GreatExam 70-413 study guide provides you everything you will need to take your 70-413 exam. The 70-413 exam details are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different books, but logic is the key. Our Product will help you not only pass in the first try, but also save your valuable time.
QUESTION 161
Your network contains an Active Directory forest named contoso.com.
The forest is managed by using Microsoft System Center 2012.
You plan to create virtual machine templates to deploy servers by using the Virtual Machine Manager Self-service Portal (VMMSSP).
To the Virtual Machine Manager (VMM) library, you add a VHD that has a generalized image of Windows Server 2012.
You need to identify which VMM components must be associated with the image.
Which components should you identify? (Each correct answer presents part of the solution. Choose all that apply.)
A. A guest OS profile
B. A hardware profile
C. A capability profile
D. A host profile
Answer: AB
Explanation:
http://technet.microsoft.com/en-us/library/jj860424.aspx
Profiles
VMM provides the following profiles:
Hardware profile–A hardware profile defines hardware configuration settings such as CPU, memory, network adapters, a video adapter, a DVD drive, a floppy drive, COM ports, and the priority given the virtual machine when allocating resources on a virtual machine host.
Guest operating system profile–A guest operating system profile defines operating system configured settings which will be applied to a virtual machine created from the template. It defines common operating system settings such as the type of operating system, the computer name, administrator password, domain name, product key, and time zone, answer file and run once file.
NOTE: VMM also includes host profiles. Host profiles are not used for virtual machine creation. They are used during the conversion of a bare-metal computer to a Hyper-V host.
(http://technet.microsoft.com/en-us/library/hh368987.aspx)
QUESTION 162
Your network contains 50 servers that run Windows Server 2003 and 50 servers that run Windows Server 2008.
You plan to implement Windows Server 2012.
You need to create a report that includes the following information:
– The servers that run applications and services that can be moved to Windows Server 2012
– The servers that have hardware that can run Windows Server 2012
– The servers that are suitable to be converted to virtual machines hosted on Hyper-V hosts that run Windows Server 2012
What should you do?
A. From an existing server, run the Microsoft Application Compatibility Toolkit (ACT).
B. Install Windows Server 2012 on a new server, and then run the Windows Server
Migration Tools.
C. Install Windows Server 2012 on a new server, and then run Microsoft Deployment
Toolkit (MDT) 2012.
D. From an existing server, run the Microsoft Assessment and Planning (MAP) Toolkit.
Answer: D
Explanation:
http://technet.microsoft.com/en-us/library/bb977556.aspx
The Microsoft Assessment and Planning Toolkit (MAP) is an agentless, automated, multi-product planning and assessment tool for quicker and easier desktop, server and cloud migrations. MAP provides detailed readiness assessment reports and executive proposals with extensive hardware and software information, and actionable recommendations to help organizations accelerate their IT infrastructure planning process, and gather more detail on assets that reside within their current environment. MAP also provides server utilization data for Hyper-V server virtualization planning; identifying server placements, and performing virtualization candidate assessments, including ROI analysis for server consolidation with Hyper-V.
The latest version of the MAP Toolkit adds new scenarios to help you plan your IT future while supporting your current business needs. Included scenarios help you to:
Plan your deployment of Windows 8 and Windows Server 2012 with hardware and infrastructure readiness assessments
Assess your environment for Office 2013
Plan your migration to Windows Azure Virtual Machines
Track Lync Enterprise/Plus usage
Size your desktop virtualization needs for both Virtual Desktop Infrastructure (VDI) and session- based virtualization using Remote Desktop Services
Ready your information platform for the cloud with SQL Server 2012
Virtualize your existing Linux servers onto Hyper-V
Identify opportunities to lower your virtualization costs with Hyper-V using the VMware migration assessment
MAP is just one of the tools provided by the Microsoft Solution Accelerators team. The Microsoft Assessment and Planning Toolkit, Microsoft Deployment Toolkit, and Security Compliance Manager provide tested guidance and automated tools to help organizations plan, securely deploy, and manage new Microsoft technologies–easier, faster, and at less cost. All are freely available, and fully-supported by Microsoft.
QUESTION 163
Your network contains an Active Directory forest named contoso.com.
You plan to automate the deployment of servers that run Windows Server 2012.
You identify the following requirements for the deployment:
– Update the custom images that will be used for the deployment.
– Add custom drivers to the images that will be used for the deployment.
– Add software packages to the images that will be used for the deployment.
– Perform a zero touch bare-metal installation that uses Wake On LAN.
A network consultant recommends using Windows Deployment Services (WDS) and the Windows Assessment and Deployment Kit (Windows ADK) to deploy the servers.
You need to identify which requirements are achieved by using the consultant’s recommendations.
Which requirements should you identify? (Each correct answer presents part of the solution. Choose all that apply.)
A. Add custom drivers to the images used for the deployment.
B. Add software packages to the images used for the deployment.
C. Update the custom images used for the deployment.
D. Perform a zero touch bare-metal installation that uses Wake On LAN.
Answer: ABC
Explanation:
http://technet.microsoft.com/en-us/library/hh824838.aspx
Case Study 5 – Alpine Ski (Question 164 – Question 169)
Overview
Alpine Ski House provides vacation travel accommodations. Its main office is in Vancouver. Alpine Ski House also has branch offices in Montreal, Denver, and New York.
An additional sales office is located in Los Angeles. This office has client devices only. All servers in each office run Windows Server 2012 R2. All client devices in each office run Windows 8.1.
Alpine Ski House plans to acquire another company named Margie’s Travel. Margies Travel has an AD DS domain named margiestravel.com.
Danner and New York
The Denver and New York offices have their own child domain named us.alpineskihouse.com. The domain controllers are displayed in the following table:
Vancouver and Montreal
Alpine Ski House has an Active Directory Domain Services (AD DS) domain named aplineskihouse.com for the Vancouver and Montreal offices. The forest and domain functional levels are set to Windows Server 2008. The domain controllers in the domain contain Dynamic Host Configuration Protocol (DHCP) servers and DNS servers. The domain controllers are displayed in the following table:
The Vancouver office also has a certification authority (CA) installed on a server named ALP-CA01.
Business Requirements
Growth
An additional branch office is planned in an extremely remote, mountainous location that does not have traditional access to the Internet.
The remote branch office location will use a high-latency, low-bandwidth satellite connection to the Denver and Vancouver offices.
The Los Angeles office will be expanded to include sales and billing staff. The Los Angeles location will not contain IT staff.
File Management
Currently, each office has a dedicated file share that is hosted on a domain controller. The company plans to implement a new file sharing capability to synchronize data between offices and to maximize performance for locating files that are saved in a different branch office. Sales users in the Los Angeles office must also be able to retrieve file data from each branch office.
Recovery time objective
The business requires that the data stored in AD DS must be recovered within an hour. This data includes user accounts, computer accounts, groups, and other objects. Any customized attributes must also be recovered. The current backup solution uses a tape drive, which requires a minimum of two hours between notification and recovery.
Office 365
Alpine Ski House purchased Office 365 Enterprise E3 licenses for all users in the organization.
Technical Requirements
Existing environment
Users in the Montreal office of Alpine Ski House report slow times to log on to their devices. An administrator determines that users in the Montreal location occasionally authenticate to a domain controller with an IP address of 172.16.0.10/24. All authentication requests must first be attempted in the same location as the client device that is being authenticated.
Growth
The remote branch office must have a single domain controller named REMOTE- DC01.us.aplineskihouse.com.
The replication between domains must either use best-effort or low-cost replication. After the expansion, authentication must occur locally.
Any server placed in the Los Angeles office must not contain cached passwords.
File management
Where possible, the new file management solution must be centralized. If supported, the data must be stored in a single location in each branch office.
Acquisition
After acquiring Margie’s Travel, all AD DS objects, including user account passwords, must be a migrated to the alpineskihouse.com domain. Alpine Ski House plans to use the Active Directory Migration Tool (ADMT) to complete the migration process.
The password complexity requirements for the margiestravel.com domain are unknown. Users should not be forced to change their passwords after migrating their user accounts. Some computer objects will be renamed during the migration.
Office 365
Alpine Ski House must use Microsoft Azure to facilitate directory synchronization (DirSync) with Office 365. The DirSync utility must be installed on a virtual machine in Microsoft Azure.
QUESTION 164
You need to perform the directory synchronization with Office 365.
What should you do first?
A. Set the domain functional level to Windows Server 2012.
B. Upgrade the Office 365 licenses to Enterprise E4.
C. Set the forest functional level to Windows Server 2012.
D. Create a site-to-site VPN.
E. Install the DirSync utility in the on-premises environment.
Answer: E
QUESTION 165
You need to design a solution for the recovery-time objective.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Schedule a task to create a snapshot of the NTDS database before the existing backup job runs.
B. Enable the KDC support for claims, compound authentication, and Kerberos armoring administrative template policy.
C. Set the functional level for each domain to Windows Server 2012.
D. Set the functional level of the forest to Windows Server 2008 R2.
E. Enable the Active Directory Recycle Bin.
Answer: DE
Explanation:
The forest and domain functional levels are set to Windows Server 2008.
To enable the AD Recycle u must raise the Forest Functional Level to Windows Server 2008 R2.
https://technet.microsoft.com/en-us/library/dd379484(v=ws.10).aspx
QUESTION 166
You need to configure the connection between the new remote branch office and the existing branch offices.
What should you create?
A. SMTP site link
B. Forest trust
C. Certification authority
D. IP subnet
Answer: A
QUESTION 167
You need to plan the expansion of the Los Angeles office.
What should you do?
A. Install a read-only domain controller in Los Angeles.
B. Install a domain controller in Los Angeles.
C. Create and apply a filtered attribute set to the Los Angeles site.
D. Create and apply a Group Policy object to the Los Angeles site.
Answer: A
Explanation:
Any server placed in the Los Angeles office must not contain cached passwords.
QUESTION 168
Hotspot Question
You need to design the acquisition strategy for Margie’s Travel.
What should you do? To answer, select the appropriate option for each action in the answer area.
Answer:
QUESTION 169
Drag and Drop Question
You need to design the file management solution.
What should you do? To answer, drag the appropriate technology to the correct office. Each technology may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Case Study 6 – Contoso Ltd, Case B (Question 170 – Question 175)
Background
Overview
Contoso, Ltd., is a software development company. Contoso has a main office in London and two branch offices, one in Madrid and the other in Dublin. The company is in the process of adopting Microsoft Azure to host business critical resources and applications.
Contoso has an Active Directory Domain Services (AD DS) domain named contoso.com.
All devices in the three offices are members of the domain. Each office has a dedicated organizational unit (OU) in the root of the domain named London. Madrid, and Dublin, respectively. Each office OU has three child OUs named Computers, Users, and Groups.
The local Administrator account is disabled on all client devices in the domain by using a Group Policy object (GPO) named SecurityConflguration that is linked to the root of the domain. Contoso’s security department also has a GPO named WSUSConfiguration. WSUSConfiguration defines the configuration of Windows Update Services on the Windows Server Update Services (WSUS) server named WSUS1.
You have a GPO named RemoteSales that uses a WMI filter. The GPO prevents users from launching applications that are not approved.
DNS Services
Contoso uses a DNS service that is installed on two domain controllers in the main office.
The domain controllers are named DO and DC2. Both DO and DC2 run Windows Server 2008 R2. Both domain controllers host Active Directory integrated zones named contoso.com and lab.contoso.com. The zones are configured to allow only secure updates.
Research
Contoso creates a new research department to develop integration between Contoso’s software and public cloud services.
Finance Department
Users in the finance department use a client-server application named App1. App1 uses custom Active Directory attributes to store encryption keys. App1 is a business critical application that must be migrated to Windows Azure.
A server named SERVER2 hosts Appl. SERVER2 runs Windows Server 2008 R2. The disk configuration for SERVER2 is shown in the following table:
A server named SERVER1 hosts a database that is used by Appl. SERVER1 runs Windows Server 2008 R2 and SQL Server 2008 R2. The disk configuration for SERVER1 is shown in the following table:
The Contoso management team plans to increase the use of App1.
To accommodate these plans, the size of the datable must be increased
Sales Department
Users in the sales department use laptop computers when they travel. Salespeople use a legacy application named ContosoSales on their laptop computers. Salespeople can use a pool of shared desktop computers in each office.
The ContosoSales app is dependent on a specific registry key that is frequently overwritten by third-party applications. This causes the ContosoSales app to stop working.
Business Requirements
All DNS servers must be placed in a physically secure location.
Software development department
All software developers must migrate their servers and workstations to the DNS domain lab.contoso.com to ensure that frequent changes to DNS do not interfere with the production environment.
Finance department
All servers that host App1 must be migrated to Windows Azure.
A new Azure virtual machine (VM) named CL0UD2 must be deployed to Windows Azure.
Sales department
Users in the sales department should not be able to run applications on their laptop computers that are not approved by the security department. Users in the sales department should have no such restrictions while they work on the desktop computers in the office.
Technical Requirements
App1 requirements
You have the following requirements:
The size of the database for App1 must be increased to 8 TB.
– The encryption keys for App1 should not be replicated to the offices where physical server security is not guaranteed.
– The amount of disk space that is used by Windows Azure must be minimized.
Infrastructure requirements
You have the following requirements:
– The lab.contoso.com DNS domain zone must not be replicated or transferred to DNS servers outside of the London office.
– A new DNS domain zone named research.contoso.com must be deployed for users in the research department.
– The research.contoso.com DNS domain zone must be protected by using DNS Security Extensions {DNSSEC).
– All computers in the London and Madrid offices must install Windows Updates from the server WSUS1.
– A new domain controller for the contoso.com domain must be deployed in the Madrid office.
– Replication traffic must be minimized when the new domain controllers are deployed.
– New WMI filters must not conflict with existing WMI filters.
QUESTION 170
You need to plan the migration of App1. What should you do?
A. Install App1 on drive C. Move all of the data that supports App1 to drive D.
B. Expand the size of drive C Install App1 and all of the data that supports the app on drive C.
C. Install App1 on drive D. Move all of the data that supports App1 to an additional data drive.
D. Install App1 on drive C. Move all of the data that supports App1 to an additional data drive.
Answer: C
QUESTION 171
This question consists of two statements:
One is named Assertion and the other is named Reason.
Both of these statements may be true; both may be false; or one may be true, while the other may be false.
To answer this question, you must first evaluate whether each statement is true on its own.
If both statements are true, then you must evaluate whether the Reason (the second statement) correctly explains the Assertion (the first statement).
You will then select the answer from the list of answer choices that matches your evaluation of the two statements.
Assertion:
You must host the DNS zone research.contoso.com on MADSRV1.
Reason:
You must host Domain Name System Security Extensions (DNSSEQ zones on Active Directory Domain Services-integrated DNS servers.
Evaluate the Assertion and Reason statements and choose the correct answer option.
A. Both the Assertion and Reason are true, and the Reason is the correct for the Assertion,
B. Both the Assertion and Reason are true, but the Reason is not the correct for the Assertion.
C. The Assertion is true, but the Reason is false.
D. The Assertion is false, but the Reason is true.
E. Both the Assertion and the Reason are false.
Answer: E
QUESTION 172
You need To configure the Group Policy for salespeople.
Solution: You create a Group Policy Object (GPO) with an AppLocker policy.
You link the GPO to the Computers OU for each location.
Does this meet the goal?
A. Yes
B. No
Answer: B
QUESTION 173
You need To configure the Group Policy for salespeople.
Solution: You move all shared desktops to a separate organizational unit (OU). You create one Group Policy object (GPO) that has an AppLocker policy rule and enable loopback policy processing within the GPO. You link the GPO to the new OU.
Does this meet the goal?
A. Yes
B. No
Answer: B
QUESTION 174
Drag and Drop Question
You need to configure DNS for the Dublin office.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
QUESTION 175
Hotspot Question
You need to configure Windows Updates.
How should you complete the relevant Windows PowerShell commands? To answer, select the Windows PowerShell segments in the answer area.
Answer:
Explanation:
Review powershell cmdlet syntaxe.
All computers in London and Madrid offices must install Windows Updates from the server WSUS1.
New-Gplink -name WSUSConfiguration -target dc=contoso,dc=com -enforced No
https://technet.microsoft.com/en-us/library/ee461061.aspx
Set-Gpinheritance -target ou=Dublin,dc=contoso,dc=com -IsBlocked=yes
https://technet.microsoft.com/en-us/library/ee461032.aspx
QUESTION 176
A company has a line-of-business application named App1 that runs on an internal IIS server. App1 uses a SQL Server 2008 database that is hosted on the same server.
You move the database to a dedicated SQL Server named SQL1.
Users report that they can no longer access the application by using their domain credentials.
You need to ensure that users can access App1.
Solution: You configure App1 and SQL1 to use NTLM authentication.
Then you restart the IIS and SQL Server services.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
We would need to map the Windows Identity to a SQL Server database as well.
Note: NTLM authentication is also known as integrated Windows authentication. If your application runs on a Windows-based intranet, you might be able to use Windows integrated authentication for database access. Integrated security uses the current Windows identity established on the operating system thread to access the SQL Server database.
You can then map the Windows identity to a SQL Server database and permissions.
https://msdn.microsoft.com/en-us/library/bsz5788z(v=vs.100).aspx
QUESTION 177
A company has a line-of-business application named App1 that runs on an internal IIS server. App1 uses a SQL Server 2008 database that is hosted on the same server.
You move the database to a dedicated SQL Server named SQL1.
Users report that they can no longer access the application by using their domain credentials.
You need to ensure that users can access App1.
Solution: You configure Kerberos-constrained delegation and then run the following command from an administrative command prompt:
setspn-a MSSQLsvc/SQLl:1433 <domain>\<sql_service>
Does this meet the goal?
A. Yes
B. No
Answer: A
QUESTION 178
You plan to simplify the organizational unit (OU) structure for a company.
You must consolidate all member servers in the domain to a single OU named MemberServers.
You need to apply Group Policy settings for servers that meet the following criteria:
– Server operating systems: Windows Server 2012
– Server hardware platform: 64-bit
– Server memory: less than 16 6B of RAM
Solution: You create a WMI filter action that includes the following query:
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
ProductType=1 would locate a Windows 8 OS (select * from Win32_OperatingSystem WHERE Version like “6.2%” AND ProductType=”1″)
http://www.nogeekleftbehind.com/2013/09/10/updated-list-of-os-version-queries-for-wmi-filters/
QUESTION 179
You plan to simplify the organizational unit (OU) structure for a company.
You must consolidate all member servers in the domain to a single OU named MemberServers.
You must apply Group Policy settings for servers that meet the following criteria:
– Server operating systems: Windows Server 2012
– Server hardware platform: 64-bit
– Server memory: less than 16 GB of RAM
Solution: You create a WMI filter action that includes the following query:
Does this meet the goal?
A. Yes
B. No
Answer: B
QUESTION 180
A company has offices in multiple geographic locations. The sites have high-latency, low- bandwidth connections. You need to implement a multisite Windows Deployment Services (WDS) topology for deploying standard client device images to all sites.
Solution: At each site, you create a multicast deployment. You pre-stage the client images that you plan to deploy and point them to the local WDS server.
Does this meet the goal?
A. Yes
B. No
Answer: A
Explanation:
On of the advantages of prestaging clients is the ability for multiple Windows Deployment Services servers to service the same network segment. You can do this by restricting the server to answer only a particular set of clients.
https://technet.microsoft.com/en-us/library/cc770832(v=ws.10).aspx
The 70-413 PDF dumps and 70-413 practice test with free VCE player are available on GreatExam now. Get a complete hold of them through GreatExam to give your career a boost and start earning your Microsoft certification today!