FREE Designing and Implementing a Server Infrastructure (MS-20413) Questions and Answers

Question 1

The new DHCP servers are put into place and given permission. The server and scope configurations are imported from PAl and AMl. Once PAl and AMl have been shut down, you must ensure clients may still get DHCP address assignments. The answer must satisfy the technical specifications. What ought you to do?

Accepted Answer

Execute the Get-DhcpServerv4Lease and Add-DhcpServerv4Lease commands. Turn on the scopes.

Answer

To ensure clients can still get DHCP address assignments after old DHCP servers are shut down, it is crucial to migrate existing lease information. The `Get-DhcpServerv4Lease` cmdlet retrieves current leases from the old servers, and `Add-DhcpServerv4Lease` imports these leases into the new DHCP servers. After importing the leases, the scopes on the new servers must be activated to begin assigning IP addresses and ensure uninterrupted service for clients.

Question 2

It would be best if you suggested a management strategy for the GPOs. The answer must satisfy the technical specifications. What should the recommendation contain?

Accepted Answer

Microsoft Desktop Optimization Pack (MDOP)

Answer

For effective and controlled management of Group Policy Objects (GPOs), the Microsoft Desktop Optimization Pack (MDOP) is the recommended solution. MDOP includes Advanced Group Policy Management (AGPM), which provides robust change management, version control, and delegation capabilities for GPOs. This helps streamline GPO deployment, prevent errors, and facilitate rollbacks, making it an essential tool for a structured GPO management strategy.

Question 3

Planning is underway to shut down research.contoso.com. You must ensure that the user accounts transferred to contoso.com can be managed by an administrator named "AdminS" in the research department. The fewest permissions that are possible must be granted to Admin5. What actions should you take before moving the user accounts?

Accepted Answer

The Delegation of Control Wizard should be launched after creating a new organizational unit (OU)

Answer

To grant an administrator (AdminS) the fewest possible permissions to manage user accounts in a specific department after they are moved, you should first create a new Organizational Unit (OU). Then, launch the Delegation of Control Wizard on this new OU. This wizard allows you to delegate specific administrative tasks, such as managing user accounts, to AdminS, adhering to the principle of least privilege.

Question 4

You must suggest modifications to the DNS setup to enable the use of the sales.contoso.com domain. The solution must guarantee that users across all disciplines can resolve Internet and server names across all internal parts. What ought you suggest?

Accepted Answer

Create a zone delegation in the contoso.com zone on the DNS servers for contoso.com. Add a forwarder to the contoso.com DNS servers on the sales.contoso.com DNS servers

Answer

To enable name resolution across contoso.com and sales.contoso.com, a zone delegation is the most effective solution. You should create a zone delegation for sales.contoso.com in the contoso.com DNS zone, which directs queries for sales.contoso.com to its authoritative DNS servers. Additionally, configuring a forwarder on the sales.contoso.com DNS servers to the contoso.com DNS servers ensures that sales.contoso.com can resolve names in the parent domain and access the internet through the corporate DNS infrastructure.

Question 5

Two new servers that will be set up as RADIUS servers are being planned for implementation. It would be best if you suggested the configuration for the VPN servers be used. The answer must satisfy the technical specifications. What actions should you take on every VPN server?

Accepted Answer

Modify the authentication provider.

Answer

When implementing new RADIUS servers for authentication, each VPN server must be configured to use these new servers as its authentication provider. This involves modifying the authentication settings on the VPN servers to point to the newly deployed RADIUS servers. This ensures that all VPN client connection requests are correctly forwarded to the RADIUS servers for centralized authentication and authorization.

70-413 Exam Practice Test

70-413 Exam Practice Test

FREE Designing and Implementing a Server Infrastructure (MS-20413) Questions and Answers