NO.1 Your network contains an Active Directory domain named contoso.com. The domain contains
an organizational unit (OU) named IT and an OU named Sales.
All of the help desk user accounts are located in the IT OU. All of the sales user accounts are located
in the Sales OU. The Sales OU contains a global security group named G_Sales. The IT OU contains a
global security group named G_HelpDesk.
You need to ensure that members of G_HelpDesk can perform the following tasks:
- Reset the passwords of the sales users.
- Force the sales users to change their password at their next logon.
What should you do?
A. Right-click the IT OU and select Delegate Control.
B. Run the Set-ADFineGrainedPasswordPolicycmdlet and specify the -identity parameter.
C. Run the Set-ADAccountPasswordcmdlet and specify the -identity parameter.
D. Right-click the Sales OU and select Delegate Control.
Answer: D
070-411기출문제
Explanation:
G_HelpDesk members need to be allowed to delegate control on the Sales OU as it contains the sales
users (G_Sales)
You can use the Delegation of Control Wizard to delegate the Reset Password permission to the
delegated user.
References: http: //support. microsoft. com/kb/296999/en-us http: //support. microsoft.
com/kb/296999/en-us http: //technet. microsoft. com/en-us/library/cc732524. aspx
NO.2 Your network contains an Active Directory domain named contoso.com. All domain controllers
run Windows Server 2012 R2.
In a remote site, a support technician installs a server named DC10 that runs Windows Server 2012
R2. DC10 is currently a member of a workgroup.
You plan to promote DC10 to a read-only domain controller (RODC).
You need to ensure that a user named Contoso\User1 can promote DC10 to a RODC in the
contoso.com domain. The solution must minimize the number of permissions assigned to User1.
What should you do?
A. From Active Directory Administrative Center, pre-create an RODC computer account.
B. From Ntdsutil, run the local roles command.
C. Join DC10 to the domain. Run dsmod and specify the /server switch.
D. From Active Directory Users and Computers, run the Delegation of Control Wizard on the
contoso.com domain object.
Answer: A
Explanation:
A staged read only domain controller (RODC) installation works in two discrete phases:
1.Staging an unoccupied computer account
NO.3 Your network contains an Active Directory domain named contoso.com. All domain controllers
run Windows Server 2012 R2. One of the domain controllers is named DC1.
The DNS zone for the contoso.com zone is Active Directory-integrated and has the default settings.
A server named Server1 is a DNS server that runs a UNIX-based operating system.
You plan to use Server1 as a secondary DNS server for the contoso.com zone.
You need to ensure that Server1 can host a secondary copy of the contoso.com zone.
What should you do?
A. From DNS Manager, modify the Security settings of DC1.
B. From DNS Manager, modify the Advanced settings of DC1.
C. From Windows PowerShell, run the Set-DnsServerForwardercmdlet and specify the contoso.com
zone as a target.
D. From DNS Manager, modify the Zone Transfers settings of the contoso.com zone.
Answer: C
070-411 Dump
Explanation:
There are two ways that a secondary DNS server can be added. In both scenarios you will need to add
the new server to the Forwarders list of the primary Domain Controller.
1.The Set-DnsServerForwarder cmdlet changes forwarder settings on a Domain Name System (DNS)
server.
2.From the primary server, open DNS Manager, right click on the server name and select Properties.
Click on the Forwarders tab and click the Edit button in the middle of the dialogue box.
NO.4 Attaching an RODC to that account during promotion
Reference: Install a Windows Server 2012 R2 Active Directory Read-Only Domain Controller (RODC)
2. HOTSPOT
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Access
server role installed.
You have a client named Client1 that is configured as an 802. IX supplicant.
You need to configure Server1 to handle authentication requests from Client1. The solution must
minimize the number of authentication methods enabled on Server1.
Which authentication method should you enable? To answer, select the appropriate authentication
method in the answer area.
Answer:
Explanation:
Microsoft@ Windows@ uses EAP to authenticate network access for Point-to-Point Protocol (PPP)
connections (dial-up and virtual private network) and for IEEE 802.1X-based network access to
authenticating Ethernet switches and wireless access points (APs).

Microsoft인증 70-411자격증은 멋진 IT전문가로 거듭나는 길에서 반드시 넘어야할 높은 산입니다. Microsoft인증 70-411자격증패스가 어렵다한들Pass4Test덤프만 있으면 패스도 간단한 일로 변경됩니다. Pass4Test의Microsoft인증 70-411자격증는 100%시험패스율을 보장합니다. Microsoft인증 70-411자격증가 업데이트되면Microsoft인증 70-411자격증도 바로 업데이트하여 무료 업데이트서비스를 제공해드리기에 덤프유효기간을 연장해는것으로 됩니다.

Pass4Test의 Microsoft 070-411강좌를 구매하기전 우선 pdf버전 덤프샘플을 다운받아 덤프문제를 공부해보시면Pass4Test덤프품질에 신뢰가 느껴질것입니다. Pass4Test의 Microsoft 070-411강좌가 고객님의 시험패스테 조금이나마 도움이 되신다면 행복으로 느끼겠습니다.

시험 번호/코드: 70-411
시험 이름: Administering Windows Server 2012
당신이 구입하기 전에 시도, 100% 합격율 보장
100% 환불보장약속 70-411자격증
PDF 및 소프트웨어, 연구와 실천

>>70-411인증

시험 번호/코드: 070-411
시험 이름: Administering Windows Server 2012
당신이 구입하기 전에 시도, 100% 합격율 보장
100% 환불보장약속 070-411강좌
PDF 및 소프트웨어, 연구와 실천

>>070-411자료

Pass4Test에서는 소프트웨어버전과 PDF버전 두가지버전으로 덤프를 제공해드립니다.PDF버전은 구매사이트에서 무료샘플을 다움받아 체험가능합니다. 소프트웨어버전은실력테스트용으로 PDF버전공부후 보조용으로 사용가능합니다. Microsoft 인증070-411강좌 무료샘플을 다운받아 체험해보세요.

Pass4Test는 응시자에게 있어서 시간이 정말 소중하다는 것을 잘 알고 있으므로 Microsoft 70-411자격증를 자주 업데이트 하고, 오래 되고 더 이상 사용 하지 않는 문제들은 바로 삭제해버리며 새로운 최신 문제들을 추가 합니다. 이는 응시자가 확실하고도 빠르게Microsoft 70-411자격증를 마스터하고Microsoft 70-411자격증을 패스할수 있도록 하는 또 하나의 보장입니다.

070-411 덤프무료샘플다운로드하기: http://www.pass4test.net/070-411.html