70-411 Administering Windows Server Practice Questions

You work as a Network Administrator at ABC.com. ABC.com has an Active Directory Domain Services (AD DS) domain named ABC.com. All servers in the ABC.com domain have Microsoft Windows Server 2012 R2 installed and all client computers have Windows 8 Pro installed.
BitLocker Drive Encryption (Bitlocker) is enabled on all client computers. ABC.com wants you to implement BitLocker Network Unlock.

Which of the following servers would you required to implement BitLocker Network Unlock?

You work as a Network Administrator at ABC.com. ABC.com has an Active Directory Domain Services (AD DS) domain named ABC.com. All servers in the ABC.com domain have Microsoft Windows Server 2012 R2 installed.
ABC.com has a main office and a branch office. The two offices are connected by a WAN link.
ABC.com has five domain controllers named ABC-DC01, ABC-DC02, ABC-DC03, ABC-DC04 and ABC-DC05.
ABC-DC01, ABC-DC03 and ABC-DC05 are located in the main office. ABC-DC02 and ABC-DC04 are located in the branch office.
ABC.com has a Development department located in the main office. The developers have created an application that runs on domain controllers. You need to ensure that application settings are replicated to only the domain controllers in the main office. You want to create a custom Active Directory application partition that will be used to control which domain controllers the settings are replicated to.

How can you create the Active Directory application partition?

You administer a Microsoft Windows Server 2012 R2 domain named ABC.com. The ABC.com domain has several administrative templates that are applied via a Group Policy object (GPO).
You must provide a solution for reviewing active and inactive Group Policy settings containing comments.
You open the Group Policy settings.

How would you apply the appropriate filters to accomplish this task? (Choose all that apply)

You work as a Network Administrator at ABC.com. ABC.com has an Active Directory Domain Services (AD DS) domain named ABC.com. All servers on the network have Windows Server 2012 R2 installed.

Some users work from home. The users working at home often use their own computers that are not members of the ABC.com domain.

You need to implement a VPN solution to enable users working from home to connect to network resources.

You want to use to use certificate-based authentication on a server running Network Policy Server (NPS) for VPN connections.

You install a Windows Server 2012 R2 server named ABC-SR27. You install the Network Policy and Access Services server role on ABC-SR27.

You obtain a certificate from a third party Certification Authority. You need to ensure that ABC-SR27 trusts the certificate to enable the server to perform the certificate based VPN authentication.

You need to identify which certificate store in the Certificates console to import the certificate.

Which store should you identify?

You work as a Network Administrator at ABC.com. ABC.com has an Active Directory Domain Services (AD DS) domain named ABC.com. The servers on the ABC.com network have Windows Server 2012 R2 installed.

The ABC.com domain has several Group Policy objects (GPOs) none of which are enforced GPOs.

You need to view the setting of a GPO name DCAccess.
Which of the following actions should you take?

You administrate an Active Directory domain named ABC.com. The domain has a Microsoft Windows Server 2012 R2 server named ABC-SR01 that hosts the File Server Resource Manager role service.
You are configuring quota threshold and want to receive an email alert when 80% of the quota has been reached.

Where would you enable the email alert?