Microsoft 70-412 Online Practice Questions and Exam Preparation

Microsoft 70-412 Online Questions & Answers

• Question 331:

  Your network contains an Active Directory domain named contoso.com.

  Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2.

  You have a Password Settings object (PSOs) named PSO1.

  You need to view the settings of PSO1.

  Which tool should you use?

  A. Get-ADDomainControllerPasswordReplicationPolicy
  B. Get-ADDefaultDomainPasswordPolicy
  C. Server Manager
  D. Get-ADFineGrainedPasswordPolicy
  D. Get-ADFineGrainedPasswordPolicy

  ---

  D. Gets one or more Active Directory fine grained password policies. Incorrect Answers:

  A: Gets the members of the allowed list or denied list of a read-only domain controller's password replication policy

  B: Gets the default password policy for an Active Directory domain.

  C: PSO's managed from AD AC or PowerShell Only

  References: https://technet.microsoft.com/en-us/library/ee617207.aspx https://technet.microsoft.com/en-us/library/ee617244.aspx https://technet.microsoft.com/en-us/library/ee617231.aspx

• Question 332:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You suspect that some protected system files are corrupt.

  You need to verify the protected system files on Server1 and replace files that have incorrect versions.

  Which tool should you use?

  A. Sfc
  B. Repair-volume
  C. Repair-FileIntegrity
  D. Fsutil
  A. Sfc

  ---

  Sfc scans and verifies the integrity of all protected system files and replaces incorrect versions with correct versions.

  Examples:

  To verify the kernel32.dll file, type:

  sfc /verifyfile=c:\windows\system32\kernel32.dll

  To setup offline repair of the kernel32.dll file with an offline boot directory set to d: and offline windows directory set to d:\windows, type:

  sfc /scanfile=d:\windows\system32\kernel32.dll /offbootdir=d:\ /offwindir=d:\windows

  References: Technet, sfc

  https://technet.microsoft.com/en-us/library/ff950779.aspx

• Question 333:

  Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1. The domain contains 10 domain

  controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify whether deleted objects can be recovered from the Active Directory Recycle Bin.

  Which cmdlet should you use?

  A. Get-ADGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  E. Get-ADOptionalFeature

  ---

  The Get-ADOptionalFeature cmdlet gets an optional feature or performs a search to retrieve multiple optional features from an Active Directory.

  Example: Get a specified optional feature

  This command gets the optional feature with the name Recycle Bin Feature.

  Windows PowerShell

  PS C:\> Get-ADOptionalFeature -Identity 'Recycle Bin Feature'

  References: Get-ADOptionalFeature

  https://technet.microsoft.com/en-us/library/hh852212(v=wps.630).aspx

• Question 334:

  Your network contains two servers named HV1 and HV2. Both servers run Windows Server 2012 R2 and have the Hyper-V server role installed.

  HV1 hosts 25 virtual machines. The virtual machine configuration files and the virtual hard disks are stored in D:\VM.

  You shut down all of the virtual machines on HV1.

  You copy D:\VM to D:\VM on HV2.

  You need to start all of the virtual machines on HV2. You want to achieve this goal by using the minimum amount of administrative effort.

  What should you do?

  A. Run the Import-VMInitialReplication cmdlet.
  B. From HV1, export all virtual machines to D:\VM. Copy D:\VM to D:\VM on HV2 and overwrite the existing files. On HV2, run the Import Virtual Machine wizard.
  C. From HV1, export all virtual machines to D:\VM. Copy D:\VM to D:\VM on HV2 and overwrite the existing files. On HV2, run the New Virtual Machine wizard.
  D. Run the Import-VM cmdlet.
  D. Run the Import-VM cmdlet.

  ---

  Import-VM

  Imports a virtual machine from a file.

  Example

  Imports the virtual machine from its configuration file. The virtual machine is registered in-place, so its files are not copied.

  Windows PowerShell

  PS C:\> Import-VM Path 'D:\Test\VirtualMachines\5AE40946-3A98-428E-8C83- 081A3C6BD18C.XML'

  Reference: Import-VM

• Question 335:

  Your network contains two Active Directory forests named contoso.com and adatum.com. Contoso.com contains one domain. Adatum.com contains a child domain named child.adatum.com.

  Contoso.com has a one-way forest trust to adatum.com. Selective authentication is enabled on the forest trust.

  Several user accounts are migrated from child.adatum.com to adatum.com. Users report that after the migration, they fail to access resources in contoso.com. The users successfully accessed the resources in contoso.com before the accounts were migrated.

  You need to ensure that the migrated users can access the resources in contoso.com.

  What should you do?

  A. Replace the existing forest trust with an external trust.
  B. Run netdom and specify the /quarantine attribute.
  C. Disable SID filtering on the existing forest trust.
  D. Disable selective authentication on the existing forest trust.
  C. Disable SID filtering on the existing forest trust.

  ---

  Security Considerations for Trusts Need to gain access to the resources in contoso.com

  Disabling SID Filter Quarantining on External Trusts Although it reduces the security of your forest (and is therefore not recommended), you can disable SID filter quarantining for an external trust by using the Netdom.exe tool. You should consider disabling SID filter quarantining only in the following situations:

  * Users have been migrated to the trusted domain with their SID histories preserved, and you want to grant them access to resources in the trusting domain based on the SID history attribute. Etc.

  Incorrect Answers:

  B. Enables administrators to manage Active Directory domains and trust relationships from the command prompt, /quarantine Sets or clears the domain quarantine. D. Selective authentication over a forest trust restricts access to only those users in a trusted forest who have been explicitly given authentication permissions to computer objects (resource computers) that reside in the trusting forest.

  References: Security Considerations for Trusts https://technet.microsoft.com/en-us/library/cc755321(v=ws.10).aspx

• Question 336:

  Your company has a main office and a remote office. The remote office is used for disaster recovery. The network contains an Active Directory domain named contoso.com. The domain contains member servers named Server1, Server2, Server3, and Server4. All servers run Windows Server 2012 R2.

  Server1 and Server2 are located in the main office. Server3 and Server4 are located in the remote office.

  All servers have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. Storage is replicated between the main office and the remote site.

  You need to ensure that Cluster1 is available if two nodes in the same office fail. What are two possible quorum configurations that achieve the goal? (Each correct answer presents a complete solution. Choose two.)

  A. No Majority: Disk Only
  B. Node Majority
  C. Node and File Share Majority
  D. Node and Disk Majority
  A. No Majority: Disk Only
  B. Node Majority

  ---

  Depending on the quorum configuration option that you choose and your specific settings, the cluster will be configured in one of the following quorum modes:

  *

  (A) No majority (disk witness only)

  *

  (B) Node majority (no witness)

  *

  Node majority with witness (disk or file share)

  Reference: Configure and Manage the Quorum in a Windows Server 2012 R2 Failover Cluster

• Question 337:

  Your network contains an Active Directory domain named corp.contoso.com. You deploy Active Directory Rights Management Services (AD RMS).

  You have a rights policy template named Template1. Revocation is disabled for the template. A user named User1 can open content that is protected by Template1 while the user is connected to the corporate network.

  When User1 is disconnected from the corporate network, the user cannot open the protected content even if the user previously opened the content.

  You need to ensure that the content protected by Template1 can be opened by users who are disconnected from the corporate network.

  What should you modify?

  A. The User Rights settings of Template1
  B. The templates file location of the AD RMS cluster
  C. The Extended Policy settings of Template1
  D. The exclusion policies of the AD RMS cluster
  C. The Extended Policy settings of Template1

  ---

  The extended rights policy of a template controls how content licenses are to be implemented. The extended rights policy template settings are specified by using the Active Directory Rights Management Services (AD RMS) administration site. The available settings control persistence of author rights, whether trusted browsers are supported, license persistence within the content, and enforcement of any application-specific data.

  You can add trust policies so that AD RMS can process licensing requests for content that was rights protected.

  Reference: Extended Policy Template Information; AD RMS and Server Design http://technet.microsoft.com/en-us/library/ee221071(v=ws.10).aspx

• Question 338:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com.

  You have a failover cluster named Cluster1 that contains two nodes named Server1 and Server2. Both servers run Windows Server 2012 R2 and have the Hyper-V server role installed.

  You plan to create two virtual machines that will run an application named App1. App1 will store data on a virtual hard drive named App1data.vhdx. App1data.vhdx will be shared by both virtual machines.

  The network contains the following shared folders:

  An SMB file share named Share1 that is hosted on a Scale-Out File Server.

  An SMB file share named Share2 that is hosted on a standalone file server.

  An NFS share named Share3 that is hosted on a standalone file server.

  You need to ensure that both virtual machines can use App1data.vhdx simultaneously.

  What should you do?

  To answer, select the appropriate configurations in the answer area.

  Hot Area:

  

  

  ---

  * Simultaneous access to vhd can only be done by scale-out file server

  * Create your VHDX data files to be shared as fixed-size or dynamically expanding, on the disk where you manually attached the Shared VHDX filter. Old VHD files are not allowed. Differencing disks are not allowed.

  Reference: Windows Server 2012 R2 Storage: Step-by-step with Storage Spaces, SMB Scale-Out and Shared VHDX (Virtual)

• Question 339:

  Your network contains an Active Directory forest named adatum.com. The adatum.com domain only contains domain controllers that run Windows Server 2012 R2.

  The forest contains a child domain named child.adatum.com. The child.adatum.com domain only contains domain controllers that run Windows Server 2008 R2. The child.adatum.com domain contains a member server named Server1 that

  runs Windows Server 2012 R2.

  You have access to four administrative user accounts in the forest. The administrative user accounts are configured as shown in the following table.

  

  You need to ensure that you can add a domain controller that runs Windows Server 2012 R2 to the child.adatum.com domain. Which account should you use to run adprep.exe?

  A. Admin1
  B. Admin2
  C. Admin3
  D. Admin4
  B. Admin2

  ---

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd464018(v=ws.10)

• Question 340:

  Your network contains an Active Directory domain named contoso.com. Network Access Protection (NAP) is deployed to the domain.

  You need to create NAP event trace log files on a client computer.

  What should you run?

  A. Logman
  B. Tracert
  C. Register-EngineEvent
  D. Register-ObjectEvent
  A. Logman