If you are not prepared for Microsoft 70-412 exam, please don’t worry. You can pass Microsoft 70-412 exam very simply and easily with our free 70-412 dumps. With our braindumps you shall get GreatExam 70-412 PDF & VCE. After preparing from our free Microsoft 70-412 GreatExam practice test you shall not only pass this exam as well you will get good marks in very short time.
QUESTION 361
Note: This questions is part of series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
Your network contains one Active Directory forest named contoso.com.
The forest contains two child domains and six domain controllers.
The domain controllers are configured as shown in the following table.
You need to replicate users who haven’t authenticated against any domain controllers for the last 7 days.
What should you use?
A. Set-ADSite
B. Set-ADReplicationSite
C. Set-ADDomain
D. Set-ADReplicationSiteLink
E. Set-ADGroup
F. Set-ADForest
G. Netdom
Answer: C
Explanation:
https://technet.microsoft.com/en-us/library/ee617212.aspx
QUESTION 362
Note: This questions is part of series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
Your network contains one Active Directory forest named contoso.com.
The forest contains two child domains and six domain controllers.
The domain controllers are configured as shown in the following table.
You need to enable universal group membership caching for the Europe office and Asia office sites.
What should you use?
A. Set-ADSite
B. Set-ADReplicationSite
C. Set-ADDomain
D. Set-ADReplicationSiteLink
E. Set-ADGroup
F. Set-ADForest
G. Netdom
Answer: B
Explanation:
https://technet.microsoft.com/en-us/library/hh852305(v=wps.630).aspx
QUESTION 363
Note: This questions is part of series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
Your network contains one Active Directory forest named contoso.com.
The forest contains two child domains and six domain controllers.
The domain controllers are configured as shown in the following table.
For the contoso.com domain, a company policy states that administrators must be able to retrieve a list of all the users who have not logged on to the network in the last seven days from any domain controller.
You need to ensure that the users’ last logon information from the last seven days is replicated to all of the domain controllers.
What should you use?
A. Set-ADSite
B. Set-ADReplicationSite
C. Set-ADDomain
D. Set-ADReplicationSiteLink
E. Set-ADGroup
F. Set-ADForest
G. Netdom
Answer: C
Explanation:
https://technet.microsoft.com/en-us/library/ee617212.aspx
QUESTION 364
You have an enterprise certification authority (CA) named CA1.
You configure a recovery agent for CA1.
On CA1, you create a new certificate template named CertTemplate1, and then you configure CA1 to allow certificates to be requested based on CertTemplate1.
You need to ensure that new certificates issued based on CertTemplate1 can be recovered.
What should you do?
A. From the Certification Authority console, modify the enrollment agents of CA1.
B. From the Certification Authority console, modify the enrollment managers of CA1.
C. From the Certification Templated console, modify the Issuance Requirements setting of CertTemplate1.
D. From the Certification Templated console, modify the Request Handling setting of CertTemplate1.
Answer: C
QUESTION 365
Your network contains one Active Directory domain.
The domain contains two Hyper-V hosts named Host1 and Host2 that run Windows Server 2012 R2.
Host1 contains a virtual machine named VM1.
You plan to move VM1 to Host2.
You need to generate a report that lists any configuration issues on Host2 that will prevent VM1 from being moved successfully.
Which cmdlet should you use?
A. Move-VM
B. Test-VHD
C. Debug-VM
D. Compare-VM
Answer: D
Explanation:
https://technet.microsoft.com/en-us/library/hh848612(v=wps.630).aspx
QUESTION 366
Hotspot Question
You run Get-ISCSIServerTarget and you receive the following output.
Use the drop-down menus to select the answer choice that completes each statement.
Answer:
QUESTION 367
Hotspot Question
Your network contains one Active Directory forest named contoso.com.
The forest contains the domain controllers configured as shown in the following table.
You perform the following actions:
– Create a file named File1.txt in the SYSVOL folder on DC1.
– Create a user named User1 on DC4.
You need to identify on which domain controller or controllers a copy of each object is stored.
What should you identify? To answer, select the appropriate options in the answer area.
Answer:
QUESTION 368
Note: This questions is part of series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
Your network contains one Active Directory forest named contoso.com.
The forest contains two child domains and six domain controllers.
The domain controllers are configured as shown in the following table.
You need to prevent administrators from accidentally deleting any of the sites in the forest.
What should you use?
A. Set-ADSite
B. Set-ADReplicationSite
C. Set-ADDomain
D. Set-ADReplicationSiteLink
E. Set-ADGroup
F. Set-ADForest
G. Netdom
Answer: B
Explanation:
The Set-ADReplicationSite sets the replication properties for an Active Directory site.
Parameter: -ProtectedFromAccidentalDeletion<Boolean> Specifies whether to prevent the object from being deleted. When this property is set to $True, you cannot delete the corresponding object without changing the value of the property. The acceptable values for this parameter are:
— $False or 0
— $True or 1
https://technet.microsoft.com/en-us/library/hh852305(v=wps.630).aspx
QUESTION 369
Hotspot Question
You build a test environment. The test environment contains one Active Directory forest.
The forest contains a single domain named contoso.com.
The domain contains the servers configured as shown in the following table.
You run the following commands.
New-ADReplicationSite Site1
New-ADReplicationSite Site2
New-ADReplicationSubnet -Name “192.168.1.0/24” -Site Site1
New-ADReplicationSubnet -Name “192.168.2.0/24” -Site Site2
New-ADReplicationSiteLink -Name “SiteLink1” -SitesIncluded Site1,Site2 -Cost 100 – ReplicationFrequencyInMinutes 15
You promote Server3 and Server4 to domain controllers by using the default options.
Use the drop-down menus to select the answer choice that completes each statement.
Answer:
Explanation:
The first should be:
– “Be replicated to DC2 only” – with the “Bridge all Site Links” option disabled, because DC1 and DC2 are in the same default site and both sites 1 and 2 are not connected to the defaut site.
– “All domain controller in the domain contoso.com” — with the “Bridge all Site Links” option enabled, because each DC is connected to each other.
The second should be:
– “Never been replicated” (“to all domain contoso.com) — with the “Bridge all Site Links” option disabled, because Defaut site link shouldn’t be connected to any sites 1 and 2.
– “Take two replication cycles” – with the “Bridge all Site Links” option enabled. One from Site2 to Site1, and one from Site2 to Default Site.
QUESTION 370
You have a failover cluster named Cluster1 that contains four nodes.
All of the nodes run Windows Server 2012 R2.
You need to schedule the installation of Windows updates on the cluster nodes.
Which tool should you use?
A. the Add-CauClusterRole cmdlet
B. the Wusa command
C. the Wuauclt command
D. the Invoke-CauScan cmdlet
Answer: D
Explanation:
http://technet.microsoft.com/en-us/library/hh847228.aspx
QUESTION 371
Hotspot Question
Your network contains one Active Directory domain.
The domain contains an enterprise certification authority (CA).
You need to ensure that members of a group named Group1 can issue certificates for the User certificate template only.
Which two tabs should you use to perform the configuration? To answer, select the appropriate tabs in the answer area.
Answer:
QUESTION 372
Your network contains an Active Directory domain named contoso.com.
A previous administrator implemented a Proof of Concept installation of Active Directory Rights Management Services (AD RMS) on a server named Server1.
After the proof of concept was complete, the Active Directory Rights Management Services server role was removed.
You attempt to deploy AD RMS.
During the configuration of AD RMS, you receive an error message indicating that an existing AD RMS Service Connection Point (SCP) was found.
You need to ensure that clients will only attempt to establish connections to the new AD RMS deployment.
Which should you do?
A. From DNS, remove the records for Server1.
B. From DNS, increase the priority of the DNS records for the new deployment of AD RMS.
C. From Active Directory, remove the computer object for Server1.
D. From Active Directory, remove the SCP.
Answer: D
Explanation:
The Active Directory Rights Management Services (AD RMS) Service Connection Point (SCP) is an object in Active Directory that holds the web address of the AD RMS certification cluster. AD RMS-enabled applications use the SCP to discover the AD RMS service; it is the first connection point for users to discover the AD RMS web services.
Only one SCP can exist in your Active Directory forest. If you try to install AD RMS and an SCP already exists in your forest from a previous AD RMS installation that was not properly deprovisioned, the new SCP will not install properly. It must be removed before you can establish the new SCP.
http://social.technet.microsoft.com/wiki/contents/articles/710.the-ad-rms-service-connection-point.aspx
QUESTION 373
Your network contains one Active Directory domain named contoso.com.
The domain contains the domain controllers configured as shown in the following table.
The functional level of the domain and the forest is Windows Server 2008.
An administrator named Admin1 is a member of the Domain Admins group.
You need to ensure that Admin1 can deploy a Windows Server 2012 R2 domain controller to contoso.com.
What should you do?
A. Raise the forest functional level.
B. Run the Set-ADForestMode cmdlet.
C. Raise the domain functional level.
D. Run the adprep.exe command.
Answer: D
Explanation:
Adprep.exe commands run automatically as needed as part of the AD DS installation process on servers that run Windows Server 2012 or later. The commands need to run in the following cases:
* Before you add the first domain controller that runs a version of Windows Server that is later than the latest version that is running in your existing domain.
* Before you upgrade an existing domain controller to a later version of Windows Server, if that domain controller will be the first domain controller in the domain or forest to run that version of Windows Server.
https://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx
QUESTION 374
You have a DNS server named Server1 that runs Windows Server 2012 R2.
Server1 has the zones shown in the following output.
You need to delegate permissions to modify the records in the adatum.com zone to a group named Group1.
What should you do first?
A. Enable the distribution of the trust anchors for adatum.com.
B. Unsign adatum.com.
C. Store adatum.com in Active Directory.
D. Update the server data file for adatum.com.
Answer: B
Explanation:
When a zone is signed with DNSSEC, the DNS server will explicitly block attempts to change the zone replication scope or zone type. This is primarily to avoid complexities related to key storage when DNSSEC signing keys are stored in Active Directory. To change the zone replication scope, you must first unsign the zone.
https://technet.microsoft.com/en-us/library/dn593637.aspx#poc
QUESTION 375
Your network contains one Active Directory domain named contoso.com.
The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2.
All domain computers have certificates that are issued by a certification authority (CA) named Contoso CA.
A user named User1 performs daily backups of the data on Server1 to a backup vault named Vault1. A user named User2 performs daily backups of the data on Server2 to a vault named Vault2.
You have the administrative credentials for Server2.
You need to restore the data from that last backup of Server1 to Server2.
Which two pieces of information do you require to complete the task? Each correct answer presents part of the solution.
A. the Microsoft Azure subscription credentials
B. the Vault2 credentials
C. the User1 credentials
D. the Vault1 credentials
E. the Server1 certificate
F. the Server2 certificate
G. the Server1 passphrase
H. the Server2 passphrase
Answer: DG
Explanation:
We need the Vault1 credentials to be able to access the data in Vault1.
We need the passphrase of Server1 to access the backup that was made on Server1.
http://blogs.technet.com/b/rmurphy/archive/2014/12/02/microsoft-azure-backup.aspx
If you want to prepare for 70-412 exam in shortest time, with minimum effort but for most effective result, you can use GreatExam 70-412 practice test which simulates the actual testing environment and allows you to focus on various sections of 70-412 exam. Our candidates walk into the testing room as confident as a Certification Administrator. So you can pass the exam without any question.
Comments are closed.