Free Designing and Implementing a Server Infrastructure (70-413) Questions and Answers

Question 1

Which domain functional levels can't be utilized with a practical forest level of Windows Server 2012?

Accepted Answer

Windows Server 2008

Answer

A forest functional level sets the minimum domain functional level allowed in that forest, so a Windows Server 2012 forest level cannot include any domain at a lower level like Windows Server 2008. Windows Server 2012 domains are allowed because they meet (and don't fall below) the forest's minimum.

Question 2

What further action is necessary to enable the admin tools after installing RSAT for Windows 8.1?

Accepted Answer

Nothing

Answer

On Windows 8.1, RSAT tools are enabled automatically once the installation completes, so no further action is required. You don't need to reboot, run GPupdate, or manually turn the tools on via Windows Features as you did with older RSAT packages.

Question 3

A central office and numerous sizable branch offices are part of your network. The configuration of each office is set up as a distinct child domain of the fiprint.com domain. Relatively sluggish cables connect the offices. There is occasionally a long wait when authenticating users who belong to universal groups on other domains. The effectiveness of authentication needs to be raised. The solution's bandwidth requirements should be kept to a minimum.

What should you do?

Accepted Answer

In each branch site, turn on Universal Group Membership Caching

Answer

Explanation:
To improve authentication performance in a multi-domain environment with slow links, where delays occur when authenticating users with membership in universal groups in other domains, you should enable Universal Group Membership Caching in each branch site.

Universal Group Membership Caching is a feature in Active Directory that allows the caching of universal group memberships for users who log on to a domain controller in a site. This reduces the number of cross-domain queries that need to be performed over the slow links and, therefore, can improve the authentication performance.

Question 4

Why might you want to set up or maintain a Kerberos delegation?

Accepted Answer

To permit a service to carry out authentication on a user's behalf

Answer

Kerberos delegation allows a service to authenticate to other resources on a user's behalf, which is essential for multi-tier applications that make additional hops (e.g., a web server accessing a database as the user). It is not about realm trusts, granting admin rights, or authenticating UNIX users — those involve different mechanisms.

Question 5

How can you ensure a particular configuration is used on a computer regardless of who is using it now?

Accepted Answer

Loopback processing

Answer

Loopback processing forces the computer's assigned user-policy settings to apply to anyone who logs on, regardless of the user's own OU. Enforced policies, security filtering, and WMI filtering control which GPOs apply or override, but only loopback guarantees a consistent per-computer configuration for all users.

70-413 Exam Practice Test

70-413 Exam Practice Test

Free Designing and Implementing a Server Infrastructure (70-413) Questions and Answers