Microsoft 70-412 Online Practice Questions and Exam Preparation

Microsoft 70-412 Online Questions & Answers

• Question 361:

  You have two Windows Server Update Services (WSUS) servers named Server01 and Server02. Server01 synchronizes from Microsoft Update. Server02 synchronizes updates from Server01. Both servers are members of the same Active

  Directory domain.

  You configure Server01 to require SSL for all WSUS metadata by using a certificate issued by an enterprise root certification authority (CA).

  You need to ensure that Server02 synchronizes updates from Server01.

  What should you do on Server02?

  A. From a command prompt, run wsusutil.exe configuresslproxy server02 443.
  B. From a command prompt, run wsusutil.exe configuressl server01.
  C. From a command prompt, run wsusutil.exe configuresslproxy server01 443.
  D. From the Update Services console, modify the Update Source and Proxy Server options.
  C. From a command prompt, run wsusutil.exe configuresslproxy server01 443.

  ---

  We configure server02 to use server01 as a proxy for the updates through the wsusutil.exe configuresslproxy Server01 is the ssl_proxy and the port is 443 (the sll port).

  References: A work-around when using different proxies for HTTP and SSL in WSUS 3.0 SP1 http://blogs.technet.com/b/craigf/archive/2009/05/04/a-work-around-when-using-different- proxies-for-http-and-ssl-in-wsus-3-0-sp1.aspx

• Question 362:

  You have a server named Server1 that runs Windows Server 2012 R2.

  A Microsoft Azure Backup of Server1 is created automatically every day.

  You need to view the items that are included in the backup.

  Which cmdlet should you run?

  A. Get-WBSummary
  B. Get-WBFileSpec
  C. Get-WBJob
  D. Get-OBFileSpec
  D. Get-OBFileSpec

  ---

  References: https://technet.microsoft.com/en-us/library/hh770422.aspx

• Question 363:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DHCP Server server role installed.

  Server1 has a scope named Scope1. A policy named Policy1 is configured for Scope1.

  Policy1 is configured to provide Hyper-V virtual machines a one-day lease.

  All other computers receive an eight-day lease.

  You implement an additional DHCP server named Server2 that runs Windows Server 2012 R2.

  On Server1, you configure Scopel for DHCP failover.

  You discover that virtual machines that receive IP addresses from Server2 have a lease duration of eight days.

  You need to ensure that when Server2 assigns IP addresses to the Hyper-V virtual machines, the lease duration is one day. The solution must ensure that other computers that receive IP addresses from Server2 have a lease duration of

  eight days.

  What should you do?

  A. On Server2,right-click Scope1, and then click Reconcile.
  B. On Server1, right-click Scope1, and then click Replicate Scope.
  C. On Server2, create a new DHCP policy.
  D. On Server1, delete Policy1, and then recreate the policy.
  B. On Server1, right-click Scope1, and then click Replicate Scope.

  ---

  Scope 1 has beenset up for DHCP failover. Now we need to replicate it from Server1 to Server2.

  http://technet.microsoft.com/en-us/library/dd183579(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc772101.aspx

• Question 364:

  You have a file server named FS1 that runs Windows Server 8.

  Data Deduplication is enabled on FS1.

  You need to configure Data Deduplication to run at a normal priority from 20:00 to 06:00 daily.

  What should you configure?

  A. File and Storage Services in Server Manager
  B. The Data Deduplication process in Task Manager
  C. Disk Management in Computer Management
  D. The properties of drive C
  A. File and Storage Services in Server Manager

  ---

  In Windows Server 2012 R2, deduplication can be enabled locally or remotely by using Windows PowerShell or Server Manager.

  

  References: https://technet.microsoft.com/en-us/library/hh831700.aspx

• Question 365:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role installed and is

  configured as an enterprise certification authority (CA).

  You need to ensure that all of the users in the domain are issued a certificate that can be used for the following purposes:

  Email security

  Client authentication

  Encrypting File System (EFS)

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. From a Group Policy, configure the Certificate Services Client Auto-Enrollment settings.
  B. From a Group Policy, configure the Certificate Services Client Certificate Enrollment Policy settings.
  C. Modify the properties of the User certificate template, and then publish the template.
  D. Duplicate the User certificate template, and then publish the template.
  E. From a Group Policy, configure the Automatic Certificate Request Settings settings.
  A. From a Group Policy, configure the Certificate Services Client Auto-Enrollment settings.
  D. Duplicate the User certificate template, and then publish the template.

  ---

  The default user template supports all of the requirements EXCEPT auto enroll as shown below:

  

  However a duplicated template from users has the ability to autoenroll:

  

  The Automatic Certificate Request Settings GPO setting is only available to Computer, not user.

  

  Reference: Manage Certificate Enrollment Policy by Using Group Policy. http://technet.microsoft.com/en-us/library/dd851772.aspx

• Question 366:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains two Active Directory sites named Site1 and Site2.

  You need to configure the replication between the sites to occur by using change notification.

  Which attribute should you modify?

  Hot Area:

  

  

  ---

  Active Directory Replication Change Notification

  * Right-click the site link object for the sites for which you want to enable change notification, and then click Properties.

  * In the Select a property to view box, select options.

  

  * In the Edit Attribute box, if the Value(s) box shows , type 1 in the Edit Attribute box

  

  * Click OK.

  Reference: Active Directory Replication: Change Notification and You

• Question 367:

  You have a group Managed Service Account named Service01. Three servers named Server01, Server02, and Server03 currently use the Service01 service account.

  You plan to decommission Server01.

  You need to remove the cached password of the Service01 service account from Server01. The solution must ensure that Server02 and Server03 continue to use Service01.

  Which cmdlet should you run?

  A. Set-ADServiceAccount
  B. Reset-ADServiceAccountPassword
  C. Remove-ADServiceAccount
  D. Uninstall-ADServiceAccount
  B. Reset-ADServiceAccountPassword

  ---

  We reset the password for the service.

  The Reset-ADServiceAccountPassword cmdlet resets the service account password for the local computer. This cmdlet needs to be run on the computer where the service account is installed.

  Incorrect Answers:

  A: The Set-ADServiceAccount cmdlet cannot modify the password of the service.

  References: Reset-ADServiceAccountPassword https://technet.microsoft.com/en-us/library/ee617201.aspx

• Question 368:

  HOTSPOT

  Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 and Server2 have the Hyper-V server role installed.

  Server1 and Server2 have different processor models from the same manufacturer.

  On Server1, you plan to create a virtual machine named VM1. Eventually, VM1 will be exported to Server2.

  You need to ensure that when you import VM1 to Server2, you can start VM1 from saved snapshots.

  What should you configure on VM1?

  To answer, select the appropriate node in the answer area.

  Hot Area:

  

  

  ---

  Use the Processor Compatibility Mode only in cases where VMs will migrate from one Hyper-V-enabled processor type to another within the same vendor processor family.

  Reference: When to Use Processor Compatibility Mode to Migrate Virtual Machines technet.microsoft.com/en-us/magazine/gg299590.aspx

• Question 369:

  Your network contains two Hyper-V clusters named Cluster1 and Cluster2. The clusters are configured as shown in the following table. Cluster1 contains a virtual machine named VM1.

  

  You need to configure a replica for VM1 on Cluster2.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  NOTE: Each correct selection is worth one point.

  A. Configure the virtual switch settings on all of the nodes.
  B. Configure the Hyper-V Replica Broker cluster role on Cluster2.
  C. Configure the Hyper-V Replica Broker cluster role on Cluster1.
  D. Configure the settings of VM1 on Cluster1.
  E. Configure the Hyper-V settings of Node3 and Node4.
  F. Configure the Hyper-V settings of Node1 and Node2.
  B. Configure the Hyper-V Replica Broker cluster role on Cluster2.
  C. Configure the Hyper-V Replica Broker cluster role on Cluster1.

  ---

  References: https://blogs.technet.microsoft.com/virtualization/2012/03/27/why-is-the-hyper-v-replica-broker-required/

• Question 370:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. All file servers in the domain run Windows Server 2012 R2.

  The computer accounts of the file servers are in an organizational unit (OU) named OU1. A Group Policy object (GPO) named GPO1 is linked to OU1.

  You plan to modify the NTFS permissions for many folders on the file servers by using central access policies.

  You need to identify any users who will be denied access to resources that they can currently access once the new permissions are implemented.

  In which order should you Perform the five actions?

  Select and Place:

  

  

  ---

  Configure a central access rule

  Configure a central access policy (CAP) (with help of central access rules)

  Deploy the central access policy (through GPO)

  Modify security settings

  Check the result

  Reference: Deploy a Central Access Policy (Demonstration Steps) http://technet.microsoft.com/en-us/library/hh846167.aspx