How to pass Microsoft 70-412 Real Exam in 24 Hours [exam prep 121-135]

70-412 Royal Pack Testengine pdf

100% Actual & Verified — 100% PASS

Unlimited access to the world's largest Dumps library! Try it Free Today!

Get it now →

Product Description:
Exam Number/Code: 70-412
Exam name: Configuring Advanced Windows Server 2012 Services
n questions with full explanations
Certification: Microsoft Certification
Last updated on Global synchronizing

Free Certification Real IT 70-412 Exam pdf Collection

Question No. 121

HOTSPOT 

You run Get-ISCSIServerTarget and you receive the following output. 


Use the drop-down menus to select the answer choice that completes each statement. 


Answer: 



Question No. 122

HOTSPOT 

You have a server named Server1 that runs Windows Server 2012 R2. The volumes on Server1 are configured as shown in the following table. 


A new corporate policy states that backups must use Windows Azure Online Backup whenever possible. 

You need to identify which backup methods you must use to back up Server1. The solution must use Windows Azure Online Backup whenever possible. 

Which backup type should you identify for each volume? 

To answer, select the appropriate backup type for each volume in the answer area. 



Answer: 



Question No. 123

Your network contains two Active Directory forests named contoso.com and adatum.com. All of the domain controllers in both of the forests run Windows Server 2012 R2. The adatum.com domain contains a file server named Servers. 

Adatum.com has a one-way forest trust to contoso.com. 

A contoso.com user name User10 attempts to access a shared folder on Servers and receives the error message shown in the exhibit. (Click the Exhibit button.) 


You verify that the Authenticated Users group has Read permissions to the Data folder. 

You need to ensure that User10 can read the contents of the Data folder on Server5 in the 

adatum.com domain. 

What should you do? 

A. Grant the Other Organization group Read permissions to the Data folder. 

B. Modify the list of logon workstations of the contoso\User10 user account. 

C. Enable the Netlogon Service (NP-In) firewall rule on Server5. 

D. Modify the permissions on the Server5 computer object in Active Directory. 

Answer:

Explanation: 

* To resolve the issue, I had to open up AD Users and Computers --> enable Advanced Features --> Select the Computer Object --> Properties --> Security --> Add the Group I want to allow access to the computer (in this case, DomainA\Domain users) and allow "Allowed to Authenticate". Once I did that, everything worked: 

* For users in a trusted Windows Server 2008 or Windows Server 2003 domain or forest to be able to access resources in a trusting Windows Server 2008 or Windows Server 2003 domain or forest where the trust authentication setting has been set to selective authentication, each user must be explicitly granted the Allowed to Authenticate permission on the security descriptor of the computer objects (resource computers) that reside in the trusting domain or forest. 

Reference: Grant the Allowed to Authenticate Permission on Computers in the Trusting Domain or Forest. 

http://technet.microsoft.com/en-us/library/cc816733(v=ws.10).aspx 


Question No. 124

HOTSPOT 

Your network contains one Active Directory domain. 

The domain contains an enterprise certification authority (CA). 

You need to ensure that members of a group named Group1 can issue certificates for the 

User certificate template only. 

Which two tabs should you use to perform the configuration? To answer, select the 

appropriate tabs in the answer area. 


Answer: 



Question No. 125

Your network contains an Active Directory forest named adatum.com. The forest contains an Active Directory Rights Management Services (AD RMS) cluster. 

A partner company has an Active Directory forest named litwareinc.com. The partner company does not have AD RMS deployed. 

You need to ensure that users in litwareinc.com can consume rights-protected content from adatum.com. 

Which type of trust policy should you create? 

A. At federated trust 

B. A trusted user domain 

C. A trusted publishing domain 

D. Windows Live ID 

Answer:

Explanation: 

In AD RMS rights can be assigned to users who have a federated trust with Active Directory Federation Services (AD FS). This enables an organization to share access to rights-protected content with another organization without having to establish a separate Active Directory trust or Active Directory Rights Management Services (AD RMS) infrastructure. 

Reference: AD RMS and AD FS Considerations 

http://technet.microsoft.com/en-us/library/dd772651(v=WS.10).aspx 


70-412 exam question

Question No. 126

DRAG DROP 

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012 R2. 

You configure a new failover cluster named Cluster1. Server1 and Server2 are nodes in Cluster1. You need to configure the disk that will be used as a witness disk for Cluster1. 

How should you configure the witness disk? 

To answer, drag the appropriate configurations to the correct location or locations. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 


Answer: 



Question No. 127

HOTSPOT 

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 and a server named Server1. Both servers run Windows Server 2012 R2. 

You configure the classification of a share on Server1 as shown in the Share1 Properties exhibit. (Click the Exhibit button.) 


You configure the resource properties in Active Directory as shown in the Resource Properties exhibit. (Click the Exhibit button.) 


You need to ensure that the Impact classification can be assigned to Share1 immediately. 

Which cmdlet should you run on each server? 

To answer, select the appropriate cmdlet for each server in the answer area. 



Answer: 



Question No. 128

You have a server named DNS1 that runs Windows Server 2012 R2. 

You discover that the DNS resolution is slow when users try to access the company intranet home page by using the URL http://companyhome. 

You need to provide single-label name resolution for CompanyHome that is not dependent on the suffix search order. 

Which three cmdlets should you run? (Each correct answer presents part of the solution. Choose three.) 

A. Add-DnsServerPrimaryZone 

B. Add-DnsServerResourceRecordCName 

C. Set-DnsServerDsSetting 

D. Set-DnsServerGlobalNameZone 

E. Set-DnsServerEDns 

F. Add-DnsServerDirectory Partition 

Answer: A,B,D 

Explanation: 

You can use this task to create a GlobalNames zone to maintain a set of single-label, Domain Name System (DNS) names that Windows Server 2008 DNS servers can resolve on behalf of DNS clients throughout a single forest in Active Directory Domain Services 

(AD DS). 

Deploying a GlobalNames zone in a single forest requires that you perform the following 

steps: 

. (A) Create a zone named GlobalNames that replicates to all domain controllers in the forest. 

. (B) Add an alias (CNAME) record to the zone for each host for which you want to provide single-label name resolution. For example, if you want DNS clients to be able to access a server whose fully qualified domain name (FQDN) is cweb.itgroup.contoso.com, add an alias (CNAME) resource record that maps the name cweb to cweb.igroup.contoso.com. 

Note: 

A. The Add-DnsServerPrimaryZone cmdlet adds a specified primary zone on a Domain Name System (DNS) server. 

B. The Add-DnsServerResourceRecordCName cmdlet adds a canonical name (CNAME) resource record to a specified Domain Name System (DNS) zone. A CNAME record allows you to use more than one resource record to refer to a single host 

D. The Set-DnsServerGlobalNameZone cmdlet enables or disables single-label Domain Name System (DNS) queries. It also changes configuration settings for a GlobalNames zone. The GlobalNames zone supports short, easy-to-use names instead of fully qualified domain names (FQDNs) without using Windows Internet Name Service (WINS) technology. For instance, DNS can query SarahJonesDesktop instead of SarahJonesDesktop.contoso.com. 

Reference: Adding a GlobalNames zone to a forest 

https://technet.microsoft.com/en-us/library/cc816717(v=ws.10).aspx 


Question No. 129

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. 

Server1 and Server2 are nodes in a Hyper-V cluster named Cluster1. Cluster1 hosts 10 virtual machines. All of the virtual machines run Windows Server 2012 R2 and are members of the domain. 

You need to ensure that the first time a service named Service1 fails on a virtual machine, the virtual machine is moved to a different node. 

You configure Service1 to be monitored from Failover Cluster Manager. 

What should you configure on the virtual machine? 

A. From the Recovery settings of Service1, set the First failure recovery action to Take No Action. 

B. From the General settings, modify the Startup type. 

C. From the Recovery settings of Service1, set the First failure recovery action to Restart the Service. 

D. From the General settings, modify the Service status. 

Answer:

Explanation: 

When a monitored service fails the Recovery features of the service will take action. 

Example: 


Service Recovery 

In this case for the first failure the service will be restarted by the Service Control Manager inside the guest operating system, if the service fails for a second time the service will again be restarted via guest operating system. In case of a third failure the Service Control Manager will take no action and the Cluster service running on the Hyper-V host will take over recovery actions. 

Reference: How to configure VM Monitoring in Windows Server 2012 


Question No. 130

You have a server named Server1 that runs Windows Server 2012 R2. 

A Microsoft Azure Backup of Server1 is created automatically every day. 

You need to view the items that are included in the backup. 

Which cmdlet should you run? 

A. Get-OBPolicyState 

B. Get-OBJob 

C. Get-OBPolicy 

D. Get-WBSummary 

Answer:

Reference: Technet, Get-OBPolicy 

https://technet.microsoft.com/en-us/library/hh770406(v=wps.630).aspx 


70-412 exam fees

Question No. 131

HOTSPOT 

Your network contains an Active Directory domain named contoso.com. 

You install the IP Address Management (IPAM) Server feature on a server named Server1 

and select Manual as the provisioning method. 

The IPAM database is located on a server named SQL1. 

You need to configure IPAM to use Group Policy Based provisioning. 

What command should you run first? 

To answer, select the appropriate options in the answer area. 



Answer: 



Question No. 132

Your network contains one Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2. All domain computers have certificates that are issued by a certification authority (CA) named Contoso CA. 

A user named User1 performs daily backups of the data on Server1 to a backup vault named Vault1. A user named User2 performs daily backups of the data on Server2 to a vault named Vault2. 

You have the administrative credentials for Server2. 

You need to restore the data from that last backup of Server1 to Server2. 

Which two pieces of information do you require to complete the task? Each correct answer presents part of the solution. 

A. the Microsoft Azure subscription credentials 

B. the Vault2 credentials 

C. the User1 credentials 

D. the Vault1 credentials 

E. the Server1 certificate 

F. the Server2 certificate 

G. the Server1 passphrase 

H. the Server2 passphrase 

Answer: D,G 

Explanation: We need the Vault1 credentials to be able to access the data in Vault1. We need the passphrase of Server1 to access the backup that was made on Server1. 

Reference: Microsoft Azure - Cloud Backup and Recovery 

http://blogs.technet.com/b/rmurphy/archive/2014/12/02/microsoft-azure-backup.aspx 


Question No. 133

Your network contains an Active Directory forest named contoso.com. 

Users frequently access the website of an external partner company. The URL of the website is http://partners.adatum.com. 

The partner company informs you that it will perform maintenance on its Web server and that the IP addresses of the Web server will change. 

After the change is complete, the users on your internal network report that they fail to access the website. However, some users who work from home report that they can access the website. 

You need to ensure that your DNS servers can resolve partners.adatum.com to the correct IP address immediately. 

What should you do? 

A. Run Set-DnsServerScavenging. 

B. Run ipconfig and specify the FlushDns parameter. 

C. RunSet-DnsServerResourceReeordAging. 

D. Run dnscmd and specify the ClearCache parameter. 

Answer:

Explanation: 

Clear the DNS cache on the DNS server with either Dnscmd /ClearCache (from command prompt) or Clear-DnsServerCache (from Windows PowerShell). 

Reference: Technet, Dnscmd 


Question No. 134

Information and details provided in a question App1y only to that question. 

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. 

Server1 and Server2 have the Network Load Balancing (NLB) feature installed. The servers are configured as nodes in an NLB cluster named Cluster1. 

Cluster1 hosts a secure web Application named WebApp1. WebApp1 saves user state information locally on each node. 

You need to ensure that when users connect to WebApp1, their session state is maintained. 

What should you configure? 

A. Affinity-None 

B. Affinity-Single 

C. The cluster quorum settings 

D. The failover settings 

E. A file server for general use 

F. The Handling priority 

G. The host priority 

H. Live migration 

I. The possible owner 

J. The preferred owner 

K. Quick migration 

L. the Scale-Out File Server 

Answer:

Explanation: 

Client Affinity NLB offers three types of client affinity to minimize response time to clients and provide generic support for preserving session state. Each affinity specifies a different method for distributing client requests. 

Affinity Single: Single Multiple requests from the same client must access the same member; useful for clusters 

within an intranet. 

This affinity provides the best support for clients that use sessions on an intranet. These 

clients cannot use No affinity because their sessions could be disrupted. 

Incorrect: 

Not A. Affinity none: Multiple requests from the same client can access any member; useful 

for clusters that do not store session state information on individual members. 

Reference: Using NLB 

http://technet.microsoft.com/en-us/library/bb687542.aspx 


Question No. 135

Your network contains one Active Directory domain named contoso.com. The domain contains the domain controllers configured as shown in the following table. 


The functional level of the domain and the forest is Windows Server 2008. 

An administrator named Admin1 is a member of the Domain Admins group. 

You need to ensure that Admin1 can deploy a Windows Server 2012 R2 domain controller to contoso.com. 

What should you do? 

A. Raise the forest functional level. 

B. Run the Set-ADForestMode cmdlet. 

C. Raise the domain functional level. 

D. Run the adprep.exe command. 

Answer:

Explanation: Adprep.exe commands run automatically as needed as part of the AD DS installation process on servers that run Windows Server 2012 or later. The commands need to run in the following cases: 

* Before you add the first domain controller that runs a version of Windows Server that is later than the latest version that is running in your existing domain. 

* Before you upgrade an existing domain controller to a later version of Windows Server, if that domain controller will be the first domain controller in the domain or forest to run that version of Windows Server. 

Reference: Running Adprep.exe 

https://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx