Get all details of Microsoft Certified IT Professional MCITP Certification 70-413-questions. Get Microsoft Certified IT Professional Now.
Question: 32
You need to ensure that NAP meets the technical requirements.
Which role services should you install?
A. Network Policy Server, Health Registration Authority and Host Credential Authorization Protocol
B. Health Registration Authority, Host Credential Authorization Protocol and Online Responder
C. Certification Authority, Network Policy Server and Health Registration Authority
D. Online Responder, Certification Authority and Network Policy Server
Answer: C
Explanation
Explanation/Reference:
Explanation:
* Scenario:
Implement Network Access Protection (NAP).
Ensure that NAP with IPSec enforcement can be configured.
* Health Registration Authority Applies To: Windows Server 2008 R2, Windows Server 2012 Health Registration Authority (HRA) is a component of a Network Access Protection (NAP) infrastructure that plays a central role in NAP Internet Protocol security (IPsec) enforcement. HRA obtains health certificates on behalf of NAP clients when they are compliant with network health requirements. These health certificates authenticate NAP clients for IPsec-protected communications with other NAP clients on an intranet. If a NAP client does not have a health certificate, the IP sec peer authentication fails and the NAP client cannot initiate communication with other IPsecprotected computers on the network. HRA is installed on a computer that is also running Network Policy Server (NPS) and Internet Information Services (IIS). If they are not already installed, these services will be added when you install HRA.
Reference: Health Registration Authority
Question : 31
After the planned upgrade to Windows Server 2012, you restore a user account from the Active Directory Recycle Bin.You need to replicate the restored user account as quickly as possible.Which cmdlets should you run?
A. Get-ADReplicationSite and Set-ADReplicationConnection
B. Get-ADReplicationAttributeMetadata and Compare-Object
C. Get-ADReplicationUpToDatenessVectorTable and Set-ADReplicationSite
D. Get ADDomainController and Sync-ADObject
Answer : D
Question : 30
You need to recommend a solution for DHCP logging. The solution must meet the technical requirement.What should you include in the recommendation?
A. Event subscriptions
B. IP Address Management (IPAM)
C. DHCP audit logging
D. DHCP filtering
Answer : B
Question : 21
You implement and authorize the new DHCP servers. You import the server configurations and the scope configurations from PA1 and AM1.You need to ensure that clients can obtain DHCP address assignments after you shut down PA1 and AM1.The solution must meet the technical requirements.What should you do?
A. Run the Get-DhcpServerv4Lease cmdlet and the Remove-DhcpServerv4Lease cmdlet. Run the Windows Server Migration Tools.
B. Run the Get-DhcpServerv4Lease cmdlet and the Add-DhcpServerv4Lease cmdlet. Activate the scopes.
C. Run the Get-DhcpServerv4FreeIPAddress cmdlet and the Invoke- DhcpServerv4FailoverReplication cmdlet. Run the Windows Server Migration Tools.
D. Run the Get-DhcpServerv4FreeIPAddress cmdlet and the Invoke- DhcpServerv4FailoverReplication cmdlet Activate the scopes.
Answer : B
Question : 20
You plan to deploy multiple servers in a test environment by using Windows Deployment Services (WDS).You need to identify which network services must be available in the test environment to deploy the servers. Which network services should you identify?(Each correct answer presents part of the solution.Choose ail that apply.)
A. DHCP
B. Active Directory Domain Services (AD DS)
C. DNS
D. Active Directory Lightweight Directory Services (AD LDS)
E. WINS
F. Network Policy Server (NPS)
Answer : AC
Question : 19
Your network contains an Active Directory forest named contoso.com.You plan to deploy 200 Hyper-V hosts by using Microsoft System Center 2012 Virtual Machine Manager (VMM) Service Pack 1 (SP1).You add a PXE server to the fabric.You need to identify which objects must be added to the VMM library for the planned deployment.What should you identify? (Each correct answer presents part of the solution. Choose all that apply.)
A. A host profile
B. A capability profile
C. A hardware profile
D. A generalized image
E. A service template
Answer : AD
Question : 18
Your network contains an Active Directory domain named contoso.com.The domain contains multiple sites.You plan to deploy DirectAccess. The network security policy states that when client computers connect to the corporate network from the Internet, all of the traffic destined for the Internet must be routed through the corporate network.You need to recommend a solution for the planned DirectAccess deployment that meets the security policy requirement.What should you include in the recommendation?
A. Set the ISATAP State to state enabled.
B. Enable split tunneling.
C. Set the ISATAP State to state disabled.
D. Enable force tunneling.
Answer : D
Question : 17
Your network contains an Active Directory domain named contoso.com. On several organizational units (OUs), an administrator named Admin1 plans to delegate control of custom tasks.You need to ensure that Admin1 can delegate a custom task named Task1 by using the Delegation of Control Wizard.What should you do?
A. Add a new class to the Active Directory schema.
B. Configure a custom MMC console.
C. Modify the Delegwiz.inf file.
D. Configure a new authorization store by using Authorization Manager.
Answer : C
Question : 16
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. The forest functional level is Windows Server 2012.Your company plans to deploy an application that will provide a search interface to users in the company. The application will query the global catalog for the Employee-Number attribute.You need to recommend a solution to ensure that the application can retrieve the Employee-Number value from the global catalog.What should you include in the recommendation?
A. the Dsmod command
B. the Ldifde command
C. the Enable-ADOptionalFeaturecmdlet
D. the Csvde command
Answer : B
Question : 15
Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the DHCP Server server role installed. All of the client computers that are in a subnet named Subnet1 receive their IP address configurations from Server1.You plan to add another DHCP server named Server2 to Subnet1.You need to recommend changes to the DHCP infrastructure to ensure that the client computers continue to receive IP addressing information if a single DHCP server fails.What should you do?
A. Create a Network Load Balancing (NLB) cluster.
B. Configure Failover for the scope.
C. Create a DHCP failover cluster.
D. Create a split scope.
Answer : B
Question : 14
You have a System Center 2012 R2 Virtual Machine Manager (VMM) infrastructure that manages five Hyper-V hosts. The Hyper-V hosts are not clustered.You have a virtual machine template that deploys a base image of Windows Server 2012 R2.No role services or features are enabled in the base image.You need to deploy a virtual machine named VM1 that is based on the virtual machine template.VM1 will be deployed as part of a service.VM1 must have the Web Server (IIS) server role installed.The solution must not require modifications to the virtual machine template or the base image.What are two possible profile types that achieve the goal?Each correct answer presents a complete solution.
A. Capability
B. Application
C. Guest OS
D. Hardware
E. Physical Computer
Answer: BC
Question : 13
Your company plans to hire 100 sales representatives who will work remotely.Each sales representative will be given a laptop that will run Windows 7. A corporate image of Windows 7 will be applied to each laptop.While the laptops are connected to the corporate network, they will be joined to the domain. The sales representatives will not be local administrators.Once the laptops are configured, each laptop will be shipped by courier to a sales representative.The sales representative will use a VPN connection to connect to the corporate network.You need to recommend a solution to deploy the VPN settings for the sales representatives.The solution must meet the following requirements:Ensure that the VPN settings are the same for every sales representative. Ensure that when a user connects to the VPN, an application named App1 starts.What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.
A. VPN auto triggering
B. The Add-VpnConnectioncmdlet
C. The Connection Manager Administration Kit (CMAK)
D. Group Policy preferences
Answer: C
Question : 12
Your network contains an Active Directory domain named contoso.com.Your company has an enterprise root certification authority (CA) named CA1.You plan to deploy Active Directory Federation Services (AD FS) to a server named Serverl. The company purchases a Microsoft Office 365 subscription.You plan register the compan y’s SMTP domain for Office 365 and to configure single sign-on for all users.You need to identify which certificate or certificates are required for the planned deployment.Which certificate or certificates should you identify?(Each correct answer presents a complete solution. Choose all that apply.)
A.a server authentication certificate that is issued by a trusted third-party root CA and that contains the subject name serverl.contoso.com
B.a server authentication certificate that is issued by CA1 and that contains the subject name Server1
C.a server authentication certificate that is issued by a trusted third-party root CA and thatcontains the subject name Server1
D.a server authentication certificate that is issued by CA1 and that contains the subject name serverl.contoso.com
E.self-signed server authentication certificates for serverl.contoso.com
Answer:DE
Question : 11
Your network contains 50 servers that run Windows Server 2003 and 50 servers that run Windows Server 2008.You plan to implement Windows Server 2012 R2.You need to create a report that includes the following information:The servers that run applications and services that can be moved to Windows Server 2012 R2 The servers that have hardware that can run Windows Server 2012 R2 The servers that are suitable to be converted to virtual machines hosted on Hyper-V hosts that run Windows Server 2012 R2 Solution: You install Windows Server 2012 R2 on a new server, and then you run Microsoft Deployment Toolkit (MDT) 2012. Does this meet the goal?
A. Yes
B. No
Answer : B
Question : 10
Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the Network Policy Server server rote installed.You configure Server1 as part of a Network Access Protection (NAP) solution that uses the 802.lx enforcement method.You add a new switch to the network and you configure the switch to use 802.lx authentication.You need to ensure that only compliant client computers can access network resources through the new switch.What should you do on Server1?
A. Add the IP address of each new switch to the list of RADIUS clients.
B. Add the IP address of each new switch to a connection request policy as an Access Client IPv4 Address.
C. Add the IP address of each new switch to a remote RADIUS server group.
D. Add the IP address of each new switch to a remediation server group.
Answer: A
