You work as a senior administrator at ABC.com. The ABC.com network consists of a single
domain named ABC.com. All servers on the ABC.com network have Windows Server 2012
installed, and all workstations have Windows 8 installed.
You are running a training exercise for junior administrators. You are currently discussing a
Windows PowerShell cmdlet that activates previously de-activated firewall rules.
Which of the following is the cmdlet being discussed?
A.
Set-NetFirewallRule
B.
Enable-NetFirewallRule
C.
Set-NetIPsecRule
D.
Enable-NetIPsecRule
Enable-NetFirewallRule – Enables a previously disabled firewall rule.
http://technet.microsoft.com/en-us/library/cc990290(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/jj574205.aspx
http://mikefrobbins.com/2013/02/28/use-powershell-to-remotely-enable-firewall-exceptions-on-windows-server-
2012/
http://technet.microsoft.com/en-us/library/jj554869%28v=wps.620%29.aspx
I don’t see the difference between A and B.
As per the following link:
https://technet.microsoft.com/en-us/library/jj573828.aspx
it says:
Set-NetFirewallRule
Modifies existing firewall rules.
and example:
This example *enables* all of the rules in a predefined group.
PS C:\> Set-NetFirewallRule -DisplayGroup “Windows Firewall Remote Management” -Enabled True
This cmdlet shows an alternate way to *enable* all of the rules in a predefined group.
PS C:\> Enable-NetFirewallRule -DisplayGroup “Windows Firewall Remote Management”
both cmdlets seem to do the same thing to that particular group of Firewall rules.
Anyone can explain ?
Joining Pirulo’s question.
At the beginning I thought maybe the “Set-…” command invoke the “Enabled-…” command once he see’s that the “Windows Firewall Remote Management” is already exist, but in the technet website it actually written that it modifies an existing rules.
Correct answer: B
The cmdlet Enable-NetFirewallRule – Enables a previously disabled firewall rule.
https://technet.microsoft.com/en-us/library/jj554869(v=wps.630).aspx
Wonderful story, reckoned we could combine a number of unrelated information, nonetheless definitely really worth taking a appear, whoa did 1 discover about Mid East has got extra problerms as well
Every as soon as inside a while we pick out blogs that we read. Listed below would be the newest web pages that we decide on
please stop by the websites we comply with, such as this a single, because it represents our picks through the web
very handful of websites that transpire to become detailed below, from our point of view are undoubtedly nicely worth checking out
we like to honor several other net sites on the net, even though they arent linked to us, by linking to them. Underneath are some webpages worth checking out
Wonderful story, reckoned we could combine a number of unrelated information, nonetheless seriously really worth taking a appear, whoa did one particular study about Mid East has got much more problerms at the same time
just beneath, are numerous totally not associated sites to ours, having said that, they may be certainly worth going over
I love reading through a post that will make people think. Also, thanks for allowing for me to comment!|
I have already passed 70-410 certification exam yesterday….Scored 984/1000 in US! Many new exam questions added into the 2017 70-410 test! So I just come here to share with your guys and wish more 70-410 candidates can pass easily!
Good Luck for your all!
QUESTION 461
You have a DNS server named DNS1 that runs windows server 2012 R2.
DNS1 is used to resolve the names of internet resources by using several DNS forwarders.
You need to prevent DNS1 from performing iterative queries if the DNS forwarders are unable to reslove the queries.
Which cmdlet should you use?
A. Remove-DNSServerRootHint
B. Set-DNSServerPrimaryZone
C. Ser-DNSServerGlobalNameZone
D. Unregister-DNSserverDrirectoryPartition
Answer: A
QUESTION 462
Your network contains an Active Directory domain named contoso.com.
The domain contains a DHCP server named Server1 that runs Windows Server 2012 R2.
You create a DHCP scope named Scope1. The scope has a start address of 192.168.1.10. an end address of 192.168.1.50, and a subnet mask of 255.255.255.192.
You need to ensure that Scope1 has a subnet mask of 255.255.255.0.
What should you do first?
A. From the DHCP console, modify the properties of Scope1.
B. From the DHCP console, modify the Scope Options of Scope1.
C. From Windows PowerShell. run the Remove-DhcpServerv4Scope cmdlet.
D. From the DHCP console, reconcile Scope1.
Answer: C
QUESTION 463
RODC comes with a number of features that focus on heightened security with limited functionality to remote office users.
Which of the following are features of RODC?
A. Filtered Attribute Sets
B. Read-Only DNS
C. Unidirectional Replication
D. All of these
Answer: D
QUESTION 464
Sometimes it’s important to remove an RODC from your forest or domain. However, it’s important that you follow a simple rule whilst removing RODC’s. What is this rule?
A. All RODC’s must be detached before removing a final writable domain controller
B. All writable domain controllers must be removed before RODC’s can be detached
C. Your forest must only consist of RODC’s if you want to remove them
D. There are no rules for removing RODC’s
Answer: A
QUESTION 465
Complete the missing word from the sentence below that is describing one of the new roles in Server 2012:
By using ___, you can augment an organization’s security strategy by protecting information through persistent usage policies, which remain with the information, no matter where it is moved.
A. AD FS
B. RODC
C. AD LDS
D. AD RMS
Answer: D
QUESTION 466
You have a server named Server1. that runs Windows Server 2012 R2. Server1 has live network adapters. Three of the network adapters are connected to a network named LAN1. The two other network adapters are connected to a network named LAN2.
You create a network adapter team named Team1 from two of all the adapters connected to LAN1.
You create a network adapter team named Team2 from the two adapters connected to LAN2.
A company policy states that all server IP addresses must he assigned by using a reserved address in DHCP.
You need to identify how many DHCP reservations you must create for Server1.
How many reservations should you identify?
A. 2
B. 3
C. 5
D. 7
Answer: B
QUESTION 467
You create an OU named tempusers. you add several test users to that OU.
You want to delete the ou and receive an error.
remove-adorganizationunit -identity “ou=tempusrs, dc=contoso,dc=com” – recursive.
A. Remove all the users from ou
B. Modify the rights to your user account
C. Set the confirm parameters to $true
D. Set the protectfromaccidential deletion to $false
Answer: D
QUESTION 468
You have a server that runs server core of windows 2012 r2 server. you need to ensure that windows updates are installed only by using manual installation on server1. which 3 steps will you perform.
scregedit.wsf /au 1
wuauclt /selfupdatemanaged
uninstall-windowsfeature
netstop wuauserv
wuauclt /selfupdateunmanaged
net start wuauserv
Answer:
1) netstop wuauserv
2) scregedit.wsf /au 1
3) net start wuauserv
QUESTION 469
Your network has ipsec policy configured.
You need to exempt icmp and router discovery traffic from ipsec policy rule in windows firewall.
which command will you use
A. Disable-NetAdapterBinding
B. Update-NetIPSecRule
C. Remove-NetFirewallRule
D. Set-NetFirewallSetting
Answer: D
QUESTION 470
Your network contains one Active Directory domain named contoso.com.
You deploy a new virtual machine in microsoft azure and then you run the active directory domain configuration wizard as show in the exhibit. (click the exhibit button).
You need to ensure that all of the users in contoso.com are replicated to the new domain controller in azure.
What should you do?
A. Modify the Deployment Configuration.
B. Set up directory integration.
C. Configuration Azure Active Directory Connect.
D. Select the Domain Name System (DNS) server check box.
Answer: C
QUESTION 471
DC3 loses network connectivity due to a hardware failure.
You log on to DC3.
You need to identify which service location (SRV) records are registered by DC3.
What should you do?
A. Run ipconfig /displaydns.
B. Run dcdiag /test:dns.
C. Open the %windir%\system32\config\netlogon.dns file.
D. Open the %windir%\system32\dns\backup\adatum.com.dns file.
Answer: C
QUESTION 472
You have 10 domain controller in a domain.
You need to prevent several members of domain admin groups from logging on the domain controller.
Which two object should you create and configure?
A. GPO to the domain
B. authentication policy
C. authentication policy silo
D. a central access policy
E. a user certificate
Answer: BC
QUESTION 473
Your network contains one Active Directory forest named contoso.com.
The forest contains a single domain. All domain controllers run Windows Server 2012 R2.
You need to modify the membership of a group named Groupl to include two users named User1 and User2.
What command should you run? To answer, select the appropriate options in the answer area.
Answer: Add-AdGroupMember, Group1, User1,User2
QUESTION 474
Hotspot Question
The permissions on Folder1 and Share1 are configured as shown in the following table.
A user named User1 is a member of Group2 and Group3.
A user named User2 is a member of Group1 and Group2.
You need to identify which actions the users can perform when they access the files in Share1.
What should you identify? To answer, select the appropriate actions for each user in the answer area.
Answer:
QUESTION 475
Your network contains an Active Directory domain named contoso.com.
The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the Group Policy Management feature installed. Server2 has the Print and Document Services server role installed.
On Server2, you open Print Management and you deploy a printer named Printer1 by using a Group Policy object (GPO) named GPO1.
When you open GPO1 on Server1, you discover that the Deployed Printers node does not appear.
You need to view the Deployed Printers node in GPO1.
What should you do?
A. On Server1, install the Group Policy Management feature.
B. On Server1, add and share a printer.
C. On Server2, restart the Print Spooler service.
D. On a domain controller, add a Group Policy template to GPO1.
Answer: B
Explanation:
We need to share at least one printer.
Incorrect answers:
Not A: Server1 has already the Group Policy Management feature installed.
Not C: Restarting the Print Spooler service on Server2 would have not effect on Server1.
QUESTION 476
You have an offline image of a server that runs Windows Server 2012 R2.
You need to enable Remote Desktop Services (RDS) on the server.
What should you use?
A. the sc.exe command with the config parameter
B. the Add-RDServerSessionHost cmdlet
C. the configure-smremoting.exe command with the -Enable parameter
D. the Install-WindowsFeature cmdlet
Answer: C
QUESTION 477
You have a Hyper-V host named Server1 that runs Windows Server 2012 R2. Server1 hosts several virtual machines. Each virtual machine has two network adapters. Server1 contains several virtual switches.
On Server1, you create a NIC team that has two network adapters.
You discover that the NIC team is set to Static Teaming mode.
You need to modify the NIC teaming mode to Switch Independent.
Which cmdlet should you use?
A. Set-VMNetworkAdapter
B. Set-NetLbfoTeam
C. Set-NetLbfoTeamNic
D. Set-VMSwitch
Answer: B
QUESTION 478
Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01.
You plan to deploy a child domain for contoso.com in Microsoft Azure. To the Azure subscription, you add several virtual machines that have a Server Core installation of Windows Server 2012 R2.
You need to create the new domain on one of the virtual machines.
Which tool should you use?
A. the ntdsutil command
B. the Set-ADDomain cmdlet
C. the Install-ADDSDomain cmdlet
D. the dsadd command
E. the dsamain command
F. the dsmgmt command
G. the net user command
H. the Set-ADForest cmdlet
Answer: C
QUESTION 479
You have a Hyper-V host named Hyper1 that runs Windows Server 2012 R2. Hyper1 hosts several virtual machines that run Windows 8.1. Several developers connect to the virtual machines by using the Virtual Machine Connection tool.
You need to ensure that the developers can print to their local printers from within virtual machine sessions.
What should you configure?
A. a virtual switch on Hyper1
B. Remote Desktop Services (RDS) on Hyper1
C. enhanced session mode on Hyper1
D. a virtual network adapter on the virtual machines
Answer: C
QUESTION 480
……
More questions are on my blog: http://www.hotexam.com/?s=70-410
Hope it can help u a lot!