Microsoft 70-412 Online Practice Questions and Exam Preparation

Microsoft 70-412 Online Questions & Answers

• Question 121:

  DRAG DROP

  You plan to deploy a failover cluster that will contain two nodes that run Windows Server 2012 R2.

  You need to configure a witness disk for the failover cluster.

  How should you configure the witness disk?

  To answer, drag the appropriate configurations to the correct location or locations. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

  ---

  Disk witness requirements include:

  Basic disk with a single volume

  Can be formatted with NTFS or ReFS

  Reference: Configure and Manage the Quorum in a Windows Server 2012 Failover Cluster

• Question 122:

  Your network contains an Active Directory domain named adatum.com. The domain contains two sites named Site1 and Site2 and two domain controllers named DC1 and DC2. DC1 is located in Site1 and DC2 is located in Site2.

  You install an additional domain controller named DC3 in Site1 and you ship DC3 to Site2.

  A technician connects DC3 to Site2.

  You discover that users in Site2 are authenticated only by DC2.

  You need to ensure that the users in Site2 are authenticated by both DC2 and DC3.

  What should you do?

  A. In Active Directory Users and Computers, configure the msDS-PrimaryComputer attribute for DC3.
  B. In Active Directory Users and Computers, configure the msDS-Site-Affinity attribute for DC3.
  C. From Active Directory Sites and Services, move DC3.
  D. From Active Directory Sites and Services, modify the site link between Site1 and Site2.
  C. From Active Directory Sites and Services, move DC3.

  ---

  DC3 needs to be moved to Site2 in AD DS Reference: http://technet.microsoft.com/en-us/library/cc759326(v=ws.10).aspx

• Question 123:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 is backed up by using Windows Server Backup. The backup configuration is shown in the exhibit. (Click the Exhibit button.)

  

  You discover that only the last copy of the backup is maintained. You need to ensure that multiple backup copies are maintained. What should you do?

  A. Modify the backup destination.
  B. Configure the Optimize Backup Performance settings.
  C. Modify the Volume Shadow Copy Service (VSS) settings.
  D. Modify the backup times.
  A. Modify the backup destination.

  ---

  The destination in the exhibit shows a network share is used. If a network share is being used only the latest copy will be saved

  

  Reference: Where should I save my backup? http://windows.microsoft.com/en-us/windows7/where-should-i-save-my-backup

• Question 124:

  Your network contains four Active Directory forests. Each forest contains an Active Directory Rights Management Services (AD RMS) root cluster.

  All of the users in all of the forests must be able to access protected content from any of the forests.

  You need to identify the minimum number of AD RMS trusts required.

  How many trusts should you identify?

  A. 3
  B. 6
  C. 12
  D. 16
  C. 12

  ---

  The number of AD RMS trusts required to interact between all AD RMS forests can be defined by using the following formula: N*(N-1). Here N=4, so the number of trust is 12 (4*3).

  References: AD RMS Prerequisites, Important considerations for installing AD RMS in a multi-forest environment

• Question 125:

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.

  The domain contains a domain controller named DC1 that is configured as an enterprise root certification authority (CA).

  All users in the domain are issued a smart card and are required to log on to their domain-joined client computer by using their smart card.

  A user named User1 resigned and started to work for a competing company.

  You need to prevent User1 immediately from logging on to any computer in the domain.

  The solution must not prevent other users from logging on to the domain.

  Which tool should you use?

  A. Active Directory Administrative Center
  B. Certificate Templates
  C. The Security Configuration Wizard
  D. The Certificates snap-in
  A. Active Directory Administrative Center

  ---

  To disable or enable a user account using Active Directory Administrative Center

  1.

  To open Active Directory Administrative Center, click Start , click Administrative Tools , and then click Active Directory Administrative Center.

  2.

  To open Active Directory Users and Computers in Windows Server 2012, click Start , type dsac.exe.

  3.

  In the navigation pane, select the node that contains the user account whose status you want to change.

  4.

  In the management list, right-click the user whose status you want to change.

  5.

  Depending on the status of the user account, do one of the following:

  To disable the user account, click Disable.

  To enable the user account, click Enable.

  References: Disable or Enable a User Account https://www.pcwdld.com/active-directory-users-computers-not-showing-administrative-tools

• Question 126:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. The domain contains two DHCP servers named DHCP1 and DHCP2 that run Windows Server 2012 R2.

  You install the IP Address Management (IPAM) Server feature on a member server named Server1 and you run the Run Invoke-IpamGpoProvisioning cmdlet.

  You need to manage the DHCP servers by using IPAM on Server1.

  Which three actions should you perform?

  To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  

  Reference: Checklist: Deploy IPAM Server

• Question 127:

  Your network contains one Active Directory forest named contoso.com. The forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

  

  You need to enable universal group membership caching for the Europe office and Asia office sites. What should you use?

  A. Set-ADSite
  B. Set-ADReplicationSite
  C. Set-ADDomain
  D. Set-ADReplicationSiteLink
  E. Set-ADGroup
  F. Set-ADForest
  G. Netdom
  B. Set-ADReplicationSite

  ---

  The Set-ADReplicationSite cmdlet is used to set the properties for an Active Directory site that is being used for replication.

  Parameter: -UniversalGroupCachingEnabled

  Indicates whether the cmdlet enables universal group caching. If this parameter is true, it indicates this site caches universal groups, which are those groups cached on global catalog (GC) servers. It can be useful in sites with no GC servers

  available locally.

  Reference: Technet, Set-ADReplicationSite

• Question 128:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You have a subscription to Windows Azure.

  You need to register the Microsoft Azure Backup Agent on Server1.

  What should you do first?

  A. Install the Microsoft System Center 2012 Data Protection Manager (DPM) agent.
  B. Create a backup vault.
  C. Create Site Recovery vault.
  D. Configure a passphrase for the Azure Backup Agent.
  B. Create a backup vault.

  ---

  To back up files and data from your Windows Server to Azure, you must create a backup vault in the geographic region where you want to store the data. The main steps include:

  *

  the creation of the vault you will use to store backups

  *

  downloading a vault credential

  *

  the installation of a backup agent

  Reference: Configure Azure Backup to quickly and easily back up Windows Server https://azure.microsoft.com/sv-se/documentation/articles/backup-configure-vault/

• Question 129:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains client computers that run either Windows XP, Windows 7, or Windows 8.

  Network Policy Server (NPS) is deployed to the domain.

  You plan to create a system health validator (SHV).

  You need to identify which policy settings can be Applied to all of the computers.

  Which three policy settings should you identify? (Each correct answer presents part of the solution.

  Choose three.)

  A. A firewall is enabled for all network connections.
  B. An antispyware application is on.
  C. Automatic updating is enabled.
  D. Antivirus is up to date.
  E. Antispyware is up to date.
  A. A firewall is enabled for all network connections.
  C. Automatic updating is enabled.
  D. Antivirus is up to date.

  ---

  *

  System health agent (SHA) is a NAP component.

  *

  System health agent (SHA)

  A component that checks the state of the client computer to determinewhether the settings monitored by the SHA are up-to-date and configured correctly. For example, the Windows Security Health Agent (WSHA) can monitor Windows

  Firewall, whether antivirus software is installed, enabled, and updated, whether antispyware software is installed, enabled, and updated, and whether Microsoft Update Services is enabled and the computer has the most recent security

  updates from Microsoft Update Services.

  There might also be SHAs (and corresponding system health validators) available from other companies that provide different functionality.

• Question 130:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012 R2.

  Server1 has Microsoft SQL Server 2012 installed.

  You install the Active Directory Federation Services server role on Server2.

  You need to configure Server2 as the first Active Directory Federation Services (AD FS) server in the domain.

  The solution must ensure that the AD FS database is stored in a SQL Server database on Server1.

  What should you do on Server2?

  A. From a command prompt, run fsutil.exe.
  B. From Windows PowerShell, run Install-ADFSFarm.
  C. From Server Manager, install the Federation Service Proxy.
  D. From Server Manager, install the AD FS Web Agents.
  B. From Windows PowerShell, run Install-ADFSFarm.

  ---

  Creates the first node of a new federation server farm

  Parameter: -SQLConnectionString Specifies the SQL Server database that will store the AD FS configuration settings. If not specified, the AD FS installer uses the Windows Internal Database to store configuration settings.

  Incorrect Answers:

  A: Performs tasks that are related to file allocation table (FAT) and NTFS file systems, such as managing reparse points, managing sparse files, or dismounting a volume.

  C: Not installing Proxy

  D: Not Installing web agents References: https://technet.microsoft.com/en-us/library/cc753059(v=ws.10).aspx https://technet.microsoft.com/en-us/library/jj553792.aspx