070-411 무료 덤프문제 온라인 액세스

Your network contains an Active Directory domain.
A Group policy object (GPO) named GPO1 is linked to the domain. GPO1 has the setting shown in the following table.

You have backup of a GPO named GPO2. GPO2 has the settings shown In the following table.

You import backup into GPO1.
You need to identify the configuration in GPO1.
What should you identify?

• A.* Enforce password of history ids not set to Not Defined.
  * Minimium password length is set to 5 characters.
  * Store passwords using reversible encryption is set to Enabled.
• B.* Minimum password length is set to 10 characters.
  * Enforce password history is set to 5 password remembered.
  * Store password using reversible encryption is set to Enabled.
• C.* Enforce password history is set Not Defined.
  * Minimum Password length is set to 10 characters.
  * Store passwords using reversible encryption is set to Enabled.
• D.* Minimum password length is set to 5 characters.
  * Enforce password history is set to 5 password remembered.
  * Stop passwords using reversible encryption is set to Enabled.

HOTSPOT
Your network contains one Active Directory domain named contoso.com. The domain contains 10 file servers that run Windows Server 2012 R2.
You plan to enable BitLocker Drive Encryption (BitLocker) for the operating system drives of the file servers.
You need to configure BitLocker policies for the file servers to meet the following requirements:
Ensure that all of the servers use a startup PIN for operating system drives encrypted with BitLocker.
Ensure that the BitLocker recovery key and recovery password are stored in Active Directory.
Which two Group Policy settings should you configure? To answer, select the appropriate settings in the answer area.

정답:

Choose how BitLocker-protected operating system drives can be recovered: With this policy setting, you can control how BitLocker-protected operating system drives are recovered in the absence of the required startup key information. In Save BitLocker recovery information to Active Directory Domain Services, choose which BitLocker recovery information to store in Active Directory Domain Services (AD DS) for operating system drives. If you select Store recovery password and key packages, the BitLocker recovery password and the key package are stored in AD DS. Storing the key package supports recovering data from a drive that is physically corrupted. If you select Store recovery password only, only the recovery password is stored in AD DS.
Require additional authentication at startup: With this policy setting, you can configure whether BitLocker requires additional authentication each time the computer starts and whether you are using BitLocker with a Trusted Platform Module (TPM). This policy setting is applied when you turn on BitLocker. On a computer with a compatible TPM, four types of authentication methods can be used at startup to provide added protection for encrypted dat a. When the computer starts, it can use:
-only the TPM for authentication
-insertion of a USB flash drive containing the startup key
-the entry of a 4-digit to 20-digit personal identification number (PIN)
-a combination of the PIN and the USB flash drive
There are four options for TPM-enabled computers or devices:
Configure TPM startup
o Allow TPM
o Require TPM
o Do not allow TPM
Configure TPM startup PIN
o Allow startup PIN with TPM
o Require startup PIN with TPM
o Do not allow startup PIN with TPM
Configure TPM startup key
o Allow startup key with TPM
o Require startup key with TPM
o Do not allow startup key with TPM
Configure TPM startup key and PIN
o Allow TPM startup key with PIN
o Require startup key and PIN with TPM
o Do not allow TPM startup key with PIN
https://technet.microsoft.com/en-us/library/jj679890.aspx

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Access server role installed.
On Server1, you create a network policy named Policy1.
You need to configure Policy1 to ensure that users are added to a VLAN.
Which attributes should you add to Policy1?

• A.Tunnel-Tag, Tunnel-Password, Tunnel-Medium-Type, and Tunnel-Preference
• B.Tunnel-Tag, Tunnel-Server-Auth-ID, Tunnel-Preference, and Tunnel-Pvt-Group-ID
• C.Tunnel-Type, Tunnel-Tag, Tunnel-Medium-Type, and Tunnel-Pvt-Group-ID
• D.Tunnel-Type, Tunnel-Password, Tunnel-Server-Auth-ID, and Tunnel-Pvt-Group-ID

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.
On all of the domain controllers, Windows is installed in C:\Windows and the Active Directory database is located in D:\Windows\NTDS\.
All of the domain controllers have a third-party application installed.
The operating system fails to recognize that the application is compatible with domain controller cloning.
You verify with the application vendor that the application supports domain controller cloning.
You need to prepare a domain controller for cloning.
What should you do?

• A.In the root of a USB flash drive, add the application information to an XML file named DefaultDCCIoneAllowList.xml.
• B.In D:\Windows\NTDS\, create an XML file named CustomDCCloneAllowList.xml and add the application information to the file.
• C.In C:\Windows\System32\Sysprep\Actionfiles\, add the application information to an XML file named Respecialize.xml.
• D.In D:\Windows\NTDS\, create an XML file named DCCloneConfig.xml and add the application information to the file.

HOTSPOT
Your network contains a DNS server named Server1. Server1 hosts a DNS zone for contoso.com.
You need to ensure that DNS clients cache records from contoso.com for a maximum of one hour.
Which value should you modify in the Start of Authority (SOA) record? To answer, select the appropriate setting in the answer area.

정답:

Explanation: Minimum TTL - The minimum time-to-live value applies to all resource records in the zone file. This value is supplied in query responses to inform other servers how long they should keep the data in cache. The default value is 3,600.
Reference: The Structure of a DNS SOA Record
https://support.microsoft.com/en-us/kb/163971