Free Designing and Implementing a Server Infrastructure (MS-20413) Questions and Answers — Questions and Answers
Question 1: The new DHCP servers are put into place and given permission. The server and scope configurations are imported from PAl and AMl. Once PAl and AMl have been shut down, you must ensure clients may still get DHCP address assignments. The answer must satisfy the technical specifications. What ought you to do?
- Execute the Get-DhcpServerv4Lease and Add-DhcpServerv4Lease commands. Turn on the scopes. (Correct answer)
- Put the Get-DhcpServerv4Lease and Remove- hcpServerv4Lease commands into action. Activate the Windows Server Migration Tools.
- Activate the scopes by running the Get-DhcpServerv4FreelPAddress and Invoke-DhcpServerv4FailoverReplication cmdlets.
- Run the commands |nvoke-DhcpServerv4FailoverReplication and Get-DhcpServerv4FreelPAddress. Activate the Windows Server Migration Tools.
Correct answer: Execute the Get-DhcpServerv4Lease and Add-DhcpServerv4Lease commands. Turn on the scopes.
To ensure clients can still get DHCP address assignments after old DHCP servers are shut down, it is crucial to migrate existing lease information. The `Get-DhcpServerv4Lease` cmdlet retrieves current leases from the old servers, and `Add-DhcpServerv4Lease` imports these leases into the new DHCP servers. After importing the leases, the scopes on the new servers must be activated to begin assigning IP addresses and ensure uninterrupted service for clients.
Question 2: It would be best if you suggested a management strategy for the GPOs. The answer must satisfy the technical specifications. What should the recommendation contain?
- Microsoft Desktop Optimization Pack (MDOP) (Correct answer)
- Microsoft Baseline Security Analyzer (MBSA)
- Microsoft System Center 2012 Data Protection Manager (DPM)
- "Microsoft System Center 2012 Operations Manager Incorrect."
Correct answer: Microsoft Desktop Optimization Pack (MDOP)
For effective and controlled management of Group Policy Objects (GPOs), the Microsoft Desktop Optimization Pack (MDOP) is the recommended solution. MDOP includes Advanced Group Policy Management (AGPM), which provides robust change management, version control, and delegation capabilities for GPOs. This helps streamline GPO deployment, prevent errors, and facilitate rollbacks, making it an essential tool for a structured GPO management strategy.
Question 3: Planning is underway to shut down research.contoso.com. You must ensure that the user accounts transferred to contoso.com can be managed by an administrator named "AdminS" in the research department. The fewest permissions that are possible must be granted to Admin5. What actions should you take before moving the user accounts?
- Add AdminS to the Account Operators group after creating a new organizational unit (OU)
- Run the Add-ADPrincipalGroupMembership cmdlet after running the New-Object cmdlet
- Run the Add-ADCentralAccessPolicyMember cmdlet after running the New-Object cmdlet
- The Delegation of Control Wizard should be launched after creating a new organizational unit (OU) (Correct answer)
Correct answer: The Delegation of Control Wizard should be launched after creating a new organizational unit (OU)
To grant an administrator (AdminS) the fewest possible permissions to manage user accounts in a specific department after they are moved, you should first create a new Organizational Unit (OU). Then, launch the Delegation of Control Wizard on this new OU. This wizard allows you to delegate specific administrative tasks, such as managing user accounts, to AdminS, adhering to the principle of least privilege.
Question 4: You must suggest modifications to the DNS setup to enable the use of the sales.contoso.com domain. The solution must guarantee that users across all disciplines can resolve Internet and server names across all internal parts. What ought you suggest?
- Create a conditional forwarder for the sales.contoso.com zone on the DNS servers for contoso.com. Adding a forwarder to the DNS servers of the business's ISP on sales.contoso.com will help
- Create a reverse lookup zone on the DNS servers for contoso.com. Create a conditional forwarder to contoso.com on the DNS servers at sales.contoso.com
- Create a conditional forwarder to sales.contoso.com on the DNS servers for contoso.com. Set up a reverse zone on the DNS servers at sales.contoso.com
- Create a zone delegation in the contoso.com zone on the DNS servers for contoso.com. Add a forwarder to the contoso.com DNS servers on the sales.contoso.com DNS servers (Correct answer)
Correct answer: Create a zone delegation in the contoso.com zone on the DNS servers for contoso.com. Add a forwarder to the contoso.com DNS servers on the sales.contoso.com DNS servers
To enable name resolution across contoso.com and sales.contoso.com, a zone delegation is the most effective solution. You should create a zone delegation for sales.contoso.com in the contoso.com DNS zone, which directs queries for sales.contoso.com to its authoritative DNS servers. Additionally, configuring a forwarder on the sales.contoso.com DNS servers to the contoso.com DNS servers ensures that sales.contoso.com can resolve names in the parent domain and access the internet through the corporate DNS infrastructure.
Question 5: Two new servers that will be set up as RADIUS servers are being planned for implementation. It would be best if you suggested the configuration for the VPN servers be used. The answer must satisfy the technical specifications. What actions should you take on every VPN server?
- Install the Health Registration Authority role service.
- Add a RADIUS client.
- Modify the authentication provider. (Correct answer)
- Enable DirectAccess.
Correct answer: Modify the authentication provider.
When implementing new RADIUS servers for authentication, each VPN server must be configured to use these new servers as its authentication provider. This involves modifying the authentication settings on the VPN servers to point to the newly deployed RADIUS servers. This ensures that all VPN client connection requests are correctly forwarded to the RADIUS servers for centralized authentication and authorization.
Question 6: Before deploying the new web application, you must suggest which network changes must be made. What should the recommendation contain?
- Switch to Windows Server 2012 for the DNS servers.
- Windows Server 2008 R2 should be used at the forest functional level.
- The domain controllers should be upgraded to Windows Server 2012. (Correct answer)
- Windows Server 2008 R2 should be set as the domains' functional level.
Correct answer: The domain controllers should be upgraded to Windows Server 2012.
To support a new web application, especially one that might leverage modern Active Directory features or security enhancements, it is often necessary to upgrade the domain controllers. Upgrading domain controllers to Windows Server 2012 (or 2012 R2) allows for raising the domain and forest functional levels. This unlocks new Active Directory capabilities, improves security, and ensures better compatibility and performance for newer applications.
Question 7: It would be best if you suggested a VPN solution that is fault-tolerant. The answer must satisfy the technical specifications. What should the recommendation contain?
- Network Load Balancing (NLB) (Correct answer)
- Network adapter teaming
- DirectAccess
- Failover Clustering
Correct answer: Network Load Balancing (NLB)
For a fault-tolerant VPN solution, Network Load Balancing (NLB) is the appropriate recommendation. NLB distributes incoming VPN client connections across multiple VPN servers, ensuring high availability and resilience. If one VPN server fails, other servers in the NLB cluster can continue to handle the load, preventing service interruptions for remote users.
Free Designing and Implementing a Server Infrastructure (MS-20413) Questions and Answers
The new DHCP servers are put into place and given permission.
The server and scope configurations are imported from PAl and AMl.
Once PAl and AMl have been shut down, you must ensure clients may still get DHCP address assignments.
The answer must satisfy the technical specifications.
What ought you to do?