Microsoft 70-412 Online Practice Questions and Exam Preparation

Microsoft 70-412 Online Questions & Answers

• Question 161:

  DRAG DROP

  You have a file server named Server1 that runs Windows Server 2012 R2. The folders on Server1 are configured as shown in the following table.

  

  A new corporate policy states that backups must use Windows Azure Online Backup whenever possible.

  You need to identify which technology you must use to back up Server1. The solution must use Windows Azure Online Backup whenever possible.

  What should you identify?

  To answer, drag the appropriate backup type to the correct location or locations. Each backup type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

  ---

  NTFS encrypted Azure Backup supported

  NTFS compressed Azure Backup supported

  At this time you cannot backup entire Azure Virtual Machines or perform a system state backup of Azure Virtual Machines using Azure Backup.

  Note: NTFS encrypted + NTFS compressed Azure Backup not supported

  Reference: Azure Backup Frequently Asked Questions (FAQ) http://msdn.microsoft.com/en-us/library/azure/jj573031.aspx

• Question 162:

  You have a server named Server1 that runs Windows Server 2012 R2.

  Each day, Server1 is backed up fully to an external disk.

  On Server1, the disk that contains the operating system fails.

  You replace the failed disk.

  You need to perform a bare-metal recovery of Server1 by using the Windows Recovery Environment (Windows RE).

  What should you do?

  A. Run the Start-WBVolumeRecovery cmdlet and specify the -backupset parameter.
  B. Run the Get-WBBareMetalRecovery cmdlet and specify the -policy parameter.
  C. Run the wbadmin.exe start recovery command and specify the -recoverytarget parameter.
  D. Run the wbadmin.exe start sysrecovery command and specify the -backuptarget parameter.
  D. Run the wbadmin.exe start sysrecovery command and specify the -backuptarget parameter.

  ---

  Performs a system recovery (bare metal recovery). This subcommand can be run only from the Windows Recovery Environment.

  * -backupTarget

  Specifies the storage location that contains the backup or backups that you want to recover. This parameter is useful when the storage location is different from where backups of this computer are usually stored.

  References: Wbadmin start sysrecovery

  https://technet.microsoft.com/en-us/library/cc742118.aspx

• Question 163:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2.

  Server1 and Server2 have the Network Load Balancing (NLB) feature installed. The servers are configured as nodes in an NLB cluster named Cluster1. Both servers connect to the same switch.

  Cluster1 hosts a secure web Application named WebApp1. WebApp1 saves user state information in a central database.

  You need to ensure that the connections to WebApp1 are distributed evenly between the nodes. The solution must minimize port flooding.

  What should you configure? To answer, configure the appropriate affinity and the appropriate mode for Cluster1 in the answer area.

  Hot Area:

  

  

  ---

  The Affinity parameter is applicable only for the Multiple hosts filtering mode.

  With No affinity, NLB does not associate clients with a particular member. Every client request can be load balanced to any member.

  References: https://technet.microsoft.com/en-us/library/bb687542.aspx

• Question 164:

  You are employed as a network administrator at ABC.com.

  ABC.com has an Active Directory domain named.

  ABC.com all servers on the ABC.com network have Windows Server 2012 R2.

  You are running a training exercise for junior network administrators.

  You are currently discussing DHCP failover architecture.

  You have informed the trainees that DHCP servers can be deployed as fail over partners in either hot standby mode or load sharing mode.

  Which of the following is TRUE with regards to hot standby mode? (Choose all that apply)

  A. It is when two servers function in a fail over relationship where an active server is responsible for leasing IP address and configuration datato all clientsin a scope or subnet
  B. It when two servers in a fail over relationship server IP addresses and options to clients on a given subnet at the same time
  C. It is best suited to deployments where a data center server acts as a standby backup server to a serverat a remote site
  D. It is best suited deployments where both servers in a fail over relationship are located at the same physical site
  A. It is when two servers function in a fail over relationship where an active server is responsible for leasing IP address and configuration datato all clientsin a scope or subnet
  C. It is best suited to deployments where a data center server acts as a standby backup server to a serverat a remote site

  ---

  http://blogs.technet.com/b/teamdhcp/archive/2012/09/03/dhcp-failover-hot-standby-mode.aspx

• Question 165:

  Your network contains an Active Directory domain named contoso.com.

  All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers.

  The domain controllers are configured as shown in the following table.

  

  The Branch site contains a member server named Server1 that runs Windows Server 2012 R2. You need to identify which domain controller authenticated the computer account of Server1. What should you do?

  A. Verify the value of the %LOGONSERVER% environment variable.
  B. Run nltest/sc_query.
  C. Verify the value of the %SESSIONNAME% environment variable.
  D. Run nltest /dsgetsite.
  A. Verify the value of the %LOGONSERVER% environment variable.

  ---

  %LOGONSERVER% is the domain controller that authenticated the current user.

  If you want to specify a domain controller that authenticates a user logon, use the environment variable %LOGONSERVER% in a PATH statement. This article describes how you can use %LOGONSERVER% to distribute user profiles.

  Incorrect Answers:

  B: Reports on the state of the secure channel the last time that you used it. (The secure channel is the one that the NetLogon service established.) This parameter lists the name of the domain controller that you queried on the secure channel, also.

  D: Returns the name of the site in which the domain controller resides.

  References: https://technet.microsoft.com/en-us/library/cc753915(v=ws.10).aspx https://technet.microsoft.com/en-us/library/cc731935(v=ws.10).aspx

• Question 166:

  You are employed as a senior network administrator at contoso.com.

  Contoso.com has a single Active Directory Domain named contoso.com.

  All servers on the contoso.com network have Windows Server 2012 R2 installed.

  You are running a training exercise for junior network administrator.

  You are currently discussing the Dnslint.exe tool.

  Which of the following should this tool be used for? (Choose all that apply)

  A. To help diagnose common DNS name resolution issues
  B. For developing scripts for configuring a DNS server
  C. To administer the DNS server Service.
  D. To look for specific DNS record set and sure that they areconsistent across multiple DNS servers.
  E. To verify that DNS records used specifically for Active Directory replication are correct
  F. To Createand delete zones and resource records.
  A. To help diagnose common DNS name resolution issues
  D. To look for specific DNS record set and sure that they areconsistent across multiple DNS servers.
  E. To verify that DNS records used specifically for Active Directory replication are correct

  ---

  http://support.microsoft.com/kb/321045

  

• Question 167:

  Your network contains an Active Directory forest. The forest contains one domain named adatum.com. The domain contains four domain controllers. The domain controllers are configured as shown in the following table.

  

  DC2 has all of the domain-wide operations master roles. DC3 has all of the forest-wide operation master roles.

  You need to ensure that you can use Password Settings objects (PSOs) in the domain.

  What should you do first?

  A. Uninstall Active Directory from DC1.
  B. Change the domain functional level.
  C. Transfer the domain-wide operations master roles.
  D. Transfer the forest-wide operations master roles.
  A. Uninstall Active Directory from DC1.

  ---

  In Windows Server 2008 and later, you can use fine-grained password policies to specify multiple password policies and apply different password restrictions and account lockout policies to different sets of users within a single domain.

  Note: In Microsoft Windows 2000 and Windows Server 2003 Active Directory domains, you could apply only one password and account lockout policy, which is specified in the domain's Default Domain Policy, to all users in the domain. As a result, if you wanted different password and account lockout settings for different sets of users, you had to either create a password filter or deploy multiple domains. Both options were costly for different reasons. Reference: AD DS Fine-Grained Password and Account Lockout Policy Step-by-Step Guide

• Question 168:

  You have a DNS server named Server1 that runs Windows Server 2012 R2. Server1 has the zones shown in the following output.

  

  You need to delegate permissions to modify the records in the adatum.com zone to a group named Group1. What should you do first?

  A. Enable the distribution of the trust anchors for adatum.com.
  B. Unsign adatum.com.
  C. Store adatum.com in Active Directory.
  D. Update the server data file for adatum.com.
  A. Enable the distribution of the trust anchors for adatum.com.

  ---

  From the exhibit we see that the adatum.com zone is signed.

  A trust anchor (or trust "point") is a public cryptographic key for a signed zone. Trust anchors must be configured on every non-authoritative DNS server that will attempt to validate DNS data. You cannot distribute trust anchors until after a zone is signed.

  References: Trust Anchors https://technet.microsoft.com/en-us/library/dn593672.aspx

• Question 169:

  Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2012 R2.

  The domain contains four servers. The servers are configured as shown in the following table.

  

  You need to deploy IP Address Management (IPAM) to manage DNS and DHCP. On which server should you install IPAM?

  A. DC1
  B. DC2
  C. DC3
  D. Server1
  D. Server1

  ---

  IPAM cannot be installed on Domain Controllers. All servers, except Server1, have the DC role

  References: IP Address Management (IPAM) Overview https://technet.microsoft.com/en-us/library/hh831353.aspx

• Question 170:

  Your network contains one Active Directory domain named contoso.com. The domain contains three users named User1, User2, and User3. You need to ensure that the users can log on to the domain by using the user principal names (UPNs) shown in the following table.

  

  What should you use?

  A. the Set-ADDomain cmdlet
  B. the Add-DNSServerSecondaryZone cmdlet
  C. the Setspn command
  D. the Set-ADUser cmdlet
  D. the Set-ADUser cmdlet

  ---

  The Set-ADUser cmdlet modifies the properties of an Active Directory user. You can modify commonly used property values by using the cmdlet parameters. Parameters include: UserPrincipalName Each user account has a user principal name (UPN) in the format @. A UPN is a friendly name assigned by an administrator that is shorter than the LDAP distinguished name used by the system and easier to remember. The UPN is independent of the user object's DN, so a user object can be moved or renamed without affecting the user logon name. When logging on using a UPN, users no longer have to choose a domain from a list on the logon dialog box.

  Incorrect Answers:

  A: The Set-ADDomain cmdlet modifies the properties of an Active Directory domain. You can modify commonly used property values by using the cmdlet parameters.

  B: The Add-DnsServerSecondaryZone cmdlet adds a specified secondary zone on a Domain Name System (DNS) server.

  C: Setspn reads, modifies, and deletes the Service Principal Names (SPN) directory property for an Active Directory service account. You use SPNs to locate a target principal name for running a service. You can use setspn to view the current SPNs, reset the account's default SPNs, and add or delete supplemental SPNs.

  Reference: Technet, Set-ADUser https://technet.microsoft.com/en-us/library/ee617215.aspx