Microsoft 70-412 Online Practice Questions and Exam Preparation

Microsoft 70-412 Online Questions & Answers

• Question 141:

  Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2.

  Both servers have the Hyper-V server role installed. Server1 and Server2 are located in different offices. The offices connect to each other by using a high-latency WAN link.

  Server1 hosts a virtual machine named VM1.

  You need to ensure that you can start VM1 on Server2 if Server1 fails. The solution must minimize hardware costs.

  What should you do?

  A. On Server1, install the Multipath I/O (MPIO) feature. Modify the storage location of the VHDs for VM1.
  B. From the Hyper-V Settings of Server2, modify the Replication Configuration settings. Enable replication for VM1.
  C. On Server2, install the Multipath I/O (MPIO) feature. Modify the storage location of the VHDs for VM1.
  D. From the Hyper-V Settings of Server1, modify the Replication Configuration settings. Enable replication for VM1.
  B. From the Hyper-V Settings of Server2, modify the Replication Configuration settings. Enable replication for VM1.

  ---

  You first have to enable replication on the Replica server--Server2--by going to the server and modifying the "Replication Configuration" settings under Hyper-V settings. You then go to VM1--which presides on Server1-- and run the "Enable Replication" wizard on VM1.

  

• Question 142:

  Note: This question is part of series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

  Your network contains one Active Directory forest named contoso.com. The forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

  

  You need to prevent administrators from accidentally deleting any of the sites in the forest.

  What should you use?

  A. Set-ADSite
  B. Set-ADReplicationSite
  C. Set-ADDomain
  D. Set-ADReplicationSiteLink
  E. Set-ADGroup
  F. Set-ADForest
  G. Netdom
  B. Set-ADReplicationSite

  ---

  The Set-ADReplicationSite sets the replication properties for an Active Directory site.

  Parameter: -ProtectedFromAccidentalDeletion

  Specifies whether to prevent the object from being deleted. When this property is set to $True, you cannot delete the corresponding object without changing the value of the property. The acceptable values for this parameter are:

  -- $False or 0

  -- $True or 1

  Incorrect Answers:

  A: Set-ADSite is a Microsoft Exchange 2013 command. Use the Set-AdSite cmdlet to configure the Exchange settings of Active Directory sites.

  Reference: Technet, Set-ADReplicationSite https://technet.microsoft.com/en-us/library/hh852305(v=wps.630).aspx

• Question 143:

  Which of the following services would you restart on a domain controller if you wanted to trigger a reregistration of the domain controller's _ldap and _kerberos SRV records?

  A. DNS Server
  B. Server
  C. Workstation
  D. Netlogon
  D. Netlogon

• Question 144:

  You need to verify whether a DNS response from a DNS server is signed by DNSSEC. What should you run?

  A. nslookup.exe
  B. dnscmd.exe
  C. Resolve-DNSName
  D. Get-NetIPAddress
  C. Resolve-DNSName

  ---

  The Resolve-DnsName cmdlet performs a DNS query for the specified name. This cmdlet is functionally similar to the nslookup tool which allows users to query for names. The Resolve-DnsName cmdlet was introduced in Windows Server

  2012and Windows 8 and can be used to display DNS queries that include DNSSEC data.

  Parameters include:

  -DnssecOk

  Sets the DNSSEC OK bit for this query.

  -DnssecCd

  Sets the DNSSEC checking-disabled bit for this query

  Example: In the following example, the DO=1 flag is set by adding the dnssecok parameter.

  PS C:\> resolve-dnsname -name finance.secure.contoso.com -type A -server dns1.contoso.com -dnssecok

  Incorrect Answers:

  A: Do not use the nslookup command-line tool to test DNSSEC support for a zone. The nslookuptool uses an internal DNS client that is not DNSSEC-aware.

  References: https://technet.microsoft.com/library/jj590781.aspx https://technet.microsoft.com/en-us/library/jj200221.aspx#validation

• Question 145:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com.

  You have a Dynamic Access Control policy named Policy1.

  You create a new Central Access Rule named Rule1.

  You need to add Rule1 to Policy1.

  What command should you run?

  To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  The Add-ADCentralAccessPolicyMember cmdlet adds central access rules to a central access policy in Active Directory. Syntax: Add-ADCentralAccessPolicyMember [-Identity] [-Members]

  Reference: Add-AdCentralAccessPolicyMember

• Question 146:

  Your network contains an Active Directory forest named contoso.com.

  All servers run Windows Server 2012 R2.

  You need to create a custom Active Directory Application partition.

  Which tool should you use?

  A. Netdom
  B. Ntdsutil
  C. Dsmod
  D. Dsamain
  B. Ntdsutil

  ---

  *

  To create or delete an application directory partition Open Command Prompt.

  Type:ntdsutil

  At the ntdsutil command prompt, type:domainmanagement

  At the domain management command prompt, type:connection

  At the server connections command prompt, type:connect to server ServerName

  At the server connections command prompt, type:quit

  At the domain management command prompt, do one of the following:

  *

  partition management

  Manages directory partitions for Active Directory Domain Services (AD DS) orActive Directory Lightweight Directory Services (AD LDS). This is a subcommand of Ntdsutil and Dsmgmt. Ntdsutil and Dsmgmt are command-line tools thatare

  built into Windows Server 2008 and Windows Server 2008 R2.

  / partition management create nc %s1 %s2

  Creates the application directory partition with distinguished name %s1, on the Active Directory domain controller or AD LDS instance with full DNS name%s2. If you specify "NULL" for %s2, this command uses the currently connected Active

  Directory domain controller. Use this command only with AD DS. For AD LDS, use create nc %s1 %s2 %s3.

  Note:

  An application directory partition is a directory partitionthat is replicated only to specific domain controllers.

  A domain controller that participates in the replication of a particular application directory partition hosts a replica of that partition.

• Question 147:

  Your network contains an Active Directory domain named adatum.com. All domain controllers run Windows Server 2008 R2. The domain contains a file server named Server6 that runs Windows Server 2012 R2. Server6 contains a folder

  named Folder1. Folder1 is shared as Share1.

  The NTFS permissions on Folder1 are shown in the exhibit. (Click the Exhibit button.)

  

  The domain contains two global groups named Group1 and Group2.

  You need to ensure that only users who are members of both Group1 and Group2 are denied access to Folder1.

  Which two actions should you perform? (Each correct answer presents part of the solution. (Choose two.)

  A. Remove the Deny permission for Group1 from Folder1.
  B. Deny Group2 permission to Folder1.
  C. Install a domain controller that runs Windows Server 2012 R2.
  D. Create a conditional expression.
  E. Deny Group2 permission to Share1.
  F. Deny Group1 permission to Share1.
  C. Install a domain controller that runs Windows Server 2012 R2.
  D. Create a conditional expression.

  ---

  * Conditional Expressions for Permission Entries Windows Server 2008 R2 and Windows 7enhanced Windows security descriptors by introducing a conditional access permissionentry. Windows Server 2012 R2 takes advantage of conditional access permission entries by inserting user claims, device claims, and resource properties, into conditional expressions. Windows Server 2012 R2 security evaluates these expressions and allows ordenies access based on results of the evaluation. Securing access to resources through claims is known as claims-based access control. Claims-based access control works with traditional access control to provide an additional layer of authorization that is flexible to the varying needs of the enterprise environment. References: http://social.technet.microsoft.com/wiki/contents/articles/14269.introducing-dynamicaccess-control-en-us.aspx

• Question 148:

  You have a server named Server1 that runs Windows Server 2012 R2. The storage on Server1 is configured as shown in the following table.

  

  You plan to implement Data Deduplication on Server1.

  You need to identify on which drives you can enable Data Deduplication.

  Which three drives should you identify? (Each correct answer presents part of the solution. Choose three.)

  A. C
  B. D
  C. E
  D. F
  E. G
  B. D
  D. F
  E. G

  ---

  Volumes that are candidates for deduplication must conform to the following requirements:

  *

  Must not be a system or boot volume. (not A)

  *

  Can be partitioned as a master boot record (MBR) or a GUID Partition Table (GPT), and must be formatted using the NTFS file system. (not C)

  *

  Can reside on shared storage, such as storage that uses a Fibre Channel or an SAS array, or when an iSCSI SAN and Windows Failover Clustering is fully supported.

  *

  Do not rely on Cluster Shared Volumes (CSVs). You can access data if a deduplication-enabled volume is converted to a CSV, but you cannot continue to process files for deduplication.

  *

  Do not rely on the Microsoft Resilient File System (ReFS).

  *

  Must be exposed to the operating system as non-removable drives. Remotely-mapped drives are not supported.

  Ref: Plan to Deploy Data Deduplication http://technet.microsoft.com/en-us/library/hh831700.aspx

• Question 149:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2.

  Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1.

  You add two additional nodes to Cluster1. You need to ensure that Cluster1 stops running if three nodes fail.

  What should you configure?

  A. Affinity-None
  B. Affinity-Single
  C. The cluster quorum settings
  D. The failover settings
  E. A file server for general use
  F. The Handling priority
  G. The host priority
  H. Live migration
  I. The possible owner
  J. The preferred owner
  C. The cluster quorum settings

  ---

  The quorum configuration in a failover cluster determines the number of failures that the cluster can sustain.

  Reference: Understanding Quorum Configurations in a Failover Cluster http://technet.microsoft.com/en-us/library/cc731739.aspx

• Question 150:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 and a member server named Server1. All servers run Windows Server 2012 R2.

  You install the IP Address Management (IPAM) Server feature on Server1.

  From the Provision IPAM wizard, you select the Group Policy Based provisioning methodand enter a GPO name prefix of IPAM1.

  You need to provision IPAM by using Group Policy.

  What command should you run on Server1 to complete the process?

  To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  The Invoke-IpamGpoProvisioning cmdlet creates and links three group policies specified in the Domain parameter for provisioning required access settings on the server roles managed by the computer running the IP Address Management (IPAM) server.

  Reference: Invoke-IpamGpoProvisioning