Microsoft 70-412 Online Practice Questions and Exam Preparation

Microsoft 70-412 Online Questions & Answers

• Question 241:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DHCP Server server role installed.

  An administrator installs the IP Address Management (IPAM) Server feature on a server named Server2. The administrator configures IPAM by using Group Policy based provisioning and starts server discovery.

  You plan to create Group Policies for IPAM provisioning.

  You need to identify which Group Policy object (GPO) name prefix must be used for IPAM Group Policies.

  What should you do on Server2?

  A. From Server Manager, review the IPAM overview.
  B. Run the ipamgc.exe tool.
  C. From Task Scheduler, review the IPAM tasks.
  D. Run the Get-IpamConfiguration cmdlet.
  D. Run the Get-IpamConfiguration cmdlet.

  ---

  Example:

  

• Question 242:

  You have a server named File1 that runs Windows Server 2012 R2.

  File1 has the File Server role service installed.

  You plan to back up all shared folders by using Microsoft Online Backup.

  You download and install the Microsoft Online Backup Service Agent on File1.

  You need to ensure that you use Windows Server Backup to back up data to Microsoft Online Backup.

  What should you do?

  A. From Computer Management, add the File1 computer account to the Backup Operators group.
  B. From Windows Server Backup, run the Register Server Wizard.
  C. From acommand prompt, run wbadmin.exe enable backup.
  D. From the Services console, modify the Log On settings of the Microsoft Online Backup Service Agent.
  B. From Windows Server Backup, run the Register Server Wizard.

  ---

  To register a server for use with Windows Azure Backup you must run the register server wizard Incorrect Answers:

  A: Enables you to back up and restore your operating system, volumes, files, folders, and applications from a command prompt.

  References: https://technet.microsoft.com/en-us/library/hh831677.aspx

• Question 243:

  You have configured a forest trust relationship between the Adatum forest and the Contoso forest. You want to ensure that users from the Contoso forest can authenticate only when needing to access resources in the Adatum forest using the [email protected] UPN rather than any other UPN that is available for them.

  Which of the following should you use to accomplish this goal?

  A. SID filtering
  B. Name suffix routing
  C. Shortcut trust
  D. External trust
  B. Name suffix routing

• Question 244:

  Which permission should you assign on a CA to a group of users that you want to be able to respond to certificate requests but you do not want to provide them with the ability to change CA security settings?

  A. Read
  B. Issue And Manage Certificates
  C. Manage CA
  D. Request Certificates
  B. Issue And Manage Certificates

• Question 245:

  Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and child.contoso.com. The domains contain three domain controllers. The domain controllers are configured as shown in the following table.

  

  You need to ensure that KDC support for claims, compound authentication, and Kerberos armoring setting is enforced in both domains. Which two actions should you perform? Each correct answer presents part of the solution. (Choose two.)

  A. Raise the domain functional level of child1.contoso.com.
  B. Raise the forest functional level of contoso.com.
  C. Upgrade DC11 to Windows Server 2012 R2.
  D. Upgrade DC1 to Windows Server 2012 R2.
  E. Raise the domain functional level of contoso.com.
  D. Upgrade DC1 to Windows Server 2012 R2.
  E. Raise the domain functional level of contoso.com.

  ---

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831747(v=ws.11)#BKMK_Sup4ClaimsCAarmoring

• Question 246:

  You have a server named Server1 that runs Windows Server 2012 R2.

  When you install a custom Application on Server1 and restart the server, you receive the following error message: "The Boot Configuration Data file is missing some required information.

  File: \Boot\BCD

  Error code: 0x0000034."

  You start Server1 by using Windows RE.

  You need to ensure that you can start Windows Server 2012 R2 on Server1.

  Which tool should you use?

  A. Bootsect
  B. Bootim
  C. Bootrec
  D. Bootcfg
  C. Bootrec

  ---

  Bootrec.exe tool to troubleshoot "Bootmgr Is Missing" issue. The /ScanOs option scans all disks for installations that are compatible with Windows Vista or Windows 7. Additionally, this option displays the entries that are currently not in the

  BCD store. Use this option when there are Windows Vista or Windows 7 installations that the Boot Manager menu does not list.

  Error code 0x0000034 while booting.

  Resolution:

  Put the Windows Windows 7 installation disc in the disc drive, and then start the computer.

  Press any key when the message indicating "Press any key to boot from CD or DVD ...". appears.

  Select a language, time, currency, and a keyboard or another input method. Then click Next.

  Click Repair your computer.

  Click the operating system that you want to repair, and then click Next.

  In the System Recovery Options dialog box, click Command Prompt.

  Type Bootrec /RebuildBcd, and then press ENTER.

  Incorrect Answers:

  A. Bootsect.exe updates the master boot code for hard disk partitions to switch between BOOTMGR and NTLDR. You can use this tool to restore the boot sector on your computer. This tool replaces FixFAT and FixNTFS.

  D. The bootcfg command is a Microsoft Windows Server 2003 utility that modifies the Boot.ini file.

  References: Bootsect Command-Line Options https://technet.microsoft.com/en-us/library/cc749177(v=ws.10).aspx http://support.microsoft.com/kb/927392/en-us http://answers.microsoft.com/en-us/windows/forum/windows_7-system/error-code-0x0000034-in- windows-7/4dcb8d38-a206-40ed-bced-55e4a4de9bf2

• Question 247:

  You have a failover cluster named Cluster1 that contains four nodes. All of the nodes run Windows Server 2012 R2.

  You need to force every node in Cluster1 to contact immediately the Windows Server Update Services (WSUS) server on your network for updates.

  Which tool should you use?

  A. The Add-CauClusterRole cmdlet
  B. The Wuauclt command
  C. The Wusa command
  D. The Invoke-CauScan cmdlet
  A. The Add-CauClusterRole cmdlet

  ---

  The Add-CauClusterRole cmdlet adds the Cluster-Aware Updating (CAU) clustered role that provides the self-updating functionality to the specified cluster. When the CAU clustered role has been added to a cluster, the failover cluster can update itself on the schedule that is specified by the user, without requiring an external computer to coordinate the cluster updating process.

  Incorrect Answers:

  B. The wuauclt utility allows you some control over the functioning of the Windows Update Agent. It is updated as part of Windows Update.

  The following are the command line for wuauclt.

  Option Description

  /a /ResetAuthorization

  Initiates an asynchronous background search for applicable updates. If Automatic Updates is disabled, this option has no effect.

  /r /ReportNow

  Sends all queued reporting events to the server asynchronously.

  /? /h /help

  Shows this help information.

  D.

  The Invoke-CauScan cmdlet performs a scan of cluster nodes for applicable updates and returns a list of the initial set of updates that would be applied to each node in a specified cluster.

  Note: The Invoke-CauRun cmdlet performs a scan of cluster nodes for applicable updates and installs those updates via an Updating Run on the specified cluster.

  References: Add-CauClusterRole https://technet.microsoft.com/en-us/library/hh847235(v=wps.620).aspx

• Question 248:

  You are employed as a network administrator at ABC.com. ABC.com has an Active Directory domain named ABC.com all servers on the ABC.com network have Windows Server 2012 R2 installed. ABC.com has a server named SERVER1 which has been configured to run the HYPER-V server role Server1 is configures to host multiple virtual machines.

  When ABC.com acquires a server with a better hardware configuration to SERVER1 you are instructed to relocate the virtual machines to the new server with as little interruptions as possible.

  Which of the following actions should you take? (Choose all that apply.)

  A. You should consider exporting the virtual machines from Server1.
  B. You should consider running a snapshot backup of the SERVER1.
  C. You should considerimporting the virtual machine from Server1 to the new server.
  D. You should consider restoring the snapshot backup onthe hard drives of the new server.
  A. You should consider exporting the virtual machines from Server1.
  C. You should considerimporting the virtual machine from Server1 to the new server.

• Question 249:

  Your network contains two Active Directory forests named contoso.com and fabrikam.com.

  A two- way forest trust exists between the forests.

  The contoso.com forest contains an enterprise certification authority (CA) named CAl.

  You implement cross-forest certificate enrollment between the contoso.com forest and the fabrikam.com forest. On CA1, you create a new certificate template named Template1.

  You need to ensure that users in the fabrikam.com forest can request certificates that are based on Template1.

  Which tool should you use?

  A. Sync-ADObject
  B. Pkiview.msc
  C. CertificateServices.ps1
  D. Certutil
  E. PKISync.ps1
  E. PKISync.ps1

  ---

  E. PKISync.ps1 copies objects in the source forest to the target forest

  To copy certificate templates from an account forest to the resource forest

  1. Start Windows PowerShell. Change the current directory to the location on the PKISync.ps1 script.

  2. Copy the certificate template from the account forest by using the command .\PKISync.ps1 ?sourceforest<;account forest DN>; - targetforest<;resource forest DN>; - type Template 璫n<;certificate template common nam>;. Note: If a certificate template in the resource forest has the same name as the certificate template you want to copy from the account forest, you must rename the certificate template in the account forest before copying the template to the resource forest. See Rename a Certificate Template.

  3. Copy the OID container from the account forest by using the command .\PKISync.ps1璼ourceforest - targetforest - type Oid

• Question 250:

  Your network contains an Active Directory forest named contoso.com.

  The forest contains two sites named Main and Branch.

  The Main site contains 400 desktop computers and the Branch site contains 150 desktop computers. All of the desktop computers run Windows 8.

  In Main, the network contains a member server named Server1 that runs Windows Server 2012.

  You install the Windows Server Update Services server role on Server1.

  You need to ensure that Windows updates obtained from Windows Server Update Services (WSUS) are the same for the computers in each site.

  You want to achieve this goal by using the minimum amount of administrative effort.

  What should you do?

  A. From the Update Services console, create computer groups.
  B. From the Update Services console, configure the Computers options.
  C. From the Group Policy Management console, configure the Windows Update settings.
  D. From the Group Policy Management console, configure the Windows Anytime Upgrade settings.
  E. From the Update Services console, configure the Synchronization Schedule options.
  C. From the Group Policy Management console, configure the Windows Update settings.

  ---

  Create one computer group for Main site and another group for Branch site. You can deploy Windows updates by computer group.