Exam Deatils

  • Exam Code
    :70-412
  • Exam Name
    :Configuring Advanced Windows Server 2012 Services
  • Certification
    :MCSE
  • Vendor
    :Microsoft
  • Total Questions
    :448 Q&As
  • Last Updated
    :Apr 18, 2019

Microsoft MCSE 70-412 Questions & Answers

  • Question 1:

    Your network contains an Active Directory forest. The forest contains one domain named contoso.com. The domain contains three domain controllers. The domain controllers are configured as shown in the following table.

    DC1 has all of the operations master roles installed.

    You transfer all of the operations master roles to DC2, and then you uninstall Active Directory from DC1.

    You need to ensure that you can use Password Settings objects (PSOs) in the domain.

    What should you do?

    A. Change the domain functional level.

    B. Upgrade DC2.

    C. Run the dcgpofix.exe command.

    D. Transfer the schema master role.

  • Question 2:

    Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server3 that runs Windows Server 2012 R2 and has the DHCP Server server role installed. DHCP is configured as shown in the exhibit. (Click the Exhibit button.)

    Scope1, Scope2, and Scope3 are configured to assign the IP addresses of two DNS servers to DHCP clients. The remaining scopes are NOT configured to assign IP addresses of DNS servers to DHCP clients.

    You need to ensure that only Scope1, Scope3, and Scopes assign the IP addresses of the DNS servers to the DHCP clients. The solution must minimize administrative effort.

    What should you do?

    A. Create a superscope and a filter.

    B. Create a superscope and scope-level policies.

    C. Configure the Server Options.

    D. Configure the Scope Options.

  • Question 3:

    You have two Windows Server Update Services (WSUS) servers named Server01 and Server02. Server01 synchronizes from Microsoft Update. Server02 synchronizes updates from Server01. Both servers are members of the same Active

    Directory domain. You configure Server01 to require SSL for all WSUS metadata by using a certificate issued by an enterprise root certification authority (CA).

    You need to ensure that Server02 synchronizes updates from Server01.

    What should you do on Server02?

    A. From a command prompt, run wsusutil.exe configuresslproxy server02 443 .

    B. From a command prompt, run wsusutil.exe configuressl server01.

    C. From a command prompt, run wsusutil.exe configuresslproxy server01 443 .

    D. From the Update Services console, modify the Update Source and Proxy Server options.

  • Question 4:

    You are employed as a senior network administrator at ABC.com.

    ABC.com has an Active Directory domain named ABC.com.

    All servers on the ABC.com network have Windows Server 2012 R2 installed.

    The ABC.com domain has an Active Directory site configured in London,and an Active Directory site in New york.

    You have been instructed to make sure that the synchronization of account lockout data happens quicker.

    A. You should consider editing the options attribute from WANLINK properties

    B. You should consider editing the options attribute from LANLIK properties

    C. You should consider editing the options attribute from the DEFAULTSITELINK properties

    D. You should consider editing the proxyAddressess attribute from the DEFAULTIPSITELINK properties.

  • Question 5:

    Your network contains two Web servers named Server1 and Server2. Both servers run Windows Server 2012 R2.

    Server1 and Seiver2 are nodes in a Network Load Balancing (NLB) cluster. The NIB cluster contains an application named App1 that is accessed by using the URL http://app1.contoso.com.

    You plan to perform maintenance on Server1.

    You need to ensure that all new connections to App1 are directed to Server2. The solution must not disconnect the existing connections to Server1.

    What should you run?

    A. The Stop-NlbCluster cmdlet

    B. The nlb.exe stop command

    C. The Suspend-NlbCluster cmdlet

    D. The nlb.exe suspend command

  • Question 6:

    Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The forest contains three Active Directory sites named SiteA, SiteB, and SiteC. The sites contain four domain controllers. The domain controllers are configured as shown in the following table.

    An IP site link exits between each site.

    You discover that the users in SiteC are authenticated by the domain controllers in SiteA and SiteB.

    You need to ensure that the SiteC users are authenticated by the domain controllers in SiteB, unless all of the domain controllers in SiteB are unavailable.

    What should you do?

    A. Create an SMTP site link between SiteB and SiteC.

    B. Create additional connection objects for DC3 and DC4.

    C. Decrease the cost of the site link between SiteB and SiteC.

    D. Create additional connection objects for DC1 and DC2.

  • Question 7:

    Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role installed and is

    configured to support key archival and recovery.

    You create a new Active Directory group named Group1.

    You need to ensure that the members of Group1 can request a Key Recovery Agent certificate.

    The solution must minimize the permissions assigned to Group1.

    Which two permissions should you assign to Group1? (Each correct answer presents part of the solution. Choose two.)

    A. Read

    B. Auto enroll

    C. Write

    D. Enroll

    E. Full control

  • Question 8:

    Your network contains 20 iSCSI storage appliances that will provide storage for 50 Hyper-V hosts running Windows Server 2012 R2.

    You need to configure the storage for the Hyper-V hosts. The solution must minimize administrative effort.

    What should you do first?

    A. Install the iSCSI Target Server role service and configure iSCSI targets.

    B. Install the iSNS Server service feature and create a Discovery Domain.

    C. Start the Microsoft iSCSI Initiator Service and configure the iSCSI Initiator Properties.

    D. Install the Multipath I/O (MPIO) feature and configure the MPIO Properties.

  • Question 9:

    You are employed as a network administrator at consoto.com.

    Contoso.com has in an Active Directory domain named contoso.com.

    All Servers on the contoso.com network have Windows Server 2012 R2 installed.

    A contoso.com server ,named Server1,hosts the Active Directory Certificate Services Server role and utilizes a hardware security module(HSM) to safeguard its private key.

    You have beed instructed to backup the Active Directory Certificate Services (ADCS) database,log files,and private key regularly.

    You should not use a utility supplied by the hardware security module (HSM) creator.

    Which of the following actions should you take?

    A. You should consider scheduling an incremental backup

    B. You Should consider making use of the certutil.exe command.

    C. You should consider schedulling a differential backup

    D. You should consider schedulling a copy backup

  • Question 10:

    Your network contains an Active Directory forest named adatum.com. The forest contains an Active Directory Rights Management Services (AD RMS) cluster.

    A partner company has an Active Directory forest named litwareinc.com. The partner company does not have AD RMS deployed.

    You need to ensure that users in litwareinc.com can consume rights-protected content from adatum.com.

    Which type of trust policy should you create?

    A. At federated trust

    B. A trusted user domain

    C. A trusted publishing domain

    D. Windows Live ID

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Microsoft exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 70-412 exam preparations and Microsoft certification application, do not hesitate to visit our Vcedump.com to find your solutions here.