READ Free Dumps For Microsoft- 70-411
Question ID 13997 | Your network contains an Active Directory domain named contoso.com. The domain
contains six domain controllers. The domain controllers are configured as shown in the
following table.
The network contains a server named Server1 that has the Hyper-v server role installed.
DC6 is a virtual machine that is hosted on Server1.
You need to ensure that you can clone DC6.
Which FSMO role should you transfer to DC2?
|
Option A | Rid master
|
Option B | Domain naming master
|
Option C | PDC emulator
|
Option D | Infrastructure master
|
Correct Answer | C |
Explanation Explanation: The clone domain controller uses the security context of the source domain controller (the domain controller whose copy it represents) to contact the Windows Server 2012 R2 Primary Domain Controller (PDC) emulator operations master role holder (also known as flexible single master operations, or FSMO). The PDC emulator must be running Windows Server 2012 R2, but it does not have to be running on a hypervisor. Reference: http: //technet. microsoft. com/en-us/library/hh831734. aspx
Question ID 13998 | Your network contains an Active Directory domain named contoso.com. The domain
contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced
GPOs.
The domain contains a top-level organizational unit (OU) for each department. A group
named Group1 contains members from each department.
You have a GPO named GPO1 that is linked to the domain.
You need to configure GPO1 to apply settings to Group1 only.
What should you use?
|
Option A | Dcgpofix
|
Option B | Get-GPOReport
|
Option C | Gpfixup
|
Option D | Gpresult
|
Option E | Gpedit. msc
|
Option F | Set-GPPermission K. Gpupdate L. Add-ADGroupMember
|
Correct Answer | F |
Explanation Explanation: Set-GPPermission grants a level of permissions to a security principal (user, security group, or computer) for one GPO or all the GPOs in a domain. You use the TargetName and TargetType parameters to specify a user, security group, or computer for which to set the permission level. -Replace
Specifies that the existing permission level for the group or user is removed before the new permission level is set. If a security principal is already granted a permission level that is higher than the specified permission level and you do not use the Replace parameter, no change is made. Reference: http: //technet. microsoft. com/en-us/library/ee461038. aspx