Microsoft 70-412 Online Practice Questions and Exam Preparation

Microsoft 70-412 Online Questions & Answers

• Question 151:

  Your network contains one Active Directory forest named contoso.com. The forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

  

  You need to ensure that all Active Directory changes are replicated to all of the domain controllers in the forest within 30 minutes. What should you use?

  A. Set-ADSite
  B. Set-ADReplicationSite
  C. Set-ADDomain
  D. Set-ADReplicationSiteLink
  E. Set-ADGroup
  F. Set-ADForest
  G. Netdom
  B. Set-ADReplicationSite

  ---

  The Set-ADReplicationSite cmdlet is used to set the properties for an Active Directory site that is being used for replication. Sites are used in Active Directory to either enable clients to discover network resources (published shares, domain

  controllers) close to the physical location of a client computer or to reduce network traffic over wide area network (WAN) links. Sites can also be used to optimize replication between domain controllers.

  The parameter -ReplicationSchedule specifies the default replication schedule for connections within this site (intra-site replication).

  Incorrect Answers:

  A: Set-ADSite is a Microsoft Exchange 2013 command. Use the Set-AdSite cmdlet to configure the Exchange settings of Active Directory sites.

  D: The Set-ADReplicationSiteLink cmdlet sets properties on an Active Directory site link. A site link connects two or more sites. Replication site links reflect the administrative policy for how sites interconnect and the methods used to transfer replication traffic. You must connect sites with site links so that domain controllers at each site can replicate Active Directory changes.

  F: The Set-ADForest cmdlet modifies the properties of an Active Directory forest. Replication cannot be configured with this command.

  Reference: Technet, Set-ADReplicationSite https://technet.microsoft.com/en-us/library/hh852305(v=wps.630).aspx

• Question 152:

  Your network contains three servers named HV1, HV2, and Server1 that run Windows Server 2012 R2. HV1 and HV2 have the Hyper-V server role installed. Server1 is a file server that contains 3 TB of free disk space.

  HV1 hosts a virtual machine named VM1. The virtual machine configuration file for VM1 is stored in D:\VM and the virtual hard disk file is stored in E:\VHD.

  You plan to replace drive E with a larger volume.

  You need to ensure that VM1 remains available from HV1 while drive E is being replaced. You want to achieve this goal by using the minimum amount of administrative effort.

  What should you do?

  A. Perform a live migration to HV2.
  B. Add HV1 and HV2 as nodes in a failover cluster. Perform a storage migration to HV2.
  C. Add HV1 and HV2 as nodes in a failover cluster. Perform a live migration to HV2.
  D. Perform a storage migration to Server1.
  D. Perform a storage migration to Server1.

  ---

  One of the great new features coming in Windows Server 2012 is Storage Migration for Hyper-V. Storage Migration allows an administrator to relocate the source files that make up a virtual machine to another location without any downtime.

  Storage Migration creates a copy of the file or files at the new location. Once that is finished, Server 2012 does a final replication of changes and then the virtual machine uses the files in the new location.

  Reference: Windows Server 2012 Hyper-V Part 3: Storage Migration

• Question 153:

  You have a file server named Server1 that runs Windows Server 2012 R2.

  Data Deduplication is enabled on drive D of Server1.

  You need to exclude D:\Folder1 from Data Deduplication.

  What should you configure?

  A. Disk Management in Computer Management
  B. File and Storage Services in Server Manager
  C. the classification rules in File Server Resource Manager (FSRM)
  D. the properties of D:\Folder1
  B. File and Storage Services in Server Manager

  ---

  Data deduplication exclusion on a Volume are set from File and Storage Services, Server Manager or PowerShell References: https://technet.microsoft.com/en-us/library/hh831434.aspx

  

  

• Question 154:

  Your network contains 20 iSCSI storage appliances that will provide storage for 50 Hyper-V hosts running Windows Server 2012 R2.

  You need to configure the storage for the Hyper-V hosts. The solution must minimize administrative effort.

  What should you do first?

  A. Install the iSCSI Target Server role service and configure iSCSI targets.
  B. Install the iSNS Server service feature and create a Discovery Domain.
  C. Start the Microsoft iSCSI Initiator Service and configure the iSCSI Initiator Properties.
  D. Install the Multipath I/O (MPIO) feature and configure the MPIO Properties.
  A. Install the iSCSI Target Server role service and configure iSCSI targets.

  ---

  Windows Server 2012 includes an iSCSI Target role that, along with Failover Clustering, allows it to become a cost-effective and highly-available iSCSI Storage Array.

  We can connect from our Hyper-V host to the iSCSI target on the storage array with the following PowerShell command line:

  New-IscsiTargetPortal TargetPortalAddress

  $target = Get-IscsiTarget

  Connect-IscsiTarget NodeAddress $target.NodeAddress

  Incorrect Answers:

  B. Discovery Domains in an iSCSIfabric, like zones in a Fibre Channel fabric, enable you to partition the storage resources in your storage area network (SAN). By creating and managing DiscoveryDomains, you can control the iSCSI targets that each iSCSI initiator can see and log on to.

  References: Configure iSCSI Target Server Role on Windows Server 2012

• Question 155:

  You have a server named Server 1 that runs Windows Server 2012 R2. Server1 has five network adapters. Three of the network adapters are connected to a network named LAN1.

  The two other network adapters are connectedto a network named LAN2.

  You create a network adapter team named Team1 from two of the adapters connected to LAN1.

  You create a network adapter team named Team2 from the two adapters connected to LAN2.

  A company policy states that all server IP addresses must be assigned by using a reserved address in DHCP.

  You need to identify how many DHCP reservations you must create for Server1.

  How many reservations should you identify?

  A. 2
  B. 3
  C. 5
  D. 7
  B. 3

  ---

  3 adapter on LAN 1

  2 adapters on LAN 2

  2 adapterson LAN 1 used in ateam, so that's 3 - 2 leaving 1.

  2 adapaters on LAN 2 used in a team, so that's 2 - 2 leaving 0.

  1 team on LAN 1 + 1 team on LAN 2 + remaining adapter on LAN 1 = 3.

• Question 156:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server3. The network contains a standalone server named Server2. All servers run Windows Server 2012 R2. The servers are configured as shown in the following table.

  

  Server3 hosts an application named App1. App1 is accessible internally by using the URL https://app1.contoso.com. App1 only supports Integrated Windows authentication.

  You need to ensure that all users from the Internet are pre-authenticated before they can access App1.

  What should you do?

  To answer, drag the appropriate servers to the correct actions. Each server may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

  ---

  Box 1: Server1 For all types of application that you can publish using AD FS preauthentication, you must add an AD FS relying party trust to the Federation Service. Use Server1 as it has AD FS.

  Box 2: Server2 When publishing applications that use Integrated Windows authentication, the Web Application Proxy server uses Kerberos constrained delegation to authenticate users to the published application.

  Box 3: Server2 To publish a claims-based application

  1. On the Web Application Proxy server, in the Remote Access Management console, in the Navigation pane, click Web Application Proxy, and then in the Tasks pane, click Publish.

  2. On the Publish New Application Wizard, on the Welcome page, click Next.

  Box 4: Server2

  Configure CAs and certificates (see 3 below)

  Web Application Proxy servers require the following certificates in the certificate store on each Web Application Proxy server:

  1. A certificate whose subject covers the federation service name. If you want to use Workplace Join, the certificate must also contain the following subject alternative names (SANs): . and enterprise registration..

  2. A wildcard certificate, a subject alternative name (SAN) certificate, several SAN certificates, or several certificates whose subjects cover each web application.

  3. A copy of the certificate issued to external servers when using client certificate preauthentication.

  References: Install and Configure the Web Application Proxy Server; Planning to Publish Applications Using Web Application Proxy; Publish Applications using AD FS Preauthentication

• Question 157:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DHCP Server server role installed. Server1 has an IPv6 scope named

  Scope1.

  You implement an additional DHCP server named Server2 that runs Windows Server 2012 R2.

  You need to provide high availability for Scope1. The solution must minimize administrative effort.

  What should you do?

  A. Install and configure Network Load Balancing (NLB) on Server1 and Server2.
  B. Create a scope on Server2.
  C. Configure DHCP failover on Server1.
  D. Install and configure Failover Clustering on Server1 and Server2.
  C. Configure DHCP failover on Server1.

  ---

  Overview: Configure DHCP failover using the DHCP console

  To configure DHCP failover using the DHCP console, right-click a DHCP scope or right-click IPv4 and then click Configure Failover.

  

  The Configure Failover wizard guides you through configuring DHCP failover on the selected scope.

  Note: The DHCP server failover feature, available in Windows Server 2012 and later, provides the ability to have two DHCP servers provide IP addresses and option configuration to the same subnet or scope, providing for continuous

  availability of DHCP service to clients.

  Incorrect Answers:

  A. NLB is not related to DHCP scope availability.

  B. DHCP failover requirements include:

  DHCP Scopes requirement:

  At least one IPv4 DHCP scope must be configured on the primary DHCP server.

  The same DHCP scope ID, or an overlapping scope, must not be configured on the failover partner.

  D. Failover clustering is possibly, but would not minimize administration. References: Deploy DHCP Failover

• Question 158:

  Your network contains an Active Directory forest named contoso.com.

  The forest contains a single domain. The domain contains three domain controllers.

  The domain controllers are configured as shown in the following table.

  

  You discover that when you run Group Policy Results from Group Policy Management, the settings from site-linked Group Policy objects (GPOs) fail to appear in the results.

  You need to ensure that the settings from site-linked GPOs appear in the results.

  What should you do first?

  A. Run adprep on DC3 by using Windows Server 2012 R2 installation media.
  B. Transfer the infrastructure master role to DC3.
  C. Upgrade DC2 to Windows Server 2012 R2.
  D. Runadprepon DC1 by using Windows Server 2003 installation media.
  A. Run adprep on DC3 by using Windows Server 2012 R2 installation media.

  ---

  In this scenario a Windows 2012 server has been added to a Windows 2003 network. Note:

  *

  Before adding your new Windows 2012 Domain Controller, or attempting to performaninplace upgrade of an existing Windows 2008 or 2008 R2 DC, you must make sure that the Schema is upgraded to support your new Windows 2012 DC, and that you prepare each domain where you plan to install Windows 2012 DCs. To do this we can use the ADPREP.exetool found in the support\adprep folder on your installation media.

  *

  Starting with Windows 2012 there is only one version of ADPREP available, and that is a 64-bit version.

  *

  Adprep is the utility--included in the OS installation media--that performs several crucial functions to upgrade AD to support that OS. The utility has three major options: /forestprep, /domainprep, and /rodcprep. The /forestprep option runs first, extending the AD schema with new object and attribute classes that the new AD versionneeds. The /domainprep option creates new well-known objects in AD, App1ies security changes, and miscellaneous other bits. Finally, /rodcprep makes forest-wide security changes to allow read-only domain controller (RODC) functionality. The Windows Server2012 R2 version of adprep.exe can run on any server that runs a 64- bit version of Windows Server 2008 or later.

  http://technet.microsoft.com/en-us/library/bb726995.aspx http://www.ipuptime.net/Multicast.aspx http://technet.microsoft.com/en-us/library/gg144561(v=exchg.141).aspx http://en.wikipedia.org/wiki/Unique_local_address

• Question 159:

  Your network contains an Active Directory domain named contoso.com. The network contains a file server named Server1 that runs Windows Server 2012 R2.

  You are configuring a central access policy for temporary employees.

  You enable the Department resource property and assign the property a suggested value of Temp.

  You need to configure a target resource condition for the central access rule that is scoped to resources assigned to Temp only.

  Which condition should you use?

  A. (Temp.Resource Equals "Department")
  B. (Resource.Temp Equals "Department")
  C. (Resource.Department Equals "Temp")
  D. (Department.Value Equals "Temp")
  C. (Resource.Department Equals "Temp")

  ---

  Example: Targeting: Resource.Department Contains Finance Access rule: Allow read User.Country=Resource.Country AND User.department = Resource.Department

  Reference: Deploy a Central Access Policy (Demonstration Steps)

• Question 160:

  Your network contains an Active Directory domain named adatum.com.

  You have a standard primary zone named adatum.com.

  You need to provide a user named User1 the ability to modify records in the zone. Other users must be prevented from modifying records in the zone.

  What should you do first?

  A. Run the Zone Signing Wizard for the zone.
  B. From the properties of the zone, change the zone type.
  C. Run the new Delegation Wizard for the zone.
  D. From the properties of the zone, modify theStart Of Authority (SOA) record.
  C. Run the new Delegation Wizard for the zone.