Introducing The New!
Surepassexam Collection
Get Unlimited Access to all
Surepassexam's PREMIUM files
P.S. High value 70-410 lab are available on Google Drive, GET MORE: https://drive.google.com/open?id=16ut0voxG5Ce_wyqo4CtkFBe9CQR5t74p
Q1. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2.
You create a group Managed Service Account named gservice1.
You need to configure a service named Service1 to run as the gservice1 account. How should you configure Service1?
A. From the Services console, configure the Log On settings.
B. From a command prompt, run sc.exe and specify the privs parameter.
C. From a command prompt, run sc.exe and specify the sdset parameter.
D. From Windows PowerShell, run Set-Service and specify the -StartupType parameter.
Answer: C
Explanation:
Setting permissions on specific services can be achieved by using the sc command. The sc command has two parameters for this task:
sdshow u2013 Displays the security descriptor for a specific service sdset u2013 Changes the security descriptor for a service
To set permissions use the following syntax:
sc <server> sdset <service name> <SD in SDDL format>
Reference: SET PERMISSIONS ON A SPECIFIC SERVICE (WINDOWS)
http://blogs.msmvps.com/erikr/2007/09/26/set-permissions-on-a-specific-service-windows/
Q2. Your network contains one Active Directory forest named contoso.com. The forest contains two child domains named east.contoso.com and west.contoso.com.
Your user account is a member of the Domain Admins group in all of the domains. The account is not a member of any other groups.
The contoso.com domain contains a Group Policy object (GPO) named DesktopGPO. DesktopGPO is applied to the following containers.
u2711 An organizational unit (OU) named ALLUsers in contoso.com
u2711 An OU named Marketing in east.contoso.com
u2711 The east.contoso.com domain
u2711 The contoso.com domain
u2711 A site named Corporate
You delete DesktopGPO.
You need to identify which Group Policy links must be removed manually.
Which three GPO links should you identify? Each correct answer presents part of the solution.
A. a site named Corporate
B. the AllUsers OU in contoso.com
C. the contoso.com domain
D. the east.contoso.com domain
E. the Marketing OU in east.contoso.com
Answer: A,D,E
Explanation:
When you delete a GPO, Group Policy Management attempts to delete all links to that GPO in the domain of the GPO. However, to delete a link to a GPO, you must have permission to link Group Policy objects for the organizational unit or domain. If you do not have rights to delete a link, the GPO will be deleted, but the link will remain. Links from other domains and sites are not deleted. The link to a deleted GPO appears in Group Policy Management as Not Found.
Reference: Create or delete a Group Policy object https://technet.microsoft.com/en-us/library/cc776678(v=ws.10).aspx
Q3. You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 installed.
A server named, ENSUREPASS-SR13, has a Server Core Installation of Windows Server 2012 installed.
You are instructed to convert ENSUREPASS-SR13u2021s installation to a Server with GUI installation.
You want to use a Windows PowerShell cmdlet that uses Windows Update as a source. Which of the following actions should you take?
A. You should consider making use of the Install-WindowsFeature Server-Gui-Mgmt-Infra, Server-Gui-Shell - Restart cmdlet.
B. You should consider making use of the Install-WindowsFeature Server-Gui-Mgmt-Infra, Server-Gui-Shell - Restart -Source c:\mountdir\windows\winsxs cmdlet.
C. You should consider making use of the Uninstall-WindowsFeature Server-Gui- Shellu2013Remove cmdlet.
D. You should consider making use of the Set-ExecutionPolicy cmdlet.
Answer: A
Explanation:
The default installation source is Windows Update (provided that the server is connected to the internet).
The Full GUI Server Interface provides you with the full GUI of Windows Server 2012 R2. PowerShell Command: Install-WindowsFeature Server-Gui-Mgmt-Infra, Server-Gui-Shell.
When itu2021s done, we will need to restart our server by using the Shutdown command: shutdown -r -t 0.
Q4. Your network contains one Active Directory domain named contoso.com. The domain
contains 10 domain controllers and a read-only domain controller (RODC) named RODC01.
You need to ensure that when administrators create users in contoso.com, the default user principal name (UPN) suffix is litwareinc.com.
Which cmdlet should you use?
A. the ntdsutil command
B. the Set-ADDomain cmdlet
C. the Install-ADDSDomain cmdlet
D. the dsadd command
E. the dsamain command
F. the dsmgmt command
G. the net user command
H. the Set-ADForest cmdlet
Answer: G
Explanation:
The following example demonstrates how to create a new UPN suffix for the users in the Fabrikam.com forest:
Set-ADForest -UPNSuffixes @{Add="headquarters.fabrikam.com"}
Reference: Creating a UPN Suffix for a Forest https://technet.microsoft.com/sv-se/library/Dd391925(v=WS.10).aspx
Q5. You have a Hyper-V host named Server1 that runs Windows Server 2012 R2.
Server1 hosts several virtual machines. Each virtual machine has two network adapters. Server1 contains several virtual switches.
On Server1, you create a NIC team that has two network adapters. You discover that the NIC team is set to Static Teaming mode. You need to modify the NIC teaming mode to Switch Independent. Which cmdlet should you use?
A. Set-VMNetworkAdapter
B. Set-NetLbfoTeam
C. Set-NetLbfoTeamNic
D. Set-VMSwitch
Answer: B
Explanation:
The Set-NetLbfoTeam cmdlet sets the TeamingMode or LoadBalancingAlgorithm parameters on the specified NIC team.
Example: Set the teaming mode
This command sets the teaming mode of the team named Team1 to LACP.
Windows PowerShell
PS C:\> Set-NetLbfoTeam -Name Team1 u2013TeamingMode LACP
Reference: Set-NetLbfoTeam
https://technet.microsoft.com/en-us/library/jj130844(v=wps.630).aspx
Q6. Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01.
The domain contains an administrator account named Admin1.
You need to prevent Admin1 from creating more than 100 objects in the domain partition. Which tool should you use?
A. the ntdsutil command
B. the Set-ADDomain cmdlet
C. the Install-ADDSDomain cmdlet
D. the dsadd command
E. the dsamain command
F. the dsmgmt command
G. the net user command
H. the Set-ADForest cmdlet
Answer: D
Explanation:
Active Directory quotas are limits on the number of objects that a security principal (that has been delegated the Create Child Objects or Delete Child Objects permission) can own and create.
To assign a quota to a security principal, you must use the directory services tools. The command and required parameters for assigning a quota to a security principal are as follows:
dsadd quota u2013part <partition distinguished name> u2013qlimit <quotalimit> u2013acct <security prinicipal>
Reference: Active Directory Quotas https://technet.microsoft.com/en-us/library/cc904295(v=ws.10).aspx
Q7. Your directory contains one AD domain named contoso.com.
The domain contains 10 DC that run WS2012R2. 8 DC are writable DC.
You need to deploy several read-only DC in contoso by using pre-staged computer accounts. Which two tasks should you perform? Each correct answer presents part of solution.
A. Run the Add-AddsReadOnlyDomainControlleraccount cmdlet.
B. Create an authentication policy silo.
C. Create an authentication policy.
D. Run the Install-AddsDomainControler cmdlet.
E. Run the adprep /rodcprep command
F. Join the servers to contoso.com.
Answer: A,D
Q8. Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01.
You plan to replace a domain controller named DC1. DC1 has the schema operations master role.
You need to transfer the schema master role to another domain controller named DC10 before you remove Active Directory from DC1.
Which tool should you use?
A. the ntdsutil command
B. the Set-ADDomain cmdlet
C. the Install-ADDSDomain cmdlet
D. the dsadd command
E. the dsamain command
F. the dsmgmt command
G. the net user command
H. the Set-ADForest cmdlet
Answer: A
Explanation:
To transfer the schema master role using the command line:
u2711 Open Command Prompt.
u2711 Type:
ntdsutil
u2711 At the ntdsutil command prompt, type:
roles
u2711 At the fsmo maintenance command prompt, type:
connection
u2711 At the server connections command prompt, type:
connect to serverDomainController
u2711 At the server connections command prompt, type:
quit
u2711 At the fsmo maintenance command prompt, type:
transfer schema master
Reference: Transfer the schema master role
Q9. A companyu2021s server deployment team needs to install fourteen Windows Server 2012 R2 to handle the expected increase in holiday traffic. The team would like the option of switching the servers between Server Core and Full GUI servers and do not want to be locked in to their first choice.
The server team would like four of the servers to include the Windows 8 Shell. Which installation option is required for these servers?
A. Server Core
B. Desktop Experience
C. Server with a GUI
D. Minimal Server Interface
Answer: B
Explanation:
The Desktop Experience installation option includes the Windows 8 Shell feature. This installation option also includes other features available for installation not found in the other three; such as Themes, Windows Store and support for Windows Store apps, and Windows Media Player.
Quick Tip: To completely remove a feature and the binary files from the disk, use the Windows PowerShell command Uninstall-WindowsFeature. For example, to remove Desktop Experience:
Uninstall-WindowsFeature Desktop-Experience u2013Remove.
Q10. You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2 installed.
Contoso.com has a server, named ENSUREPASS-SR13. ENSUREPASS-SR13 hosts a shared folder, named ENSUREPASSShare, which has been shared as ENSUREPASSShare$.
Which of the following is TRUE with regards to sharing the folder in this manner?
A. It allows all users to view ENSUREPASSShare when browsing the network.
B. It prevents users from viewing ENSUREPASSShare when browsing the network.
C. It only allows ENSUREPASS-SR13u2021s users to view ENSUREPASSShare.
D. It removes the permissions configured for ENSUREPASSShare.
Answer: B
100% Refresh Microsoft 70-410 Questions & Answers shared by Thedumpscentre, Get HERE: http://www.thedumpscentre.com/70-410-dumps/ (New 479 Q&As)