Microsoft 70-414 Exam Practice Questions (P. 4)
- Full Access (171 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #16
You administer a group of servers that run Windows Server 2012 R2.
You must install all updates. You must report on compliance with the update policy on a monthly basis.
You need to configure updates and compliance reporting for new devices.
What should you do?
You must install all updates. You must report on compliance with the update policy on a monthly basis.
You need to configure updates and compliance reporting for new devices.
What should you do?
- ADeploy the Microsoft Baseline Security Analyzer. Scan the servers and specify the /apply switch.
- BIn Configuration Manager, deploy a new Desired Configuration Management baseline that includes all required updates.
- CConfigure a new group policy to install updates monthly. Deploy the group policy to all servers.
- DIn Operations Manager, create an override that enables the software updates management pack. Apply the new override to the servers.
- EIn Orchestrator, create a software runbook that installs all required updates to the servers on a monthly schedule. Start the runbook
- FConfigure Windows Server Update Service (WSUS) to automatically approve all updates. Configure the servers to use the WSUS server for updates.
- GIn the Service Manager console, add all updates and servers to a new change request. Approve the change request.
- HConfigure a new group policy to install updates monthly. Deploy the group policy to all servers.
Correct Answer:
B
The question is asking for reporting only; reporting on "updates and compliance". A Desired Configuration Management baseline can provide the required reporting.
B
The question is asking for reporting only; reporting on "updates and compliance". A Desired Configuration Management baseline can provide the required reporting.
send
light_mode
delete
Question #17
You are an Active Directory administrator for Contoso, Ltd. You have a properly configured certification authority (CA) in the contoso.com Active Directory Domain
Services (AD DS) domain. Contoso employees authenticate to the VPN by using a user certificate issued by the CA.
Contoso acquires a company named Litware, Inc., and establishes a forest trust between contoso.com and litwareinc.com. No CA currently exists in the litwareinc.com AD DS domain. Litware employees do not have user accounts in contoso.com and will continue to use their litwareinc.com user accounts.
Litware employees must be able to access Contoso's VPN and must authenticate by using a user certificate that is issued by Contoso's CA.
You need to configure cross-forest certificate enrollment for Litware users.
Which two actions should you perform? Each correct answer presents part of the solution.
Services (AD DS) domain. Contoso employees authenticate to the VPN by using a user certificate issued by the CA.
Contoso acquires a company named Litware, Inc., and establishes a forest trust between contoso.com and litwareinc.com. No CA currently exists in the litwareinc.com AD DS domain. Litware employees do not have user accounts in contoso.com and will continue to use their litwareinc.com user accounts.
Litware employees must be able to access Contoso's VPN and must authenticate by using a user certificate that is issued by Contoso's CA.
You need to configure cross-forest certificate enrollment for Litware users.
Which two actions should you perform? Each correct answer presents part of the solution.
- AGrant the litwareinc.com AD DS Domain Computers group permissions to enroll for the VPN template on the Contoso CA.
- BCopy the VPN certificate template from contoso.com to litwareinc.com.
- CAdd Contoso's root CA certificate as a trusted root certificate to the Trusted Root Certification Authority in litware.com.
- DConfigure clients in litwareinc.com to use a Certificate Policy server URI that contains the location of Contoso's CA.
Correct Answer:
AC
AC
send
light_mode
delete
Question #18
A company has data centers in Seattle and New York. A high-speed link connects the data centers. Each data center runs a virtualization infrastructure that uses
Hyper-V Server 2012 and Hyper-V Server 2012 R2. Administrative users from the Seattle and New York offices are members of Active Directory Domain Services groups named SeattleAdmins and NewYorkAdmins, respectively.
You deploy one System Center Virtual Machine Manager (SCVMM) in the Seattle data center. You create two private clouds named SeattleCloud and
NewYorkCloud in the Seattle and New York data centers, respectively.
You have the following requirements:
✑ Administrators from each data center must be able to manage the virtual machines and services from their location by using a web portal.
✑ Administrators must not apply new resource quotas or change resource quotas.
You must manage public clouds by using the existing SCVMM server.

✑ You must use the minimum permissions required to perform the administrative tasks.
You need to configure the environment.
What should you do?
Hyper-V Server 2012 and Hyper-V Server 2012 R2. Administrative users from the Seattle and New York offices are members of Active Directory Domain Services groups named SeattleAdmins and NewYorkAdmins, respectively.
You deploy one System Center Virtual Machine Manager (SCVMM) in the Seattle data center. You create two private clouds named SeattleCloud and
NewYorkCloud in the Seattle and New York data centers, respectively.
You have the following requirements:
✑ Administrators from each data center must be able to manage the virtual machines and services from their location by using a web portal.
✑ Administrators must not apply new resource quotas or change resource quotas.
You must manage public clouds by using the existing SCVMM server.

✑ You must use the minimum permissions required to perform the administrative tasks.
You need to configure the environment.
What should you do?
- AFor both the Seattle and New York admin groups, create a User Role and assign it to the Application Administrator profile. Add the Seattle and New York private clouds to the corresponding User Role.
- BFor both the Seattle and New York admin groups, create a User Role and assign it to the Delegated Administrator profile. Add the Seattle and New York private clouds to the corresponding User Role.
- CFor both the Seattle and New York admin groups, create a User Role and assign it to the Tennant Administrator profile. Add the Seattle and New York private clouds to the corresponding User Role.
- DAdd both SeattleAdmins and NewYorkAdmins to the Local Administrators group of each Hyper-V host in Seattle and New York, respectively.
Correct Answer:
B
B
send
light_mode
delete
Question #19
You administer an Active Directory Domain Services forest that includes an Active Directory Federation Services (AD FS) server and Azure Active Directory. The fully qualified domain name of the AD FS server is adfs.contoso.com.
You must implement single sign-on (SSO) for a cloud application that is hosted in Azure. All domain users must be able to use SSO to access the application.
You need to configure SSO for the application.
Which two actions should you perform? Each correct answer presents part of the solution.
You must implement single sign-on (SSO) for a cloud application that is hosted in Azure. All domain users must be able to use SSO to access the application.
You need to configure SSO for the application.
Which two actions should you perform? Each correct answer presents part of the solution.
- AUse the Azure Active Directory Synchronization tool to configure user synchronization.
- BUse the AD FS Configuration wizard to specify the domain and administrator for the Azure Active Directory service.
- CCreate a trust between AD FS and Azure Active Directory.
- DIn the Azure management portal, activate directory synchronization.
Correct Answer:
AB
AB
send
light_mode
delete
Question #20
You manage a Hyper-V 2012 cluster by using System Center Virtual Machine Manager 2012 SP1. You need to ensure high availability for business-critical virtual machines (VMs) that host business-critical SQL Server databases.
Solution: You set the memory-weight threshold value to High for each business-critical VM. Does this meet the goal?
Solution: You set the memory-weight threshold value to High for each business-critical VM. Does this meet the goal?
send
light_mode
delete
All Pages