Microsoft.Actual-Answers.70-413.v2014-05-07.by.DEBORAH.146q.vce

darth

Tuesday, September 30, 2014 10:40 PM UT

Valid in Brazil. I took the exam today (30/09/2014) and passed with a score 863/1000

Terminus

Friday, August 22, 2014 10:48 PM UT

Failed w/644.

Two scenarios (17Qs) and 44 single questions were from this dump. No new questions with one slight change to existing question. THis means there are errors.

Harry

Sunday, July 06, 2014 6:08 PM UT

Is this exam still valid?

clonez

Friday, July 04, 2014 1:10 PM UT

wer can i find the DEBORAH answers
thanks

alpha

Thursday, July 03, 2014 10:53 PM UT

Failed with a 630 on July 3, 2014.
Exam consisted of 61 total questions.

2 case exams (litwareinc & Northwinds Traders), 9 questions and 8 questions respectively.

44 multiple choice questions

All the questions were from this dump, however I did not do a very good job with studying the dump.

Ed

Monday, June 30, 2014 2:31 PM UT

Is this dump still valid?

Janta

Monday, June 30, 2014 2:10 PM UT

Valid In PAKISTAN got 781 on 29/06/2014
Thanks DEBORAH

favour.com

Saturday, June 28, 2014 2:12 PM UT

Thank you guyz...i passed today with 781....just only 2days preparation.Great.....bless yu all

Hannah

Friday, June 27, 2014 5:05 PM UT

Not valid in USA failed with 644

E

Friday, June 27, 2014 5:03 PM UT

NOT valid in USA... 644

Thabo Selepe

Tuesday, June 24, 2014 2:22 PM UT

I passed this exam today with score of 920 , dump is still valid.

Roohaan

Monday, June 23, 2014 11:58 AM UT

100% valid in Pakistan.
today i got 863..

Dj

Saturday, June 21, 2014 12:44 AM UT

Passed 2day with 781. Still Valid in Sri Lanka.

Ali

Tuesday, June 17, 2014 5:54 PM UT

PASS Today With 8xx Valid In Kuwait

tosin

Tuesday, June 17, 2014 4:29 PM UT

please can someone post the link to see booga's comment on the corrected question

Ali

Monday, June 16, 2014 8:46 AM UT

Passed today 8xx without corrections, 1 new question. Some wrong answers, but still good for passing. Thanx!

Someon3lse

Friday, June 13, 2014 12:40 PM UT

Good day,

Wrote the exam today and failed. No where in the whole exam did I ever have a feeling I was doing bad. This was my first exam I failed, did my whole MCITP and never failed once.

My exam consisted off:
- 2x case studies, one had 8 Q&A other had 9.
- 44 normal Q&A
- 02h10 minutes to complete the exam

I had no new questions at all. Every single question came from either this brain-dump, or the one I purchased from Testkings.com.

I was ready to celebrate my pass of 70-413 when I saw my score report at the end of 64X today, could not get as far as to get up from my seat in the exam room. I was sooo disappointed. The 2012 exams a much harder than the 2008 exams, much much harder. The sad part is, no where in the exam do you ever get a feeling your going to fail as you had all the Q&A in a brain-dump or seen it, or know the answer to it, not one of the questions in the exam was new, not one of them

Anyway - this is my experience, hope this helps the ones that is still going to write.

Someon3else

Harry

Friday, June 13, 2014 2:59 AM UT

this vce is still valid, all the questions came from this vce.. passed with 780 only..lots of wrong answers..still good enough to pass.

Yo

Thursday, June 12, 2014 9:36 AM UT

Passed today with 781. Used Deb's VCE with Booga's corrections and some of my own. (Ignored Mustafa...) was above 80% on all sections and two of the sections were 100%. So this dump is very valid but still needs more collaboration from the community. Lowest score was Physical Infrastructure. Sounds like the test is scored very stringently in order to get a lower score whilst maxing out on two sections...

sneakmind

Thursday, June 12, 2014 8:08 AM UT

@sacrificeme how many questions were there form corrections

Harry

Wednesday, June 11, 2014 10:51 PM UT

@Levskar40
could you please share your corrections. i'm going for an exam tomorrow

albaroun

Wednesday, June 11, 2014 11:27 AM UT

@Levskar40
could you please share us your knoledge or send the corrected dump to albaroun at yahoo dot com
Thanks

Ahmed Alaa El Din Mokhtar

Wednesday, June 11, 2014 10:27 AM UT

just pass now the exam with score 781 and all exam was from DENISE Dump but there is still a lot of wrong answers in the bump, good luck for everyone

poemcz

Wednesday, June 11, 2014 9:46 AM UT

passed today 745, few new questions but I guess there are 5-10 wrong answers, but still good for passing. Thank you

Levskar40

Tuesday, June 10, 2014 8:17 PM UT

Passed today in Bulgaria with 9XX
2 new questions but I made a lot of corrections.

ATX

Tuesday, June 10, 2014 4:33 PM UT

@MC E Q84, the correct answer is C!! you described it well, hosted requires a server to be in the branch office. The questions states that there will only be client computers in the branch. Therefore the only option would be distributed cache. The originally answer of C is correct.

noone

Tuesday, June 10, 2014 12:49 PM UT

@MC
http://technet.microsoft.com/en-us/library/dd637784(v=ws.10).aspx

sacrificeme

Tuesday, June 10, 2014 12:00 PM UT

No correction needed, they also could be wrong, passed with out correction with 7xx

there was 2 case studies with ~9 questions in each and 49 regular questions.

Ahmet

Tuesday, June 10, 2014 9:44 AM UT

Like I said, I studied this one with corrections of BOOGA's answers and the new dump of DENISE, it seems DENISE has the corrections made on Deborah's comments.

Passed with score 7XX, no new questions.
Be carefull tough en do some research on your own if you daubt the answer. I barely passed this one en right now I dabut the corrections as well cause some other people (see comments) passed with higher score WITHOUT any corrections...

Thanks for the dump!

Ab

Tuesday, June 10, 2014 8:08 AM UT

Is this exam with the answers in it (not the corrected ones) enough to pass?

MC

Monday, June 09, 2014 7:28 PM UT

E84: Correct awnser is A, not C.
Reduce internet traffic with BC hosted, not distributed.

Hosted cache mode. In this mode, branch office client computers download content from the content servers in the main office, and a hosted cache server retrieves the content from the clients. The hosted cache server then caches the content for other client computers. Hosted cache mode does require a server computer in the branch office, and there are additional requirements.

Zakaria

Monday, June 09, 2014 1:43 PM UT

Hi Ahmet did you pass the exam with this vce file from denise.

Hoi ahmed hoop dat je bent geslaagt en geef graag een update

Scrooge

Monday, June 09, 2014 1:23 PM UT

Good day,

Is there anyone that could share on their exam experience please?

1) How many Q&A
2) How many case studies?
3) How many D&D

I am using testkings.com, 108 q&A, is testkings good?

Thank you in advance.

Scrooge

Scrooge

Monday, June 09, 2014 1:19 PM UT

Scrooge

Monday, June 09, 2014 1:16 PM UT

Hi all,

I am writing this week and just wanted to know some basics:
- How many questions are there in the exam?
- How many case studies in one exam?
- What time was given to complete the exam?

Please - just some insights please - I will give my feedback the moment I have written mine.
Thank you in advance.
Scrooge

Jonathan

Monday, June 09, 2014 11:38 AM UT

Please Can Someone List all of the Corrections in One Comment Please or possibly Upload an Updated VCE as i plan to write at the end of the month. Thank You

Emma

Monday, June 09, 2014 11:33 AM UT

Pass only Debora with 9XX june 6 2014

aNIE

Monday, June 09, 2014 10:01 AM UT

Only Deborah Pass on friday 06 june

ahmed

Sunday, June 08, 2014 4:14 PM UT

valid or not ??
and where i can find right answers???
or this dump have right answers
http://www.examcollection.com/microsoft/Microsoft.Actual-Answers.70-413.v2014-06-06.by.DENISE.146q.vce.file.html?path=B&utm_expid=79286999-14.OXvgNl-vQ8u7ahzlEWPLyg.2&utm_referrer=http%3A%2F%2Fwww.examcollection.com%2F70-413.html%3Fpath%3DB

Marc_OX

Sunday, June 08, 2014 10:35 AM UT

This dump is valid without any corrections.
Passed with 8xx.

Jono

Sunday, June 08, 2014 9:14 AM UT

Can some explain why E7 is Yes to DHCP enforcement method and E97 is 802.1x enforcement.please compare them to E5. I believe the answer to E7 should be No to DHCP as no DHCP server exist the table.

THL

Saturday, June 07, 2014 5:41 PM UT

just Passed 6 June 727

noone

Saturday, June 07, 2014 2:17 PM UT

Here is the explanation for the Q11:
http://support.microsoft.com/kb/2753560
for PES you must have a 2008 R2 DC and you can downgrade a forest & domain

noone

Saturday, June 07, 2014 12:55 PM UT

About the E75 and dcpromo question:
"You can allow dcpromo to automatically transfer the roles, however, they may transfer to a DC that you may not want to transfer the roles to. This is why this is suggested in order to allow you to transfer the roles to a specific DC."

From a MVP guy: http://msmvps.com/blogs/acefekay/archive/2010/10/09/remove-a-current-operational-domain-controller-from-active-directory.aspx

Svetoslav

Saturday, June 07, 2014 8:34 AM UT

E75: When you perform DCPROMO and you have FSMOs on this DC, roles will automatically move to the next available DC. But I would recommend manually moving them before you performing DCPROMO down.

So the 3rd step can be "run dcpromo"

Marco

Friday, June 06, 2014 11:59 PM UT

Approved 8XX today. Only with Deborah!!!

Mohammed Fikry

Friday, June 06, 2014 6:31 PM UT

@ bin : YES, All Qs from this dump but there are alot of wrong answers

Dave

Friday, June 06, 2014 2:38 PM UT

Passed with 700. Close call but valid. (no, correction used from this forum.)

Ahmet

Friday, June 06, 2014 9:38 AM UT

I studied this one with corrections of BOOGA's answers and the new dump of DENISE, it seems DENISE has the corrections made on Deborah's comments. I am gonna take the exam this afternoon, will let you know if this one is valid. Wish me luck!

Regman

Thursday, June 05, 2014 9:00 PM UT

E56 I was wrong about it. the original answer was correct . It should be A. Although the question does not mention if GPO2 has the folder redirection defined so it can overwrite the folder redirection in GPO1.

AntiEgyptCoup

Thursday, June 05, 2014 11:23 AM UT

just Passed 5June 7Xx
with my corrections mentioned , 10% if my memory can not recall , 1 new question , I will upload my VCE if required.
Good luck for all
the low percentage I had for:
Plan & deploy
Design and implement Network access
design and Implement active directory
the lowest is:
design and implement AD infrastructure

TriTT

Thursday, June 05, 2014 10:09 AM UT

Passed today (Jun 05), score 863. Deborah's dump with Booga's corrections.
Thank Deborah & Booga.

bin

Thursday, June 05, 2014 9:48 AM UT

@Mohammed Fikry

did all the ques from this dump?

Mohammed Fikry

Wednesday, June 04, 2014 2:41 PM UT

passed today 4/6/2014 with score 700 !!!
with booga's corrections only
be careful

bin

Wednesday, June 04, 2014 2:20 PM UT

@AntiEgyptCoup

i agree with you answer.

AntiEgyptCoup

Wednesday, June 04, 2014 7:57 AM UT

@Curtis
E77 C
Network Bandwidth Considerations for Distribution Points:
To help you plan for the distribution point infrastructure in your hierarchy, consider the network bandwidth that is used for the content management process and ways to reduce the network bandwidth that is used.
When you create a package, change the source path for the content or update content on the distribution point, the files are copied from the source path to the content library on the site server. Then, the content is copied from the content library on the site server to the content library on the distribution points. When content source files are updated, and the source files have already been distributed, Configuration Manager retrieves only the new or updated files, and then sends them to the distribution point. Scheduling and throttling controls can be configured for site-to-site communication and for communication between a site server and a remote distribution point. When network bandwidth between the site server and remote distribution point is limited even after you configure the schedule and throttling settings, you might consider prestaging the content on the distribution point.
http://technet.microsoft.com/en-us/library/gg712321.aspx#BKMK_DistributionPointBandwidth

Bandwidth Control:
Bandwidth controls are in place only between sites and from a standard distribution point to a branch distribution point. Package transmissions between the site server and standard distribution points do not use any type of time or bandwidth control. If you need to distribute large packages, plan a time to copy them to standard distribution points when they will not place a large burden on the network.
http://technet.microsoft.com/en-us/library/bb680614.aspx
----------------------------
E95
I agree it is B
there is workaround to override the demand-dial-vpn:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/239c4c45-6d36-4786-9b38-bd5093adcf98/sstp-for-demand-dial-vpn
-----------------------------
E7 is YES
Implementing DHCP NAP to Enforce WSUS Updates:
http://technet.microsoft.com/en-us/magazine/2009.05.goat.aspx
http://ripusudan.wordpress.com/2013/03/19/how-to-configure-nap-enforcement-for-dhcp/
-----------------------------
E50:
I believe it is ABC
Read-only domain controllers (RODCs) can be promoted successfully to global catalog server status. However, certain directory-enabled applications cannot support an RODC as a global catalog server. For example, no version of Microsoft Exchange Server uses RODCs. However, Microsoft Exchange Server works in environments that include RODCs, as long as there are writable domain controllers available. Exchange Server 2007 effectively ignores RODCs. Exchange Server 2003 also ignores RODCs in default conditions where Exchange components automatically detect available domain controllers. No changes were made to Exchange Server 2003 to make it aware of read-only directory servers. Therefore, trying to force Exchange Server 2003 services and management tools to use RODCs may result in unpredictable behavior.
----------------------------
@Hardy ,, Thank you , your both answers are right as well, I added them to my customized vce

AntiEgyptCoup

Wednesday, June 04, 2014 4:49 AM UT

E69# Again , it is 2 2 3
Please whoever suppose an answer , kindly clarify it Why per each !!!
Health Policy#
If a computer fails to meet its requirements
If a computer meets its requirements

Network#(Isolate-allow-Remediation )
1- must be provided access to a limited set of resources on the network.
2- must have full access to the network

Health Validators# (Firewall-antivirus-spyware-updates-security updates)
- firewall ( firewall enabled)
- Antivirus (antivirus software must be up-to-date)
- Automatic update (automatic updating enabled)

AntiEgyptCoup

Wednesday, June 04, 2014 4:16 AM UT

@bin , E75 , my view is:
First read carefully:
http://www.msserverpro.com/migrating-active-directory-domain-controller-from-windows-server-2008-r2-to-windows-server-2012/

1- install ADDS on DC3 & DC4
2- Run Wizard (will create the global catalog as well)
3- Run ntdsutil (you use it to transfer roles & also to remove old servers)

the point :
- I can not select (transfer operation master role and create new catalog server),simply this catalog was already created by wizard , how can I create it again ?
- I can not select the dcpromo option as I need to transfer FSMO roles first before demoting DC1 & DC2.
- ntdsutil will do 2 jobs here , transfer roles & demote old DCs
http://support.microsoft.com/kb/216498

orginal answer was:
1- Install ADDS services on DC3 & DC4
2- Run AD Domain services wizard on DC3 & DC4
3- Run DCpromo
the problem above:
How could I demote DC1 & DC2 by dcpromo and roles are not transferred ?

Stefan

Tuesday, June 03, 2014 11:06 PM UT

passed today in Germany. Dump is valid; few answers are wrong

Pepper

Tuesday, June 03, 2014 10:33 PM UT

@Bin

E75 I think the dcpromo is to demote the old DC's so they are just member servers. I have to admit I'm not sure on this one as I believe the FSMO roles don't move on their own but this might have changed with 2012? This article suggests demoting it with a specific powershell command WILL migrate the FSMO roles automatically so I don't know about DC Promo. For me the answer should be 4 steps, move the FSMO roles and make a new GC then dcpromo to demote the old servers.

Pepper

Tuesday, June 03, 2014 10:25 PM UT

@Curtis Thanks for the post,

Looks like good corrections on most of your suggestions there. Still disagree on E50. The reference to domain controllers already being there only applies to Site1 and Site2 (the main sites)

So that's the main sites sorted, DC already at Site1 DC already at site2 so B and C.

We have to assume the branches have no DC's at all as they aren't mentioned. I believe the question is badly worded but implies 2008 DC's present only at the main sites.

"The main offices sites are named Site1 and Site2. Each office connects to Site1 and Site2 by using a WAN link. Each site contains a domain controller that runs Windows Server 2008."

So with a writeable DC at site1 and 2 we have to achieve:
"Ensure that users can log on to the domain if a domain controller or a WAN link fails.
Minimize the number of domain controllers implemented."

So we need to keep writeable DC's to a minimum, so we look at RODC's. Does an RODC at the 10 branches fulfill requirement one?

"Each office connects to Site1 and Site2 by using a WAN link." I read this as 2 WAN links per branch office? So it has a link directly to each main office. The requirement is "Ensure that users can log on to the domain if a domain controller or a WAN link fails"

If it does mean one link to Site1 and a seperate link to Site2 then we are fine as we can cope with "a" WAN link failure per branch (not two). We can also cope with "a" DC failure as there is a route to a writeable DC at the other site if one fails.

So for me we have to go with RODC's being the best choice. I still think the question is badly worded so it might be worth reading careful in the exam incase there is more decisive english!

Curt

Tuesday, June 03, 2014 5:42 PM UT

Passed today with 727, not nearly as good as I hoped and I basically memorized the dump.

AntiEgyptCoup

Tuesday, June 03, 2014 10:36 AM UT

Any one passed in June ?

AntiEgyptCoup

Tuesday, June 03, 2014 8:51 AM UT

@pepper
E55 is D ,, I agree with you :) thank you.

AntiEgyptCoup

Tuesday, June 03, 2014 8:37 AM UT

E53
it should be B & E
simply this is new authentication method in windows 2012

http://windowsitpro.com/windows-server-2012/enable-claims-support-windows-server-2012-active-directory
http://technet.microsoft.com/en-us/library/hh831747.aspx

TriTT

Tuesday, June 03, 2014 4:50 AM UT

E27: A not C

• DNSSEC. Windows Server 2012 DNS zones support DNSSEC. This means that you can sign and host
DNSSEC-signed zones to provide additional security for your name resolution infrastructure. DNSSEC
are extensions to the DNS protocol. These extensions add origin authority, data integrity, and
authenticated denial of existence to DNS. These changes enable your DNS zones and the records that
they contain to be signed digitally.
• DNS cache-locking. Windows Server 2012 DNS servers support DNS cache locking. When you enable
cache locking, the DNS server does not allow the overwriting of cached records for the duration of
theTimeto Live (TTL) value. Cache locking provides improved security against cache poisoning
attacks.

bin

Monday, June 02, 2014 4:50 PM UT

E75..

Install the active directory domain services role on dc3 and dc4

run the active directory domain services configuration wizard on dc3 and dc4

*the correct should be "transfer the operations master roles and create a global catalog server"

how come we need to do a dcpromo.exe on dc1 and dc2? we should run adpref /forest and adpref /domain at 2008 instead right?

Matthew

Monday, June 02, 2014 8:02 AM UT

This exam is valid a few new questions but all in all mostly in this dump Passed 8xx
Good luck ppls

Monday, June 02, 2014 6:45 AM UT

@bin. yes i only studied those.. and i passed with that

Curt

Sunday, June 01, 2014 7:59 PM UT

E69: I think I have it figured out. If anyone has corrections, please post them:
Health policies: 3
According to http://msdn.microsoft.com/en-us/library/dd125366(v=ws.10).aspx , “Health policies define which SHVs are evaluated . . . “. Since there are 3 sets (combinations) of SHV settings that can trigger non-compliance, 3 health policies are needed.
Network Policies: 2
According to http://technet.microsoft.com/en-us/library/dd182017.aspx , “There must be a network policy that will be applied to computers that are compliant with the health requirements and a network policy that will be applied to computers that are noncompliant”. Since there are only two scenarios defined in the question (compliant=full access, non-compliant=access to a limited set of resources) there need be only 2 network policies.
System Health Validator setting: 3
This one is a little tricky because the question specifies the minimum number of objects you should create, so the answer here could be 3 (total settings used) or 6 (2 for each SHV).
If you examine http://msdn.microsoft.com/en-us/library/dd314150(v=ws.10).aspx , Step #6, inside the Windows Security Health Validator window it says “Use the settings below to define a Windows Security Health Validator policy” and this is followed by the settings defined in the question. Since there are only 3 total settings defined across the 3 policies (firewall enabled, anti-virus up to date, automatic updates enabled) a minimum of 3 SHV settings are defined, in different combinations. But the number of settings in all combinations adds up to 6 settings, hence tricky. BTW, there are 3 total SHVs defined.

Curt

Sunday, June 01, 2014 5:23 PM UT

For everyone, a short article on what we "need to know" for the 70-413 exam:
http://www.windows-server-2012-r2.com/70-413-what-you-do-have-to-know.html
Good luck.

Curt

Sunday, June 01, 2014 4:49 AM UT

E45: The answer is definitely “B: Configure failover for the scope”.
http://technet.microsoft.com/en-us/library/dn338983.aspx
and http://blogs.technet.com/b/keithmayer/archive/2012/10/28/step-by-step-scoping-out-the-new-dhcp-failover-in-windows-server-2012-31-days-of-favorite-features-part-28-of-31.aspx
and http://social.technet.microsoft.com/Forums/windowsserver/en-US/08816e3e-e455-43ee-9425-efffb2dfbaf6/difference-between-dhcp-function-within-failover-cluster-and-dhcp-failover-?forum=winserverClustering
Apparently, a failover cluster uses shared storage, making the shared storage a single-point-of-failure, and it can get expensive. Since the server runs Windows 2012, a new DHCP (scope) failover feature eliminates this weakness and costs less too. The second article clearly states “Using the DHCP Management console, right-click on the newly activated DHCP scope and select the Configure Failover action”. So you configure failover on the scope.

h

Sunday, June 01, 2014 3:44 AM UT

Very good dump, still valid, passed yesterday, this dump is a great help.
Studied with the comments of Booga, thanks to examcollection and the users who help this dump better.

Regman

Saturday, May 31, 2014 10:41 PM UT

E56 Correct answer is C. A is wrong. loopback processing will only enforce the settings defined in GPO2 but will not prevent the folder redirection which is defined in GPO1. we can prevent the GPO1 by applying the "deny apply" permissions to a group of users.(security filtering)

Regman

Saturday, May 31, 2014 8:53 PM UT

E52 should be D instead of A.
Few years the .local answer was the right one. but now they have changed their opinion.
http://social.technet.microsoft.com/wiki/contents/articles/17974.active-directory-domain-naming-considerations.aspx
http://www.mdmarra.com/2012/11/why-you-shouldnt-use-local-in-your.html

Ahmed Mokhtar

Saturday, May 31, 2014 12:45 PM UT

hi all,
@ Alan1 can you please tell me what is the incorrect answer in this dump and give us the right answer for it, and if any one here know how to make it please send it to us here or by any way else
thank you all a lot,
will wait for your answer guys, really need to pass this exam

AntiEgyptCoup

Saturday, May 31, 2014 12:25 PM UT

@Marmaduke
E21
Ldifde is correct , the questions states:
<>
means you need to query but what you assume (set-adserversettings):
is Exchange server cmdlet,
http://technet.microsoft.com/en-us/library/dd298063(v=exchg.150).aspx
and it is setting not getting a vlue.

Ldifde#LDIFDE is a robust utility. This utility enabled you to import/export information from/to Active Directory. LDIFDE queries any available domain controller to retrieve/update AD information.
http://support.microsoft.com/kb/555634
http://technet.microsoft.com/en-us/library/cc731033.aspx

Curtis

Saturday, May 31, 2014 6:22 AM UT

OK long post. I just spent the afternoon going over your posts and I have some thoughts:
E27: The answer is A: DNS cache locking. http://technet.microsoft.com/en-us/library/ee683892(v=WS.10).aspx
DNSSEC is effective against cache pollution attacks however, according to Exam Ref 70-413, Designing and Implementing a Server Infrastructure, chapter 2, page 86, the DNS socket pool and cache locking are specific methods indicated for preventing cache poisoning. Since the DNS Socket Pool is not one of the choices offered, I have to go with DNS Cache Locking.
E77: Answer “C”: A Distribution Group Point.
http://technet.microsoft.com/en-us/library/gg712681.aspx#BKMK_ChooseSecondary
The question specifies that the sites are connected by low-latency WAN links. Various articles state that secondary sites are indicated for sites connected by high-latency (low bandwidth) WAN links. In the section of the article labeled “Determine Whether to install a Secondary Site” none of the conditions listed seem to apply to the question and the article also says to consider distribution points instead.
E95: Answer “B”. http://technet.microsoft.com/en-us/library/cc775646(v=ws.10).aspx
The temporary office has an Internet connection and the conditions that would warrant a demand-dial interface do not seem to be indicated in the question namely, PSTN, ISDN, ATM connections or per-minute (time-sensitive) costs of the WAN connection. Also, CMAK makes use of PPTP and L2TP but the question specifies SSTP so it seems there would be less administrative overhead using option “B”.
E55: Answer “D”.
According to the error adprep/rodcprep already has a list of partitions, they’re listed. So it was able to contact the domain naming master and retrieve a list of partitions. The article you quoted, http://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx#BKMK_TshootAdprep clearly states that: “If an infrastructure master is offline or if it has been forcefully removed from the domain, the adprep /rodcprep command fails”. Also see this article (Thanks, Pepper): http://support.microsoft.com/kb/949257

E82: Answer “D”. There does not appear to be a GC requirement, and http://technet.microsoft.com/en-us/library/cc732632(v=ws.10).aspx states “place a writable domain controller running Windows Server 2008 in the nearest site in your network topology to the site that contains the RODC”.

E24: Answer is “A”.
Site link bridging is enabled by default. To ensure replication traffic replicates through Site1, simply remove the link between Sites 2 & 3. Replication traffic will still replicate through Site1 even if a DC in Site1 is not available. See this article: http://technet.microsoft.com/en-us/library/cc753638(v=ws.10).aspx

E7: Answer is “B”: NO!
All DHCP NAP does is place an “unhealthy” client on a defined subnet while placing “healthy” clients on another subnet. Subnets and VLANS are not necessarily related. Clients can all be on the same subnet but be separated onto different VLANs because VLANs are determined by routers and switches, allowing traffic only on different physical PORTS on a switch. Read this article:
http://superuser.com/questions/353664/what-is-the-difference-between-a-vlan-and-a-subnet

E50: Answer is “B”, “C” and “D”. http://technet.microsoft.com/en-us/library/dd736142(v=ws.10).aspx
There is no specified requirement for security and the branch offices all appear to already have writable DCs. The above article states “If a branch office has a writable domain controller . . . there is probably no reason to change your current infrastructure”. There is however, a requirement that users must be able to log on in the event of a WAN link failure, so there needs to be a DC in each branch office.

I could be wrong though.

Bob

Friday, May 30, 2014 6:43 PM UT

Passed with 700. 66 questions, 2 case studies.
Question and answers are copy-paste from this dump, but there are many mistakes.
I used the corrections of V, Booga and Dosta. Thank you all and Deborah.

Hardy

Friday, May 30, 2014 4:09 PM UT

Passed this morning with a few corrections

Two new / different q's not on this vce

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. The forest functional level is Windows Server 2012.

Your company plans to deploy an application that will provide a search interface to users in the company. The application will query the global catalog for the Employee-Number attribute.

You need to recommend a solution to ensure that the application can retrieve the Employee- Number value from the global catalog.

What should you include in the recommendation?

the set-adserversettings command
the set-aduser command
the set-adobject command
the Csvde command

went with Csvde??

Other one was the correct "yes" option for this variant.

Your network contains 50 servers that run Windows Server 2003 and 50 servers that run Windows Server 2008.

You plan to implement Windows Server 2012 R2.

You need to create a report that includes the following information:
The servers that run applications and services that can be moved to Windows Server 2012 R2
The servers that have hardware that can run Windows Server 2012 R2
The servers that are suitable to be converted to virtual machines hosted on Hyper-V hosts that run Windows Server 2012 R2

Solution: You install Windows Server 2012 R2 on a new server, and then you run the Microsoft Assessment and Planning Toolkit (MAP).

Does this meet the goal?

Yes
No

Went yes.

Made corrections from comments but ignored Moustafa as he's wrong

Pepper

Friday, May 30, 2014 3:41 PM UT

@AntiEgyptCoup Still think E55 being the infrastructure master. Check this quote from article below:

When you run the Adprep /rodcprep command on Windows Server 2008, you receive the following error message:
Adprep could not contact a replica for partition DC=DomainDnsZones,DC=Contoso,DC=com
Adprep failed the operation on partition DC=DomainDnsZones,DC=Contoso,DC=com Skipping to next partition.

Adprep could not contact a replica for partition DC=ForestDnsZones,DC=Contoso,DC=com
Adprep encountered an LDAP error. Error code: 0x0. Server extended error code: 0x0, Server error message: (null).

Adprep failed the operation on partition DC=ForestDnsZones,DC=Contoso,DC=com Skipping to next partition.
Adprep completed with errors. Not all partitions are updated.
Back to the top | Give Feedback
Collapse imageCAUSE
This problem occurs when the Adprep /rodcprep command tries to contact the infrastructure master for each application partition in the forest. The command does this to set the permissions that are required for Read-Only Domain Controller (RODC) replication. The Adprep /rodcprep command fails if one of the following conditions is true:

The partition or the partitions that are referenced in the error message no longer exist.

The infrastructure master for the referenced partition or partitions has been forcefully demoted or is offline.

It's the exact error in the question word for word!

http://support.microsoft.com/kb/949257

Alan1

Friday, May 30, 2014 7:55 AM UT

Passed today 9xx and MCSE now ;-) Thanks Examcolleciton team for providing such a platform, wishing everyone all the best here. Wish me luck too as I have to appear in the real exam i.e to find a job :-)

Tiddy

Friday, May 30, 2014 6:43 AM UT

Fail twice, all correction are wronggg, don,t belive them

CarlosH

Friday, May 30, 2014 1:31 AM UT

Barely passed today, all questions from this dump, but many wrong answers

AntiEgyptCoup

Friday, May 30, 2014 1:03 AM UT

@Pepper, E55 , I am sure it is D , please read my comment:

Domain Naming Master:
The domain naming master controls the addition or removal of domains in the forest. There can be only one domain naming master in the entire forest at any time.

Infrastructure Master:
There must be one infrastructure master in each domain. The infrastructure master is responsible for updating the group-to-user references whenever group memberships are changed.

What is Adprep.exe?
Adprep.exe is a command-line tool that is included on the installation disk of each version of Windows Server. Adprep.exe performs operations that must be completed in an existing Active Directory environment before you can add a domain controller that runs that version of Windows Server

http://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx

http://joker.tomsk.net/w2k/webfiles/modules/04m16c.htm

Timothy

Friday, May 30, 2014 12:45 AM UT

@AD - Q11: you can downgrade forest functional levels. This is a good answer because the 2012 domain and forest are new in this scenario and so they are a blank slate so it is easy to downgrade them. It would be more work and higher risk to upgrade the old domain that is being decommissioned. http://techguyvijay.blogspot.com/2012/07/downgrade-forest-functional-level-or.html

Timothy

Thursday, May 29, 2014 11:16 PM UT

Agree with Alan1 on E74. You do not need to log onto a domain controller ot run ldifde. As a proof of concept, I performed the action using a non-privileged account on a Windows 8 box. I successfully exported the schema. The dump is correct. Domain Users is sufficient.

J4son - Brazil

Thursday, May 29, 2014 10:01 PM UT

Dump is valid in Brazil...Passed with score 898,@Deborah, @Gabriela Thank you very good work...good luck all..now 70-414...

lj

Thursday, May 29, 2014 9:24 PM UT

Passed the exam today with 836 marks.Used deborah's dump and booga's comments only.

Abhilash

Thursday, May 29, 2014 1:55 PM UT

passed today with score 860.Dump is valid.

Dave

Thursday, May 29, 2014 1:30 PM UT

@AD and ArpA. Witch answers did you change? Would you share your changes? Thank you. I see that the success rate is different in different countries. Of course, it is up to the various questions. Yet, comparison makes sense, I guess.

Marmaduke

Thursday, May 29, 2014 11:05 AM UT

I've passed today with 890. Made corrections on questions:
E21: not ldifde; Set-ADuser
E28: C. from server 2 run the Invoke-IpamGPOProvsion. On server 2, change the manageability
E62: changed order; server2 run receive, server1 send
Be aware because some answers was positions changed.

bin

Thursday, May 29, 2014 10:25 AM UT

AD:

so you only study this vce only?

I need to confirm.

Exam A - 15Q
Exam B - 11Q
Exam C - 14Q
Exam D - 12Q
Exam E - 102Q

all this are inside deborah vce file right guys??

Thursday, May 29, 2014 9:51 AM UT

Dumps is VALID! although when i was studying i did find some wrong answers, which i corrected myself. wrote today. passed with 830. all questions were from this dump. got 2 case studies and 44 questions from the multiple choice exam

JP

Thursday, May 29, 2014 3:10 AM UT

Passed today with an 809 I used the Premium VCE which is the same as the other uploaded files with 108 questions. I didn't make any changes to the file and passed.

Alan1

Wednesday, May 28, 2014 5:11 PM UT

E74
No correction is required answer is absolutely correct i.e Domain User.
Explanation:
The LDIFDE command-line tool, which ships with Windows Server 2003 and Windows Server 2008, can be used to export the schema from the source forest. This tool creates a file that is formatted with the LDAP Data Interchange Format (LDIF). No special permissions are required to export the schema from the source forest, and any domain user can perform this task.
To export the schema from the source forest, do the following:

1.Log on to a member server or a domain controller.
2.Open a Command Prompt window.
3.Type the following into the Command Prompt window:

ldifde -f PRODSchema.ldif -d CN=Schema,CN=Configuration,DC=WS08DOMAIN01,DC=local

4.Press Enter.
http://technet.microsoft.com/en-us/magazine/2009.04.schema.aspx

Alan1

Wednesday, May 28, 2014 4:47 PM UT

E27
C: DNS Security Extensions (DNSSEC)is correct
A: DNS Cache locking is wrong
Explanation:
An attacker can also set the time to live (TTL) on fake DNS data to a very long interval, causing the DNS server cache to remain poisoned for many hours or days. It is also possible to send a DNS spoofing attack directly to a DNS client; however these attacks are less persistent than cache poisoning attacks. Both of these types of attacks can be prevented with DNSSEC by requiring that DNS responses are validated as authentic
http://technet.microsoft.com/en-us/library/hh831411.aspx

bin

Wednesday, May 28, 2014 1:04 PM UT

i just open up the vce.. how come i on exam E i can't see those questions posted here is different from the vce?

How many questions in total for Exam A,B,C,D,E?

NhanTV

Wednesday, May 28, 2014 5:30 AM UT

Passed yesterday with 7xx, this dump is valid, but many answers incorrect

Pepper

Tuesday, May 27, 2014 7:38 PM UT

The yes/no about DHCP NAP... I can't find much info but can DHCP NAP force a client onto a vlan? I know it can give them specific ip's etc but actually putting them into a VLAN is surely an 802.1x thing as it's on the switch level?