Exam Code: 70-411
Exam Name: Administering Windows Server 2012
Updated: Mar 17, 2017
Q&As: 234
Published: September 17, 2012
Languages: English, Chinese (Simplified), French, German, Japanese, Portuguese (Brazil)
Audiences:IT professionals
Technology: Windows Server 2012 R2
Credit toward certification: MCP, MCSA, MCSE
Exam Information：https://www.pass4itsure.com/70-411.html
70-411 Exam Objetives
1.1 Deploy and manage server images
- Windows Deployment Services Overview (TechNet Library)
- What’s New for Windows Deployment Services (TechNet Library)
- Windows Deployment Services Getting Started Guide for Windows Server 2012 (TechNet Library)
- Deploying 70-411 exam Windows Server 2012: From Bare Metal, Server Core, Minimal Server Interface, and More (Session: Andrew Mason @ TechEd North America 2012)
- What’s New in Windows Deployment Services in Windows Server 2012 R2 (R2)
- Windows Deployment Services Cmdlets in Windows PowerShell (R2)
- Using the WDS PowerShell Cmdlets in Windows Server 2012 R2 (R2)
- Managing and Deploying Driver Packages in Windows Deployment Services (R2)
Real4exam Latest and Most Accurate Microsoft 70-411 Exam Q&As
70-411 exam Question No : 32 – (Topic 0) Your network contains an Active Directory domain named contoso.com. The domain
contains a file server named Server1 that runs Windows Server 2012 R2. Server1 has a
share named Share1.
When users without permission to Share1 attempt to access the share, they receive the
Access Denied message as shown in the exhibit. (Click the Exhibit button.)
You deploy a new file server named Server2 that runs Windows Server 2012 R2.
You need to configure Server2 to display the same custom Access Denied message as
Server1.
What should you install on Server2?
A. The Remote Assistance feature
B. The Storage Services server role
C. The File Server Resource Manager role service
D. The Enhanced Storage feature
Answer: C
Explanation:
Access-Denied Assistance is a new role service of the File Server role in Windows Server
2012.
We need to install the prerequisites for Access-Denied Assistance.
Because Access-Denied Assistance relies up on e-mail notifications, we also need to
configure each relevant file server with a Simple Mail Transfer Protocol (SMTP) server
address. Let’s do that quickly with Windows PowerShell:
Set-FSRMSetting -SMTPServer mailserver. nuggetlab.com -AdminEmailAddress
[email protected] -FromEmailAddress [email protected]
You can enable Access-Denied Assistance either on a per-server basis or centrally via
Group Policy. To my mind, the latter approach is infinitely preferable from an administration
standpoint.
Create a new GPO and make sure to target the GPO at your file servers’ Active Directory
computer accounts as well as those of your AD client computers. In the Group Policy
Object Editor, we are looking for the following path to configure Access-Denied Assistance:
\Computer Configuration\Policies\Administrative Templates\System\Access-Denied
Assistance
The Customize message for Access Denied errors policy, shown in the screenshot below,
enables us to create the actual message box shown to users when they access a shared
file to which their user account has no access.
What’s cool about this policy is that we can “personalize” the e-mail notifications to give us
administrators (and, optionally, file owners) the details they need to resolve the permissions
issue quickly and easily.
For instance, we can insert pre-defined macros to swap in the full path to the target file, the
administrator e-mail address, and so forth. See this example:
Whoops! It looks like you’re having trouble accessing [Original File Path]. Please click
Request Assistance to send [Admin Email] a help request e-mail message. Thanks!
You should find that your users prefer these human-readable, informative error messages
to the cryptic, non-descript error dialogs they are accustomed to dealing with.
The Enable access-denied assistance on client for all file types policy should be enabled to
force client computers to participate in Access-Denied Assistance. Again, you must make
sure to target your GPO scope accordingly to “hit” your domain workstations as well as
your Windows Server 2012 file servers.
Testing the configuration
This should come as no surprise to you, but Access-Denied Assistance works only with
Windows Server 2012 and Windows 8 computers. More specifically, you must enable the
Desktop Experience feature on your servers to see Access-Denied Assistance messages
on server computers.
When a Windows 8 client computer attempts to open a file to which the user has no
access, the custom Access-Denied Assistance message should appear:
If the user clicks Request Assistance in the Network Access dialog box, they see a
secondary message:
At the end of this process, the administrator(s) will receive an e-mail message that contains
the key information they need in order to resolve the access problem:
The user’s Active Directory identity
The full path to the problematic file
A user-generated explanation of the problem
So that’s it, friends! Access-Denied Assistance presents Windows systems administrators
with an easy-to-manage method for more efficiently resolving user access problems on
shared file system resources. Of course, the key caveat is that your file servers must run
Windows Server 2012 and your client devices must run Windows 8, but other than that, this
is a great technology that should save admins extra work and end-users extra headaches.
70-411 exam Question No : 33 – (Topic 0) You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the
File Server Resource Manager role service installed.
Each time a user receives an access-denied message after attempting to access a folder
✑ ✑ ✑ ✑ ✑ ✑ ✑
on Server1, an email notification is sent to a distribution list named DL1.
You create a folder named Folder1 on Server1, and then you configure custom NTFS
permissions for Folder1.
You need to ensure that when a user receives an access-denied message while attempting
to access Folder1, an email notification is sent to a distribution list named DL2. The
solution must not prevent DL1 from receiving notifications about other access-denied
messages.
What should you do?
A. From Server Manager, run the New Share Wizard to create a share for Folder1 by
selecting the SMB Share – Advanced option.
B. From the File Server Resource Manager console, modify the Access-Denied Assistance
settings.
C. From the File Server Resource Manager console, modify the Email Notifications
settings.
D. From Server Manager, run the New Share Wizard to create a share for Folder1 by
selecting the SMB Share -Applications option.
Answer: C
Explanation:
Configure the email notification settings
You must configure the email notification settings on each file server that will send the
access-denied assistance messages.
Open File Server Resource Manager. In Server Manager, click Tools, and then
click File Server Resource Manager.
Right-click File Server Resource Manager (Local), and then click Configure
Options.
Click the Email Notifications tab.
Configure the following settings:
In the SMTP server name or IP address box, type the name of IP address of the
SMTP server in your organization.
In the Default administrator recipients and Default “From” e-mail address boxes,
type the email address of the file server administrator.
Click Send Test E-mail to ensure that the email notifications are configured
correctly.
Click OK.
70-411 exam Question No : 34 HOTSPOT – (Topic 0) Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the File
Server Resource Manager role service installed.
You need to configure Server1 to meet the following requirements:
Ensure that old files in a folder named Folder1 are archived automatically to a
folder named Archive1.
Ensure that all storage reports are saved to a network share.
Which two nodes should you configure?
To answer, select the appropriate two nodes in the answer area.
70-411 exam Question No : 35 DRAG DROP – (Topic 0) You are a network administrator of an Active Directory domain named contoso.com.
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Web Server (IIS) server role installed.
Server1 will host a web site at URL The application pool
identity account of the web site will be set to a domain user account named AppPool1.
You need to identify the setspn.exe command that you must run to configure the
appropriate Service Principal Name (SPN) for the web site.
What should you run?
To answer, drag the appropriate objects to the correct location. Each object may be used
once, more than once, or not at all. You may need to drag the split bar between panes or
scroll to view content.
70-411 exam Question No : 36 – (Topic 0) Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1 is
backed up daily.
The domain has the Active Directory Recycle Bin enabled.
During routine maintenance, you delete 500 inactive user accounts and 100 inactive
groups. One of the deleted groups is named Group1. Some of the deleted user accounts
are members of some of the deleted groups.
For documentation purposes, you must provide a list of the members of Group1 before the
group was deleted.
You need to identify the names of the users who were members of Group1 prior to its
deletion.
You want to achieve this goal by using the minimum amount of administrative effort. What should you do first?
A. Mount the most recent Active Directory backup.
B. Reactivate the tombstone of Group1.
C. Perform an authoritative restore of Group1.
D. Use the Recycle Bin to restore Group1.
Answer: A
Explanation:
The Active Directory Recycle Bin does not have the ability to track simple changes to
objects.
If the object itself is not deleted, no element is moved to the Recycle Bin for possible
recovery in the future. In other words, there is no rollback capacity for changes to object
properties, or, in other words, to the values of these properties.
Free Download New 70-411 exam Dumps: Real4exam now supplying the new version of 70-411 VCE dumps, we ensure our 447q 70-411 exam questions are the most authoritative and valid compared with others’, which will ensure your 70-411 exam 100% passing, and now we are offering the free new version VCE simulator along with the VCE format 447q 70-411 braindumps, also the PDF format 70-411 exam is available now, welcome to choose.