Free Microsoft Designing and Implementing a Server Infrastructure (70-413) Questions and Answers — Questions and Answers
Question 1: Fifty servers are running Windows Server 2008 Service Pack 2 (SP2), and 50 are running Windows Server 2008 R2 on your network. <br> <br> -You intend to use Windows Server 2012 R2. <br> -You must compile a report that has the following details: <br> -Application and service servers that can be switched to Windows Server 2012 R2 <br> -The computers that contain Windows Server 2012 R2 hardware <br> -The servers that can be virtualized and are housed on Hyper-V hosts running Windows Server 2012 R2 <br> <br> The solution is to run the Windows Server Migration Tools after installing Windows Server 2012 R2 on a new server. Is the objective being met?
- Correct
- Incorrect (Correct answer)
Correct answer: Incorrect
Incorrect. The Windows Server Migration Tools are designed for migrating server roles, features, and data, not for generating comprehensive reports on hardware compatibility, application readiness, or virtualization potential. To compile a detailed report on application/service compatibility, hardware readiness for Windows Server 2012 R2, and virtualization suitability, tools like the Microsoft Assessment and Planning (MAP) Toolkit would be more appropriate.
Question 2: An Active Directory domain with the name contoso.com is present on your network. There are numerous sites on the domain. <br> -You plan to deploy DirectAccess. <br> -According to the network security policy, all traffic destined for the Internet must be routed through the business network when client computers join the corporate network from the Internet. <br> -It would be best to suggest a solution that satisfies the security policy requirements for the intended DirectAccess implementation. <br> You changed the ISATAP state to disabled as a solution. Is the objective being met?
- Correct
- Incorrect (Correct answer)
Correct answer: Incorrect
Incorrect. The security policy requires all Internet-bound traffic to be routed through the business network (force tunneling) when DirectAccess clients connect. Disabling ISATAP primarily affects IPv6 transition within the internal network and does not directly enforce force tunneling for DirectAccess clients. To meet the objective, the DirectAccess configuration itself must be set up for force tunneling, typically by configuring the Name Resolution Policy Table (NRPT) and firewall rules to direct all traffic through the corporate network.
Question 3: An Active Directory forest with the domain contoso.com exists on your network. There are five domains in the woods. You must make sure that the global catalog replicates the CountryCode attribute. <br> What ought you to do?
- Modify the domain partitions.
- Modify the configuration partition.
- Create and modify an application partition.
- Modify the schema partition. (Correct answer)
Correct answer: Modify the schema partition.
To ensure a specific attribute, such as `CountryCode`, is replicated to the Global Catalog (GC), you must modify the Active Directory schema partition. The schema defines all object classes and attributes in the forest, and marking an attribute for GC replication within the schema makes it searchable across all domains. This allows applications and users to efficiently query that attribute without needing to contact a domain controller in the specific domain where the object resides.
Question 4: The domain adatum.com in Active Directory is present on your network. <br> -You intend to apply various security settings to several shared PCs in a public area. According to the company's security policy, the security settings should be implemented when any user logs on to public computers. <br> -You must suggest a Group Policy deployment strategy for the anticipated deployment. <br> What should the recommendation contain?
- WMI filtering
- Security filtering
- Loopback processing (Correct answer)
- Block inheritance
Correct answer: Loopback processing
To apply consistent security settings to shared public computers, regardless of which user logs on, loopback processing is the correct Group Policy deployment strategy. Normally, user policies apply to users and computer policies apply to computers. Loopback processing ensures that user policies linked to the computer's Organizational Unit (OU) are applied to any user logging onto that computer, overriding or merging with the user's own OU policies, thus enforcing the desired security configuration.
Question 5: An Active Directory domain with the name contoso.com is present on your network. All domain controllers use Windows Server 2012 R2. Windows Server 2012 is the functional level of the forest. <br> -Your business intends to roll out an application allowing employees access to a search interface. The employee-number attribute will be searched for in the application's global catalog. <br> -The program needs to be able to get the employee number value from the global catalog, so you must provide a fix. <br> What should the recommendation contain?
- The Csvde command
- The Set-ADUser cmdlet
- The Ldifde command (Correct answer)
- The Set-ADServerSettings cmdlet
Correct answer: The Ldifde command
To make the `employee-number` attribute searchable in the Global Catalog, its schema definition must be modified to mark it for replication to the GC. The `Ldifde` command-line tool is used for importing and exporting Active Directory objects and attributes, including schema modifications. It can be used to update the schema to include the `employee-number` attribute in the Global Catalog, making it accessible for the application's search interface.
Question 6: You work as the administrator for a sizable business. You want to set up environments on servers that don't require local hard drives. It would help if you suggested a storage option that is approved. <br> Which technologies ought you suggest?
- Clustered NAS
- Cloud storage
- Fibre Channel SAN (Correct answer)
- Server Message Block (SMB) Scale-out File Servers
Correct answer: Fibre Channel SAN
For servers that do not require local hard drives and need high-performance, centralized storage, a Fibre Channel SAN (Storage Area Network) is an approved and highly effective solution. Fibre Channel SANs provide dedicated, high-speed block-level access to shared storage, making them ideal for scenarios like boot-from-SAN for diskless servers and virtualized environments where performance and reliability are paramount.
Question 7: There are three branch offices and a central office for your business. North America is where the main office is situated. The satellite offices are spread across Europe, Asia, and South America. <br> -You want to create a domain and forest infrastructure for Active Directory. <br> -The following specifications for an Active Directory design must be met: <br> <br> -Users in the other offices must only be able to see the contact details of some users in the Europe office. <br> -The user and computer settings of the users in each office must be under the authority of the administrators in that office. <br> -A custom application with the name App1 must be deployable by the administrators at the Asia office. Active Directory has to be modified to accommodate App1. <br> <br> The answer must involve the least amount of administrative work possible. <br> What should the recommendation contain?
- Four forests that each contain one domain
- Two forests that each contain one domain
- One forest that contains four domains
- One forest that contains one domain (Correct answer)
Correct answer: One forest that contains one domain
To meet the specified requirements with the least administrative work, a single forest with a single domain is the most efficient Active Directory design. Organizational Units (OUs) can be created for each office, allowing local administrators to manage user and computer settings within their respective OUs through delegated permissions. Specific visibility restrictions for Europe office users can be handled with address book policies or attribute-level permissions, while schema extensions for App1 are forest-wide.
Free Microsoft Designing and Implementing a Server Infrastructure (70-413) Questions and Answers
Fifty servers are running Windows Server 2008 Service Pack 2 (SP2), and 50 are running Windows Server 2008 R2 on your network.
-You intend to use Windows Server 2012 R2.
-You must compile a report that has the following details:
-Application and service servers that can be switched to Windows Server 2012 R2
-The computers that contain Windows Server 2012 R2 hardware
-The servers that can be virtualized and are housed on Hyper-V hosts running Windows Server 2012 R2
The solution is to run the Windows Server Migration Tools after installing Windows Server 2012 R2 on a new server.
Is the objective being met?