70-411 Exam Question No 13

Question No 13:

Your network contains an Active Directory domain named contoso.com. The domain contains a read-only
domain controller (RODC) named RODC1.
You create a global group named RODC_Admins.
You need to provide the members of RODC_Admins with the ability to manage the hardware and the
software on R0DC1. The solution must not provide RODC_Admins with the ability to manage Active
Directory objects.
What should you do?

A. From Active Directory Site and Services, configure the Security settings of the RODC1 server object.
B. From Windows Power-Shell, run the Set-ADAccount Control cmdlet.
C. From a command prompt, run the dogmatism local roles command.
D. From Active Directory Users and Computers, configure the Member Of settings of the RODC1 account.

Answer: C

70-411 Exam Question No 12

Question No 12:



Your network contains an Active Directory forest named contoso.com. The forest contains a single domain.
All domain controllers run Windows Server 2012 R2.
The domain contains two domain controllers. The domain controllers are configured as shown in the
following table.




Active Directory Recycle Bin is enabled.
You discover that a support technician accidentally removed 100 users from an Active Directory group
named Group1 an hour ago.
You need to restore the membership of Group1.
What should you do?

A. Recover the items by using Active Directory Recycle Bin.
B. Modify the is Recycled attribute of Group1.
C. Perform tombstone reanimation.
D. Perform an authoritative restore.

Answer: A

70-411 Exam Question No 11

Question No 11:

Your network contains an Active Directory domain named contoso.com. The Active Directory Recycle bin is
enabled for contoso.com.
A support technician accidentally deletes a user account named User1. You need to restore the User1
account.
Which tool should you use?

A. Ldp
B. Esentutl
C. Active Directory Administrative Center
D. Ntdsutil

Answer: C