70-410 Installing And Configuring Microsoft Windows Server 2012

Front 1

Connection security rules require that network traffic allowed through the firewall use which of the following security mechanisms

Back 1

IPsec

Front 2

Which actions can you perform from the Windows Firewall control panel?

Back 2

Allow an application through the firewall in all three profiles

Block all incoming connections for any of the three profiles

Turn Windows Firewall off for all three profiles

Front 3

Which tools help you to enable Network Discovery firewall rules

Back 3

File Explorer

Network and Sharing Center

Allowed Apps dialog box

Front 4

What is true about the Windows Firewall rules regarding GPO and setting local setting.

Back 4

Applying firewall rules by using Group Policy combines the newly deployed rules with the ones already there.

Importing firewall rules saved from another computer overwrites all the rules on the target system.

Front 5

Which Microsoft Management Console (MMC) snap-in can administrators use to create Group Policy Objects and manage their deployment to ActiveDirectory DS objects

Back 5

Front 6

What type of DNS record is used to store the name to IP address mappings used for forward lookups

Back 6

A

Front 7

Which two of these are correct names for file permissons under Windows Server 2012

Back 7

Advanced and Basic permission

Front 8

What are the four components involved with printing under Windows Server 2012

Back 8

Print Device,

Printer,

Print Server,

Print Driver.

Front 9

What PowerShell command would you use to create a storage pool?

Back 9

New-StoragePool -FriendlyName -StorageSubSystemFriendlyName -PhysicalDisks

Front 10

What are the three types of user accounts in Windows Server 2012

Back 10

Local Account

Domain Account

Built-in Account

Front 11

On network does Automatic Private IP Addressing (APIPA) assign IPv4 addresses

Back 11

Automatic Private IP Addressing, a feature of later Windows operating systems. With APIPA, DHCP clients can automatically self-configure an IP address and subnet mask when a DHCP server isn't available.

169.254.0.1 to169.254.255.254. subnet mask B class 255.255.0.0

APIPA service also checks regularly for the presence of a DHCP server (every five minutes, according to Microsoft). If it detects a DHCP server on the network, APIPA stops, and the DHCP server replaces the APIPA networking addresses with dynamically assigned addresses.

Front 12

What are the three group scopes in Windows Server 2012 and group types?

Back 12

Scopes:

domain local

global

universal

Type:

security

distribution

Front 13

What PowerShell command would you use to demote a domain controller

Back 13

Uninstall-ADDSDomainController –ForceRemoval –LocalAdministratorPassword –Force

Front 14

What are valid security level for a Software Restriction policy?

Back 14

Software Restriction policy are:

Disallowed

Unrestricted

Basic User.

Windows Settings\Security Settingsnode of the User Configuration or the Computer Configuration node of a GPO.

Front 15

What component of Windows Server 2012 enables Remote Desktop clients to print to their local print devices?

Back 15

Easy Print

Front 16

What are the feature of NTFS which ReFS does not support?

Back 16

File compression

EFS (Encrypting File System)

Disk quotas

Front 17

Transport layer protocols are f.e.:

Back 17

UDP - user datagram protocol (with loss)

TCP - transmission control protocol (without loss)

FTP - port 21 - File Transfer Protocol

SSH - port 22 - Secure Shell

Telnet - poert 23 - Terminal Network

SMTP - port 25 - Simple Mail Transfer Protocol

HTTP - port 80 - Hyper Text Transfer Protocol

Front 18

IPv6 address types

Back 18

Unicast Provides one-to-one transmission service to individual interfaces, including server farms sharing a single address

Multicast Provides one-to-many transmission service to groups of interfaces identified by a single multicast address

Anycast Provides one-to-one-of-many transmission service to groups of interfaces, only the nearest of which (measured by the number of intermediate routers) receives the transmission

Front 19

What are software restriction rule types supported by Windows Server 2012?

When implementing multiple rule types, systems apply the rules what is the order of precedence?

Back 19

1.Hash rules

2.Certificate rules

3.Network zone rules

4.Path rules

Front 20

Which of the following rule types applies to files with an .msi extension?

Back 20

Windows Installer rules

Front 21

Which of the following services must you manually start before Windows can applyAppLocker policies?

Back 21

Application Identity

Front 22

Under which of the following conditions will a hash rule in a software restriction policy cease to function?

Back 22

If you update the file on which the hash is based to a new version

If the file on which the hash is based is modified by a virus

Front 23

What are the four nodes in AppLocker container.

Back 23

executable rules - exe, com

windows installer rules

scripts rules - .ps1, .bat, .cmd, .vbs, and .js

packaged app rules

Front 24

Which of the following types of files do Group Policy tools access from a Central Store by default?

Back 24

ADMX files

Front 25

Which of the following techniques can you use to apply GPO settings to a specific group of users in an OU?

Back 25

Security filtering

Front 26

Windows applies the local GPOs in the following order

Back 26

The Local Group Policy settings are applied first, then either the Administrators or Nonadministrators GPO,

and finally any user-specific GPOs.

Front 27

How is the virtualization capability built into Windows Server 2012 called and that architecture it is?

Back 27

Hyper-V,

Type I virtualization which runs on bare-metal device in opposite to type II which require the operating system.

Front 28

Hyper-V installation by PS

Back 28

Install-WindowsFeature –Name

Hyper-V-ComputerName

-IncludeManagementTools

-Restart

Front 29

Virtual Machine files (5)

Back 29

.XML filesThese files contain the virtual machine configuration details. There is one of these for each virtual machine and each snapshot of a virtual machine. They are always named with the GUID used to internally identify the virtual machine or snapshot in question.

.BIN files This file contains the memory of a virtual machine or snapshot that is in a saved state.

.VSV filesThis file contains the saved state from the devices associated with the virtual machine.

.VHD filesThese are the virtual hard disk files for the virtual machine

.AVHD filesThese are the differencing disk files used for virtual machine snapshots

Front 30

New VM by PS

Back 30

New-VM –Name “VM name” –MemoryStartupBytes –NewVHDSizeBytes

Front 31

Function of Guest Integration Services package:

Back 31

1. Operating system shutdown

2. Time Synchronization

3. Data Exchange

4. Heartbeat

5. Backup

Front 32

Setting VM running on Hyper-V memory setting by PS

Back 32

Set-VMMemory -DynamicMemoryEnabled $true-MinimumBytes -StartupBytes -MaximumBytes -Priority -Buffer

Front 33

What is smart paging and when it is used:

Back 33

This makes it possible for Hyper-V to reduce the memory used by a VM to a level lower than that needed to start the system, reclaiming that memory for other uses.

when a VM must be restarted, there is no free memory available, and there are no other means available to free up the necessary memory.

Front 34

Which of the following Hyper-V features make it possible for a VM to function with a minimum RAM value that is lower than the startup RAM value?

Back 34

A.Smart paging

B.Dynamic Memory

C. Guest Integration Services

Front 35

When you install the Hyper-V role on a server running Windows Server 2012, the instance of the OS on which you installed the role is converted to what system element?

Back 35

The parent partition

Front 36

VHDX disk feature:

Back 36

64 TB, (VHD -only 2 TB)

4-KB logical sector sizes to provide compatibility with new 4-KB native drives. VHDX files can also use larger block sizes (up to 256 MB),

can only be read by Windows Server 2012 and Windows 8 Hyper-V servers.

Front 37

Disk types:

Back 37

Fixed Size Creates

Dynamically Expanding

Differencing

Front 38

Configuring pass-through disks

Back 38

VM must have exclusive access to it,

disk offline in the parent OS by using the Disk Management or Diskpart.exe utility,

it will be available for selection in the Physical Hard Disk drop-down list.

Front 39

Which of the following must be true about a pass-through disk?

Back 39

A pass-through disk must be offline in the parent partition of the Hyper-V server.

Front 40

Modifying virtual disks

Back 40

compact

convert

shrink

expand

merge Combines the data on a differencing disk with that of the parent disk to form a single composite image file

Front 41

network traffic of VM bypass the virtual switches on the parent partition

Back 41

Single Root I/O Virtualization - SR-IOV enables network traffic to bypass the virtual software switch layer by assigning a VF to the Hyper-V child partition directly.

Front 42

There are two types of network adapter in virtual machines:

Back 42

"Network Adapter"

"Legacy Network Adapater" -is needed when you need PXE boot or when your VM's OS needs access to the network before you can install hyper-v "Integration Services".

Front 43

Virtual switch types:

Back 43

Front 44

How many network adapters on a Windows Server 2012 Hyper-V server can you create?

Back 44

eight synthetic and four emulated (sometimes called legacy).

Front 45

Which of the following are valid reasons for using an emulated network adapter rather than a synthetic one?

Back 45

You want to install the guest OS by using a Windows Deployment Services server.

There is no Guest Integration Services package available for the guest OS you plan to use.

Front 46

Which statements are true about synthetic network adapters?

Back 46

Synthetic adapters communicate with the parent partition by using the VMBus.

Synthetic adapters require the Guest Integration Services package to be installed on the guest OS.C.

Synthetic adapters provide faster performance than emulated adapters.

Front 47

What is the maximum number of ports supported by a Hyper-V virtual switch?

Back 47

Unlimited

Front 48

Which of the following virtual switch types does not enable guest OSs to communicatewith the parent partition?

Back 48

Private

Front 49

How many dynamically assigned MAC addresses can a Hyper-V server provide bydefault?

Back 49

256 - 00-15-1D-02-12-00 to 00-15-1D-02-12-FF this range can be modified.

Front 50

Which feature must you add to a Windows Server 2012 Server Core installation to convert it to the Minimal Server Interface?

Back 50

Graphical Management Tools and Infrastructure

Front 51

Which features must you remove from a full GUI installation of Windows Server 2012 to convert it to a Server Core installation?

Back 51

Graphical Management Tools and Infrastructure

Server Graphical Shell

Front 52

What is the name of the directory where Windows stores all the operating system modules it might need to install at a later time?

Back 52

Front 53

Which of the following are valid reasons why administrators might want to install their Windows Server 2012 servers by using the Server Core option?

Back 53

A Server Core installation can be converted to the full GUI without reinstalling the operating system.

The new Server Manager in Windows Server 2012 makes it far easier to administer servers remotely.

Front 54

Which of the following statements about Server Manager are true?

Back 54

Server Manager can deploy roles to VHDs

Server Manager can install roles and features at the same time.

Server Manager can install roles and features to any Windows Server 2012 server on the network.

Front 55

Which of the following operations can you perform on a service by using Server Manager?

Back 55

Front 56

A JBOD drive array is an alternative to which of the following?

Back 56

RAID

Front 57

In the NTFS permission system, combinations of advanced permissions are also knownas __________ permissions.

Back 57

Basic permissions are formed by creating various combinations ofadvanced permissions.

In Windows Server versions prior to Windows Server 2012, standard permissionsare formed by creating various combinations of special permissions.

Front 58

MMC uses the Distributed Component ObjectModel (DCOM) for remote management instead of WinRM, and these settings are notenabled by default. Which rules?

Back 58

■■COM+ Network Access (DCOM-In)

■■ Remote Event Log Management (NP-In)

■■ Remote Event Log Management (RPC)

■■ Remote Event Log Management (RPC-EPMAP)

Front 59

Set firewall rule by PS

Back 59

Set-NetFirewallRule –name < rule name>

–enabled True

Front 60

To add WinRM support to servers running Windows Server 2008 or Windows Server 2008 R2, you must do?

Back 60

.NET Framework 4.0

Windows Management Framework 3.0

Enable the Windows Remote Management (HTTP-In) rules in Windows Firewall

Create a WinRM listener by running the winrm quickconfig command at a command prompt with Administrative privileges.

Enable the COM+ Network Access and Remote Event Log Management rules in Windows Firewall, as described in the previous section.

Front 61

How to establish remote session with remote computer by PS and how to exit:

Back 61

Enter-PSSession -credential

Exit-PSSession

Front 62

You can verify SRV locator resource records by viewing Netlogon.dns

you want to determinate which service location (SRV) records are registered in DNS for server

Back 62

netlogon.dns in %systemroot%\System32\Config

Front 63

What is DISM?

Back 63

Deployment Image Servicing and Management (DISM.exe) is a command-line tool that can be used to service a Windows® image or to prepare a Windows Preinstallation Environment (Windows PE) image. DISM can be used to service a Windows image (.wim) or a virtual hard disk (.vhd or .vhdx).DISM replaces the ImageX tool which was deprecated in Windows 8. DISM also replaces Package Manager (Pkgmgr.exe), PEimg, and Intlcfg that were included in previous deployment toolkits. DISM also adds new functionality to improve the experience for offline servicing.

Front 64

Back 64

This issue may occur if there is a Group Policy object (GPO) that restricts what programs you can run. Programs can be restricted if either of the following policies in the domain organizational unit group policy or a local computer group policy have been applied:Do not run specified Windows applications.Run only the allowed Windows applications.

Front 65

How to change location of spool folder?

Back 65

Front 66

IPv6 addressing and IPv4 equivalents:

Back 66

GLOBAL UNICAST ADDRESSES - registered IPv4

LINK-LOCAL UNICAST ADDRESSES (APIPA)- fe

Unique Local Unicast Addresses - private IPv4 (10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16)

Multicast Addresses - ff

Front 67

Installation of first domain controller in a new domain in the forest

Back 67

Install-AddsDomain

Front 68

Changes the name of an Active Directory object. (modify the SAM - Security Account Manager - account name)

Back 68

Rename-ADObject

Front 69

What llows the computer to accept unsolicited inbound packets that have passed through an edge device, such as a network address translation (NAT) router or firewall?

Back 69

Edge traversal

Front 70

Group Policy Management Console (GPMC) is installed with OS?

Back 70

is included in OS but this feature is not installed with the operating system. Use Server Manager to install the GPMC.

https://technet.microsoft.com/en-us/library/cc725932.aspx

Front 71

You configure all of the client computers to use Server1 as their primary DNS server.You need to prevent Server1 from attempting to resolve Internet host names for the client computers.

Back 71

necessary to remove the default root hints files

install a root (.) zone on all internal DNS servers to prevent name resolution on the Internet - Create a primary zone named “.”

Front 72

you create a software restriction policy to allow an application named App1 by using a certificate rule. You need to ensure that when users attempts to execute App1, the certificate is verified against a certificate revocation list (CRL)

Back 72

modify the Trusted Publisher Properties

Front 73

forwarders vs. conditional forwarders

Back 73

A forwarder is a Domain Name System (DNS) server on a network used to forward DNS queries for external DNS names to DNS servers outside of that network. You can also forward queries according to specific domain names using conditional forwarders.

Front 74

The DNS domain option (option 15) is not configured for one or more scopes.

DHCP IPv4 clients will not be provided with a DNS domain and will not be able to resolve names

Back 74

Configure a DNS domain option as a server or scope option using the DHCP MMC.

Front 75

you plan to create a cloned domain controller named DC3 from an image of DC1. you need to ensure that you can clone

Back 75

create a dccloneconfig.xml file on DC1

add the computer account of DC1 to the Cleneable Domain Controller group

Front 76

Server has following storage spaces: data, users, backups, primordial. you add an additional hard disk to server. you need to identify which storage space contains the new hard disk. Which storage space contains the new disk.

Back 76

Front 77

New-VirtualDisk

Back 77

Creates a new virtual disk in the specified storage pool.

Front 78

Set-DscLocalConfigurationManager

Back 78

Applies Local Configuration Manager settings to nodes.

Front 79

Start-DscConfiguration

Back 79

Applies configuration to nodes. Specify which computers you want to apply configuration to by specifying computer names or by using Common Information Model (CIM) sessions.

Front 80

VM Generation 1

Back 80

The generation of a virtual machine determines the virtual hardware and functionality that is presented to the virtual machine. In Hyper-V there are two supported virtual machine generations, generation 1 and generation 2. Generation 2 virtual machines have a simplified virtual hardware model, and supports Unified Extensible Firmware Interface (UEFI) firmware instead of BIOS-based firmware. The majority of legacy devices have also been removed from generation 2 virtual machines.

Front 81

VM Generation 2

Back 81

Functionality:

PXE boot by using a standard network adapter

Boot from a SCSI virtual hard disk

Boot from a SCSI virtual DVD

Secure Boot (enabled by default)

UEFI firmware support

Front 82

Get-DnsServerDiagnostics

Back 82

Retrieves DNS event logging details.

Front 83

Disable user account

Back 83

Set-ADUser -Identity Zosia -Enabled 0 (1 for enabled)

Disable-ADAccount -Identity Zosia

Front 84

Relay Agent

Back 84

remote access role

to set it go under IPv4 General

Front 85

Redircmp

Back 85

Redirects the default container for newly created computers to a specified, target organizational unit (OU) so that newly created computer objects are created in the specific target OU instead of in CN=Computers.

redircmp ou=newcomputerou,dc=domainname,dc=com

Front 86

Move-ADObject

Back 86

Get-ADComputer $pc | Move-ADObject -TargetPath $newOU

Front 87

view printer objects in active directory

Back 87

users and computers - view users, contacts, groups...

Front 88

Spanned disk

Back 88

To create a spanned volume using the Windows interface In Disk Management, right-click the unallocated space on one of the dynamic disks where you want to create the spanned volume.Click New Spanned Volume….Follow the instructions on your screen.

Front 89

Print Server properties

Back 89

Front 90

Group Policy .... Editor

Back 90

Management - for the domain policies (open group policy management and edit on policy)

Object for local policies (open from mmc)

Front 91

UAC

Back 91

Front 92

Print Pool

Back 92

Two or more printers are required; Windows Server 2003 does not limit the number of printers in a pool.The printers in the pool must be of the same model, and they must use the same printer driver.Printer ports can be of the same type or mixed (such as parallel, serial, and network).If you want to ensure that documents are first sent to the faster printers, add the faster printers to the pool first and the slower printers last. Print jobs are routed in the order in which you create the ports.Because users do not know which printer prints their documents, it is a good idea to locate all of the pooled printers in the same physical location. Otherwise, users might not be able to find their printed documents.

Front 93

Internet Printing

Back 93

create a web site where users can manage print jobs on server. with Internet Printing client user can connect and print to shared printers on server by using Internet Printing Protocol (IPP)

Front 94

Print Pooling

Back 94

enable on port tab

modify the priority on the advanced tab

Front 95

Root Hint

Back 95

DNS manager on Domain properties - Root Hint or in the cache.dns file - located in System23\Dns

Front 96

dism.exe

Back 96

to remove the source files for all server roles that are not installed on server before you create an image of server

Front 97

Automatic start action

Back 97

Front 98

Enable-NetAdapterBinding

Back 98

Enable Windows Network Virtualization Filter Driver