The Microsoft 70-413 Recognition is amongst the best employment actions you may earn for yourself should you be fitness professional a component of the particular 70-413 brand to get a Microsoft. That concludes that you owned by the following institution plus immediately confers character connected with proficient, dependable, plus in a position to a person. Obtaining internet 70-413 recognition schooling with us could increase your working experience in addition to understanding.

2021 Dec 70-413 free question

Q31. - (Topic 8) 

Your network contains an Active Directory forest. The forest contains two Active Directory domains named contoso.com and child.contoso.com. The forest functional level is Windows Server 2003. The functional level of both domains is Windows Server 2008. 

The forest contains three domain controllers. The domain controllers are configured as shown in the following table. 

DC1 and DC2 have the DNS Server server role installed and are authoritative for both contoso.com and child.contoso.com. 

The child.contoso.com domain contains a server named serverl.child.contoso.com that runs Windows Server 2012. 

You plan to deploy server1.child.contoso.com as a read-only domain controller (RODC). 

You run the adprep.exe /rodcprep command on DC3 and receive the following error message: 

You need to identify what prevents you from successfully running Adprep /rodcprep on DC3. 

What should you identify? 

A. The domain functional level of child.contoso.com is set to the wrong level. 

B. DC3 cannot connect to the infrastructure master on DC2. 

C. DC3 cannot connect to the domain naming master on DC1. 

D. The forest functional level is set to the wrong level. 

Answer: B 

Explanation: Adprep could not contact a replica… 

This problem occurs when the Adprep /rodcprep command tries to contact the 

infrastructure master for each application partition in the forest. 

Reference: Error message when you run the "Adprep /rodcprep" command in Windows 

Server 2008: "Adprep could not contact a replica for partition 

DC=DomainDnsZones,DC=Contoso,DC=com" 


Q32. HOTSPOT - (Topic 8) 

Your network contains an Active Directory domain named contoso.com. 

The domain has a certification authority (CA). You create four certificate templates. The templates are configured as shown in the following table: 

You install the Remote Access server role in the domain. 

You need to configure DirectAccess to use one-time password (OTP) authentication. 

What should you do? To answer, select the appropriate options in the answer area, 

Answer: 


Q33. DRAG DROP - (Topic 2) 

You need to recommend the VPN protocols for Proseware. 

What should you recommend? To answer, drag the appropriate VPN protocols to the correct offices. Each protocol may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content, 

Answer: 


Q34. - (Topic 8) 

Your company has a main office. 

The network contains an Active Directory domain named contoso.com. The main office contains a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed and is configured to accept incoming SSTP-based VPN connections. 

All client computers run Windows 7. 

The company plans to open a temporary office that will contain a server named Server2 that runs 

Windows Server 2012 and has the DHCP Server server role installed. The office will also have 50 client computers and an Internet connection. 

You need to recommend a solution to provide the users in the temporary office with access to the resources in the main office. 

What should you recommend? 

More than one answer choice may achieve the goal. Select the BEST answer. 

A. Use the Connection Manager Administration Kit (CMAK) to create a connection package that specifies Server1 as the target for SSTP-based VPN connections. Manually distribute the CMAK package to each client computer in the temporary office. 

B. Install the Remote Access server role on Server2. From Routing and Remote Access on Server2, add a SSTP-based VPN port. From DHCP on Server2, configure the default gateway server option. 

C. Uses the Connection Manager Administration Kit (CMAK) to create a connection package that specifies Server1 as the target for SSTP-based VPN connections. Use a Group Policy object (GPO) to distribute the CMAK package to each client computer in the temporary office. 

D. Install the Remote Access server role on Server2. From Routing and Remote Access on Server2, configure a demand-dial interface. From DHCP on Server2, configure the default gateway server option. 

Answer: B 

Explanation: 

* configure RRAS server role as a VPN server on a Windows server 2008 R2 machine. To do that, you need to first install the RRAS server role. 

* in case of IPv4 the remote access client’s VPN configuration is the ONLY configuration that governs whether it has default IPv4 gateway towards VPN server or not 

Reference: Remote Access Deployment – Part 2: Configuring RRAS as a VPN server 


Q35. - (Topic 2) 

You need to recommend a solution for the remote access servers. What should you include in the recommendation? 

A. Network address translation (NAT) 

B. Logging levels 

C. Packet filtering 

D. Packet tracing 

Answer: A 

Explanation: * Scenario: The remote access servers must be able to restrict outgoing traffic based on IP addresses. 

* Network address translation (NAT) allows you to share a connection to the public Internet through a single interface with a single public IP address. The computers on the private network use private, non-routable addresses. NAT maps the private addresses to the public address. 


Up to date 70-413 rapidshare:

Q36. - (Topic 3) 

You need to recommend a migration strategy for the DHCP servers. The strategy must meet the technical requirements. 

Which Windows PowerShell cmdlet should you recommend running on the physical DHCP servers? 

A. Import-SmigServerSetting 

B. Export-SmigServerSetting 

C. Receive-SmigServerData 

D. Send-SmigServerData 

Answer: B 

Explanation: * Scenario: / Main office: One physical DHCP server that runs Windows Server 2008 R2 / each branch office: One physical DHCP server that runs Windows Server 2008 R2 / The IPAM server in the main office gathers data from the DNS servers and the DHCP servers in all of the offices. 

* Example: 

Command Prompt: C:\PS> 

Export-SmigServerSetting -Feature "DHCP" -User All -Group -Path "c:\temp\store" -Verbose 

This sample command exports the Dynamic Host Configuration Protocol (DHCP) Server and all other Windows features that are required by DHCP Server. 


Q37. - (Topic 8) 

Your network contains an Active Directory forest named contoso.com. 

You plan to automate the deployment of servers that run Windows Server 2012. 

You identify the following requirements for the deployment: 

Update the custom images that will be used for the deployment. 

Add custom drivers to the images that will be used for the deployment. 

Add software packages to the images that will be used for the deployment. 

Perform a zero touch bare-metal installation that uses Wake On LAN. 

A network consultant recommends using Windows Deployment Services (WDS) and the Windows Assessment and Deployment Kit (Windows ADK) to deploy the servers. 

You need to identify which requirements are achieved by using the consultant's recommendations. 

Which requirements should you identify? (Each correct answer presents part of the solution. Choose all that apply.) 

A. Update the custom images used for the deployment. 

B. Add software packages to the images used for the deployment. 

C. Perform a zero touch bare-metal installation that uses Wake On LAN. 

D. Add custom drivers to the images used for the deployment. 

Answer: A,D 

Explanation: Microsoft Deployment Toolkit 2010 

MDT 2010 requires Windows AIK for Windows. 

Manage your images, from adding/removing drivers to easily swapping out the operating 

system you would like to deploy. 

Incorrect: 

Not C: System Center Configuration Manager (ConfigMgr) 

ConfigMgr allows you to push an OSD to the computers of your choice at the time of your 

choosing due to its built in Wake on LAN (WOL) feature. 


Q38. HOTSPOT - (Topic 4) 

You are planning the certificates for Northwind Traders. 

You need to identify the certificate configurations required for App1. 

How should you configure the certificate request? To answer, select the appropriate 

options in the answer area. 

Answer: 


Q39. - (Topic 8) 

Your network contains an Active Directory forest named contoso.com. The forest contains 

a single domain and two sites named Montreal and Vancouver. 

Montreal contains an IP Address Management (IPAM) server named Server1 that is used to manage all of the DHCP servers and the DNS servers in the site. 

Vancouver contains several DHCP servers and several DNS servers. 

In Vancouver, you install the IP Address Management (IPAM) Server feature on a server named Server2. 

You need to recommend which configurations must be performed to ensure that the DHCP servers and the DNS servers in Vancouver are managed by Server2. 

What should you recommend? 

A. Replicate the IPAM database from Server1 to Server2. On Server2, change the manageability status of the DNS servers and the DHCP servers in Vancouver. 

B. Replicate the IPAM database from Server1 to Server2. On Server1, change the manageability status of the DNS servers and the DHCP servers in Vancouver. 

C. From Server2, run the Invoke-IpamGpoProvisioning cmdlet On Server2, change the manageability status of the DNS servers and the DHCP servers in Vancouver. 

D. From Server1, run the Invoke-IpamGpoProvisioning cmdlet. On Server1, change the manageability status of the DNS servers and the DHCP servers in Vancouver. 

Answer: C 

Explanation: Invoke-IpamGpoProvisioning Creates and links group policies in the specified domain for provisioning required access settings on the servers managed by the computer running the IPAM server. 


Q40. - (Topic 3) 

You need to recommend an IPAM management solution for the Operators groups. The solution must meet the technical requirements. 

What should you include in the recommendation? 

A. Run the Invoke-IpamGpoProvisioningcmdlet in all three domains. Add the computers used by the members of the Operators group to the IPAM server. 

B. Modify the membership of the IPAM Administrators group and the WinRMRemoteWMIUsers_ group on the IPAM server. 

C. Run the Set-IpamConfigurationcmdlet and modify the membership of the WinRMRemoteWMRJsers_ group on the IPAM server. 

D. Run the Set-IpamConfigurationcmdlet on the IPAM server. Run the Invoke-IpamGpoProvisioningcmdlet in all three domains. 

Answer: B 

Explanation: 

Scenario: Ensure that the members of the Operators groups in all three domains can manage the IPAM server from their client computer.