Pass Your Microsoft 70-411 Exam Easy!

@Ryan
In my lab, the precedence order (descending) is
GPO_3
GPO_2
GPO_5
GPO_4
GPO_1

Valid in South East, USA. Passed with 900+

Dump is still valid. passed with 866 on July 15. Used this, Brucey and Gambit. 11 new questions. Thanks EgyptienGuy, Gambit and Brucey

Passed today in US with 899 score. Used this dump only, about 10-12 new questions.

Ryan,

The answer in the VCE is correct because enforced GPOs are applied in reverse order.

I'm taking this test next week. Can anyone post the new questions?
@Gambit: Suggestion: Also it would help us more if you can provide more answers with the explanation, that way we also learn the material and concept in case the questions change. Thank you though, you've helped us a lot to prepare for the actual test.

Hey this Q ans seems wrong: Your network contains a single Active Directory domain named contoso.com. The domain contains an Active Directory site named Site1 and an organizational unit (OU) named OU1.
The domain contains a client computer named Client1 that is located in OU1 and Site1. You create five Group Policy objects (GPO).
The GPOs are configured as shown in the following table.

You need to identify in which order the GPOs will be applied to Client1.

In which order should you arrange the listed GPOs? To answer, move all GPOs from the list of GPOs to the answer area and arrange them in the correct order.

My Explanation:::: We know that GPO is processed as per Local, Site, Domain, OU (LSDOU in short) order. Enforced GPO settings are processed later. So first Unenforced GPOs are processed as per LSDOU then Enforced GPOs as per LSDOU. So, the Answer : GPO1
GPO4
GPO3
GPO2
GPO5
Anybody agree with with my explanation? please let me know.

This Dump is still valid in California, I passed today with an 890, i had about 20 new questions. Study this dump hard and watch CBT and you will be fine.

Passed today at 899. I recommend this for practice purpose. Many thanks, Brucey!

Dumps still valid in pakistan..Pass today with 850/1000
Thanks BruceyB

Passed with 8xx.
About 19 new questions.
Thank you.

Passed today with 899, got 10 new question!
Thanks to all!

valid 85%

Passed Yesterday 27 May with 916, 11 questions outside this dump, Thanks BruceyB

Your network contains AD domain contoso.com All DC run 2008R2. Three servers run 2012. Server 1 - IIS. Server 2 - IIS, Server 3 - SQL Server.

Server 1 and Server 2 in NLB Cluster, hosts website called Web1 using AppPool called App1. App1 identity is domain account called User1. Web1 uses SQL Store DB1 on Server3. Need to ensure that contoso.com users accessing Web1 connect to DB1 using their own credentials. What should you perform?

a). Configure delegation settings of server 3
b). Create SPN for User 1
c). Configure delegation settings for User1.
d). Create matching SPN for Server1 and Server 2
e). Configure delegation settings of Server1 and Server2.

I do not think answer is right - this dump says answer is B and E. Please explain? I think answer is B and C!

Can anyone tell me plz, from where i can download the BOOK
Administering windows server 2012
Exam ref
70-411
for FREE

I passed today 883 / 1000. This dump is valid. I used CBTNuggets, this dump, Egyptian Guy dump, and Gambit dump. There were about 12 - 15 new questions. Read the TechNet articles referenced in each dump. Understand why each answer is correct and why the incorrect answers are wrong.

Passed 2 days ago with 9xx. 10-12 new questions, some reworded, some with different options. Dump is still valid as the basis of the Gambit one.

Scored 1xxx. Know the concepts on what makes a question/answer correct. Most questions were worded different and had different answers. Good luck to all.

Today I passed the exam score 883
Dump still valid in india

passed today with 916. Around 7-8 new questions

Great Dump, but you must have good understanding of concepts. There are about 18- 20 new questions, Passed with 900+. Thanks BruceyB and Gambith both

passed with score 883, vaild dump around 10 new questions

pass today -around 18 New question

passed today with 883. Around 10-15 new questions which i can hardly remember.
- where should you config RIPv2 in routing and remote access
-you have a hyperv server with 4 vms. Which tool should you use on the hyperv to monitor the cpu usage.

Passed Today in Switzerland 883.
I had about 19 new questions!

Passed today with 883 in UK. 10-12 new questions.

Thanks BruceyB valid one I passed today with 850, 90% off the questions from this dump.
Good luck for every one
الحمد لله رب العالمين

This exam valid I got 800+ , the exams was easy only 10 Q new

This dump is valid for Colombia. There are 10 new questions about vms resuorce, dns and AD.

Passed today with 883, still valid. There were about 20 new questions, and the new ones were front loaded, so got a bit nervous to start.

Puzzled is also correct concerning the GPO question. The answer should be GPO1 > GPO4 > GPO5 > GPO2 > GPO3

I passed today, 883 points

Passed today in Switzerland. Got something between 820 and 870.

Dump is still valid HOWEVER a lot of new questions (15-20?) are not in the dump.

@tester

Q10: The default priority is 1 and can be changed from 1 to 65535. So changing server 2 and 3 to priority 10 is the way to go.

Today i passed..Valid dump

Thank you all

Passed today with 933 point. Dump still valid. Approx 15 to 20 new questions

Here is what I came up with in my research for some of these pictured Qs:
Q2: I think the answer shown in the photo is correct ( http://technet.microsoft.com/en-us/library/jj128431.aspx "You can create a gMSA only if the forest schema has been updated to Windows Server 2012, the master root key for Active Directory has been deployed, and there is at least one Windows Server 2012 DC in the domain in which the gMSA will be created.")
Q5: A ( http://technet.microsoft.com/en-us/library/cc755310%28v=ws.10%29.aspx )
Q6: B
Q8: A ( http://technet.microsoft.com/en-us/library/ff625687%28v=ws.10%29.aspx )
Q9: Unsure. Setting a task seems risky to me because I think by default policy a log is only written upon local account *creation* not deletion. So creating a task would not satisy all the requirements of the question. So we would need to modify the GPO, but neither one of those options is named exactly right, so that has me concerned too.
Q10: Unsure. The answer is to change the Priority, but I'm not sure on which server(s). Does anyone know what the default priority is when these are created? If we knew that, we could know for sure which one(s) to change. For example, if they're set to Priority 1 by default, we'd just need to change Server4 to 10, or if Priority 99 by default, we'd need to set Server2 & Server3 to 10.

You can run the command before activating an instance, this works on both 2012 and 2008, however you cannot do anything with it unless you activate ntds, which is what is meant here i'm guessing.

In any case, like what was said earlier, activating the instance before running the snapshot command is certainly the way to go for exam purposes.

.

This technet article indicates that at least for server 2008, setting the ntds instance is required before the snapshot:
http://technet.microsoft.com/en-us/library/cc731620%28v=ws.10%29.aspx
See Remarks: "Before you can run the snapshot subcommand, you must run the activate instance subcommand in Ntdsutil to set an active instance."

This dump is valid. Passed with 873. About 8 new questions.

I agree with test_man001.

Copy-gpo is used to copy settings from one gpo to another in ONE command e.g Copy-GPO -SourceName TestGpo1 -TargetName TestGpo2
http://technet.microsoft.com/en-us/library/ee461050.aspx

So here backup-gpo is the one having to be used.

To test_man001

So after you the Answer of the Q on the Pic 3 is as follows?
1. Run the Backup-Gpo
2. Use removable media to transfer contents
3. Create a new GPO in the constoso.com
4. Run the import-GPO cmdlet

To AK

On the 3rd picture the i think the correct answer as per below; let me know
Incorrect: 1st Copy-GPO, incorrect only if your have trust relationship between your domains remember the both domains test and production are not on the same network. read ms article below "If trust did exist, it would also be possible to do this with a copy operation"

Hence this are the steps involved;
sources: http://certcollection.org/forum/topic/141217-how-to-migrate-gpos-to-another-forest/
http://msdn.microsoft.com/en-us/library/windows/desktop/aa814314(v=vs.85).aspx

Step1
Run the Back-up GPO cmdlet
Create a backup of the original GPO from the GPMC and save it to disk.
C:PS> Backup-Gpo -Name TestGPO -Path <removable-drive-letter:>:GpoBackups -Comment "test environment backup"
Step 2
Use removable media to transfer contents of test.contoso.com to contoso.com
As both networks are seperate you need to transfer using removable media.

Step 3
Create a new GPO in the constoso (production environment).
Create the table of migration from the Editor, and from the Toolsmenu,

Step 4
Run the import-GPO cmdlet
Import the backup copy of the GPO in the new policy has been established in point 2, indicating the path to the copy of safety and the migration table that you want to use and that we Populate from Backup to make her autogenere from the backup created in point 1. Edit the table of migration and map everything.

I agree with QZ. In this article it shows to do it in theorder- ntdsutil, snapshot, activate instance ntds, create. http://technet.microsoft.com/en-us/library/cc753609(v=ws.10).aspx
In the real world snapshot can be used before or after the 'activate.' command, but remember the documented order for test purposes.

@QZ
Thanks for pointing out my error in copy/paste, the explanation for Q8 is in Q4. Should read as follows-
8. Answer D (this is the only option tha specifies "file" see this link http://technet.microsoft.com/en-us/library/ff625687(v=ws.10).aspx)

@ puzzled

Actually i just checked and the command "snapshot" and "activate instance ntds" are interchangeable. You can run or the other first after "ntdsutil" with the exact same result..
Well that makes that question a bit more confusing unless they consider both as being right in the exam.

In any case i would go for ntdsutil, snapshot, activate instance ntds, create since it seems to be the most common way.

@vamp1r3

I think you responded to Q4 as being Q8

For Q4 i would go with answer C, since it's group membership that was deleted and not an object, so it cannot be restored using the recycle bin.

Linh answers, these are the answers I researched, and I tested in my lab to confirm they were correct.
1. Answer C
2a-b New-AdServerAccount cmdlet; Set-ADServiceAccount, Modify settings of AppPool1 (http://technet.microsoft.com/en-us/library/dd548356.aspx)
3. Copy-GPO, Use removable media.., Create a GPO, Import-GPO (networks are not connected and the files need to be moved over; Import will fail if GPO doesn't exist; Backup and Restore are only good in the same domain)
4a-b. Answer D (this is the only option tha specifies "file" see this link http://technet.microsoft.com/en-us/library/ff625687(v=ws.10).aspx)
5. Answer C
6. Answer B
7a-b Answer C (network bitlocker unlock needs WDS)
8. Answer D
9. Answer B (account creation shows up in the security log, event ID 4720, create the task based off that event).
10. Answer C (Priority of the two servers is the same, server 4 would be set at a higher number >10, weight is for load balancing)

Thank you Linh and Labia for your efforts, I pass exam tomorrow afternoon if somebody can help with answers I will appreciate!

I'm not sure about the answers for the Linh Nguyen exam pictures, if some one knows the the answers feel free to help :)
Picture number 1. Response is C
Picture number 2. ?
Picture number 3. Copy-GPO,Backup-GPO,Import-GPO,Restore-GPO
Picture number 4. Response is D
Picture number 5. Response is A
Picture number 6. Response is B
Picture number 7. Response is C
Picture number 8. Response is A
Picture number 9. ?
Picture number 10. ?

Thanks

Joe, no their are not all correct

Linh Nguyen

On the 3rd picture IMO the correct answer is
Copy-GPO,Backup-GPO,Import-GPO,Restore-GPO
http://technet.microsoft.com/en-us/library/cc785343(v=ws.10).aspx
What do you think of it ?

your attention: the answer is not in the picture right. this is the only photograph.
Good luck.

Linh "many thanks thanks thanks for u "

This dump is still valid.
Passed today with 8xx. About 10-12 new questions.

Puzzled is indeed correct for question #25 (although for some reason i don't see this question when i open the test myself)

Thanks a bunch for the photos Linh Nguyen! Anyone have any thoughts as to the answers?

This dump is valid. I Passed today with 903 points.
There are 20 new questions.I have photographed:
- http://www.mediafire.com/?u5a2z7e6veh979d
or
- https://www.box.com/s/9g76c1ev7s746tf5gqaf

Passed today with 910. About 10 new questions.
The ones i can remember:-
1. about RODC, the answer to pre stage in AD
2. Assign rights to an RODC, answer delegate group to machine in AD
3. one about RRAS and where to configure NAT

Yes, it seems there are differing opinions on this. I need to get my server up and running to see what the order is i guess. Anyone else have any input on #25?

Hello all,
I need the clarification about the Q105 and Q25 which one is correct? as I pass the exam tomorrow morning and I'm little bit confused :(

Köszi, AK!
And also thank you, Flip-Flop-Beach-Bum!
Glad that the confusion is cleared up. :-)

Have a nice day!

Puzzled

It seems you to be right
http://itfreetraining.com/Handouts/70-640/Part3/gp-enforce-block.pdf

Puzzled, you are in correct in your assessment. Please read this article

http://www.petri.co.il/working-active-directory-snapshots-windows-server-2008.htm

Hey guys
Passed today with 8xx
About 12:15 new question
Thnxxxx for all

Regarding question 25 about the Active Directory snapshot creation process:

I have reason to believe that the technet article you referenced is incorrect. http://technet.microsoft.com/en-us/library/cc753609(v=ws.10).aspx

The below article clearly states:
Before you can run the snapshot subcommand, you must run the activate instance subcommand in Ntdsutil to set an active instance.
http://technet.microsoft.com/nl-nl/library/cc731620(v=ws.10).aspx

So you might want to use this article for your future reference:
http://blogs.technet.com/b/niraj_kumar/archive/2009/02/05/active-directory-snapshot-new-feature-in-windows-2008.aspx

The correct answer should be:
1) NTDSUTIL
2) ACTIVATE INSTANCE NTDS
3) SNAPSHOT
4) CREATE

Hi everyone,

I've been wondering about Q105 of this dump.
It's the question about group policy processing.

So if I understood correctly:
the GPO's that are NOT enforced will be applied first from top to bottom ( site > domain > OU )
Then the GPO's that ARE enforced, will be applied next but in the opposite way ( OU > domain > site )

So given the example of Q105:
GPO1 - Contoso.com - not enforced
GPO2 - Contoso.com - enforced
GPO3 - Site1 - enforced
GPO4 - OU1 - not enforced
GPO5 - OU1 - enforced

Wouldn't that result in the following processing order:
GPO1 > GPO4 > GPO5 > GPO2 > GPO3?

The dump answer gives this as solution:
GPO1 > GPO4 > GPO2 > GPO5 > GPO3

Can anyone clarify this?
I've looked it up and found this video (5:10 to 7:40) that confirms my suspicion:
http://www.youtube.com/watch?v=NlVFByPQA18

This dump is valid. Passed with 833. Thanx BuceyB,Tonic and Reaper. There are 10 new questions.

This dump is valid.
Passed with 9xx score.
Exactly 10 new questions.
Thank you.