070-413試験無料問題集「Microsoft Designing and Implementing a Server Infrastructure 認定」
DRAG DROP
You have a file server named File1 that runs Windows Server 2012. File1 has five physical disks.
You plan to create a highly available network share named Share1.
You need to create Share1 on File1. The solution must ensure that Share1 is available if a single disk fails.
Which four actions should you perform?
You have a file server named File1 that runs Windows Server 2012. File1 has five physical disks.
You plan to create a highly available network share named Share1.
You need to create Share1 on File1. The solution must ensure that Share1 is available if a single disk fails.
Which four actions should you perform?
正解：
Create a parity virtual disk.
Create a simple volume.
Create and attach a VHD.
Create a storage pool.
Create a simple volume.
Create and attach a VHD.
Create a storage pool.
Your network contains an Active Directory domain named contoso.com. The network has an Active Directory Certificate Services (AD CS) infrastructure.
You need to issue a certificate to users to meet the following requirements:
Ensure that the users can encrypt files by using Encrypting File System (EFS).
Ensure that all of the users reenroll for their certificate every six months.
Solution: You create a copy of the User certificate template, and then you modify the extensions of the copy.
Does this meet the goal?
You need to issue a certificate to users to meet the following requirements:
Ensure that the users can encrypt files by using Encrypting File System (EFS).
Ensure that all of the users reenroll for their certificate every six months.
Solution: You create a copy of the User certificate template, and then you modify the extensions of the copy.
Does this meet the goal?
正解：A
解答を投票する
DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2008 R2.
You plan to replace the domain controllers with new servers that run Windows Server 2012. The new servers will be named DC3 and DC4.
You need to recommend a strategy to replace DC1 and DC2 with DC3 and DC4. The solution must minimize the amount of disruption to the users.
Which three actions should you recommend?
To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order.
Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2008 R2.
You plan to replace the domain controllers with new servers that run Windows Server 2012. The new servers will be named DC3 and DC4.
You need to recommend a strategy to replace DC1 and DC2 with DC3 and DC4. The solution must minimize the amount of disruption to the users.
Which three actions should you recommend?
To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order.
正解：
Box 1: Install the Active Directory Domain Services role on DC3 and DC4.
Box 2: Run the AD Services Config Wizard on DC3 and DC4.
Box 3: dcpromo on DC1 and DC2.
* Step 1-2:
AD DS can be installed in Windows Server 2012 by using the Add Roles Wizard in Server Manager, followed by the Active Directory Domain Services Configuration Wizard, which is new beginning in Windows Server 2012.
*Step 3: dcpromo
Installs and removes Active Directory Domain Services (AD DS).
In this case we want to remove AD DS from DC1 and DC2.
Reference: Install Active Directory Domain Services (Level 100)
https://technet.microsoft.com/en-us/library/hh472162.aspx
Box 2: Run the AD Services Config Wizard on DC3 and DC4.
Box 3: dcpromo on DC1 and DC2.
* Step 1-2:
AD DS can be installed in Windows Server 2012 by using the Add Roles Wizard in Server Manager, followed by the Active Directory Domain Services Configuration Wizard, which is new beginning in Windows Server 2012.
*Step 3: dcpromo
Installs and removes Active Directory Domain Services (AD DS).
In this case we want to remove AD DS from DC1 and DC2.
Reference: Install Active Directory Domain Services (Level 100)
https://technet.microsoft.com/en-us/library/hh472162.aspx
Your network contains a Hyper-V cluster named Cluster1.
You install Microsoft System Center 2012 Virtual Machine Manager (VMM).
You create a user account for another administrator named User1.
You plan to provide User1 with the ability to manage only the virtual machines that User1 creates.
You need to identify what must be created before you delegate the required permissions.
What should you identify?
You install Microsoft System Center 2012 Virtual Machine Manager (VMM).
You create a user account for another administrator named User1.
You plan to provide User1 with the ability to manage only the virtual machines that User1 creates.
You need to identify what must be created before you delegate the required permissions.
What should you identify?
正解：C
解答を投票する
Your network contains an Active Directory domain named contoso.com. The domain contains three VLANs. The VLANs are configured as shown in the following table.
All client computers run either Windows 7 or Windows 8.
The corporate security policy states that all of the client computers must have the latest security updates installed.
You need to implement a solution to ensure that only the client computers that have all of the required security updates installed can connect to VLAN 1. The solution must ensure that all other client computers connect to VLAN 3.
Solution: You implement the IPsec enforcement method.
Does this meet the goal?
All client computers run either Windows 7 or Windows 8.
The corporate security policy states that all of the client computers must have the latest security updates installed.
You need to implement a solution to ensure that only the client computers that have all of the required security updates installed can connect to VLAN 1. The solution must ensure that all other client computers connect to VLAN 3.
Solution: You implement the IPsec enforcement method.
Does this meet the goal?
正解：A
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
Your network contains an Active Directory domain named contoso.com. The domain contains multiple sites.
You plan to deploy DirectAccess.
The network security policy states that when client computers connect to the corporate network from the Internet, all of the traffic destined for the Internet must be routed through the corporate network.
You need to recommend a solution for the planned DirectAccess deployment that meets the security policy requirement.
Solution: You enable split tunneling.
Does this meet the goal?
You plan to deploy DirectAccess.
The network security policy states that when client computers connect to the corporate network from the Internet, all of the traffic destined for the Internet must be routed through the corporate network.
You need to recommend a solution for the planned DirectAccess deployment that meets the security policy requirement.
Solution: You enable split tunneling.
Does this meet the goal?
正解：B
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
DRAG DROP
You must configure the replication of credentials of the user for the area of Great Britain. What three steps will guide you in order from? (The available actions are shown in the picture. Click the Drawing button and assign the necessary three steps in the proper order at.)
You must configure the replication of credentials of the user for the area of Great Britain. What three steps will guide you in order from? (The available actions are shown in the picture. Click the Drawing button and assign the necessary three steps in the proper order at.)
正解：
Your company is a hosting provider that provides cloud-based services to 20 customers. Each customer has its own Active Directory forest located in your company's datacenter.
You plan to provide VPN services to each customer. The VPN solution will use RADIUS for authentication, authorization, and accounting services.
You need to recommend a solution to forward authentication, authorization, and accounting messages from the perimeter network to the Active Directory forest of each customer.
What should you recommend?
You plan to provide VPN services to each customer. The VPN solution will use RADIUS for authentication, authorization, and accounting services.
You need to recommend a solution to forward authentication, authorization, and accounting messages from the perimeter network to the Active Directory forest of each customer.
What should you recommend?
正解：B
解答を投票する
A company has offices in multiple geographic locations, The sites have high-latency, low-bandwidth connecbons, You need to implement a multiple Windows Deployment Server (WDS) topology for deploying standard client device images to all sites.
Solution: You install four WDS servers and configure them as load-balanced cluster Does this meet you goal?
Solution: You install four WDS servers and configure them as load-balanced cluster Does this meet you goal?
正解：A
解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
DRAG DROP
You need to recommend changes for the Active Directory infrastructure.
What should you recommend? To answer, drag the appropriate domain and forest functional levels for proseware.com to the correct locations. Each functional level may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
You need to recommend changes for the Active Directory infrastructure.
What should you recommend? To answer, drag the appropriate domain and forest functional levels for proseware.com to the correct locations. Each functional level may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
正解：
Explanation:
From the scenario we have that Domain controllers that run Windows Server 2012 R2 and Windows Server 2008 R2 must be able to be deployed to the proseware.com domain. We should therefore set both domain functional level and forest functional level to Windows Server 2008 R2.
Box 1: Windows Server 2008 R2
We can set the domain functional level for proseware.com to Windows Server 2008 R2 as only Domain controllers that run Windows Server 2012 R2 and Windows Server 2008 R2 must be able to be deployed to the proseware.com domain.
Box 2: Windows Server 2008 R2
As we cannot set the domain functional level to a value that is lower than the forest functional level we should set the forest function level to Windows Server 2008 R2 as well.
Reference: Understanding Active Directory Domain Services (AD DS) Functional Levels
https://technet.microsoft.com/library/understanding-active-directory-functional-levels(WS.10).aspx
HOT SPOT
On Server2, you create a Run As Account named Account1. Account1 is associated to an Active Directory account named VMMIPAM.
You need to implement an IPAM solution.
What should you do? To answer, select the appropriate configuration for each server in the answer area.
On Server2, you create a Run As Account named Account1. Account1 is associated to an Active Directory account named VMMIPAM.
You need to implement an IPAM solution.
What should you do? To answer, select the appropriate configuration for each server in the answer area.
正解：
Explanation:
Box 1: Add a network service
On the VMM server use the Add Network Service Wizard to setup a service, which runs with the newly created VMMIPAM account, and which connects to IPAM server on Server3.
Box 2:
On the IPAM server add the new VMMIPAM account to the IPAM ASM Administrators and to the Remote Management Users groups. This ensures that the Network Service which is run with the VMMIPAM account has the required permissions to access the IPAM server.
Scenario:
Server2 is running System Center 2012 R2 Virtual Machine Manager (VMM) server.
Server3 is running IPAM server.
Reference: How to Add an IPAM Server in VMM in System Center 2012 R
https://technet.microsoft.com/en-us/library/Dn249418.aspx