HOTSPOT
Your network contains an Active Directory domain named contoso.com. All DNS servers host a DNS zone named adatum.com. The adatum.com zone is not Active
Directory-integrated. An administrator modifies the start of authority (SOA) record for the adatum.com zone. After the modification, y ou discover that when you add
or modify DNS records in the adatum.com zone, the changes are not transferred to the DNS servers that host secondary copies of the adatum.com zone. You need
to ensure that the records are transferred to all the copies of the adatum.com zone. What should you modify in the SOA record for the adatum.com zone?
To answer, select the appropriate setting in the answer area.
Hot Area:
Answer: 
The answer is correct – Serial number increment.
More info here: https://support.microsoft.com/en-us/kb/163971
And here: http://help.dnsmadeeasy.com/secondary-dns/soa-serial-numbers/
Folks,
Is there any way to get all questions and answers in a single pdf file?
This will be a real help for preparation.
I second that.
yeah, copy and paste to a word document, then use a doc to pdf converting software.
yep, pdf will be nice!
2017 August New Updated 70-411 exam questions:
QUESTION 302
You deploy a windows Server Update (WSUS) server named Server01.
You need to ensure that you can view update reports and computer reports on server01.
Which two components should you install? Each correct answer presents part of the solution.
A. Microsoft Report Viewer 2008 Redistributable Package
B. Microsoft .Net Framework 2.0
C. Microsoft SQL Server 2008 R2 Builder 3.0
D. Microsoft XPS Viewer
E. Microsoft SQL Server 2012 reporting Services (SSRS)
Answer: AB
QUESTION 303
You deploy a windows Server Update (WSUS) server named Server01.
You need to prevent the WSUS service on Server01 from being updated automatically.
What should you do from the update service console?
A. From the Product and Classification options, modify the Products setting.
B. From the Automatic Approvals options, modify the Advanced settings.
C. From the Product and Classification options, modify the Classifications setting.
D. From the Automatic Approvals options, modify the Default Automatic Approval rule.
Answer: B
QUESTION 305
Note: This Question is part of series of question that use the same or similar answer choices.
An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to that question.
You network contains one Active Directory domain named contoso.com.
The forest functional level is Windows Server 2012.
All servers run Windows Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify which domain controller must be online when cloning a domain controller.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Answer: A
QUESTION 306
Note: This Question is part of series of question that use the same or similar answer choices.
An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to that question.
You network contains one Active Directory domain named contoso.com.
The forest functional level is Windows Server 2012.
All servers run Windows Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify whether deleted objects can be recovered from the Active Directory Recycle Bin.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Answer: E
QUESTION 307
Note: This Question is part of series of question that use the same or similar answer choices.
An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in the series. Information and detailed provided in a question apply only to that question.
You network contains one Active Directory domain named contoso.com.
The forest functional level is Windows Server 2012.
All servers run Windows Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify whether the members of the protected Users group will be prevented from authenticating by using NTLM.
Which cmdlet should you use?
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy
Answer: D
more new 70-411 practice questions comes from：
https://drive.google.com/folderview?id=0B75b5xYLjSSNfnNyWDFTYllvTTkteG0waVJYSFdoaDVWZTBSamh6Q0xiaUJmNEk5cUJSbFU&usp=sharing
Question 305 would actually be GET-ADDomain to determine which domain controller is the PDC Emulator
There is a variation of this question asking to identify what domain controllers are authorized for being cloned. Then you would use GET-ADGroupMember to determine who is in the cloneable domain controllers OU.
When you make modifications to the SOA other DNS servers are looking for your Serial number. Its tells the other DNS servers what “version” you are on and updates them accordingly. If you do not increment the serial then the other DNS servers will not realize that there has been an modification.
Just took the 411. There were a few questions that were not covered with these review questions. Below are paraphrased questions just to identify the area.
1. Identify which GUI tool you can use to change the Infrastructure Master server FSMO role. Answer: Active Directory Users and Computers (ADUC)
2. Identify which GUI tool you can use to change the Domain Naming Master FSMO role. Answer: Active Directory Domains and Trusts
Side note: PDC Emulator & RID Master can be changed in ADUC as well.
There was another question on the test not covered in here…but I forget what it was.
Remembered the other question. It was regarding a service named Service1 set to logon as NT Service\Service1.
This is known as a “Virtual Account”, and it passes Computer account when accessing something on the network.
https://social.technet.microsoft.com/wiki/contents/articles/391.managed-service-accounts-msas-versus-virtual-accounts-in-windows-server-2008-r2.aspx
https://technet.microsoft.com/en-us/library/dd548356.aspx
Anyway, if you can answer all the questions in this v9 question review, you can pass the test, and if you know those 2 additional questions you can easily score over 900.