Browse Full Version Of Microsoft 70-411 Dumps To Help You Pass 70-411 Exam (21-30)

QUESTION 21

Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs. A network Administrator accidentally deletes the Default Domain Policy GPO. 

You do not have a backup of any of the GPOs. 

You need to recreate the Default Domain Policy GPO.

What should you use?

A. dcgpofix

B. Get-GPOReport

C. Gpfixup

D. Gptedit.msc

E. Import-GPO

F. Restore-GPO

G. Set-GPInheritance

H. Set-GPLink

I. Set-GPPermission

J. Gpupdate

K. Add-ADGroupMember

Answer: A

QUESTION 22

Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs. The domain is renamed to adatum.com. Group Policies no longer function correctly. 

You need to ensure that the existing GPOs are applied to users and computers. 

You want to achieve this goal by using the minimum amount of Administrative effort.

What should you use?

A. dcgpofix

B. Get-GPOReport

C. Gpfixup

D. Gpresult

E. Gptedit.msc

F. Import-GPO

G. Restore-GPO

H. Set-GPInheritance

I. Set-GPLink

J. Set-GPPermission

K. Gpupdate

L. Add-ADGroupMember

Answer: C

QUESTION 23

Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs. The domain contains a top-level organizational unit (OU) for each department. A group named Group1 contains members from each department. 

You have a GPO named GPO1 that is linked to the domain. 

You need to configure GPO1 to apply settings to Group1 only.

What should you use?

A. dcgpofix

B. Get-GPOReport

C. Gpfixup

D. Gpresult

E. Gptedit.msc

F. Import-GPO

G. Restore-GPO

H. Set-GPInheritance

I. Set-GPLink

J. Set-GPPermission

K. Gpupdate

L. Add-ADGroupMember

Answer: J

QUESTION 24

Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012. 

You have a Password Settings object (PSOs) named PSO1. 

You need to view the settings of PSO1.

Which tool should you use?

A. Get-ADFineGrainedPasswordPolicy

B. Get-ADAccountResultantPasswordReplicationPolicy

C. Get-ADDomainControllerPasswordReplicationPolicy

D. Get-ADDefaultDomainPasswordPolicy

Answer: A

QUESTION 25

Your network contains an Active Directory domain named contoso.com.

All user accounts reside in an organizational unit (OU) named OU1. All of the users in the marketing department are members of a group named Marketing. All of the users in the human resources department are members of a group named HR.

You create a Group Policy object (GPO) named GPO1. 

You link GP01 to OU1. 

You configure the Group Policy preferences of GPO1 to add two shortcuts named Link1 and Link2 to the desktop of each user.

You need to ensure that Link1 only appears on the desktop of the users in Marketing and that Link2 only appears on the desktop of the users in HR.

What should you configure?

A. Item-level targeting

B. Group Policy Inheritance

C. Security Filtering

D. WMI Filtering

Answer: A

QUESTION 26

Your network contains a single Active Directory domain named contoso.com. All domain controllers run Windows Server 2012.

The domain contains 400 desktop computers that run Windows 8 and 10 desktop computers that run Windows XP Service Pack 3 (SP3). All new desktop computers that are added to the domain run Windows 8. All of the desktop computers are located in an organizational unit (OU) named OU1.

You create a Group Policy object (GPO) named GPO1. GPO1 contains startup script settings. You link GPO1 to OU1.

You need to ensure that GPO1 is applied only to computers that run Windows XP SP3.

What should you do?

A. Modify the Security settings of OU1.

B. Run the Set-GPLink cmdlet and specify the -target parameter.

C. Create and link a WMI filter to GPO1.

D. Run the Set-GPInheritance cmdlet and specify the -target parameter.

Answer: C

QUESTION 27

Computer1 is located in an OU, and the GPO1, User1 is another OU, and as GPO2, to ensure you can apply GPO1 to User1 should be how to do?

A. Security filtering

B. Inheritance

C. Gpupdate

D. GPO

Answer: A

QUESTION 28

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. 

You have a Group Policy object (GPO) named GPO1 that contains hundreds of settings. GPO1 is linked to an organizational unit (OU) named OU1. OU1 contains 200 client computers. 

You plan to unlink GPO1 from OU1. 

You need to identify which GPO settings will be removed from the computers after GPO1 is unlinked from OU1.

Which two GPO settings should you identify? (Each correct answer presents part of the solution. Choose two.)

A. The managed Administrative Template settings

B. The unmanaged Administrative Template settings

C. The System Services security settings

D. The Event Log security settings

E. The Restricted Groups security settings

Answer: AD

QUESTION 29

Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named IT and a CU named Sales. All of the help desk user accounts are located in the IT CU. All of the sales user accounts are located in the Sales CU. The Sales CU contains a global security group named G_Sales. The IT CU contains a global security group named G_HelpDesk. You need to ensure that members of G_HelpDesk can perform the following tasks: 

- Reset the passwords of the sales users. 

- Force the sales users to change their password at their next logon.

What should you do?

A. Run the Set-ADFinecrainedPasswordPolicy cmdlet and specify the identity parameter.

B. Right-click the IT OU and select Delegate Control.

C. Right-click the Sales OU and select Delegate Control.

D. Run the Set-ADAccountPassword cmdlet and specify the -identity parameter.

Answer: C

QUESTION 30

Your network contains an Active Directory domain named contoso.com. The domain contains 30 organizational units (OUs). 

You need to ensure that a user named User1 can link Group Policy Objects (GPOs) in the domain.

What should you do?

A. From the Active Directory Users and Computers, add User1 to the Network Configuration Operators group.

B. From the Group Policies Management, click the contoso.com node and modify the Delegation settings.

C. From the Group Policies Management, click the Group policy Objects node and modify the Delegation settings.

D. From the Active Directory Users and Computers, add User1 to the Group Policy Creator Owners group.

Answer: B

Browse Full Version Of Microsoft 70-411 Dumps To Help You Pass 70-411 Exam