70-411 試験問題を無料オンラインアクセス

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. One of the domain controllers is named DC1.
The DNS zone for the contoso.com zone is Active Directory-integrated and has the default settings.
A server named Server1 is a DNS server that runs a UNIX-based operating system.
You plan to use Server1 as a secondary DNS server for the contoso.com zone.
You need to ensure that Server1 can host a secondary copy of the contoso.com zone.
What should you do?

• A.From Windows PowerShell, run the Set-DnsServerForwardercmdlet and specify the contoso.com zone as a target.
• B.From DNS Manager, modify the Zone Transfers settings of the contoso.com zone.
• C.From DNS Manager, modify the Security settings of DC1.
• D.From DNS Manager, modify the Advanced settings of DC1.

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains 30 user accounts that are used for network administration. The user accounts are members of a domain global group named Group1.
You identify the security requirements for the 30 user accounts as shown in the following table.

You need to identify which settings must be implemented by using a Password Settings object (PSO) and which settings must be implemented by modifying the properties of the user accounts.
What should you identify? To answer, configure the appropriate settings in the dialog box in the answer area.

正解：

Box 1: PSO
Box 2: User Account Properties
Box 3: User Account Properties
Box 4: PSO
Note:
* Password Setting Object (PSO) is another name for Fine Grain Password Policies.
* Here you can see all the settings that go into a PSO.

Your network contains one Active Directory domain named controso.com. The domain contains a file server named Server01 that runs Windows Server 2012 R2. Server01 has an operating system drive and a data drive. Server01 has a Trusted Platform Module (TPM).
You need to enable BitLocker Drive Encryption (BitLocker) for the data drive on Server01.
Which cmdlet should you run first?

• A.Lock-Bitlocker
• B.Enable-WindowsOptionalFeature
• C.Enable- TPMAutoProvisioning
• D.Unblock-TPM

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 has the DHCP Server server role and the Network Policy Server role service installed.
Server1 contains three non-overlapping scopes named Scope1, Scope2, and Scope3. Server1 currently provides the same Network Access Protection (NAP) settings to the three scopes.
You modify the settings of Scope1 as shown in the exhibit. (Click the Exhibit button.)

You need to configure Server1 to provide unique NAP enforcement settings to the NAP non- compliant DHCP clients from Scope1.
What should you create?

• A.A connection request policy that has the Service Type condition
• B.A network policy that has the MS-Service Class condition
• C.A connection request policy that has the Identity Type condition
• D.A network policy that has the Identity Type condition

Your company is testing DirectAccess on Windows Server 2012 R2.
Users report that when they connect to the corporate network by using DirectAccess, access to Internet websites and Internet hosts is slow. The users report that when they disconnect from DirectAccess, access to the Internet websites and the Internet hosts is much faster.
You need to identify the most likely cause of the performance issue.
What should you identify?

• A.The corporate firewall blocks TCP port 8080.
• B.The DNS suffix list is empty.
• C.DirectAccess uses a self-signed certificate.
• D.Force tunneling is enabled.