What Simulation 70-412 exam question Is?

70-412 Dumps

70-412 Exam Questions - Online Test

70-412 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Your success in Microsoft 70 412 vce is our sole target and we develop all our exam 70 412 braindumps in a way that facilitates the attainment of this target. Not only is our mcsa 70 412 study material the best you can find, it is also the most detailed and the most updated. 70 412 exam dumps Practice Exams for Microsoft Windows Server 70 412 exam are written to the highest standards of technical accuracy.

Q11. Your network contains an Active Directory domain named contoso.com. The domain

contains two member servers named Server1 and Server2.

You install the DHCP Server server role on Server1 and Server2. You install the IP

Address Management (IPAM) Server feature on Server1.

You notice that you cannot discover Server1 or Server2 in IPAM.

You need to ensure that you can use IPAM to discover the DHCP infrastructure.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. On Server2, create an IPv4 scope.

B. On Server1, run the Add-IpamServerInventory cmdlet.

C. On Server2, run the Add-DhcpServerInDc cmdlet

D. On both Server1 and Server2, run the Add-DhcpServerv4Policy cmdlet.

E. On Server1, uninstall the DHCP Server server role.

Answer: B,C

Explanation:

B. The Add-IpamServerInventory cmdlet adds a new infrastructure server to the IP Address Management (IPAM) server inventory. Use the fully qualified domain name (FQDN) of the server to add to the server inventory.

C. The Add-DhcpServerInDC cmdlet adds the computer running the DHCP server service to the list of authorized Dynamic Host Configuration Protocol (DHCP) server services in the Active Directory (AD). A DHCP server service running on a domain joined computer needs to be authorized in AD so that it can start leasing IP addresses on the network.

Reference: Add-IpamServerInventory; Add-DhcpServerInDC

Q12. Your network contains an Active Directory domain named contoso.com. The domain

contains a certification authority (CA).

You suspect that a certificate issued to a Web server is compromised.

You need to minimize the likelihood that users will trust the compromised certificate.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. Stop the Certificate Propagation service.

B. Modify the validity period of the Web Server certificate template.

C. Run certutil and specify the -revoke parameter.

D. Run certutil and specify the -deny parameter.

E. Publish the certificate revocation list (CRL).

Answer: C,E

Explanation: First revoke the certificate, then publish the CRL.

Q13. HOTSPOT

You have a file server named Server1 that runs Windows Server 2012 R2.

You need to ensure that you can use the NFS Share - Advanced option from the New

Share Wizard in Server Manager.

Which two role services should you install?

To answer, select the appropriate two role services in the answer area.

Answer:

Q14. Your network contains an Active Directory forest named adatum.com. The forest contains an Active Directory Rights Management Services (AD RMS) cluster.

A partner company has an Active Directory forest named litwareinc.com. The partner company does not have AD RMS deployed.

You need to ensure that users in litwareinc.com can consume rights-protected content from adatum.com.

Which type of trust policy should you create?

A. At federated trust

B. A trusted user domain

C. A trusted publishing domain

D. Windows Live ID

Answer: A

Explanation:

In AD RMS rights can be assigned to users who have a federated trust with Active Directory Federation Services (AD FS). This enables an organization to share access to rights-protected content with another organization without having to establish a separate Active Directory trust or Active Directory Rights Management Services (AD RMS) infrastructure.

Reference: AD RMS and AD FS Considerations

http://technet.microsoft.com/en-us/library/dd772651(v=WS.10).aspx

Q15. You have a server named FS1 that runs Windows Server 2012 R2.

You install the File and Storage Services server role on FS1.

From Windows Explorer, you view the properties of a shared folder named Share1 and you

discover that the Classification tab is missing.

You need to ensure that you can assign classifications to Share1 from Windows Explorer

manually.

What should you do?

A. From Folder Options, select Show hidden files, folders, and drives.

B. From Folder Options, clear Use Sharing Wizard (Recommend).

C. Install the File Server Resource Manager role service.

D. Install the Enhanced Storage feature.

Answer: C

Explanation:

On the Classification tab of the file properties in Windows Server 2012, File Classification Infrastructure adds the ability to manually classify files. You can also classify folders so that any file added to the classified folder will inherit the classifications of the parent folder.

Reference: What's New in File Server Resource Manager in Windows Server

Q16. Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 has the IP Address Management (IPAM) Server feature installed.

A technician performs maintenance on Server1.

After the maintenance is complete, you discover that you cannot connect to the IPAM server on Server1.

You open the Services console as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can connect to the IPAM server.

Which service should you start?

A. Windows Process Activation Service

B. Windows Event Collector

C. Windows Internal Database

D. Windows Store Service (WSService)

Answer: C

Explanation:

Explanation Windows Internal Database

Windows Internal Database is a relational data store that can be used only by Windows

roles and features.

IPAM does not support external databases. Only a Windows Internal Database is

supported.

IPAM stores 3 years of forensics data (IP address leases, host MAC addresses, user

database purge policy provided, and the administrator must purge data manually as

needed.

Incorrect:

Not A. IPAM works even if the Windows Process Activation Service is not running.

Not B. IPAM does not require the Windows Event Collector Service. It need to be running

on the managed DC/DNS/DHCP computers.

Not D. IPAM does not require the Windows Store Service. It provides infrastructure support

for Windows Store.This service is started on demand and if disabled applications bought

using Windows Store will not behave correctly.

Reference: IPAM Deployment Planning

Q17. Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and childl.contoso.com. The domains contain three domain controllers.

The domain controllers are configured as shown in the following table.

You need to ensure that the KDC support for claims, compound authentication, and kerberos armoring setting is enforced in the child1.contoso.com domain.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. Upgrade DC1 to Windows Server 2012 R2.

B. Upgrade DC11 to Windows Server 2012 R2.

C. Raise the domain functional level of childl.contoso.com.

D. Raise the domain functional level of contoso.com.

E. Raise the forest functional level of contoso.com.

Answer: A,D

Explanation:

The root domain in the forest must be at Windows Server 2012 level. First upgrade DC1 to this level (A), then raise the contoso.com domain functional level to Windows Server 2012 (D).

* (A) To support resources that use claims-based access control, the principal’s domains will need to be running one of the following: / All Windows Server 2012 domain controllers / Sufficient Windows Server 2012 domain controllers to handle all the Windows 8 device authentication requests / Sufficient Windows Server 2012 domain controllers to handle all the Windows Server

2012 resource protocol transition requests to support non-Windows 8 devices. Reference: What's New in Kerberos Authentication http://technet.microsoft.com/en-us/library/hh831747.aspx.

Q18. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DHCP Server server role installed. Server1 has an IPv6 scope named Scope1.

You implement an additional DHCP server named Server2 that runs Windows Server 2012 R2.

You need to provide high availability for Scope1. The solution must minimize administrative effort.

What should you do?

A. Install and configure Network Load Balancing (NLB) on Server1 and Server2.

B. Create a scope on Server2.

C. Configure DHCP failover on Server1.

D. Install and configure Failover Clustering on Server1 and Server2.

Answer: C

Explanation:

Overview: Configure DHCP failover using the DHCP console To configure DHCP failover using the DHCP console, right-click a DHCP scope or right-click IPv4 and then click Configure Failover.

Configure Failover

The Configure Failover wizard guides you through configuring DHCP failover on the

selected scope.

Note: The DHCP server failover feature, available in Windows Server 2012 and later,

provides the ability to have two DHCP servers provide IP addresses and option

configuration to the same subnet or scope, providing for continuous availability of DHCP

service to clients.

Incorrect:

Not A. NLB is not related to DHCP scope availability.

Not B. DHCP failover requirements include:

DHCP Scopes requirement:

At least one IPv4 DHCP scope must be configured on the primary DHCP server.

The same DHCP scope ID, or an overlapping scope, must not be configured on the failover

partner.

Not D. Failover clustering is possibly, but would not minimize administration.

Reference: Deploy DHCP Failover

Q19. HOTSPOT

You have a server that runs Windows Server 2012 R2 and has the iSCSI Target Server role service installed.

You run the New-IscsiVirtualDisk cmdlet as shown in the New-IscsiVirtualDisk exhibit. (Click the Exhibit button.)

To answer, complete each statement according to the information presented in the exhibits. Each correct selection is worth one point.

Answer:

Q20. Your network contains an Active Directory domain named contoso.com.

A previous administrator implemented a Proof of Concept installation of Active Directory

Rights Management Services (AD RMS).

After the proof of concept was complete, the Active Directory Rights Management Services

server role was removed.

You attempt to deploy AD RMS.

During the configuration of AD RMS, you receive an error message indicating that an

existing AD RMS Service Connection Point (SCP) was found.

You need to remove the existing AD RMS SCP.

Which tool should you use?

A. Active Directory Users and Computers

B. Authorization Manager

C. Active Directory Domains and Trusts

D. Active Directory Sites and Services

E. Active Directory Rights Management Services

Answer: E

Explanation:

ADRMS will registered the Service Connection Point (SCP) in Active Directory and you will need to unregister first before you remove the ADRMS server role.

If your ADRMS server is still alive, you can easily manually remove the SCP by below:

http://www.rickygao.com/wp-content/uploads/2013/08/080513_1308_Howtomanual1.png

http://www.rickygao.com/wp-content/uploads/2013/08/080513_1308_Howtomanual2.png Reference: How to manually remove or reinstall ADRMS