Free Microsoft 70-411 Exam Dumps Questions & Answers

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.
A local account named Admin1 is a member of the Administrators group on Server1.
You need to generate an audit event whenever Admin1 is denied access to a file or folder.
What should you run?

• A.  auditpol.exe /set /user: admin1 /category: "detailed tracking" /failure: enable
• B.  auditpol.exe /set /userradmin1 /failure: enable
• C.  auditpol.exe /resourcesacl /set /type: key /user: admin1 /failure /access: ga
• D.  auditpol.exe /resourcesacl /set /type: file /user: admin1 /failure

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
You create an organizational unit (OU) named OU1 and a Group Policy object (GPO) named GPO1.
You link GPO1 to OU1.
You move several file servers that store sensitive company documents to OU1. Each file server contains more than 40 shared folders.
You need to audit all of the failed attempts to access the files on the file servers in OU1. The solution must minimize administrative effort.
Which two audit policies should you configure in GPO1? To answer, select the appropriate two objects in the answer area.

Correct Answer:

Your network contains a single Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2012 R2.
Server1 has the Windows Server updates Services server role installed and is configured to download updates from the Microsoft Update servers.
You need to ensure that Server1 downloads express installation files from the Microsoft Update servers.
What should you do from the Update Services console?

• A.  From the Products and Classifications options, configure the Classifications settings.
• B.  From the Automatic Approvals options, configure the Update Rules settings.
• C.  From the Update Files and Languages options, configure the Update Files settings.
• D.  From the Products and Classifications options, configure the Products settings.

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2012 R2.
You enable the EventLog-Application event trace session.
You need to set the maximum size of the log file used by the trace session to 10 MB.
From which tab should you perform the configuration? To answer, select the appropriate tab in the answer area.

Correct Answer:

Explanation:
Note: By default, logging stops only if you set an expiration date as part of the logging schedule.
Using the options on the Stop Condition tab, you can configure the log file to stop automatically after a specified period of time, such as seven days, or when the log file is full (if you've set a maximum size limit).
Reference: http: //technet. microsoft. com/en-us/magazine/ff458614. aspx

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.
Server1 has the following BitLocker Drive Encryption (BitLocker) settings:

You need to ensure that drive D will unlock automatically when Server1 restarts. What command should you run? To answer, select the appropriate options in the answer area.

Correct Answer: