Free Designing and Implementing a Server Infrastructure (70-413) Questions and Answers — Questions and Answers
Question 1: Which domain functional levels can't be utilized with a practical forest level of Windows Server 2012?
- Windows Server 2008 (Correct answer)
- Windows Server 2003 (Correct answer)
- Windows Server 2012
- Windows Server 2008 R2 (Correct answer)
Correct answer: Windows Server 2008
A forest functional level sets the minimum domain functional level allowed in that forest, so a Windows Server 2012 forest level cannot include any domain at a lower level like Windows Server 2008. Windows Server 2012 domains are allowed because they meet (and don't fall below) the forest's minimum.
Question 2: What further action is necessary to enable the admin tools after installing RSAT for Windows 8.1?
- Activate the administrative tools in Windows
- Reboot
- Nothing (Correct answer)
- Run GPupdate /force
Correct answer: Nothing
On Windows 8.1, RSAT tools are enabled automatically once the installation completes, so no further action is required. You don't need to reboot, run GPupdate, or manually turn the tools on via Windows Features as you did with older RSAT packages.
Question 3: A central office and numerous sizable branch offices are part of your network. The configuration of each office is set up as a distinct child domain of the fiprint.com domain. Relatively sluggish cables connect the offices. There is occasionally a long wait when authenticating users who belong to universal groups on other domains. The effectiveness of authentication needs to be raised. The solution's bandwidth requirements should be kept to a minimum. <br> <br> What should you do?
- For each site, set up a Password Replication Policy (PRP)
- In each branch site, configure a global catalogue server
- In each branch site, turn on Universal Group Membership Caching (Correct answer)
- Enable hash publication for each site.
Correct answer: In each branch site, turn on Universal Group Membership Caching
Explanation: <br> To improve authentication performance in a multi-domain environment with slow links, where delays occur when authenticating users with membership in universal groups in other domains, you should enable Universal Group Membership Caching in each branch site. <br> <br> Universal Group Membership Caching is a feature in Active Directory that allows the caching of universal group memberships for users who log on to a domain controller in a site. This reduces the number of cross-domain queries that need to be performed over the slow links and, therefore, can improve the authentication performance.
Question 4: Why might you want to set up or maintain a Kerberos delegation?
- To give access to a Kerberos realm trust
- To provide an Active Directory user administrative rights
- To authenticate users from UNIX systems
- To permit a service to carry out authentication on a user's behalf (Correct answer)
Correct answer: To permit a service to carry out authentication on a user's behalf
Kerberos delegation allows a service to authenticate to other resources on a user's behalf, which is essential for multi-tier applications that make additional hops (e.g., a web server accessing a database as the user). It is not about realm trusts, granting admin rights, or authenticating UNIX users — those involve different mechanisms.
Question 5: How can you ensure a particular configuration is used on a computer regardless of who is using it now?
- Loopback processing (Correct answer)
- Enforced policies
- Security filtering
- WMI filtering
Correct answer: Loopback processing
Loopback processing forces the computer's assigned user-policy settings to apply to anyone who logs on, regardless of the user's own OU. Enforced policies, security filtering, and WMI filtering control which GPOs apply or override, but only loopback guarantees a consistent per-computer configuration for all users.
Question 6: With the Hyper-V role installed, you are configuring a host cluster on a machine running Microsoft Windows Server 2012 R2. The host cluster is being set up using System Center 2012 R2 Virtual Machine Manager (VMM). <br> <br> The cluster virtual machines' operating system and shared storage files will be stored on a Windows Server 2012 R2. To avoid moving the shared storage.vhdx file to HDD storage, ensure it stays on an SSD disk. <br> What should you do?
- Run Reset-PhysicalDisk
- Run Set-FileStorageTier (Correct answer)
- Run Set-PhysicalDisk
- Run Optimize-Volume
Correct answer: Run Set-FileStorageTier
To ensure the shared storage .vhdx file remains on an SSD disk, you should use the `Set-FileStorageTier` cmdlet. This PowerShell command allows administrators to explicitly assign files to specific storage tiers, such as SSD (for performance) or HDD (for capacity), within a Storage Spaces Direct or tiered storage configuration. This ensures critical VM files benefit from the higher performance of SSDs, preventing them from being moved to slower HDD storage.
Question 7: What advantage does a simultaneous migration from Forefront UAG DirectAccess to Windows Server 2012 offer?
- The migration process is automated.
- IP addresses and FQDNs can be reused.
- No downtime is required. (Correct answer)
- New certificates do not need to be issued.
Correct answer: No downtime is required.
A simultaneous migration from Forefront UAG DirectAccess to Windows Server 2012 DirectAccess offers the advantage of no downtime. This is achieved by deploying the new DirectAccess server alongside the existing UAG server, allowing for a gradual transition of clients. Clients can be seamlessly migrated to the new infrastructure without interrupting their remote connectivity, ensuring continuous service availability throughout the process.
Free Designing and Implementing a Server Infrastructure (70-413) Questions and Answers
Which domain functional levels can't be utilized with a practical forest level of Windows Server 2012?