FREE Microsoft Designing and Implementing a Server Infrastructure (70-413) Questions and Answers

Question 1

Fifty servers are running Windows Server 2008 Service Pack 2 (SP2), and 50 are running Windows Server 2008 R2 on your network.

-You intend to use Windows Server 2012 R2.
-You must compile a report that has the following details:
-Application and service servers that can be switched to Windows Server 2012 R2
-The computers that contain Windows Server 2012 R2 hardware
-The servers that can be virtualized and are housed on Hyper-V hosts running Windows Server 2012 R2

The solution is to run the Windows Server Migration Tools after installing Windows Server 2012 R2 on a new server. Is the objective being met?

Accepted Answer

Incorrect

Answer

Incorrect. The Windows Server Migration Tools are designed for migrating server roles, features, and data, not for generating comprehensive reports on hardware compatibility, application readiness, or virtualization potential. To compile a detailed report on application/service compatibility, hardware readiness for Windows Server 2012 R2, and virtualization suitability, tools like the Microsoft Assessment and Planning (MAP) Toolkit would be more appropriate.

Question 2

An Active Directory domain with the name contoso.com is present on your network. There are numerous sites on the domain.
-You plan to deploy DirectAccess.
-According to the network security policy, all traffic destined for the Internet must be routed through the business network when client computers join the corporate network from the Internet.
-It would be best to suggest a solution that satisfies the security policy requirements for the intended DirectAccess implementation.
You changed the ISATAP state to disabled as a solution. Is the objective being met?

Accepted Answer

Incorrect

Answer

Incorrect. The security policy requires all Internet-bound traffic to be routed through the business network (force tunneling) when DirectAccess clients connect. Disabling ISATAP primarily affects IPv6 transition within the internal network and does not directly enforce force tunneling for DirectAccess clients. To meet the objective, the DirectAccess configuration itself must be set up for force tunneling, typically by configuring the Name Resolution Policy Table (NRPT) and firewall rules to direct all traffic through the corporate network.

Question 3

An Active Directory forest with the domain contoso.com exists on your network. There are five domains in the woods. You must make sure that the global catalog replicates the CountryCode attribute.
What ought you to do?

Accepted Answer

Modify the schema partition.

Answer

To ensure a specific attribute, such as `CountryCode`, is replicated to the Global Catalog (GC), you must modify the Active Directory schema partition. The schema defines all object classes and attributes in the forest, and marking an attribute for GC replication within the schema makes it searchable across all domains. This allows applications and users to efficiently query that attribute without needing to contact a domain controller in the specific domain where the object resides.

Question 4

The domain adatum.com in Active Directory is present on your network.
-You intend to apply various security settings to several shared PCs in a public area. According to the company's security policy, the security settings should be implemented when any user logs on to public computers.
-You must suggest a Group Policy deployment strategy for the anticipated deployment.
What should the recommendation contain?

Accepted Answer

Loopback processing

Answer

To apply consistent security settings to shared public computers, regardless of which user logs on, loopback processing is the correct Group Policy deployment strategy. Normally, user policies apply to users and computer policies apply to computers. Loopback processing ensures that user policies linked to the computer's Organizational Unit (OU) are applied to any user logging onto that computer, overriding or merging with the user's own OU policies, thus enforcing the desired security configuration.

Question 5

An Active Directory domain with the name contoso.com is present on your network. All domain controllers use Windows Server 2012 R2. Windows Server 2012 is the functional level of the forest.
-Your business intends to roll out an application allowing employees access to a search interface. The employee-number attribute will be searched for in the application's global catalog.
-The program needs to be able to get the employee number value from the global catalog, so you must provide a fix.
What should the recommendation contain?

Accepted Answer

The Ldifde command

Answer

To make the `employee-number` attribute searchable in the Global Catalog, its schema definition must be modified to mark it for replication to the GC. The `Ldifde` command-line tool is used for importing and exporting Active Directory objects and attributes, including schema modifications. It can be used to update the schema to include the `employee-number` attribute in the Global Catalog, making it accessible for the application's search interface.

70-413 Exam Practice Test

70-413 Exam Practice Test

FREE Microsoft Designing and Implementing a Server Infrastructure (70-413) Questions and Answers