070-411 무료 덤프문제 온라인 액세스

You have the following Windows PowerShell Output.

You need to create a Managed Service Account.
What should you do?

• A.Run Set-KDSConfiguration, and then run New-ADServiceAccount -Name "service01" - DNSHostName service01.contoso.com.
• B.Run New-AuthenticationPolicySilo, and then run New-ADServiceAccount -Name "service01" - DNSHostName service01.contoso.com.
• C.Run Add-KDSRootKey, and then run New-ADServiceAccount -Name "service01" -DNSHostName service01.contoso.com.
• D.Run New-ADServiceAccount -Name "service01" -DNSHostName service01.contoso.com - SAMAccountName service01.

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.
An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8 Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1.
You make a change to GPO1.
You need to force all of the computers in OU1 to refresh their Group Policy settings immediately. The solution must minimize administrative effort.
Which tool should you use?

• A.Server Manager
• B.Group Policy Object Editor
• C.The Secedit command
• D.The Invoke-GpUpdate cmdlet

Your network contains an Active Directory domain named contoso.com.
A user named User1 creates a central store and opens the Group Policy Management Editor as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that the default Administrative Templates appear in GPO1.
What should you do?

• A.Add User1 to the Group Policy Creator Owners group.
• B.Configure Security Filtering in GPO1.
• C.Copy files from %Windir%\Policydefinitions to the central store.
• D.Link a WMI filter to GPO1.

HOTSPOT
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Access server role installed.
You need to configure the ports on Server1 to ensure that client computers can establish VPN connections to Server1. The solution must NOT require the use of certificates or pre-shared keys.
What should you modify?
To answer, select the appropriate object in the answer area.

정답:

The four types of tunneling protocols used with a VPN/RAS server running on Windows Server 2012 include:
Point-to-Point Tunneling Protocol (PPTP): A VPN protocol based on the legacy Point-to-Point protocol used with modems. The PPTP specification does not describeencryption or authentication features and relies on the Point-to-Point Protocol being tunneled to implement security functionality.
Layer 2 Tunneling Protocol (L2TP): Used with IPsec to provide security. L2TP supports either computer certificates or a preshared key as the authentication method for IPsec.
IKEv2: IKE is short for Internet Key Exchange, which is a tunneling protocol that uses IPsec Tunnel Mode protocol. The message is encrypted with one of the following protocols by using encryption keys that are generated from the IKEv2 negotiation process.
Secure Socket Tunneling Protocol (SSTP): Introduced with Windows Server 2008, which uses the HTTPS protocol over TCP port 443 to pass traffic through firewalls References:
http://en.wikipedia.org/wiki/Point-to-Point_Tunneling_Protocol

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Desktop Session Host role service installed. The computer account of Server1 resides in an organizational unit (OU) named OU1.
You create and link a Group Policy object (GPO) named GPO1 to OU1.
You need to prevent GPO1 from applying to your user account when you log on to Server1. GPO1 must apply to every other user who logs on to Server1.
What should you configure?

• A.Item-level targeting.
• B.WMI Filtering.
• C.Block Inheritance.
• D.Security Filtering.