Microsoft 70-414 Study Guides 2021

NEW QUESTION 1
Your network contains an Active Directory Rights Management Services (AD RMS) cluster named Cluster1. You plan to change Cluster1 to a new AD RMS cluster named Cluster2.
You need to ensure that all users retrieve the location of the AD RMS templates from Cluster2. What should you do?

• A. Modify the Service Connection Point (SCP).
• B. Modify the exclusion policies.
• C. Modify the templates file location of the rights policy templates.
• D. Create an alias (CNAME) record named Cluster1.contoso.com that points to Cluster2.

Answer: A

NEW QUESTION 2
You need to recommend which type of clustered file server and which type of file share must be used in the Hyper-V cluster that hosts App2. The solution must meet the technical requirements and the security requirements.
Solution: You recommend a scale-out file server that uses an NFS share. Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 3
You plan to allow users to run internal applications from outside the company’s network. You have a Windows Server 2012 R2 that has the Active Directory Federation Services (AD FS) role installed. You must secure on-premises resources by using multi-factor authentication (MFA). You need to design a solution to enforce different access levels for users with personal Windows 8.1 or iOS 8 devices.
Solution: You install a local instance of MFA Server. You connect the instance to the Microsoft Azure MFA provider, and then run the following Windows PowerShell cmdlet.
Enable-AdfsDeviceRegistration
Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: We must install AD FS Adapter, not register a host for the Device Registration Service.
Note: The Enable-AdfsDeviceRegistration cmdlet configures a server in an Active Directory Federation Services (AD FS) farm to host the Device Registration Service.

NEW QUESTION 4
Your company has a human resources department and a finance department.
You are planning an administrative model for both departments to meet the following requirements:
Provide human resources managers with the ability to view the audit logs for the files of their department.
Ensure that only domain administrators can view the audit logs for the files of the finance department. You need to recommend a solution for the deployment of file servers for both departments.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.

• A. Deploy one file serve
• B. Add the human resources managers to the local Administrators group.
• C. Deploy one file serve
• D. Add the human resources managers to the local Event Log Readers group.
• E. Deploy two file server
• F. Add the human resources managers to the local Administrators group on one of the servers.
• G. Deploy two file server
• H. Add the human resources managers to the local Event Log Readers group on one of the servers.

Answer: D

NEW QUESTION 5
Your network contains an Active Directory domain named contoso.com. The domain contains a Microsoft System Center 2012 infrastructure.
All client computers have a custom application named App1 installed. App1 generates an Event ID 42 every time the application runs out of memory.
Users report that when App1 runs out of memory, their client computer runs slowly until they manually restart App1.
You need to recommend a solution that automatically restarts App1 when the application runs out of memory. The solution must use the least amount of administrative effort.
What should you include in the recommendation?

• A. From Configurations Manager, create a desired configuration management baseline.
• B. From Windows System Resource Manager, create a resource allocation policy.
• C. From Event Viewer, attach a task to the event.
• D. From Operations Manager, create an alert.

Answer: D

NEW QUESTION 6
You need to ensure that all new production Hyper-V virtual machines can be deployed correctly.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 7
Your network contains an Active Directory domain named contoso.com.
You currently have an intranet web site that is hosted by two Web servers named Web1 and Web2. Web1 and Web2 run Windows Server 2012.
Users use the name intranet.contoso.com to request the web site and use DNS round robin. You plan to implement the Network Load Balancing (NLB) feature on Web1 and Web2. You need to recommend changes to the DNS records for the planned implementation. What should you recommend?

• A. Delete one of the host (A) records named Intrane
• B. Modify the remaining host (A) record named Intranet.
• C. Delete both host (A) records named Intrane
• D. Create a pointer (PTR) record for each Web server.
• E. Create a new host (A) record named Intrane
• F. Remove both host (A) records for Web1 and Web2.
• G. Create a service locator (SRV) recor
• H. Map the SRV record to Intranet.

Answer: A

NEW QUESTION 8
Your network contains an Active Directory forest named contoso.com.
Your company works with a partner company that has an Active Directory forest named fabrikam.com. Both forests contain domain controllers that run only Windows Server 2012 R2.
The certification authority (CA) infrastructure of both companies is configured as shown in the following table.

You need to recommend a certificate solution that meets the following requirements:
Server authentication certificates issued from fabrikam.com must be trusted automatically by the computers in contoso.com.
The computers in contoso.com must not trust automatically any other type of certificates issued from the CA hierarchy in fabrikam.com.
What should you include in the recommendation?

• A. Deploy a Group Policy object (GPO) that defines intermediate CA
• B. Import a certificate that has an application policy object identifier (OID) of CA Encryption Certificate.
• C. Deploy a Group Policy object (GPO) that defines an enterprise trus
• D. Import a certificate that has an application policy object identifier (OID) of Microsoft Trust List Signing.
• E. Deploy a Group Policy object (GPO) that defines an enterprise trus
• F. Import a certificate that has an application policy object identifier (OID) of CA Encryption Certificate.
• G. Deploy a Group Policy object (GPO) that defines intermediate CA
• H. Import a certificate that has an application policy object identifier (OID) of Microsoft Trust List Signing.

Answer: B

NEW QUESTION 9
Your network contains an Active Directory domain named contoso.com. The domain contains a Hyper-V host named Server1. Server1 has an offline virtual machine named VM1 that is stored on a virtual hard disk named VM1.vhd.
You plan to implement multiple virtual machines that have the same configurations as VM1. You need to recommend a virtual hard disk solution for the planned implementation.
The solution must meet the following requirements:
Minimize the amount of time required to create the new virtual machines.
Minimize the amount of storage space required on Server1.
What should you include in the recommendation?

• A. Differencing VHD disks
• B. Dynamically expanding VHD disks
• C. Dynamically expanding VHDX disks
• D. Differencing VHDX disks

Answer: A

Explanation:

NEW QUESTION 10
Your network contains an Active Directory domain named contoso.com. The domain contains a Microsoft System Center 2012 infrastructure.
You deploy a service named Service1 by using a service template. Service1 contains two virtual machines. The virtual machines are configured as shown in the following table.

You need to recommend a monitoring solution to ensure that an administrator can review the availability information of Service1.
Solution: From Operations Manager, you create a Distributed Application and a Service Level Tracking object.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 11
Your network contains an Active Directory forest named contoso.com. The forest contains multiple servers that run Windows Server 2012. The network contains 1,000 client computers that run Windows 7. Two hundred remote users have laptop computers and only work from home.
The network does not provide remote access to users.
You need to recommend a monitoring solution to meet the following requirements:
Generate a list of updates that are applied successfully to all computers.
Minimize the amount of bandwidth used to download updates.
An administrator must approve the installation of an update on any client computer.
What should you include in the recommendation? (Each correct answer presents part of the solution. Choose all that apply.)

• A. Microsoft Asset Inventory Service (AIS)
• B. Windows InTune
• C. Windows Server Update Services (WSUS)
• D. Active Directory Federation Services (AD FS)
• E. Microsoft System Center 2012 Service Manager

Answer: ABC

NEW QUESTION 12
Your network contains an Active Directory domain named contoso.com. The domain contains several domain controllers. The domain controllers run either Windows Server 2012 or Windows Server 2008 R2.
The domain functional level is Windows Server 2008 R2. The forest functional level is Windows Server 2008. The corporate compliance policy states that all items deleted from Active Directory must be recoverable from a Recycle Bin.
You need to recommend changes to the current environment to meet the compliance policy.
Which changes should you recommend? (Each correct answer presents part of the solution. Choose all that apply.)

• A. Run the Set-ADForestMode cmdlet.
• B. Run the New-ADObject cmdlet.
• C. Run the Set-ADObject cmdlet.
• D. Run the Set-ADDomainMode cmdlet.
• E. Run the Enable-ADOptionalFeature cmdlet.

Answer: AE

Explanation: A: You can enable Active Directory Recycle Bin only if the forest functional level of your environment is set to Windows Server 2008 R2.
The Set-ADForestMode cmdlet sets the Forest mode for an Active Directory forest. You specify the forest mode by setting the ForestMode parameter. Here we should set it to Windows2008R2Forest.
E: Enabling Active Directory Recycle Bin
After the forest functional level of your environment is set to Windows Server 2008 R2, you can enable Active Directory Recycle Bin by using the following methods:
/ Enable-ADOptionalFeature Active Directory module cmdlet (This is the recommended method.)
/ Ldp.exe

NEW QUESTION 13
You need to ensure that the developers can manage their own virtual machines. Solution: You perform the following actions:
In Virtual Machine Manager, you create a new user role named DevUsers that uses the Application Administrator profile.
You grant Checkpoint permissions to the DevUsers role.
You distribute the Self-Service Portal URL to the developers. Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 14
You have a small Hyper-V cluster built on two hosts that run Windows Server 2012 R2 Hyper-V. You manage the virtual infrastructure by using System Center Virtual Machine Manager 2012.
Distributed Key Management is not installed. You have the following servers in the environment:

You have the following requirements:
You must back up virtual machines at the host level.
You must be able to back up virtual machines that are configured for live migration.
You must be able to restore the entire VMM infrastructure.
You need to design and implement the backup plan. What should you do?

• A. Run the following Windows PowerShell command:Set-DPMGlobalProperty-DPMServerName DPM1-KnownVMMServers VMM1
• B. Install the DPM console on VMM1.
• C. Run the following Windows PowerShell command:Checkpoint-VM -Name DPM1 -ComputerName SQL1
• D. Configure backup for all disk volumes on FILESERVER1.

Answer: A

Explanation: Explanation：
Run the the Set-DPMGlobalProperty PowerShell command to connect all the servers that are running Hyper-V to all the DPM servers. The cmdlet accepts multiple DPM server names. For more information see
Set-DPMGlobalProperty.
Set-DPMGlobalProperty -dpmservername <dpmservername> -knownvmmservers <vmmservername>

NEW QUESTION 15
Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2.
Server1 and Server2 have the Failover Clustering feature installed.
The servers are configured as nodes in a failover cluster named Cluster1. Cluster1 has access to four physical disks. The disks are configured as shown in the following table.
You need to ensure that all of the disks can be added to a Cluster Shared Volume (CSV).
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

• A. Enable BitLocker on Disk4.
• B. Disable BitLocker on Disk1.
• C. Format Disk2 to use NTFS.
• D. Format Disk3 to use NTFS.

Answer: CD

Explanation: You cannot use a disk for a CSV that is formatted with FAT, FAT32, or Resilient File System (ReFS).

NEW QUESTION 16
This question consists of two statements: One is named Assertion and the other is named Reason. Both of these statements may be true; both may be false; or one may be true, while the other may be false.
To answer this question, you must first evaluate whether each statement is true on its own. If both statements are true, then you must evaluate whether the Reason (the second statement) correctly explains the Assertion (the first statement). You will then select the answer from the list of answer choices that matches your evaluation of the two statements.
Assertion:
You must install and configure Network Device Enrollment Services (NDES) on CHICA01.
Reason:
NDES allows non-domain joined devices to obtain a Certificate Revocation List from an Active Directory-integrated certification authority, and then validate whether a certificate is valid.
Evaluate the Assertion and Reason statements and choose the correct answer option.

• A. Both the Assertion and Reason are true, and the Reason is the correct explanation for the Assertion.
• B. Both the Assertion and Reason are true, but the Reason is not the correct explanation for the Assertion.
• C. The Assertion is true, but the Reason is false.
• D. The Assertion is false, but the Reason is true.
• E. Both the Assertion and the Reason are false.

Answer: D

Explanation: The Network Device Enrollment Service (NDES) allows software on routers and other network devices running without domain credentials to obtain certificates based on the Simple Certificate Enrollment Protocol (SCEP).

NEW QUESTION 17
You plan to implement a virtualization solution to host 10 virtual machines. All of the virtual machines will be hosted on servers that run Windows Server 2012.
You need to identify which servers must be deployed for the planned virtualization solution. The solution must meet the following requirements:
• Minimize the number of servers.
• Ensure that live migration can be used between the hosts. Which servers should you identify?
To answer, select the appropriate servers in the answer area.

Answer:

Explanation:
Explanation：
Just two server with Hyper-V installed is enough to perform a Live Migration. (Minimize the number of servers)