READ Free Dumps For Microsoft- 70-411
Question ID 14071 | Your network contains an Active Directory domain named contoso.com. You plan to use the User1 account as a service account. The service will forward |
Option A | Configure the Name Mappings of User1. |
Option B | Modify the user principal name (UPN) of User1. |
Option C | Configure a Service Principal Name (SPN) for User1. |
Option D | Modify the Security settings of User1. |
Option F | Answer : C Explanation: If you cannot see the Delegation tab, do one or both of the following: Register a Service Principal Name (SPN) for the user account with the Setspn utility in the support tools on your CD. Delegation is only intended to be used by service accounts, which should have registered SPNs, as opposed to a regular user account which typically does not have SPNs. Raise the functional level of your domain to Windows Server 2003. For more information, see Related Topics. References: http: //blogs. msdn. com/b/mattlind/archive/2010/01/14/delegation-tab-in-aduc-not- available-until-a-spn-is-set. aspx http: //blogs. msdn. com/b/mattlind/archive/2010/01/14/delegation-tab-in-aduc-not- available-until-a-spn-is-set. aspx http: //technet. microsoft. com/en-us/library/cc739474(v=ws. 10). aspx http: //blogs. msdn. com/b/mattlind/archive/2010/01/14/delegation-tab-in-aduc-not- available-until-a-spn-is-set. aspx
|
Correct Answer | C |
Question ID 14072 | Your network contains an Active Directory domain named adatum.com. The domain
|
Option A |
Specifies whether the user has Connect and Disconnect options for the DirectAccess entry when the user clicks the Networking notification area icon. If the user clicks the Disconnect option, NCA removes the DirectAccess rules from the Name Resolution Policy Table (NRPT) and the DirectAccess client computer uses whatever normal name resolution is available to the client computer in its current network configuration, including sending all DNS queries to the local intranet or Internet DNS servers. Note that NCA does not remove the existing IPsec tunnels and users can still access intranet resources across the DirectAccess server by specifying IPv6 addresses rather than names. The ability to disconnect allows users to specify single-label, unqualified names (such as PRINTSVR) for local resources when connected to a different intranet and for temporary access to intranet resources when network location detection has not correctly determined that the DirectAccess client computer is connected to its own intranet. To restore the DirectAccess rules to the NRPT and resume normal DirectAccess functionality, the user clicks Connect. Note: If the DirectAccess client computer is on the intranet and has correctly determined its network location, the Disconnect option has no effect because the rules for DirectAccess are already removed from the NRPT. If this setting is not configured, users do not have Connect or Disconnect options. |
Correct Answer | A |