Microsoft 70-412 Online Practice Questions and Exam Preparation

Microsoft 70-412 Online Questions & Answers

• Question 321:

  HOTSPOT

  You have a server named Server1 that runs Windows Server 2012 R2.

  Server1 has access to disks that connect to a RAID controller, iSCSI disks, and disks connected to a SCSI controller.

  You plan to use a tiered storage space on Server1.

  You need to identify which storage controller and volume type you must use for the tiered storage space.

  Which storage components should you use?

  To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  Box 1, Storage controller: SCSI Storage Spaces requirements include:

  * Serial ATA (SATA) or Serial Attached SCSI (SAS) connected disks, optionally in a just-a-bunch-of-disks (JBOD) enclosure Note: RAID adapters, if used, must have all RAID functionality disabled Box 2, Storage volume type:

  * Storage pools. A collection of physical disks that enable you to aggregate disks, expand capacity in a flexible manner, and delegate administration.

  * Storage spaces. Virtual disks created from free space in a storage pool. Storage spaces have such attributes as resiliency level, storage tiers, fixed provisioning, and precise administrative control. Illustration:

  

  Reference: Storage Spaces Overview https://technet.microsoft.com/en-us/library/hh831739.asp

• Question 322:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has an enterprise root certification authority (CA) for contoso.com.

  You deploy another member server named Server2 that runs Windows Server 2012 R2 and has the Web Server (IIS) server role installed.

  You need to designate a website on Server1 as the certificate revocation list (CRL) distribution point for the CA. The solution must ensure that CRLs are published automatically to Server2.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Create an http:// CRL distribution point (CDP) entry.
  B. Configure a CA exit module.
  C. Create a file:// CRL distribution point (CDP) entry.
  D. Configure a CA policy module.
  E. Configure an enrollment agent.
  A. Create an http:// CRL distribution point (CDP) entry.
  D. Configure a CA policy module.

  ---

  A. To specify CRL distribution points in issued certificates

  Open the Certification Authority snap-in.

  In the console tree, click the name of the CA.

  On the Action menu, click Properties, and then click the Extensions tab. Confirm that Select extension is set to CRL Distribution Point (CDP).

  Do one or more of the following. (The list of CRL distribution points is in the Specify locations from which users can obtain a certificate revocation list (CRL) box.)

  To indicate that you want to use a URL as a CRL distribution point

  Click the CRL distribution point, select the Include in the CDP extension of issued certificates check box, and then click OK.

  Click Yes to stop and restart Active Directory Certificate Services (AD CS).

  D. You can specify CRL Distribution Points (CDPs) in CAPolicy.inf. Note that any CDP in CAPolicy.inf will take precedence for certificate verifiers over the CDP's specified in the CA policy module.

  Note: CRLDistributionPoint

  You can specify CRL Distribution Points (CDPs) for a root CA certificate in the CAPolicy.inf. This section does not configure the CDP for the CA itself. After the CA has been installed you can configure the CDP URLs that the CA will include in each certificate that it issues. The URLs specified in this section of the CAPolicy.inf file are included in the root CA certificate itself.

  Example:

  [CRLDistributionPoint]

  URL=http://pki.wingtiptoys.com/cdp/WingtipToysRootCA.crl

• Question 323:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1. All servers run Windows Server 2012 R2.

  All domain user accounts have the Division attribute automatically populated as part of the user provisioning process. The Support for Dynamic Access Control and Kerberos armoring policy is enabled for the domain.

  You need to control access to the file shares on Server1 based on the values in the Division attribute and the Division resource property.

  Which three actions should you perform in sequence?

  Select and Place:

  

  

  ---

  First create a claim type for the property, then create a reference resource property that points back to the claim. Finally set the classification value on the folder.

  Configure the components and policy

  1. Create claim types

  2. Create resource properties Deploy the central access policy

  3. Assign the CAP to the appropriate shared folders on the file server.

• Question 324:

  Your network contains an Active Directory domain named contoso.com. The domain contains an IP Address Management (IPAM) server that uses a Windows Internal Database.

  You install a Microsoft SQL Server 2012 instance on a new server.

  You need to migrate the IPAM database to the SQL Server instance.

  Which cmdlet should you run?

  A. Disable-IpamCapability
  B. Set-IpamConfiguration
  C. Update-IpamServer
  D. Move-IpamDatabase
  D. Move-IpamDatabase

  ---

  The Move-IpamDatabase cmdlet migrates the IP Address Management (IPAM) database to a Microsoft SQL Server database. You can migrate from Windows Internal Database (WID) or from a SQL Server database. The cmdlet creates a new IPAM schema and copies all data from the existing IPAM database. After the cmdlet completes copying data, it changes IPAM configuration settings to refer to the new database as the IPAM database.

  Reference: Move-IpamDatabase

• Question 325:

  Note: This question is part of series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

  Your network contains one Active Directory forest named contoso.com. The forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

  

  You have a trust from contoso.com to another forest named fabrikam.com.

  You plan to migrate users from contoso.com to fabrikam.com.

  You need to ensure that the users who migrated to fabrikam.com can continue to access shared resources in contoso.com. The solution must not require administrators to modify permissions to shared resources.

  What should you use?

  A. Set-ADSite
  B. Set-ADReplicationSite
  C. Set-ADDomain
  D. Set-ADReplicationSiteLink
  E. Set-ADGroup
  F. Set-ADForest
  G. Netdom
  G. Netdom

  ---

  The Netdom move command moves a workstation or member server to a new domain. The act of moving a computer to a new domain creates an account for the computer on the domain, if it does not already exist.

  Reference: Technet, Netdom move https://technet.microsoft.com/en-us/library/cc788127.aspx

• Question 326:

  DRAG DROP

  You have a server named Server2 that runs Windows Server 2012 R2. You have storage provisioned on Server2 as shown in the exhibit. (Click the Exhibit button.)

  

  You need to configure the storage so that it appears in Windows Explorer as a drive letter on Server1.

  Which three actions should you perform in sequence? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Step 1 (on Server2): Target: It is an object which allows the iSCSI initiator to make a connection. The Target keeps track of the initiators which are allowed to be connected to it. The Target also keeps track of the iSCSI virtual disks which are associated with it. Once the initiator establishes the connection to the Target, all the iSCSI virtual disks associated with the Target will be accessible by the initiator. Step 2 (on server 1): Configure iSCSI initiator to logon the Target Once the iSCSI Virtual disk is created and assigned, it is ready for the initiator to logon. Note: Typically, the iSCSI initiator and iSCSI Target are on different machines (physical or virtual). You will need to provide the iSCSI Target server IP or host name to the initiator, and the initiator will be able to do a discovery of the iSCSI Target. Step 3 (on server1): Create new volume Once the connection is established, the iSCSI virtual disk will be presented to the initiator as a disk. By default, this disk will be offline. For typical usage, you want to create a volume, format the volume and assign with a drive letter so it can be used just like a local hard disk.

  Reference: Introduction of iSCSI Target in Windows Server 2012

• Question 327:

  You are employed as a network administrator at ABC.com. ABC.com has an active directory domain named ABC.com all servers including domain controllers on the ABC.com network have Windows Server 2012 R2 installed. ABC.com has

  its headquarters in London and an office in Paris.

  The London Office has a domain controller named server1, which is configured as a writeable domain controller that servers as a Global catalog server and a DNS server.

  Server1 is configured to host an Active Directory-integrated zone for ABC.com

  The Paris office has a Read-Only domain controller (RODC) named server2 which servers as a Global catalog server. After installing the DNS server role on server2, you want to make sure that the ABC.com zone is replicated to server2 via

  active directory replication.

  Which of the following actions should you take?

  A. You should consider making use of Active Directory Sites and Services to Configured replication
  B. You should consider making use of replmon.exe to configure replication.
  C. You should consider making use of repadmin.exe to configure replication
  D. You should consider making use of Active DirectorySchema To configure replication
  A. You should consider making use of Active Directory Sites and Services to Configured replication

• Question 328:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. The domain contains two organizational units (OUs) named OU1 and OU2 in the root of the domain. Two Group Policy objects (GPOs) named GPO1 and GPO2 are created. GPO1 is linked to OU1. GPO2 is linked to OU2.

  OU1 contains a client computer named Computer1. OU2 contains a user named User1.

  You need to ensure that the GPOs Applied to Computer1areApplied to User1 when User1 logs on.

  What should you configure?

  A. Item-level targeting
  B. Block Inheritance
  C. GPO links
  D. The Enforced setting
  A. Item-level targeting

  ---

  You can use item-level targeting to change the scope of individual preference items, so they apply only to selected users or computers. References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc733022(v=ws.11)

• Question 329:

  You have a cluster named Cluster1 that contains two nodes. Both nodes run Windows Server 2012 R2. Cluster1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2.

  You configure a custom service on VM1 named Service1.

  You need to ensure that VM1 will be moved to a different node if Service1 fails.

  Which cmdlet should you run on Cluster1?

  A. Add-ClusterVmMonitoredItem
  B. Set-ClusterResourceDependency
  C. Enable- VmResourceMetering
  D. Add-ClusterGenericServiceRole
  A. Add-ClusterVmMonitoredItem

  ---

  *

  The Add-ClusterVMMonitoredItem cmdlet configures monitoring for a service or an Event Tracing for Windows (ETW) event so that it is monitored on a virtual machine. If the service fails or the event occurs, then the system responds by taking an action based on the failover configuration for the virtual machine resource. For example, the configuration might specify that the virtual machine be restarted or failover.

  *

  The decision on whether to failover or restart on the same node is configurable and determined by the failover properties for the virtual machine. Reference: Add-ClusterVMMonitoredItem

• Question 330:

  You are employed as a senior network administrator at ABC.com.

  ABC.com has an Active Directory domain named ABC.com.

  All servers on the ABC.com network have Windows Server 2012 R2 installed.

  You are currently running a training exercise for junior network administrators.

  You are discussing the endpoint types supported by Active Directory Federation Services (AD FS).

  Which of the following are supported types? (Choose all that apply)

  A. SAML WebSSO
  B. Anonymous
  C. WS-Federation Passive
  D. Client Certificate
  E. WS-Trust
  A. SAML WebSSO
  C. WS-Federation Passive
  E. WS-Trust

  ---

  http://technet.microsoft.com/en-us/library/adfs2-help-endpoints(v=ws.10).aspx