact WSUS immediately for new updates.
Question 3: You need to host multiple HTTPS websites on a single IIS server using one IP address and port 443. Which IIS 8 feature enables this?
- Server Name Indication (SNI) (Correct answer)
- IP-based SSL bindings
- URL Rewrite module
- Application Request Routing
Correct answer: Server Name Indication (SNI)
SNI allows multiple SSL certificates to be bound to the same IP/port combination by including the hostname in the TLS handshake.
Question 4: An organization wants to limit which applications can run on Windows servers. Which Windows Server feature enforces executable whitelisting using publisher, path, or hash rules?
- AppLocker (Correct answer)
- Software Restriction Policies
- Windows Defender Application Control
- User Account Control
Correct answer: AppLocker
AppLocker provides granular application control policies using publisher, path, or file hash conditions applied per user or group.
Question 5: A web application needs to scale horizontally. You add a second IIS server behind NLB, but users report being logged out randomly. What is the most likely cause?
- The machine keys differ between the two IIS servers
- NLB affinity is set to none
- Both A and B are equally likely causes (Correct answer)
- The application pool identity differs between servers
Correct answer: Both A and B are equally likely causes
Without matching machine keys, ASP.NET cannot decrypt session cookies created on the other server, and without affinity, requests round-robin between nodes — both cause logouts.
Question 6: You are designing a deployment strategy for a Windows Server application using SCCM. Which deployment type provides the most control over per-user installation versus per-device installation?
- Application model with deployment type set to user or device (Correct answer)
- Package and program with installation command
- Task sequence with OS deployment
- Software update group deployment
Correct answer: Application model with deployment type set to user or device
The SCCM Application model supports distinct deployment types targeting users or devices, enabling flexible scoping unlike the legacy Package model.
Question 7: A company wants employees to access corporate applications on personal devices without enrolling the device in domain management. Which Windows Server 2012 R2 solution supports this Workplace Join scenario?
- Active Directory Federation Services (AD FS) with Device Registration Service (Correct answer)
- Active Directory Certificate Services (AD CS)
- Remote Desktop Gateway with NAP
- DirectAccess with force tunneling
Correct answer: Active Directory Federation Services (AD FS) with Device Registration Service
AD FS with Device Registration Service allows personal devices to register and receive a device certificate, enabling conditional access to corporate apps without full MDM enrollment.
70-413 Exam Technology & Digital Applications 3
Your company is deploying Remote Desktop Services.
Which role service must you install to allow users to launch applications through a web browser without installing an RDP client?