Microsoft 70-412 Online Practice Questions and Exam Preparation

Microsoft 70-412 Online Questions & Answers

• Question 291:

  HOTSPOT

  Your network contains two Web servers named Server1 and Server2. Both servers run Windows Server 2012 R2.

  Server1 and Server2 are nodes in a Network Load Balancing (NLB) cluster. The NLB cluster contains an application named App1 that is accessed by using the URL http://app1.contoso.com.

  You deploy a new server named Server3 that runs Windows Server 2012 R2. The contoso.com DNS zone contains the records shown in the following table.

  

  You need to add Server3 to the NLB cluster.

  What command should you run?

  To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  * The Add-NlbClusterNode cmdlet adds a new node to the NLB cluster. Once the new node settings are circulated through all of the NLB cluster node, the new cluster node will be in a running state in the cluster.

  * The Get-NlbClusterNode cmdlet retrieves information about a node in the NLB cluster.

  * EXAMPLE: This command adds host node2 to the cluster on node1. C:\PS>

  

  Reference: Get-NlbClusterNode; Add-NlbClusterNode

• Question 292:

  HOTSPOT

  Your network contains one Active Directory forest named adatum.com. The forest contains a single domain. The forest contains the domain controllers configured as shown in the following table.

  

  Recently, a domain controller named DC4 was deployed to adatum.com. DC4 is in the Default-First-Site-Name site. The adatum.com site links are configured as follows.

  

  The schedule for SiteLink1 is shown in the SiteLink1 exhibit. (Click the Exhibit button.)

  

  The schedule for SiteLink2 is shown in the SiteLink2 exhibit. (Click the Exhibit button.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  

  ---

  * SiteLink1 replication is not available at 10:00.

  * SiteLink1 and SiteLink2 replication is available at Friday at 23:00. Replication intervals are 15 minutes and 30 minutes respectively.

  * DefaultIPSitelink will be used to replicate an object from DC1 to DC4. The replication interval of DefaultIPSitelink is 180 minutes.

• Question 293:

  You have a DNS server that runs Windows Server 2012 R2. The server hosts the zone for contoso.com and is accessible from the Internet. You need to create a DNS record for the Sender Policy Framework (SPF) to list the hosts that are

  authorized to send email for contoso.com.

  Which type of record should you create?

  A. mail exchanger (MX)
  B. resource record signature (RRSIG)
  C. text (TXT)
  D. name server (NS)
  C. text (TXT)

  ---

  To configure SPF records in the Windows Server DNS, follow these steps:

  Click Start, point to All Programs, point to Administrative Tools, and then click DNS.

  In the left pane, expand the DNS server object, and then expand Forward Lookup Zones.

  Right-click the domain folder to which you want to add the SPF record, and then click Other New Records.

  In the Select a resource record type list, click Text (TXT), and then click Create Record.

  If you add a record for the parent domain, leave the Record name box blank. If you do not add a record for the parent domain, type the single part name of the domain in the Record name box.

  In the Text box, type v=spf1 mx -all.

  Click OK, and then click Done.

  Reference: How to configure Sender of Policy Framework records in the Windows Server 2003 Domain Name System

  https://support.microsoft.com/en-us/kb/912716

• Question 294:

  Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.

  The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify which domain controllers are authorized to be cloned by using virtual domain controller cloning.

  Which cmdlet should you use?

  A. Get-ADGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  A. Get-ADGroupMember

  ---

  If you want to be able to clone a Domain Controller, then authorize the original source Domain Controller to be used as the source for cloning by adding its computer object into the new "Cloneable Domain Controllers" Active Directory group.

  The Get-ADGroupMember cmdlet gets the members of an Active Directory group. Members can be users, groups, and computers.

  We use the Get-ADGroupMember cmdlet to retrieve the members of the "Cloneable Domain Controllers" Active Directory group.

  References:

  http://blogs.technet.com/b/keithmayer/archive/2012/08/06/safely-cloning-an-active-directory- domain-controller-with-windows-server-2012-step-by-step-ws2012-hyperv-itpro-vmware.aspx

• Question 295:

  HOTSPOT

  Your network contains two Hyper-V hosts that are configured as shown in the following table.

  

  You create a virtual machine on Server1 named VM1.

  You plan to export VM1 from Server1 and import VM1 to Server2.

  You need to ensure that you can start the imported copy of VM1 from snapshots.

  What should you configure on VM1?

  To answer, select the appropriate node in the answer area.

  Hot Area:

  

  

  ---

  * If the CPUs are from the same manufacturer but not from the same type, you may need to use Processor Compatibility. (Incorrect) The network adapter is already disconnected.

• Question 296:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8 Enterprise.

  You have a remote site that only contains client computers. All of the client computer accounts are located in an organizational unit (OU) named Remote1. A Group Policy object (GPO) named GPO1 is linked to the Remote1 OU.

  You need to configure BranchCache for the remote site.

  Which two settings should you configure in GPO1?

  To answer, select the two appropriate settings in the answer area.

  Hot Area:

  

  

  ---

  BranchCache is disabled by default on client computers. Take the following steps to enable BranchCache on client computers:

  1. Turn on BranchCache.

  2. Enable either Distributed Cache mode or Hosted Cache mode.

  3. Configure the client firewall to enable BranchCache protocols.

  Reference: BranchCache Early Adopter's Guide, Client Configuration http://technet.microsoft.com/en-us/library/dd637820(v=ws.10).aspx

• Question 297:

  Your network contains an active directory domain named Contoso.com.

  The domain contains two servers named server1 and server2 that run Windows Server 2012 R2.

  You create a security template named template1 by using the security template snap-in.

  You need to apply template1 to server2.

  Which tool should you use?

  A. Security Configuration and Analysis
  B. Server Manager
  C. Security Template
  D. Computer management
  A. Security Configuration and Analysis

• Question 298:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains two domain controllers named DC1 and DC2.

  You install Windows Server 2012 R2 on a new computer named DC3.

  You need to manually configure DC3 as a domain controller.

  Which tool should you use?

  A. winrm.exe
  B. Server Manager
  C. dcpromo.exe
  D. Active Directory Domains and Trusts
  B. Server Manager

  ---

  When you try to DCpromo a Server 2012, you get this message:

  

• Question 299:

  You have a server named Server1 that has the Active Directory Certificate Services server role installed. Server1 uses a hardware security module (HSM) to protect the private key of Server1.

  You need to ensure that the Active Directory Certificate Services (AD CS) database, log files, and private key are backed up.

  You perform regular backups of the HSM module by using a backup utility provided by the HSM manufacturer.

  What else should you do?

  A. Run the certutil.execommand and specify the -backupkey parameter.
  B. Run the certutil.exe command and specify the -backupdb parameter.
  C. Run the certutil.exe command and specify the -backup parameter.
  D. Run the certutil.exe command and specify the -dump parameter.
  E. Run the certutil.exe command and specify the 瑿A parameter.
  F. Run the certutil.exe command and specify the 璯etconfig parameter.
  B. Run the certutil.exe command and specify the -backupdb parameter.

  ---

  Backup the Active Directory Certificate Services database Incorrect Answers:

  

  A: Backup the Active Directory Certificate Services certificate and private key

  C: Backup Active Directory Certificate Services

  D: Dump configuration information or files

  E: Display Enrollment Policy CAs

  F: Get the default configuration string

  References: https://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backupKey https://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backupDB https://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backup https://technet.microsoft.com/library/cc732443.aspx#BKMK_dump

• Question 300:

  Note: This question is part of series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains one Active Directory forest named contoso.com.

  The forest contains two child domains and six domain controllers.

  The domain controllers are configured as shown in the following table.

  

  You need to add an additional UPN Suffix. What should you use?

  A. Set-ADSite
  B. Set-ADReplicationSite
  C. Set-ADDomain
  D. Set-ADReplicationSiteLink
  E. Set-ADGroup
  F. Set-ADForest
  G. Netdom
  F. Set-ADForest

  ---

  https://technet.microsoft.com/en-us/library/dd391925(v=ws.10).aspx