70-412 Exam Questions - Online Test

70-412 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Exam Code: microsoft 70 412 (Practice Exam Latest Test Questions VCE PDF)
Exam Name: Configuring Advanced Windows Server 2012 Services
Certification Provider: Microsoft
Free Today! Guaranteed Training- Pass 70 412 vce Exam.

Q21. You have a server named Server1 that runs Windows Server 2012 R2. 

You start Server1 by using Windows RE. 

You need to repair the Boot Configuration Data (BCD) store on Server1. 

Which tool should you use? 

A. Bootim 

B. Bootsect 

C. Bootrec 

D. Bootcfg 

Answer: C

Q22. HOTSPOT 

Your network contains one Active Directory forest named adatum.com. The forest contains a single domain. 

The forest contains the domain controllers configured as shown in the following table. 

Recently, a domain controller named DC4 was deployed to adatum.com. DC4 is in the Default-First-Site-Name site. 

The adatum.com site links are configured as follows. 

The schedule for SiteLink1 is shown in the SiteLink1 exhibit. (Click the Exhibit button.) 

The schedule for SiteLink2 is shown in the SiteLink2 exhibit. (Click the Exhibit button.) 

For each of the following statements, select Yes if the statement is true. Otherwise, select No. 

Answer: 

Q23. Your network contains two servers named HV1 and HV2. Both servers run Windows Server 2012 R2 and have the Hyper-V server role installed. 

HV1 hosts 25 virtual machines. The virtual machine configuration files and the virtual hard disks are stored in D:\VM. 

You shut down all of the virtual machines on HV1. 

You copy D:\VM to D:\VM on HV2. 

You need to start all of the virtual machines on HV2. You want to achieve this goal by using the minimum amount of administrative effort. 

What should you do? 

A. Run the Import-VMInitialReplication cmdlet. 

B. From HV1, export all virtual machines to D:\VM. Copy D:\VM to D:\VM on HV2 and overwrite the existing files. On HV2, run the Import Virtual Machine wizard. 

C. From HV1, export all virtual machines to D:\VM. Copy D:\VM to D:\VM on HV2 and overwrite the existing files. On HV2, run the New Virtual Machine wizard. 

D. Run the Import-VM cmdlet. 

Answer: D 

Explanation: 

Import-VM 

Imports a virtual machine from a file. 

Example 

Imports the virtual machine from its configuration file. The virtual machine is registered in-

place, so its files are not copied. 

Windows PowerShell 

PS C:\> Import-VM –Path 'D:\Test\VirtualMachines\5AE40946-3A98-428E-8C83-081A3C6BD18C.XML' 

Reference: Import-VM 

Q24. Your network contains two Active Directory forests named contoso.com and adatum.com. Each forest contains one domain. Contoso.com has a two-way forest trust to adatum.com. Selective authentication is enabled on the forest trust. 

Contoso contains 10 servers that have the File Server role service installed. Users successfully access shared folders on the file servers by using permissions granted to the Authenticated Users group. 

You migrate the file servers to adatum.com. 

Contoso users report that after the migration, they are unable to access shared folders on the file servers. 

You need to ensure that the Contoso users can access the shared folders on the file servers. 

What should you do? 

A. Disable selective authentication on the existing forest trust. 

B. Disable SID filtering on the existing forest trust. 

C. Run netdom and specify the /quarantine attribute. 

D. Replace the existing forest trust with an external trust. 

Answer: B 

Explanation: 

Although it is not recommended, you can use this procedure to disable security identifier (SID) filter quarantining for an external trust with the Netdom.exe tool. You should consider disabling SID filter quarantining only in the following situations: 

* Users have been migrated to the trusted domain with their SID histories preserved, and you want to grant those users access to resources in the trusting domain (the former domain of the migrated users) based on the sIDHistory attribute. 

Etc. 

Reference: Disabling SID filter quarantining 

http://technet.microsoft.com/en-us/library/cc794713(v=ws.10).aspx 

Q25. HOTSPOT 

Your network contains an Active Directory domain named contoso.com. The domain contains two Active Directory sites named Site1 and Site2. 

You need to configure the replication between the sites to occur by using change notification. 

Which attribute should you modify? 

Answer: 

Q26. Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1 has the DNS Server server role installed. 

The network contains client computers that run either Linux, Windows 7, or Windows 8. 

You have a standard primary zone named adatum.com as shown in the exhibit. (Click the Exhibit button.) 

You plan to configure Name Protection on all of the DHCP servers. 

You need to configure the adatum.com zone to support Name Protection. 

Which two configurations should you perform from DNS Manager? (Each correct answer presents part of the solution. Choose two.) 

A. Sign the zone. 

B. Store the zone in Active Directory. 

C. Modify the Security settings of the zone. 

D. Configure Dynamic updates. 

E. Add a DNS key record 

Answer: B,D 

Explanation:

Name protection requires secure update to work. Without name protection DNS names may be hijacked.

You can use the following procedures to allow only secure dynamic updates for a zone.

Secure dynamic update is supported only for Active Directory–integrated zones. If the zone type is configured differently, you must change the zone type and directory-integrate the zone before securing it for Domain Name System (DNS) dynamic updates.

1. (B) Convert primary DNS server to Active Directory integrated primary

2. (D) Enable secure dynamic updates

Reference: DHCP: Secure DNS updates should be configured if Name Protection is enabled on any IPv4 scope

http://technet.microsoft.com/en-us/library/ee941152(v=ws.10).aspx

Q27. HOTSPOT 

Your network contains one Active Directory forest named contoso.com. The forest contains the domain controllers configured as shown in the following table. 

You perform the following actions: 

. Create a file named File1.txt in the SYSVOL folder on DC1. 

. Create a user named User1 on DC4. You need to identify on which domain controller or controllers a copy of each object is stored. 

What should you identify? To answer, select the appropriate options in the answer area. 

Answer: 

Q28. You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the DNS Server server role installed. 

You need to configure Server1 to resolve queries for single-label DNS names. 

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) 

A. Run the Set-DNSServerGlobalNameZone cmdlet. 

B. Modify the DNS suffix search list setting. 

C. Modify the Primary DNS Suffix Devolution setting. 

D. Create a zone named “.”. 

E. Create a zone named GlobalNames. 

F. Run the Set-DNSServerRootHint cmdlet. 

Answer: A,E 

Explanation: 

Deploying a GlobalNames zone 

The specific steps for deploying a GlobalNames zone can vary somewhat, depending on 

the AD DS topology of your network. 

Step 1: Create the GlobalNames zone (E) 

Step 2: Enable GlobalNames zone support (A) 

The Set-DnsServerGlobalNameZone cmdlet enables or disables single-label Domain 

Name System (DNS) queries. It also changes configuration settings for a GlobalNames 

zone. 

Etc. 

Reference: Deploying a GlobalNames Zone; Set-DnsServerGlobalNameZone 

http://technet.microsoft.com/en-us/library/cc731744.aspx 

http://technet.microsoft.com/en-us/library/jj649907(v=wps.620).aspx 

Q29. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role installed and is configured as an enterprise certification authority (CA). 

You need to ensure that all of the users in the domain are issued a certificate that can be used for the following purposes: 

Email security 

Client authentication 

Encrypting File System (EFS) 

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) 

A. From a Group Policy, configure the Certificate Services Client – Auto-Enrollment settings. 

B. From a Group Policy, configure the Certificate Services Client – Certificate Enrollment Policy settings. 

C. Modify the properties of the User certificate template, and then publish the template. 

D. Duplicate the User certificate template, and then publish the template. 

E. From a Group Policy, configure the Automatic Certificate Request Settings settings. 

Answer: A,D 

Explanation: 

The default user template supports all of the requirements EXCEPT auto enroll as shown below: 

However a duplicated template from users has the ability to autoenroll: 

The Automatic Certificate Request Settings GPO setting is only available to Computer, not user. 

Reference: Manage Certificate Enrollment Policy by Using Group Policy. http://technet.microsoft.com/en-us/library/dd851772.aspx 

Q30. DRAG DROP 

Your network contains an Active Directory domain named contoso.com. 

You need to ensure that third-party devices can use Workplace Join to access domain resources on the Internet. 

Which four actions should you perform in sequence? 

To answer, move the appropriate four actions from the list of actions to the answer area 

and arrange them in the correct order. 

Answer: