Microsoft 70-412 Online Practice Questions and Exam Preparation

Microsoft 70-412 Online Questions & Answers

• Question 311:

  You have a server named DC2 that runs Windows Server 2012 R2. DC2 contains a DNS zone named adatum.com. The adatum.com zone is shown in the exhibit. (Click the Exhibit button.)

  

  You need to configure DNS clients to perform DNSSEC validation for the adatum.com DNS domain. What should you configure?

  A. The Network Location settings
  B. A Name Resolution Policy
  C. The DNS Client settings
  D. The Network Connection settings
  B. A Name Resolution Policy

  ---

  The NameResolutionPolicy Table (NRPT) is a table that contains rules you can configure to specify DNS settings or special behavior for names or namespaces. The NRPT can be configured using Group Policy or by using the Windows Registry.

  

  Incorrect Answers:

  C: Client component that resolves and caches Domain Name System (DNS) domain names. When the DNS Client service receives a request to resolve a DNS name that it does not contain in its cache, it queries an assigned DNS server for an IP address for the name

  D: Network connections make it possible for computers to access resources on the network and the internet

  References: https://technet.microsoft.com/en-us/library/hh831411.aspx#config_client1

• Question 312:

  Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2 Service Pack 1 (SP1). Server1 and Server2 are nodes in a failover cluster named Cluster1. The network contains two servers named Server3 and Server4 that run Windows Server 2012 R2. Server3 and Server4 are nodes in a failover cluster named Cluster2.

  You need to move all of the applications and the services from Cluster1 to Cluster2.

  What should you do first from Failover Cluster Manager?

  A. On a server in Cluster2, configure Cluster-Aware Updating.
  B. On a server in Cluster2, click Move Core Cluster Resources, and then click Best Possible Node.
  C. On a server in Cluster1, click Move Core Cluster Resources, and then click Best Possible Node.
  D. On a server in Cluster2, click Migrate Roles.
  E. On a server in Cluster1, click Move Core Cluster Resources, and then click Select Node.
  D. On a server in Cluster2, click Migrate Roles.

  ---

  

  Incorrect Answers:

  A. Cluster Aware Updating can greatly simplify the process of applying operating system patches to Windows Server 2012 or 2012 R2 failover cluster nodes.

  B. C. Move Core Cluster Resources is used to resources from one node to another within the same cluster.

  References: https://technet.microsoft.com/en-us/library/dn530789(v=ws.11).aspx#BKMK_MigrateClusterRoles

• Question 313:

  Which security groups must a user account be a member of to modify the AD RMS SCP? (Choose two answers. Each answer forms part of a complete solution.)

  A. Domain Admins
  B. AD RMS Enterprise Administrators
  C. Enterprise Admins
  D. Cryptographic Operators.
  B. AD RMS Enterprise Administrators
  C. Enterprise Admins

• Question 314:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 and a member server named Server1. Server1 has the IP Address Management (IPAM) Server feature installed.

  On Dc1, you configure Windows Firewall to allow all of the necessary inbound ports for IPAM.

  On Server1, you open Server Manager as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that you can use IPAM on Server1 to manage DNS on DC1. What should you do?

  A. Modify the outbound firewall rules on Server1.
  B. Modify the inbound firewall rules on Server1.
  C. Add Server1 to the Remote Management Users group.
  D. Add Server1 to the Event Log Readers group.
  D. Add Server1 to the Event Log Readers group.

  ---

  To access configuration data and server event logs, the IPAM server must be a member of the domain IPAM Users Group (IPAMUG). The IPAM server must also be a member of the Event Log Readers security group.

  Note: The computer account of the IPAM server must be a member of the Event Log Readers security group.

  Reference: Manually Configure DC and NPS Access Settings. http://technet.microsoft.com/en-us/library/jj878317.aspx http://technet.microsoft.com/en-us/library/jj878313.aspx

• Question 315:

  HOTSPOT

  Your company has a main office and a branch office. An Active Directory site exists for each office.

  The network contains an Active Directory forest named contoso.com. The contoso.com domain contains three member servers named Server1, Server2, and Server3. All servers run Windows Server 2012 R2.

  In the main office, you configure Server1 as a file server that uses BranchCache.

  In the branch office, you configure Server2 and Server3 as BranchCache hosted cache servers.

  You are creating a Group Policy for the branch office site.

  Which two Group Policy settings should you configure?

  To answer, select the appropriate two settings in the answer area.

  Hot Area:

  

  

  ---

  To use Group Policy to configure clients for hosted cache mode Step x: In the Turn on BranchCache dialog box, click Enabled, and then click OK. Step x+1: In the Group Policy Management Editor console, ensure that BranchCache is still selected, and then in the details pane double-click Set BranchCache Hosted Cache mode. The Set BranchCache Hosted Cache mode dialog box opens.

  Reference: Use Group Policy to configure domain member clients for hosted cache mode http://technet.microsoft.com/en-us/library/ee649153(v=ws.10).aspx

• Question 316:

  You have a DHCP server named Server1.

  Server1 has one network adapter. Server1 is located on a subnet named Subnet1.

  Server1 has scope named Scope1. Scope1 contains IP addresses for the 192.168.1.0/24 network.

  Your company is migrating the IP addresses on Subnet1 to use a network ID of 10.10.0.0/16.

  On Server1 you create a scope named Scope2.

  Scope2 contains IP addresses for the 10.10.0.0/16 network.

  You need to ensure that clients on Subnet1 can receive IP addresses from either scope.

  What should you create on Server1?

  A. A multicast scope
  B. A scope
  C. A superscope
  D. A split-scope
  C. A superscope

  ---

  A superscope is an administrative feature of Dynamic Host Configuration Protocol (DHCP) servers running Windows Server 2008 that you can create and manage by using the DHCP Microsoft Management Console (MMC) snap-in. By using a superscope, you can group multiple scopes as a single administrative entity.

  Configuring a DHCP Superscope A superscope is an administrative feature of Dynamic Host Configuration Protocol (DHCP) servers running Windows Server 2008 that you can create and manage by using the DHCP Microsoft Management Console (MMC) snap-in. By using a superscope, you can group multiple scopes as a single administrative entity. With this feature, a DHCP server can:

  -

  Support DHCP clients on a single physical network segment (such as a single Ethernet LAN segment) where multiple logical IP networks are used. When more than one logical IP network is used on each physical subnet or network, such configurations are often called multinets.

  -

  Support remote DHCP clients located on the far side of DHCP and BOOTP relay agents (where the network on the far side of the relay agent uses multinets).

  Incorrect Answers:

  A: Multicasting is the sending of network traffic to a group of endpoints destination hosts. Only those members in the group of endpoints hosts that are listening for the multicast traffic (the multicast group) process the multicast traffic

  B: A scope is an administrative grouping of IP addresses for computers on a subnet that use the Dynamic Host Configuration Protocol (DHCP) service. The administrator first creates a scope for each physical subnet and then uses the scope to define the parameters used by clients.

  References: https://technet.microsoft.com/en-us/library/dd759152.aspx https://technet.microsoft.com/en-us/library/dd759218.aspx https://technet.microsoft.com/en-us/library/dd759168.aspx

• Question 317:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a member server named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed. Server1 hosts 10 virtual machines.

  A virtual machine named VM1 runs Windows Server 2012 R2 and hosts a processor-intensive Application named App1. Users report that App1 responds more slowly than expected.

  You need to monitor the processor usage on VM1 to identify whether changes must be made to the hardware settings of VM1.

  Which performance object should you monitor on Server1?

  A. Hyper-V Hypervisor Logical Processor
  B. Processor
  C. Hyper-V Hypervisor Root Virtual Processor
  D. Process
  E. Hyper-V Hypervisor Virtual Processor
  E. Hyper-V Hypervisor Virtual Processor

• Question 318:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. The domain contains four member servers named Server1, Server2, Server3, and Server4. All servers run Windows Server 2012 R2.

  Server1 and Server3 are located in a site named Site1. Server2 and Server4 are located in a site named Site2. The servers are configured as nodes in a failover cluster named Cluster1.

  Dynamic quorum management is disabled.

  Cluster1 is configured to use the Node Majority quorum configuration.

  You need to ensure that users in Site2 can access Cluster1 if the network connection between the two sites becomes unavailable.

  What should you run from Windows PowerShell?

  To answer, drag the appropriate commands to the correct location. Each command may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

  ---

  NodeWeight settings are used during quorum voting to support disaster recovery and multi-subnet scenarios for AlwaysOn Availability Groups and SQL Server Failover Cluster Instances.

  Example (Powershell)

  The following example changes the NodeWeight setting to remove the quorum vote for the “AlwaysOnSrv1” node.

  Import-Module FailoverClusters

  $node = “AlwaysOnSrv1”

  (Get-ClusterNode $node).NodeWeight = 0

  References: Configure Cluster Quorum NodeWeight Settings.

  https://docs.microsoft.com/en-us/sql/sql-server/failover-clusters/windows/configure-cluster-quorum-nodeweight-settings?view=sql-server-2017

• Question 319:

  You have an Active Directory Rights Management Services (AD RMS) cluster.

  You need to prevent users from encrypting new content. The solution must ensure that the users can continue to decrypt content that was encrypted already.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. From the Active Directory Rights Management Services console, enable decommissioning.
  B. From the Active Directory Rights Management Services console, create a user exclusion policy.
  C. Modify the NTFS permissions of %systemdrive%\inetpub\wwwroot\_wmcs\licensing.
  D. Modify the NTFS permissions of %systemdrive%\inetpub\wwwroot\_wmcs\decommission.
  E. From the Active Directory Rights Management Services console, modify the rights policy templates.
  A. From the Active Directory Rights Management Services console, enable decommissioning.
  D. Modify the NTFS permissions of %systemdrive%\inetpub\wwwroot\_wmcs\decommission.

  ---

  Decommissioning refers to the entire process of removing the AD RMS cluster and its associated databases from an organization. This process allows you to save rights-protected files as ordinary files before you remove AD RMS from your

  infrastructure so that you do not lose access to these files.

  Decommissioning an AD RMS cluster is achieved by doing the following:

  Enable the decommissioning service. (A)

  Modify permissions on the decommissioning pipeline.

  Configure the AD RMS-enabled application to use the decommissioning pipeline.

  To modify the permissions on the decommissioning pipeline

  1.

  Log on to ADRMS-SRV as cpandl\administrator.

  2.

  Click Start, type %systemdrive%\inetpub\wwwroot\_wmcs in the Start Search box, and then press ENTER.

  3.

  Right-click the decommission folder, and then click Properties.

  4.

  Click the Security tab, click Edit, and then click Add. (D) References: Step 1: Decommission AD RMS Root Cluster

• Question 320:

  HOTSPOT

  Your network contains three Active Directory forests. The forests are configured as shown in the following table.

  

  A two-way forest trust exists between contoso.com and divisionl.contoso.com. A two-way forest trust also exists between contoso.com and division2.contoso.com.

  You plan to create a one-way forest trust from divisionl.contoso.com to division2.contoso.com.

  You need to ensure that any cross-forest authentication requests are sent to the domain controllers in the appropriate forest after the trust is created.

  How should you configure the existing forest trust settings?

  In the table below, identify which configuration must be performed in each forest. Make only one selection in each column. Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  There will be a one-way forest trust from division1.contoso.com to division2.contoso.com Division1 trusts Division2. Division2 must be able to access resources in Division1. Division1 should not be able to access resources in Division2.