Microsoft 70-412 Online Practice Questions and Exam Preparation

Microsoft 70-412 Online Questions & Answers

• Question 201:

  You have a file server named Server1 that runs a Server Core Installation of Windows Server 2012 R2.

  Server1 has a volume named D that contains user data. Server1 has a volume named E that is empty.

  Server1 is configured to create a shadow copy of volume D every hour. You need to configure the shadow copies of volume D to be stored on volume E.

  What should you run?

  A. The Set-Volume cmdlet with the -driveletter parameter
  B. The Set-Volume cmdlet with the -path parameter
  C. The vssadmin.exe add shadowstorage command
  D. The vssadmin.exe create shadow command
  C. The vssadmin.exe add shadowstorage command

  ---

  Add ShadowStorage

  Adds a shadow copystorage association for a specified volume.

  Incorrect Answers:

  A: Sets or changes the file system label of an existing volume. -DriveLetter Specifies a letter used to identify a drive or volume in the system.

  B: Create Shadow creates a new shadow copy of a specified volume.

  C: Sets or changes the file system label of an existing volume -Path Contains valid path information.

  References: Vssadmin; Set-Volume https://technet.microsoft.com/en-us/library/cc754968(v=ws.10).aspx https://technet.microsoft.com/en-us/library/hh848673(v=wps.620).aspx

• Question 202:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC2 that runs Windows Server 2012. DC2 has the DHCP Server server role installed. DHCP is configured as shown in the exhibit. (Click the Exhibit button.)

  

  You discover that client computers cannot obtain IPv4 addresses from DC2.

  You need to ensure that the client computers can obtain IPv4 addresses from DC2.

  What should you do?

  A. Enable the Allow filters.
  B. Authorize DC2.
  C. Disable the Deny filters.
  D. Restart the DHCP Server service.
  B. Authorize DC2.

  ---

  From the exhibit we see a red marker on the IPv4 server icon. The DHCP server is not authorized.

  Authorize DHCP Server

  The final step is to authorize the server.

  Right-click your FQDN and select Authorize.

  Refresh the view by right-clicking your FQDN and selecting Refresh.

  You should now see green checkmark next to IPv4.

  Example:

  

  References: Server 2012 DHCP Server Role

• Question 203:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.

  Server1 is an enterprise root certification authority (CA) for contoso.com.

  You need to ensure that the members of a group named Group1 can request code signing certificates. The certificates must be issued automatically to the members.

  Which two actions should you perform? (Each correct answer presents part of the solution.

  Choose two.)

  A. From Certificate Templates, modify the certificate template.
  B. From Certification Authority, add a certificate template to be issued.
  C. From Certificate Authority, modify the CA properties.
  D. From Certificate Templates, duplicate a certificate template.
  E. From Certificate Authority, stop and start the Active Directory Certificate Services (AD CS) service.
  A. From Certificate Templates, modify the certificate template.
  D. From Certificate Templates, duplicate a certificate template.

  ---

  Best Practices include: Duplicate new templates from existing templates closest in function to the intended template.

  New certificate templates are duplicated from existing templates. Many settings are copied from the original template. Because of this, duplicating one template to another of a totally different type may carry over some unintended settings. When duplicating a template, examine the subject type of the original template and ensure that you duplicate one that has a similar function to that of the intended template. Although most settings for certificate templates can be edited once the template is duplicated, the subject type cannot be changed.

  Reference: Deploying Certificate Templates https://technet.microsoft.com/en-us/library/cc770794%28v=ws.10%29.aspx

• Question 204:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 is located in the perimeter network and has the DNS Server server role installed.

  Server1 has a zone named contoso.com. You App1y a security template to Server1.

  After you App1y the template, users report that they can no longer resolve names from contoso.com. On Server1, you open DNS Manager as shown in the DNS exhibit. (Click the Exhibit button.)

  

  On Server1, you open Windows Firewall with Advanced Security as shown in the Firewall exhibit. (Click the Exhibit button.)

  

  You need to ensure that users can resolve contoso.com names.

  What should you do?

  A. From Windows Firewall with Advanced Security, disable the DNS (TCP, Incoming) rule and the DNS (UDP, Incoming) rule.
  B. From DNS Manager, modify the Zone Transfers settings of the contoso.com zone.
  C. From DNS Manager, unsign the contoso.com zone.
  D. From DNS Manager, modify the Start of Authority (SOA) of the contoso.com zone.
  E. From Windows Firewall with Advanced Security, modify the profiles of the DNS (TCP, Incoming) rule and the DNS (UDP, Incoming) rule.
  E. From Windows Firewall with Advanced Security, modify the profiles of the DNS (TCP, Incoming) rule and the DNS (UDP, Incoming) rule.

  ---

  To configure Windows Firewall on a managed DNS server

  On the Server Manager menu, click Tools and then click Windows Firewall with Advanced Security.

  Right-click Inbound Rules, and then click New Rule. The New Inbound Rule Wizard will launch.

  In Rule Type, select Predefined, choose DNS Service from the list, and then click Next.

  In Predefined Rules, under Rules, select the checkboxes next to the following rules:

  -RPC (TCP, Incoming)

  -

  DNS (UDP, Incoming)

  -

  DNS (TCP, Incoming)

  -RPC Endpoint Mapper (TCP, Incoming)

  Click Next, choose Allow the connection, and then click Finish.

  Right-click Inbound Rules, and then click New Rule. The New Inbound Rule Wizard will launch.

  Reference: Manually Configure DNS Access Settings

• Question 205:

  Your network contains an Active Directory domain named contoso.com.

  You deploy a server named Server1 that runs Windows Server 2012 R2.

  A local administrator installs the Active Directory Rights Management Services server role on Server1.

  You need to ensure that AD RMS clients can discover the AD RMS cluster automatically.

  What should you do?

  A. Run the Active Directory Rights Management Services console by using an account that is a member of the Schema Admins group, and then configure the proxy settings.
  B. Run the Active Directory Rights Management Services console by using an account that is a member of the Schema Admins group, and then register the Service Connection Point (SCP).
  C. Run the Active Directory Rights Management Services console by using an account that is a member of the Enterprise Admins group, and then register the Service Connection Point (SCP).
  D. Run the Active Directory Rights Management Services console by using an account that is a member of the Enterprise Admins group, and then configure the proxy settings.
  C. Run the Active Directory Rights Management Services console by using an account that is a member of the Enterprise Admins group, and then register the Service Connection Point (SCP).

  ---

  *

  The Active Directory Rights Management Services (AD RMS) Service Connection Point (SCP) is an object in Active Directory that holds the web address of the AD RMS certification cluster. AD RMS-enabled applications use the SCP to discover the AD RMS service; it is the first connection point for users to discover the AD RMS web services.

  *

  To register the SCP you must be a member of the local AD RMS Enterprise Administrators group and the Active Directory Domain Services (AD DS) Enterprise Admins group, or you must have been given the appropriate authority. Reference: The AD RMS Service Connection Point

• Question 206:

  Your network contains two servers named Server1 and Server 2. Both servers run Windows Server 2012 R2 and have the Hyper-V server role installed.

  Server1 hosts a virtual machine named VM1. The virtual machine configuration files and the virtual hard disks for VM1 are stored in D: \VM1.

  You shut down VM1 on Server1.

  You copy D:\VM1 to D:\VM1 on Server2.

  You need to start VM1 on Server2. You want to achieve this goal by using the minimum amount of administrative effort.

  What should you do?

  A. Run the Import-VMIntialReplication cmdlet.
  B. Create a new virtual machine on Server2 and attach the VHD from VM1 to the new virtual machine.
  C. From Hyper-V Manager, run the Import Virtual Machine wizard.
  D. Run the Import-IscsiVirtualDisk cmdlet.
  C. From Hyper-V Manager, run the Import Virtual Machine wizard.

  ---

  Starting in Windows Server 2012, you no longer need to export a virtual machine to be able to import it. You can simply copy a virtual machine and its associated files to the new host, and then use the Import Virtual Machine wizard to specify the location of the files. This registers the virtual machine with Hyper-V and makes it available for use. In addition to the wizard, the Hyper-V module for Windows PowerShell includes cmdlets for importing virtual machines. For more information, see Import-VM

  Reference: Overview of exporting and importing a virtual machine

• Question 207:

  You are employed as a network administrator ABC.com.

  ABC.com has an active directory domain named ABC.com.

  All servers on the ABC.com network have Windows Server 2012 R2 installed.

  ABC.com has a server named server1 which is configured as a DHCP server.

  You have created a superscope on server1.

  Which of the following describes reason for creating a superscope?(choose all that apply.)

  A. To support DHCP clients on a singlephysical network segment where multiple logical ip networks are used.
  B. To allow for the sending of network traffic to a group of endpoints destination hosts.
  C. To support remote DHCP clients located on the far side of DHCP and BOOTP relay agents.
  D. Toprovide fault tolerance.
  A. To support DHCP clients on a singlephysical network segment where multiple logical ip networks are used.
  C. To support remote DHCP clients located on the far side of DHCP and BOOTP relay agents.

  ---

  http://technet.microsoft.com/en-us/library/cc757614(v=ws.10).aspx

• Question 208:

  You have a server named Server1 that runs Windows Server 2012 R2.

  Server1 has a single volume that is encrypted by using BitLocker Drive Encryption (BitLocker).

  BitLocker is configured to save encryption keys to a Trusted Platform Module (TPM). Server1 is configured to perform a daily system image backup.

  The motherboard on Server1 is upgraded.

  After the upgrade, Windows Server 2012 R2 on Server1 fails to start.

  You need to start the operating system on Server1 as soon as possible.

  Which two actions should you perform? (Each correct answer presents a complete solution. Choose two.)

  A. Move the disk to a server that has a model of the old motherboard. Start the server from the installation media. Run startrec.exe.
  B. Start Server1 from the installation media. Perform a system image recovery.
  C. Move the disk to a server that has a model of the old motherboard. Start the server. Run tpm.msc.
  D. Move the disk to a server that has a model of the old motherboard. Start the server from the installation media. Run the BitLocker Recovery Password Viewer tool.
  C. Move the disk to a server that has a model of the old motherboard. Start the server. Run tpm.msc.
  D. Move the disk to a server that has a model of the old motherboard. Start the server from the installation media. Run the BitLocker Recovery Password Viewer tool.

• Question 209:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com.

  You need to ensure that third-party devices can use Workplace Join to access domain resources on the Internet.

  Which four actions should you perform in sequence?

  To answer, move the appropriate four actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Note:

  Checklist: Deploying a Federation Server Farm include:

  (Box 1) Enroll a Secure Socket Layer (SSL) certificate for AD FS.

  (Box 2) Install the AD FS role service.

  (Box 3, box 4) Optional step: Configure a federation server with Device Registration Service (DRS).

  Box 3: To enable Device Registration Service.

  On your federation server, open a Windows PowerShell command window and type:

  Enable-AdfsDeviceRegistration

  Repeat this step on each federation farm node in your AD FS farm.

  Box 4: Update the Web Application Proxy configuration

  The Device Registration Service will be available through the Web Application Proxy once it is enabled on a federation server. You may need to complete this procedure to update the Web Application Proxy configuration if it was deployed prior to enabling the Device Registration Service.

  Workplace Join is made possible by the Device Registration Service (DRS) that is included with the Active Directory Federation Role in Windows Server 2012 R2. When a device is Workplace Joined, the DRS provisions a device object in Active Directory and sets a certificate on the consumer device that is used to represent the device identity. The DRS is meant to be both internal and external facing. Companies that deploy both DRS and the Web Application Proxy will be able to Workplace Join devices from any internet connected location.

  Reference: Deploying a Federation Server Farm.

• Question 210:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the IP Address Management (IPAM) Server feature

  installed. Server2 has the DHCP Server server role installed. A user named User1 is a member of the IPAM Users group on Server1.

  You need to ensure that User1 can use IPAM to modify the DHCP scopes on Server2.

  The solution must minimize the number of permissions assigned to User1.

  To which group should you add User1?

  A. DHCP Administrators on Server2
  B. IPAM ASM Administrators on Server1
  C. IPAMUG in Active Directory
  D. IPAM MSM Administrators on Server1
  A. DHCP Administrators on Server2

  ---

  The user need rights to change DHCP not IPAM

  C. Members ofthe DHCP Administrators group can view and modify any data at the DHCP server.

  References: https://technet.microsoft.com/en-us/library/jj878348.aspx https://technet.microsoft.com/en-us/library/cc737716(v=ws.10).aspx