Pass Your Microsoft 70-413 Exam Easy!

Valid in Brazil. I took the exam today (30/09/2014) and passed with a score 863/1000

Failed w/644.

Two scenarios (17Qs) and 44 single questions were from this dump. No new questions with one slight change to existing question. THis means there are errors.

Is this exam still valid?

wer can i find the DEBORAH answers
thanks

Failed with a 630 on July 3, 2014.
Exam consisted of 61 total questions.

2 case exams (litwareinc & Northwinds Traders), 9 questions and 8 questions respectively.

44 multiple choice questions

All the questions were from this dump, however I did not do a very good job with studying the dump.

Is this dump still valid?

Valid In PAKISTAN got 781 on 29/06/2014
Thanks DEBORAH

Thank you guyz...i passed today with 781....just only 2days preparation.Great.....bless yu all

Not valid in USA failed with 644

NOT valid in USA... 644

I passed this exam today with score of 920 , dump is still valid.

100% valid in Pakistan.
today i got 863..

Passed 2day with 781. Still Valid in Sri Lanka.

PASS Today With 8xx Valid In Kuwait

please can someone post the link to see booga's comment on the corrected question

Passed today 8xx without corrections, 1 new question. Some wrong answers, but still good for passing. Thanx!

Good day,

Wrote the exam today and failed. No where in the whole exam did I ever have a feeling I was doing bad. This was my first exam I failed, did my whole MCITP and never failed once.

My exam consisted off:
- 2x case studies, one had 8 Q&A other had 9.
- 44 normal Q&A
- 02h10 minutes to complete the exam

I had no new questions at all. Every single question came from either this brain-dump, or the one I purchased from Testkings.com.

I was ready to celebrate my pass of 70-413 when I saw my score report at the end of 64X today, could not get as far as to get up from my seat in the exam room. I was sooo disappointed. The 2012 exams a much harder than the 2008 exams, much much harder. The sad part is, no where in the exam do you ever get a feeling your going to fail as you had all the Q&A in a brain-dump or seen it, or know the answer to it, not one of the questions in the exam was new, not one of them

Anyway - this is my experience, hope this helps the ones that is still going to write.

Someon3else

this vce is still valid, all the questions came from this vce.. passed with 780 only..lots of wrong answers..still good enough to pass.

Passed today with 781. Used Deb's VCE with Booga's corrections and some of my own. (Ignored Mustafa...) was above 80% on all sections and two of the sections were 100%. So this dump is very valid but still needs more collaboration from the community. Lowest score was Physical Infrastructure. Sounds like the test is scored very stringently in order to get a lower score whilst maxing out on two sections...

@sacrificeme how many questions were there form corrections

@Levskar40
could you please share your corrections. i'm going for an exam tomorrow

@Levskar40
could you please share us your knoledge or send the corrected dump to albaroun at yahoo dot com
Thanks

just pass now the exam with score 781 and all exam was from DENISE Dump but there is still a lot of wrong answers in the bump, good luck for everyone

passed today 745, few new questions but I guess there are 5-10 wrong answers, but still good for passing. Thank you

Passed today in Bulgaria with 9XX
2 new questions but I made a lot of corrections.

@MC E Q84, the correct answer is C!! you described it well, hosted requires a server to be in the branch office. The questions states that there will only be client computers in the branch. Therefore the only option would be distributed cache. The originally answer of C is correct.

@MC
http://technet.microsoft.com/en-us/library/dd637784(v=ws.10).aspx

No correction needed, they also could be wrong, passed with out correction with 7xx

there was 2 case studies with ~9 questions in each and 49 regular questions.

Like I said, I studied this one with corrections of BOOGA's answers and the new dump of DENISE, it seems DENISE has the corrections made on Deborah's comments.

Passed with score 7XX, no new questions.
Be carefull tough en do some research on your own if you daubt the answer. I barely passed this one en right now I dabut the corrections as well cause some other people (see comments) passed with higher score WITHOUT any corrections...

Thanks for the dump!

Is this exam with the answers in it (not the corrected ones) enough to pass?

E84: Correct awnser is A, not C.
Reduce internet traffic with BC hosted, not distributed.

Hosted cache mode. In this mode, branch office client computers download content from the content servers in the main office, and a hosted cache server retrieves the content from the clients. The hosted cache server then caches the content for other client computers. Hosted cache mode does require a server computer in the branch office, and there are additional requirements.

Hi Ahmet did you pass the exam with this vce file from denise.

Hoi ahmed hoop dat je bent geslaagt en geef graag een update

Good day,

Is there anyone that could share on their exam experience please?

1) How many Q&A
2) How many case studies?
3) How many D&D

I am using testkings.com, 108 q&A, is testkings good?

Thank you in advance.

Scrooge

Good day,

Is there anyone that could share on their exam experience please?

1) How many Q&A
2) How many case studies?
3) How many D&D

I am using testkings.com, 108 q&A, is testkings good?

Thank you in advance.

Scrooge

Hi all,

I am writing this week and just wanted to know some basics:
- How many questions are there in the exam?
- How many case studies in one exam?
- What time was given to complete the exam?

Please - just some insights please - I will give my feedback the moment I have written mine.
Thank you in advance.
Scrooge

Please Can Someone List all of the Corrections in One Comment Please or possibly Upload an Updated VCE as i plan to write at the end of the month. Thank You

Pass only Debora with 9XX june 6 2014

Only Deborah Pass on friday 06 june

valid or not ??
and where i can find right answers???
or this dump have right answers
http://www.examcollection.com/microsoft/Microsoft.Actual-Answers.70-413.v2014-06-06.by.DENISE.146q.vce.file.html?path=B&utm_expid=79286999-14.OXvgNl-vQ8u7ahzlEWPLyg.2&utm_referrer=http%3A%2F%2Fwww.examcollection.com%2F70-413.html%3Fpath%3DB

This dump is valid without any corrections.
Passed with 8xx.

Can some explain why E7 is Yes to DHCP enforcement method and E97 is 802.1x enforcement.please compare them to E5. I believe the answer to E7 should be No to DHCP as no DHCP server exist the table.

just Passed 6 June 727

Here is the explanation for the Q11:
http://support.microsoft.com/kb/2753560
for PES you must have a 2008 R2 DC and you can downgrade a forest & domain

About the E75 and dcpromo question:
"You can allow dcpromo to automatically transfer the roles, however, they may transfer to a DC that you may not want to transfer the roles to. This is why this is suggested in order to allow you to transfer the roles to a specific DC."


From a MVP guy: http://msmvps.com/blogs/acefekay/archive/2010/10/09/remove-a-current-operational-domain-controller-from-active-directory.aspx

E75: When you perform DCPROMO and you have FSMOs on this DC, roles will automatically move to the next available DC. But I would recommend manually moving them before you performing DCPROMO down.

So the 3rd step can be "run dcpromo"

Approved 8XX today. Only with Deborah!!!

@ bin : YES, All Qs from this dump but there are alot of wrong answers

Passed with 700. Close call but valid. (no, correction used from this forum.)

I studied this one with corrections of BOOGA's answers and the new dump of DENISE, it seems DENISE has the corrections made on Deborah's comments. I am gonna take the exam this afternoon, will let you know if this one is valid. Wish me luck!

E56 I was wrong about it. the original answer was correct . It should be A. Although the question does not mention if GPO2 has the folder redirection defined so it can overwrite the folder redirection in GPO1.

just Passed 5June 7Xx
with my corrections mentioned , 10% if my memory can not recall , 1 new question , I will upload my VCE if required.
Good luck for all
the low percentage I had for:
Plan & deploy
Design and implement Network access
design and Implement active directory
the lowest is:
design and implement AD infrastructure

Passed today (Jun 05), score 863. Deborah's dump with Booga's corrections.
Thank Deborah & Booga.

@Mohammed Fikry

did all the ques from this dump?

passed today 4/6/2014 with score 700 !!!
with booga's corrections only
be careful

@AntiEgyptCoup

i agree with you answer.

@Curtis
E77 C
Network Bandwidth Considerations for Distribution Points:
To help you plan for the distribution point infrastructure in your hierarchy, consider the network bandwidth that is used for the content management process and ways to reduce the network bandwidth that is used.
When you create a package, change the source path for the content or update content on the distribution point, the files are copied from the source path to the content library on the site server. Then, the content is copied from the content library on the site server to the content library on the distribution points. When content source files are updated, and the source files have already been distributed, Configuration Manager retrieves only the new or updated files, and then sends them to the distribution point. Scheduling and throttling controls can be configured for site-to-site communication and for communication between a site server and a remote distribution point. When network bandwidth between the site server and remote distribution point is limited even after you configure the schedule and throttling settings, you might consider prestaging the content on the distribution point.
http://technet.microsoft.com/en-us/library/gg712321.aspx#BKMK_DistributionPointBandwidth

Bandwidth Control:
Bandwidth controls are in place only between sites and from a standard distribution point to a branch distribution point. Package transmissions between the site server and standard distribution points do not use any type of time or bandwidth control. If you need to distribute large packages, plan a time to copy them to standard distribution points when they will not place a large burden on the network.
http://technet.microsoft.com/en-us/library/bb680614.aspx
----------------------------
E95
I agree it is B
there is workaround to override the demand-dial-vpn:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/239c4c45-6d36-4786-9b38-bd5093adcf98/sstp-for-demand-dial-vpn
-----------------------------
E7 is YES
Implementing DHCP NAP to Enforce WSUS Updates:
http://technet.microsoft.com/en-us/magazine/2009.05.goat.aspx
http://ripusudan.wordpress.com/2013/03/19/how-to-configure-nap-enforcement-for-dhcp/
-----------------------------
E50:
I believe it is ABC
Read-only domain controllers (RODCs) can be promoted successfully to global catalog server status. However, certain directory-enabled applications cannot support an RODC as a global catalog server. For example, no version of Microsoft Exchange Server uses RODCs. However, Microsoft Exchange Server works in environments that include RODCs, as long as there are writable domain controllers available. Exchange Server 2007 effectively ignores RODCs. Exchange Server 2003 also ignores RODCs in default conditions where Exchange components automatically detect available domain controllers. No changes were made to Exchange Server 2003 to make it aware of read-only directory servers. Therefore, trying to force Exchange Server 2003 services and management tools to use RODCs may result in unpredictable behavior.
----------------------------
@Hardy ,, Thank you , your both answers are right as well, I added them to my customized vce

E69# Again , it is 2 2 3
Please whoever suppose an answer , kindly clarify it Why per each !!!
Health Policy#
If a computer fails to meet its requirements
If a computer meets its requirements

Network#(Isolate-allow-Remediation )
1- must be provided access to a limited set of resources on the network.
2- must have full access to the network

Health Validators# (Firewall-antivirus-spyware-updates-security updates)
- firewall ( firewall enabled)
- Antivirus (antivirus software must be up-to-date)
- Automatic update (automatic updating enabled)

@bin , E75 , my view is:
First read carefully:
http://www.msserverpro.com/migrating-active-directory-domain-controller-from-windows-server-2008-r2-to-windows-server-2012/

1- install ADDS on DC3 & DC4
2- Run Wizard (will create the global catalog as well)
3- Run ntdsutil (you use it to transfer roles & also to remove old servers)

the point :
- I can not select (transfer operation master role and create new catalog server),simply this catalog was already created by wizard , how can I create it again ?
- I can not select the dcpromo option as I need to transfer FSMO roles first before demoting DC1 & DC2.
- ntdsutil will do 2 jobs here , transfer roles & demote old DCs
http://support.microsoft.com/kb/216498

orginal answer was:
1- Install ADDS services on DC3 & DC4
2- Run AD Domain services wizard on DC3 & DC4
3- Run DCpromo
the problem above:
How could I demote DC1 & DC2 by dcpromo and roles are not transferred ?

passed today in Germany. Dump is valid; few answers are wrong

@Bin

E75 I think the dcpromo is to demote the old DC's so they are just member servers. I have to admit I'm not sure on this one as I believe the FSMO roles don't move on their own but this might have changed with 2012? This article suggests demoting it with a specific powershell command WILL migrate the FSMO roles automatically so I don't know about DC Promo. For me the answer should be 4 steps, move the FSMO roles and make a new GC then dcpromo to demote the old servers.

@Curtis Thanks for the post,

Looks like good corrections on most of your suggestions there. Still disagree on E50. The reference to domain controllers already being there only applies to Site1 and Site2 (the main sites)

So that's the main sites sorted, DC already at Site1 DC already at site2 so B and C.

We have to assume the branches have no DC's at all as they aren't mentioned. I believe the question is badly worded but implies 2008 DC's present only at the main sites.

"The main offices sites are named Site1 and Site2. Each office connects to Site1 and Site2 by using a WAN link. Each site contains a domain controller that runs Windows Server 2008."

So with a writeable DC at site1 and 2 we have to achieve:
"Ensure that users can log on to the domain if a domain controller or a WAN link fails.
Minimize the number of domain controllers implemented."

So we need to keep writeable DC's to a minimum, so we look at RODC's. Does an RODC at the 10 branches fulfill requirement one?

"Each office connects to Site1 and Site2 by using a WAN link." I read this as 2 WAN links per branch office? So it has a link directly to each main office. The requirement is "Ensure that users can log on to the domain if a domain controller or a WAN link fails"

If it does mean one link to Site1 and a seperate link to Site2 then we are fine as we can cope with "a" WAN link failure per branch (not two). We can also cope with "a" DC failure as there is a route to a writeable DC at the other site if one fails.

So for me we have to go with RODC's being the best choice. I still think the question is badly worded so it might be worth reading careful in the exam incase there is more decisive english!

Passed today with 727, not nearly as good as I hoped and I basically memorized the dump.

Any one passed in June ?

@pepper
E55 is D ,, I agree with you :) thank you.

E53
it should be B & E
simply this is new authentication method in windows 2012

http://windowsitpro.com/windows-server-2012/enable-claims-support-windows-server-2012-active-directory
http://technet.microsoft.com/en-us/library/hh831747.aspx

E27: A not C

• DNSSEC. Windows Server 2012 DNS zones support DNSSEC. This means that you can sign and host
DNSSEC-signed zones to provide additional security for your name resolution infrastructure. DNSSEC
are extensions to the DNS protocol. These extensions add origin authority, data integrity, and
authenticated denial of existence to DNS. These changes enable your DNS zones and the records that
they contain to be signed digitally.
• DNS cache-locking. Windows Server 2012 DNS servers support DNS cache locking. When you enable
cache locking, the DNS server does not allow the overwriting of cached records for the duration of
theTimeto Live (TTL) value. Cache locking provides improved security against cache poisoning
attacks.

E75..

Install the active directory domain services role on dc3 and dc4

run the active directory domain services configuration wizard on dc3 and dc4

*the correct should be "transfer the operations master roles and create a global catalog server"

how come we need to do a dcpromo.exe on dc1 and dc2? we should run adpref /forest and adpref /domain at 2008 instead right?

This exam is valid a few new questions but all in all mostly in this dump Passed 8xx
Good luck ppls

@bin. yes i only studied those.. and i passed with that

E69: I think I have it figured out. If anyone has corrections, please post them:
Health policies: 3
According to http://msdn.microsoft.com/en-us/library/dd125366(v=ws.10).aspx , “Health policies define which SHVs are evaluated . . . “. Since there are 3 sets (combinations) of SHV settings that can trigger non-compliance, 3 health policies are needed.
Network Policies: 2
According to http://technet.microsoft.com/en-us/library/dd182017.aspx , “There must be a network policy that will be applied to computers that are compliant with the health requirements and a network policy that will be applied to computers that are noncompliant”. Since there are only two scenarios defined in the question (compliant=full access, non-compliant=access to a limited set of resources) there need be only 2 network policies.
System Health Validator setting: 3
This one is a little tricky because the question specifies the minimum number of objects you should create, so the answer here could be 3 (total settings used) or 6 (2 for each SHV).
If you examine http://msdn.microsoft.com/en-us/library/dd314150(v=ws.10).aspx , Step #6, inside the Windows Security Health Validator window it says “Use the settings below to define a Windows Security Health Validator policy” and this is followed by the settings defined in the question. Since there are only 3 total settings defined across the 3 policies (firewall enabled, anti-virus up to date, automatic updates enabled) a minimum of 3 SHV settings are defined, in different combinations. But the number of settings in all combinations adds up to 6 settings, hence tricky. BTW, there are 3 total SHVs defined.

For everyone, a short article on what we "need to know" for the 70-413 exam:
http://www.windows-server-2012-r2.com/70-413-what-you-do-have-to-know.html
Good luck.

E45: The answer is definitely “B: Configure failover for the scope”.
http://technet.microsoft.com/en-us/library/dn338983.aspx
and http://blogs.technet.com/b/keithmayer/archive/2012/10/28/step-by-step-scoping-out-the-new-dhcp-failover-in-windows-server-2012-31-days-of-favorite-features-part-28-of-31.aspx
and http://social.technet.microsoft.com/Forums/windowsserver/en-US/08816e3e-e455-43ee-9425-efffb2dfbaf6/difference-between-dhcp-function-within-failover-cluster-and-dhcp-failover-?forum=winserverClustering
Apparently, a failover cluster uses shared storage, making the shared storage a single-point-of-failure, and it can get expensive. Since the server runs Windows 2012, a new DHCP (scope) failover feature eliminates this weakness and costs less too. The second article clearly states “Using the DHCP Management console, right-click on the newly activated DHCP scope and select the Configure Failover action”. So you configure failover on the scope.

Very good dump, still valid, passed yesterday, this dump is a great help.
Studied with the comments of Booga, thanks to examcollection and the users who help this dump better.

E56 Correct answer is C. A is wrong. loopback processing will only enforce the settings defined in GPO2 but will not prevent the folder redirection which is defined in GPO1. we can prevent the GPO1 by applying the "deny apply" permissions to a group of users.(security filtering)

E52 should be D instead of A.
Few years the .local answer was the right one. but now they have changed their opinion.
http://social.technet.microsoft.com/wiki/contents/articles/17974.active-directory-domain-naming-considerations.aspx
http://www.mdmarra.com/2012/11/why-you-shouldnt-use-local-in-your.html

hi all,
@ Alan1 can you please tell me what is the incorrect answer in this dump and give us the right answer for it, and if any one here know how to make it please send it to us here or by any way else
thank you all a lot,
will wait for your answer guys, really need to pass this exam

@Marmaduke
E21
Ldifde is correct , the questions states:
<>
means you need to query but what you assume (set-adserversettings):
is Exchange server cmdlet,
http://technet.microsoft.com/en-us/library/dd298063(v=exchg.150).aspx
and it is setting not getting a vlue.

Ldifde#LDIFDE is a robust utility. This utility enabled you to import/export information from/to Active Directory. LDIFDE queries any available domain controller to retrieve/update AD information.
http://support.microsoft.com/kb/555634
http://technet.microsoft.com/en-us/library/cc731033.aspx

OK long post. I just spent the afternoon going over your posts and I have some thoughts:
E27: The answer is A: DNS cache locking. http://technet.microsoft.com/en-us/library/ee683892(v=WS.10).aspx
DNSSEC is effective against cache pollution attacks however, according to Exam Ref 70-413, Designing and Implementing a Server Infrastructure, chapter 2, page 86, the DNS socket pool and cache locking are specific methods indicated for preventing cache poisoning. Since the DNS Socket Pool is not one of the choices offered, I have to go with DNS Cache Locking.
E77: Answer “C”: A Distribution Group Point.
http://technet.microsoft.com/en-us/library/gg712681.aspx#BKMK_ChooseSecondary
The question specifies that the sites are connected by low-latency WAN links. Various articles state that secondary sites are indicated for sites connected by high-latency (low bandwidth) WAN links. In the section of the article labeled “Determine Whether to install a Secondary Site” none of the conditions listed seem to apply to the question and the article also says to consider distribution points instead.
E95: Answer “B”. http://technet.microsoft.com/en-us/library/cc775646(v=ws.10).aspx
The temporary office has an Internet connection and the conditions that would warrant a demand-dial interface do not seem to be indicated in the question namely, PSTN, ISDN, ATM connections or per-minute (time-sensitive) costs of the WAN connection. Also, CMAK makes use of PPTP and L2TP but the question specifies SSTP so it seems there would be less administrative overhead using option “B”.
E55: Answer “D”.
According to the error adprep/rodcprep already has a list of partitions, they’re listed. So it was able to contact the domain naming master and retrieve a list of partitions. The article you quoted, http://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx#BKMK_TshootAdprep clearly states that: “If an infrastructure master is offline or if it has been forcefully removed from the domain, the adprep /rodcprep command fails”. Also see this article (Thanks, Pepper): http://support.microsoft.com/kb/949257

E82: Answer “D”. There does not appear to be a GC requirement, and http://technet.microsoft.com/en-us/library/cc732632(v=ws.10).aspx states “place a writable domain controller running Windows Server 2008 in the nearest site in your network topology to the site that contains the RODC”.

E24: Answer is “A”.
Site link bridging is enabled by default. To ensure replication traffic replicates through Site1, simply remove the link between Sites 2 & 3. Replication traffic will still replicate through Site1 even if a DC in Site1 is not available. See this article: http://technet.microsoft.com/en-us/library/cc753638(v=ws.10).aspx

E7: Answer is “B”: NO!
All DHCP NAP does is place an “unhealthy” client on a defined subnet while placing “healthy” clients on another subnet. Subnets and VLANS are not necessarily related. Clients can all be on the same subnet but be separated onto different VLANs because VLANs are determined by routers and switches, allowing traffic only on different physical PORTS on a switch. Read this article:
http://superuser.com/questions/353664/what-is-the-difference-between-a-vlan-and-a-subnet

E50: Answer is “B”, “C” and “D”. http://technet.microsoft.com/en-us/library/dd736142(v=ws.10).aspx
There is no specified requirement for security and the branch offices all appear to already have writable DCs. The above article states “If a branch office has a writable domain controller . . . there is probably no reason to change your current infrastructure”. There is however, a requirement that users must be able to log on in the event of a WAN link failure, so there needs to be a DC in each branch office.

I could be wrong though.

Passed with 700. 66 questions, 2 case studies.
Question and answers are copy-paste from this dump, but there are many mistakes.
I used the corrections of V, Booga and Dosta. Thank you all and Deborah.

Passed this morning with a few corrections

Two new / different q's not on this vce

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. The forest functional level is Windows Server 2012.

Your company plans to deploy an application that will provide a search interface to users in the company. The application will query the global catalog for the Employee-Number attribute.

You need to recommend a solution to ensure that the application can retrieve the Employee- Number value from the global catalog.

What should you include in the recommendation?

the set-adserversettings command
the set-aduser command
the set-adobject command
the Csvde command

went with Csvde??

Other one was the correct "yes" option for this variant.

Your network contains 50 servers that run Windows Server 2003 and 50 servers that run Windows Server 2008.

You plan to implement Windows Server 2012 R2.

You need to create a report that includes the following information:
The servers that run applications and services that can be moved to Windows Server 2012 R2
The servers that have hardware that can run Windows Server 2012 R2
The servers that are suitable to be converted to virtual machines hosted on Hyper-V hosts that run Windows Server 2012 R2

Solution: You install Windows Server 2012 R2 on a new server, and then you run the Microsoft Assessment and Planning Toolkit (MAP).

Does this meet the goal?

Yes
No

Went yes.

Made corrections from comments but ignored Moustafa as he's wrong

@AntiEgyptCoup Still think E55 being the infrastructure master. Check this quote from article below:

When you run the Adprep /rodcprep command on Windows Server 2008, you receive the following error message:
Adprep could not contact a replica for partition DC=DomainDnsZones,DC=Contoso,DC=com
Adprep failed the operation on partition DC=DomainDnsZones,DC=Contoso,DC=com Skipping to next partition.

Adprep could not contact a replica for partition DC=ForestDnsZones,DC=Contoso,DC=com
Adprep encountered an LDAP error. Error code: 0x0. Server extended error code: 0x0, Server error message: (null).

Adprep failed the operation on partition DC=ForestDnsZones,DC=Contoso,DC=com Skipping to next partition.
Adprep completed with errors. Not all partitions are updated.
Back to the top | Give Feedback
Collapse imageCAUSE
This problem occurs when the Adprep /rodcprep command tries to contact the infrastructure master for each application partition in the forest. The command does this to set the permissions that are required for Read-Only Domain Controller (RODC) replication. The Adprep /rodcprep command fails if one of the following conditions is true:

The partition or the partitions that are referenced in the error message no longer exist.

The infrastructure master for the referenced partition or partitions has been forcefully demoted or is offline.

It's the exact error in the question word for word!

http://support.microsoft.com/kb/949257

Passed today 9xx and MCSE now ;-) Thanks Examcolleciton team for providing such a platform, wishing everyone all the best here. Wish me luck too as I have to appear in the real exam i.e to find a job :-)

Fail twice, all correction are wronggg, don,t belive them

Barely passed today, all questions from this dump, but many wrong answers

@Pepper, E55 , I am sure it is D , please read my comment:

Domain Naming Master:
The domain naming master controls the addition or removal of domains in the forest. There can be only one domain naming master in the entire forest at any time.

Infrastructure Master:
There must be one infrastructure master in each domain. The infrastructure master is responsible for updating the group-to-user references whenever group memberships are changed.

What is Adprep.exe?
Adprep.exe is a command-line tool that is included on the installation disk of each version of Windows Server. Adprep.exe performs operations that must be completed in an existing Active Directory environment before you can add a domain controller that runs that version of Windows Server

http://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx

http://joker.tomsk.net/w2k/webfiles/modules/04m16c.htm

@AD - Q11: you can downgrade forest functional levels. This is a good answer because the 2012 domain and forest are new in this scenario and so they are a blank slate so it is easy to downgrade them. It would be more work and higher risk to upgrade the old domain that is being decommissioned. http://techguyvijay.blogspot.com/2012/07/downgrade-forest-functional-level-or.html

Agree with Alan1 on E74. You do not need to log onto a domain controller ot run ldifde. As a proof of concept, I performed the action using a non-privileged account on a Windows 8 box. I successfully exported the schema. The dump is correct. Domain Users is sufficient.

Dump is valid in Brazil...Passed with score 898,@Deborah, @Gabriela Thank you very good work...good luck all..now 70-414...

Passed the exam today with 836 marks.Used deborah's dump and booga's comments only.

passed today with score 860.Dump is valid.

@AD and ArpA. Witch answers did you change? Would you share your changes? Thank you. I see that the success rate is different in different countries. Of course, it is up to the various questions. Yet, comparison makes sense, I guess.

I've passed today with 890. Made corrections on questions:
E21: not ldifde; Set-ADuser
E28: C. from server 2 run the Invoke-IpamGPOProvsion. On server 2, change the manageability
E62: changed order; server2 run receive, server1 send
Be aware because some answers was positions changed.

AD:

so you only study this vce only?

I need to confirm.

Exam A - 15Q
Exam B - 11Q
Exam C - 14Q
Exam D - 12Q
Exam E - 102Q

all this are inside deborah vce file right guys??

Dumps is VALID! although when i was studying i did find some wrong answers, which i corrected myself. wrote today. passed with 830. all questions were from this dump. got 2 case studies and 44 questions from the multiple choice exam

Passed today with an 809 I used the Premium VCE which is the same as the other uploaded files with 108 questions. I didn't make any changes to the file and passed.

E74
No correction is required answer is absolutely correct i.e Domain User.
Explanation:
The LDIFDE command-line tool, which ships with Windows Server 2003 and Windows Server 2008, can be used to export the schema from the source forest. This tool creates a file that is formatted with the LDAP Data Interchange Format (LDIF). No special permissions are required to export the schema from the source forest, and any domain user can perform this task.
To export the schema from the source forest, do the following:

1.Log on to a member server or a domain controller.
2.Open a Command Prompt window.
3.Type the following into the Command Prompt window:

ldifde -f PRODSchema.ldif -d CN=Schema,CN=Configuration,DC=WS08DOMAIN01,DC=local

4.Press Enter.
http://technet.microsoft.com/en-us/magazine/2009.04.schema.aspx

E27
C: DNS Security Extensions (DNSSEC)is correct
A: DNS Cache locking is wrong
Explanation:
An attacker can also set the time to live (TTL) on fake DNS data to a very long interval, causing the DNS server cache to remain poisoned for many hours or days. It is also possible to send a DNS spoofing attack directly to a DNS client; however these attacks are less persistent than cache poisoning attacks. Both of these types of attacks can be prevented with DNSSEC by requiring that DNS responses are validated as authentic
http://technet.microsoft.com/en-us/library/hh831411.aspx

i just open up the vce.. how come i on exam E i can't see those questions posted here is different from the vce?

How many questions in total for Exam A,B,C,D,E?

Passed yesterday with 7xx, this dump is valid, but many answers incorrect

The yes/no about DHCP NAP... I can't find much info but can DHCP NAP force a client onto a vlan? I know it can give them specific ip's etc but actually putting them into a VLAN is surely an 802.1x thing as it's on the switch level?

Just passed the exam with help of this VCE and some corrections: 863

E24 I'm back to thinking this is right. By default we should have automatic site link bridging in place (as it's default). There are 2 ways to achieve the question in this case, either make the cost of link 2 higher than the cost of link 1 + link 3 or we remove link 2 all together. Automatic bridging should still find site 3 and be ok if all the DC's in site 1 are off. E100 appears to be the same just with the costs as mentioned.

This takes me to E18 which I believe is disable site link bridging. Looks to me like the problem is auto bridging, if they disable it then sites can only connect to another site with a direct link, IE London.

@Arpa agree on E50. The multiple site links make RODC the best choice as it keeps the DC numbers low and the question only requires you to cope with a single DC or WAN failure.

Agree with most that Moustafa is wrong on most of his amendments. Only one I think he got right is E12 as WDS can't fulfil the software package deployment (You could install it on the image I guess but i believe it's looking for post deploy "packages" which means MDT or SCCM.

Two of my class mates failed today with 6xx with the corrections from moustafa. Can anyone please suggest whether the corrections should be used or whether I should study the prep as it is? Please help is much appreciated.

For E69

Your network contains an Active Directory forest named northwindtraders.com. The client computers in the finance department run either Windows 8.1, Windows 8, or Windows
7. All of the client computers in the marketing department run Windows 8.1.

You need to design a Network Access Protection (NAP) solution for northwindtraders.com that meets the following requirements:
The client computers in the finance department that run Windows 7 must have a firewall enabled and the antivirus software must be up-to-date.
The finance computers that run Windows 8.1 or Windows 8 must have automatic updating enabled and the antivirus software must be up-to-date.
The client computers in the marketing department must have automatic updating enabled and the antivirus software must be up-to-date.
If a computer fails to meet its requirements, the computers must be provided access to a limited set of resources on the network.
If a computer meets its requirements, the computer must have full access to the network.

Answer:

3 SHVs
3 Network Policy
2 Health Policy

tks

Regarding E50: each branch office connects to both Site1 and Site2. So isn't it enough to install a writable DC in each main office. If a DC fails or a WAN link fails there is always the other site.

And it would reduce the amount of DC's from 12 to 2

@Moustafa
Here are you two comments totally confusing. We will be very grateful to you if you please suggest to use your corrections or not

Sia
i only used my corrections without any other corrections

Hi Sia
80% of the comments are only Assumptions just study this dump without any corrections and you will do fine i passed withh 9xx without any corrections

E7. Maybe I'm looking too deep into this but the NAP DHCP enforcement can be easily circumvented by configuring a static IP on the client. So how does this meet the goal to ensure that only client computers that have the recent updates installed can connect to VLAN 1?

Shouldn't the answer be no?

I crashed and burned with less than 600 points with this VCE. The questions are definately the same, but the VCE contains too many wrong answers.

E55 definitely D

Check this error as it is exact to the question: http://support.microsoft.com/kb/949257

Hi Guys, This dump is still valid
yesterday I have done the exam using this dump with corrections, scored 689

Today again I do the exam sec attempt using only this dump without any correction, scored 809

So my advise do not miss with the questions, you will pass definitely

ignore Mustafa, his correction all wrong

E31 answer is B

E24 best answer D

E21 the answer is C

For people that are confused my numbering of questions,please note the dump is divided into sections ie A,B,C,D and E.Comments here begin with the section then Number.Thanks

2014/05/26 Pass 7XX

please can you release a vce correct?
Unfortunately, I also have the problem of numbering some questions where the answers are not specified, it makes me really hard to find them. all questions of fact are my vce deborah Q1. You may print the moustafa.vce a file? you we will be infinitely grateful, even if we are right now that will help us with your tips

@ Moustafa:
A6: the question is from VPN side and NOT from the RADIUS side. If the Question says what need to be done on the RADIUS server then the answer is to add Radius Client, but from the VPN server you need to change the authentication provider to point to RADIUS server through connection request policy.

E77 must be answer is C

My corrections, maybe wrong.
E28 i think answer is C
"From Server2, run the Invoke-IpamGpoProvisioningcmdlet On Server2, change the manageability status of the DNS servers and the DHCP servers in Vancouver."
There is no reason to replicate IPAM database

E30 - answer B "Deploy UAG to contoso.com"

E31 - answer A

E69 - i think 2 SHV conf, 4 Healths policies(two for each SHV), and 4 Network policies(two for win7, two for others becouse all marketing users has win8, and same SHV) also we no need NAP noncomplient policy.

E71 - 1 invoke-dsnserverzonesign 2 enable-keyrollover 3 enable-keyrollover

E82 - answer B, this i am sure. We need PDC 2008+ to use RODC, and DC1 may be not a GC.

E95 - i think answer is C, because we cant use SSTP for site-to-site VPN, and we have to configure demand-dial interface from both sides. All that remain - CMAK, and we have a domain so - group policy + CMAK.

E101 - there is different answer choises in exam. Check and remember default members of Allowed\Denied RODC Password Replication group.

Passed yesterday with 890. I have used this dump, also GLADYS and FLORENCE. Here is about 10 answers which i think incorrect, but generally, this dump is valid. Thanks to authors and comments.

E45 the best answer is B

E55
as V explained:
http://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx#BKMK_RunAdprep
Correct is B not D

E75 , I believe the question is clear:
a strategy to replace DC1 and DC2 with DC3 and DC4.
so we have to run the wizard then transfer the FSMO then demote the older DCs , Someone will ask me , how will you do this without installing the ADDS ? simply it is logical to install them to run the wizard , but it is not logical to leave the older DCs while the question is clearing to REPLACE

@Serg
the article says as well:
Log on to a member server or a domain controller.
so from any member server you can execute it

E50
I dont agree with V & Mustafa,question states:
Ensure that users can log on to the domain if a domain controller or a WAN link fails.
Minimize the number of domain controllers implemented.
but RODC can support user login if you enabled catalog option:
Read-only domain controllers (RODCs) can be promoted successfully to global catalog server statu
http://technet.microsoft.com/en-us/library/cc732877(v=ws.10).aspx

@V
E27 as #Dosta said it is C not A
Please review:
http://technet.microsoft.com/en-us/library/hh831411.aspx

valid in Egypt,all questions from the dump,passed today with 809/1000, I mostafa, v and booga corrections. but it seems that it still be wrong answers.

E69# should be 2 2 3

Policy#
If a computer fails to meet its requirements
If a computer meets its requirements

Validators#
- firewall
- Antivirus
- Automatic update


Network#
1- must be provided access to a limited set of resources on the network.
2- must have full access to the network

Valid. Passed w 96x. Please everyone DO NOT FOLLOW ANY RECOMMENDATION BELOW. I THOUGHT TO DO BUT I QUIT. SO I FOLLOW DEBORAH SWEET AND PRETTY HEART AND I SCORE THAT! do belive me.

failed with 6xx, made all the corrections everyone listed on here but still failed, maybe i will just try the original file with no corrections. Test was exact as the dump though

Passed Today in Brazil, 8xx score. Complete valid who says that not pass not really study the dump.

Passed yesterday with 780! I made all the corrections to the VCE file, thanks to all the comments here!
Dump is valid, but there are still some wrong answers in here.
Big thank you to V, Moustafa and Booga!!

Barely passed 730, some wrong answers, even using Moustafa's ones, I thik using the dump as it is you can pass. good luck everyone!

E31 - C is wrong >> Backup Operators is a protected group i AD that's why delegating control for users who are not in Administrators group won't work.
Setting will be overwritten by more restrict security settings from security pattern for protected group. That's why in this scenario correct answer is A (not C). Users must be removed from protected group (here Backup Operators) to be able delegate control over them for "normal" users.

Study Angela 93q not amber

Who ever is in South Africa, DO NOT study this dumps answers... I wrote today and all the questions were in this dump and I knew every single one. I failed with 560... SO many wrong answers... Its actually sad that someone would post so many wrong answered stuff... half of the test was from Amber.94q and those i got right... also, lots of yes and no questions. study them all.

Passed today with 8XX score! dump is valid in Kazakhstan also. Thanks for your comments, guys!

The dump is valid in Canada, passed the test on 17th of May, Got 809 marks, after reading this post, thanks to all who have corrected the wrong answers.

E11. Absolutely A and C.
http://support.microsoft.com/kb/2753560/en-us
When you migrate to a Windows Server 2012 domain, install ADMT 3.2 on a Windows Server 2008 R2 server that can operate as the migration computer. You have to have a Windows Server 2008 R2 domain controller in the target environment.

Note If you already specified a Windows Server 2012 domain functional level, and you want the ADMT server to be a domain controller, you can lower the forest and domain functional level by using Windows PowerShell commands. For example, you can use commands that resemble the following:
Set-AdForestMode -identity contoso.com -forestmode Windows2008R2Forest
Set-AdDomainMode -identity contoso.com -domainmode Windows2008R2Domain
Windows Server 2012 implements only one feature, Dynamic Access Control, that has a Windows Server 2012 domain functional level requirement when the Windows Server 2012 domain is configured always to provide claims from all domain controllers. If you do not use this feature, you can lower the functional levels to support previous operating system domain controllers for ADMT migrations. When the migration is complete, you can raise the domain and forest functional levels back to Windows Server 2012.

E11. I think A and C is the right answer. Target domain: The target domain must be running Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2.
http://www.microsoft.com/en-us/download/details.aspx?id=8377

Passed with 8XX in Europe. Valid but read all comments here, as there are some wrong answers.

Passed today. 727.
Many wrong anwsers.

Passed today 836, no new question. Thank you.

@angeen: E74
but on 2012 you cannot even logon as Domain User unless you allow it in the default domain controller policy.
---------------------------
You can be members of print operators, archive operators, etc. for local log on, or you can log on remotely, if you have rights. I think the answer is Domain user, because we don't know anything about server, and in the general case, no special permissions are required

Hello.
e95 again. I think the answer is A.
I've read this comment:

-----------------------------------
http://www.examcollection.com/microsoft/Microsoft.Certkiller.70-413.v2013-10-02.by.Angela.93q.vce.file.html
BaTman
South AfricaFeb 25, 2014Report Comment

Ok, so I have a question about Angela's MixQ6,Q6 - re the SSTP based VPN connection.
The main office has sv1 with RAS installed, accepting incoming SSTP.
The temp office has sv2 & 50 x w7 pc's, who need to dial OUT to sv1, not into sv2.
So lets start with the options:

B. Why are we installing RAS on sv2? The clients are dialing OUT to sv1. We cannot setup a site-to-site VPN tunnel using SSTP, so to me, this is mute.
http://blogs.technet.com/b/rrasblog/archive/2007/01/10/sstp-faq-part-1-generic.aspx

D. Why are we installing RAS on sv2? The clients are dialing OUT to sv1. We cannot setup SSTP on a Demand Dial Interface (only PPTP & L2TP), so to me, this is mute.
http://social.technet.microsoft.com/Forums/en-US/239c4c45-6d36-4786-9b38-bd5093adcf98/sstp-for-demand-dial-vpn?forum=winserverNIS

A. CMAK configuration is a good idea for a temp office, however a manual rollout to 50 pc's is just dumb.

C CMAK configuration is a good idea for a temp office, however a GPO rollout to 50 pc's is a better idea and all the respective SSTP settings required for sv1 can be configured.
http://www.windowsecurity.com/articles-tutorials/firewalls_and_VPN/Windows-Server-2008-Connection-Manager-Administration-Kit.html

(Just my opinion, so please, if you have any evidence to the contrary, post fast. Im writing on Friday). Tx.
--------------------------------
Why not C? We have not any information about domain in temporary office, therefore we have not gpo.

So, not D, not C, maybe A, and I can't decide about B.

Sia
i only used my corrections without any other corrections

Hi art
yes i only used my corrections and i passed with 963

Hi Sia
80% of the comments are only Assumptions just study this dump without any corrections and you will do fine i passed withh 9xx without any corrections

Valid in Romania ! 809 !

Hi Guys,

Passed the exam today (May 20, 2014). Scored 745. Only used the dump itself Didn't use corrections from comments at all. Thanks everyone for contributing to make this work. Good Luck.

@moustafa how many points did you score? did you use the corrections that you've made? thanks.

Omar open the exam with VCE Designer Demo
and note the corrected answers by V,Booga,Dosta and me you will get sucess so easy because the exam is like copy and paste from this dump

Hi Moustafa from Egypt,

Did you only study this dump or also the corrections in the comment thread?

Passed on 18-05 this dump is valid only one new Question

E 75 is correct as there are either 2 correct answers

Run ntdsutil.exe and specify the metadata cleanup parameter.
Run the Active Directory Domain Services Configuration Wizard on DC3 and DC4
Run dcpromo.exe on DC1 and DC2
or
Install the Active Directory Service server role on DC3 and DC4.
Run the Active Directory Domain Services Configuration Wizard on DC3 and DC4
Run dcpromo.exe on DC1 and DC2

excuse me every body I can't recognize the question's number it is all in E exam (examA, q1) there is only the Item numbers . can any one support me cause i have failed with score 686 and i can't look up the wrong questions from the simulator . the questions has no numbering . and it is changed randomly every time. i hope some body can help me

Passed today 8XX, No new questions except Q21 no ldifde answer option but set-AdUser instead

sorry got confused about E16 the correct answer is D Five sites and three site links

E95 is absolutely B
See link for an article on both Routing and Remote Access server role and the DHCP default gateway option.
http://blogs.technet.com/b/rrasblog/archive/2009/03/25/remote-access-deployment-part-2- configuring-rras-asavpn-server.aspx

E12 should be only A and D
Let me just explain the requirement not fullfilled by the network (?) consultant you hired. (Perform azero touch
bare-metal installation that uses Wake On LAN.)
Microsoft Deployment Toolkit 2010
If ConfigMgr is not an option for you, the next best tool is the Microsoft Deployment Toolkit. MDT 2010 Update
1 (U1) requires Windows AIK for Windows 7; both arefree downloads from Microsoft. MDT 2010 U1 performs
LTIs and provides built in templates for refresh, replace, upgrade and bare-metal installations. One Since the
consultant YOU hired obviously didn’t learn for the70-413 exam but just memorized, he never figured out you
need MDT to perform a zero touch bare-metal installation. Hence he forgot to include it in his solution. Hope
you can still get your money back….

ExamC Q2 agree with dosta the right answer is D new subnet

E30 very sorryi got confused the correct inswer indeed is Enable Kerberos constrained delegation in litware.com.

E43 answer B is correct
http://technet.microsoft.com/en-us/library/cc754033.aspx

E53 should be B and C
Dyamic Access Control
http://blogs.technet.com/b/windowsserver/archive/2012/05/22/introduction-to-windows-server- 2012-dynamicaccess-control.aspx
kerberos armoring setting
http://technet.microsoft.com/en-us/library/hh831747.aspx

E77 sholud be D
http://technet.microsoft.com/en-us/library/hh427335.aspx
Distribution point groups provide a logical grouping of distribution points and collections for content distribution.
A Distribution point group is not limited to distribution points from a single site, and can contain one or more
distribution points from any site in the hierarchy.When you distribute content to adistribution pointgroup, all
distribution points that are members of the distribution point group receive the content.

@Moustafa: Could you add some explanations for your statements please?

E32: I dissagree. I don't think that "B" is"the Best answer ...". For me it is the second bad answer after creating a new forest for the new department.
Such complexity is not necessary. What if we have 5 or 10 departments with different requirements? 5-10 more child domains?
The answers that seems right are "A" and "D". However the Managed by attribute is more like infromational unlike the
delegation of control wizard which provides an easy way to delegate the required permissions to Division1Admins over the OU.
As for the fine-grained password policy - it cannot be added to the OU (its a bit more complex) but it says "Create a fine-grained password policy for
the Division1 users" - no specifics.
So for me "A" makes more sense.

E45: Failover Cluster and split scope deployment are older HA mechanisms. "Configure Failover for the scope" is better choice.
http://blogs.technet.com/b/teamdhcp/archive/2012/06/28/ensuring-high-availability-of-dhcp-using-windows-server-2012-dhcp-failover.aspx

E16: There are 3 different WAN connections speeds between the 5 sites: 5 mbps, 1 mbps and 512 kbps.
Intersite replication is optimized for bandwidth efficiency.
AD DS uses information that you provide about your sites and site links to build the most efficient intersite replication topology automatically.
http://technet.microsoft.com/en-us/library/cc771251.aspx

So your "wrong" answer is actually the correct one:)

No offense.

Cheers!

@Lamyo: E74 - indeed the article says that you don't need any special permission to export the schema, but on 2012 you cannot even logon as Domain User unless you allow it in the default domain controller policy. So Domain Admin should be the correct answer.

@All, I wonder if people who answer questions by mentioning A or B or so (only without writing the answer text) if they unchecked the VCE software option of randomize answers or not. would you please people clarify your answers. thanks

E95 @Dosta n @Booga which answer is right you said D is it "Install the Remote Access server role on Server2. From Routing and Remote Access on Server2, configure a demand-dial interface.
From DHCP on Server2, configure the default gateway server option." ?

For E39 I'm going to recommend B&C as the answer, you can see in the following blog post when he is configuring an application template it allow him the opportunity to create a web application, you can also see from his blog post for a hardware profile that you cannot configure anything in there but VM hardware settings, also Guest OS is correct because it allows you to configure Roles and Features during the creation of the template
http://blogs.technet.com/b/kevinremde/archive/2013/04/24/application-profiles-in-system-center-2012-sp1-vmm-build-your-private-cloud-series.aspx?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+technet%2FwwzZ+(Full+of+I.T.)

@Moustafa: thank you for updating some questions, can you review the questions here:

http://www.examcollection.com/microsoft/Microsoft.Certkiller.70-414.v2014-05-03.by.MAUREEN.112q.vce.file.html

@All, really. I got confused which comments and its answers are the right ones for the one question. what about the answers of sections A, B, C, D, is it all right answers. Please help my exam in 2 days next Sunday.

Passed on 16-05 in Brazil with this one, 8xx score. One new question only. Used only this dump and the answers posted here by Booga and others. Thank you all!

E32 the Best answer is B no doubt

Q11 shouldn't it be B and D. cause you can;t downgrade forest functional levels and contoso.som already has a server 2012r2 DC. but adatum doesnt

E50 agree with V
it should be B,C,D in case of (A) if non credential cached user tried to logon he is not going to

E45 indeed wrong configure failover for the scope can be done but it's not the Best answer it should be Create a DHCP failover cluster as it's the best method

E18 answer A is the perfect answer

E13 indeed right

A6 is wrong should be (A)Add a RADIUS client NOT Modify the authentication provider at all

E33 should be A not D
The solution must use the least amount of administrative effort.
http://www.informit.com/articles/article.aspx?p=32080&seqNum=5

E30 is wrong sholud be (B)Deploy UAG to contoso.com
Cannot be (D) cause we have different domains

E16 is wrong should be (A)Five sites and one site link

Thnks to DEBORAH 146Q VCE and u Booga
for the correction on this vce file I passed 16/05/2014 with 809 score

E74 is correct

No special permissions are required to export the schema from the source forest, and any domain user can perform this task
Ref.
http://technet.microsoft.com/en-us/magazine/2009.04.schema.aspx

Agree with Dosta for E74.

You need to be at least a Domain Admin. See http://technet.microsoft.com/en-us/library/cc731033.aspx

@All, get back to the dump Microsoft.Braindumps.70-413.v2013-10-30.by.Death.97q.vce and you will find that many questions in this dump and the comments on it for its answers related its questions are perfect so it's a very good reference in case that the question and the answer are exactly the same which I found in most of the questions here.

Passed today 700/1000 Exactly, I used the DEBORAH 146Q vce file, all the questions are copy/paste from this vce file, but the problem is this vce include many wrong answered questions. I answered as the answers are in this vce.

It is important to inform you that the wrongly answered questions belong to the section: Plan and Deploy a Server Infrastructure.

Also it is important to inform you that the premium file include many wrong answers, I did not use it. I hope examcollection.com will update it.

Thanks god and thanks DEGBORAH.
Good luck all.

Regards,

Have attempted the test today. With the exception of one question all were from this dump file.
The only thing is I still got 700 means that there are a lot of wrong answers in this file

Valid!

All of the questions were in this dump.

925 on 15/05/2014

i'm passed 727

Thanks Booga =D

Dump is VALID. All questions on test came from this dump. Just passed with 9XX. Some questions are indeed incorrect, but read the posts from myself and others here, and you'll do fine.

@BOOGA, regarding Q60 in exam E, you are wrong, the enforcement is configured on GPO on Dc.

okay so even with all these wrong answers... is the questions atleast valid?

E Q11: After further research, you CAN downgrade the functional level as long as the recycle bin for AD isn't activated yet. Never had to do that before...sweet

E Q95: @Dosta - I agree. Answer should be D.

@Booga,

it is possible to downgrade: http://blogs.technet.com/b/infratalks/archive/2012/12/11/step-by-step-guide-to-lower-active-directory-functional-level.aspx

i don't which of the answers are correct on that question.

E Q28: Answer is C. each IPAM server must have its own Database, and the question clearly indicates that the Montreal IPAM server only controls Montreal, not Vancouver.