Microsoft 70-412 Online Practice Questions and Exam Preparation

Microsoft 70-412 Online Questions & Answers

• Question 131:

  You have a server named Server1 that runs Windows Server 2012 R2.

  Server1 has a single volume that is encrypted by using BitLocker Drive Encryption (BitLocker).

  BitLocker is configured to save encryption keys to a Trusted Platform Module (TPM). Server1 is configured to perform a daily system image backup.

  The motherboard on Server1 is upgraded.

  After the upgrade, Windows Server 2012 R2 on Server1 fails to start.

  You need to start the operating system on Server1 as soon as possible.

  What should you do?

  A. Start Server1 from the installation media. Run startrec.exe.
  B. Move the disk to a server that has a model of the old motherboard. Start the server from the installation media. Run bcdboot.exe.
  C. Move the disk to a server that has a model of the old motherboard. Start the server. Run tpm.msc.
  D. Start Server1 from the installation media. Perform a system image recovery.
  C. Move the disk to a server that has a model of the old motherboard. Start the server. Run tpm.msc.

  ---

  By moving the hard drive to server with that has a model of the old motherboard the system would be able to start. As BitLocker was configured to save encryption keys to a Trusted Platform Module (TPM), we can use tpm.msc to access the

  TPM settings.

  Note: After you replaced the motherboard, you need to repopulate the TPM with new information regarding the encryption of the hard disk.

  We use these commands to repopulate the information in the TPM (without PIN):

  manage-bde -delete -protectors C: -type TPM

  manage-bde -protectors -add C: -tpm

  Incorrect Answers:

  D. After the system image recovery you would still have the new motherboard installed. The problem would return. References: BitLocker - New motherboard replacement

• Question 132:

  HOTSPOT

  You have a server that runs Windows Server 2012 R2 and has the iSCSI Target Server role service installed. You run the New-IscsiVirtualDisk cmdlet as shown in the New-IscsiVirtualDisk exhibit. (Click the Exhibit button.)

  

  To answer, complete each statement according to the information presented in the exhibits. Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  From the exhibit we see that the size is 10737418240 bytes. This is roughly 10 GB.

  From the exhibit we also see 'Status: Not connected'.

  Note: Target: It is an object which allows the iSCSI initiator to make a connection. The Target keeps track of the initiators which are allowed to be connected to it. The Target also keeps track of the iSCSI virtual disks which are associated with it. Once the initiator establishes the connection to the Target, all the iSCSI virtual disks associated with the Target will be accessible by the initiator.

  Reference: Introduction of iSCSI Target in Windows Server 2012

  http://blogs.technet.com/b/filecab/archive/2012/05/21/introduction-of-iscsi-target-in-windows-server-2012.aspx

• Question 133:

  Which of the following authentication types must you enable to support Workplace Join?

  A. Forms
  B. Windows
  C. Certificate
  D. Device
  D. Device

• Question 134:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a main office and a branch office.

  An Active Directory site exists for each office.

  All domain controllers run Windows Server 2012 R2.

  The domain contains two domain controllers.

  The domain controllers are configured as shown in the following table.

  

  DC1 hosts an Active Directory-integrated zone for contoso.com.

  You add the DNS Server server role to DC2.

  You discover that the contoso.com DNS zone fails to replicate to DC2.

  You verify that the domain, schema, and configuration naming contexts replicate from DC1 to DC2.

  You need to ensure that DC2 replicates the contoso.com zone by using Active Directory replication.

  Which tool should you use?

  A. Dnslint
  B. A DNS Manager
  C. Active Directory Users and Computers
  D. Dnscmd
  A. Dnslint

  ---

  Note: If you see questions about AD Replication, first preference is AD sites and services, then Repadmin and then DNSLINT.

• Question 135:

  Your network contains an Active Directory domain named contoso.com.

  A previous administrator implemented a Proof of Concept installation of Active Directory Rights Management Services (AD RMS).

  After the proof of concept was complete, the Active Directory Rights Management Services server role was removed.

  You attempt to deploy AD RMS.

  During the configuration of AD RMS, you receive an error message indicating that an existing AD RMS Service Connection Point (SCP) was found.

  You need to remove the existing AD RMS SCP.

  Which tool should you use?

  A. Authorization Manager
  B. Certification Authority
  C. ADSI Edit
  D. Active Directory Domains and Trusts
  C. ADSI Edit

  ---

  ADSI Edit gives you the ability to move, delete, rename, or otherwise modify objects that you wouldn't ordinarily be able to. References: https://redmondmag.com/articles/2017/08/22/edit-the-active-directory-using-adsi-edit.aspx

• Question 136:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed. You attempt to delete a classification property and you receive the error message as shown in the exhibit. (Click the Exhibit button.)

  

  You need to delete the isConfidential classification property. What should you do?

  A. Delete the classification rule that is assigned the isConfidential classification property.
  B. Disable the classification rule that is assigned the isConfidential classification property.
  C. Set files that have an isConfidential classification property value of Yes to No.
  D. Clear the isConfidential classification property value of all files.
  A. Delete the classification rule that is assigned the isConfidential classification property.

  ---

  You would have to delete the classification rule in order to delete the classification property.

• Question 137:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2. The servers have the Hyper-V server role installed.

  A certification authority (CA) is available on the network.

  A virtual machine named vml.contoso.com is replicated from Server1 to Server2. A virtual machine named vm2.contoso.com is replicated from Server2 to Server1.

  You need to configure Hyper-V to encrypt the replication of the virtual machines.

  Which common name should you use for the certificates on each server?

  To answer, configure the appropriate common name for the certificate on each server in the answer area.

  Hot Area:

  

  

  ---

  Hyper-V Replica Certificate Requirements

  If you want to use HTTPS, then you will need to create certificates for the hosts/clusters in both the primary and secondary sites.

  Reference: Use Hyper-V Replica over HTTPS/SSL: Configuring Certificates.

• Question 138:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Remote Desktop Session Host role service installed. The computer account of Server1 resides in an organizational unit (OU) named OU1.

  You create and link a Group Policy object (GPO) named GPO1 to OU1. GPO1 is configured as shown in the exhibit. (Click the Exhibit button.)

  

  You need to prevent GPO1 from applying to your user account when you log on to Server1. GPO1 must apply to every other user who logs on to Server1.

  What should you configure?

  A. Security Filtering
  B. VMI Filtering
  C. Block Inheritance
  D. Item-level targeting
  A. Security Filtering

  ---

  Security filtering is a way of refining which users and computers will receive and apply the settings in a Group Policy object (GPO). Using security filtering, you can specify that only certain security principals within a container where the GPO is linked apply the GPO. Security group filtering determines whether the GPO as a whole applies to groups, users, or computers; it cannot be used selectively on different settings within a GPO.

  Incorrect Answers:

  B: Windows Management Instrumentation (WMI) filters allow you to dynamically determine the scope of Group Policy objects (GPOs) based on attributes of the target computer.

  References: https://technet.microsoft.com/sv-se/library/Cc781988(v=WS.10).aspx

• Question 139:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains the two servers. The servers are configured as shown in the following table.

  

  You investigate a report about the potential compromise of a private key for a certificate issued to Server2.

  You need to revoke the certificate issued to Server2. The solution must ensure that the revocation can be reverted.

  Which reason code should you select?

  To answer, select the appropriate reason code in the answer area.

  Hot Area:

  

  

  ---

  If you specify "Certificate Hold" as the reason for revoking the certificate, it typically means that you may want to unrevoke the certificate at a future time. Only certificates that have been revoked with the reason of "Certificate Hold" can be unrevoked.

  Reference: Manage Certificate Revocation http://technet.microsoft.com/en-us/library/cc753724(v=WS.10).aspx

• Question 140:

  You have a server named Server1 that runs Windows Server 2012 R2. You install the File and Storage Services server role on Server1.

  From Windows Explorer, you view the properties of a folder named Folder1 and you discover that the Classification tab is missing.

  You need to ensure that you can assign classifications to Folder1 from Windows Explorer manually.

  What should you do?

  A. From Folder Options, clear Hide protected operating system files (Recommended).
  B. Install the File Server Resource Manager role service.
  C. From Folder Options, select the Always show menus.
  D. Install the Share and Storage Management Tools.
  B. Install the File Server Resource Manager role service.

  ---

  On the Classification tab of the file properties in Windows Server 2012, File Classification Infra- structure adds the ability to manually classify files. You can also classify folders so that any file added to the classified folder will inherit the classifications of the parent folder.

  Reference: What's New in File Server Resource Manager in Windows Server.