Free VCE and PDF Exam Dumps from PassLeader
Vendor: Microsoft Exam Code: 70-412
Exam Name: Configuring Advanced Windows Server 2012 R2 Services
Question 51 -- Question 100
Visit PassLeader and Download Full Version 70-412 Exam Dumps QUESTION 51 You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the DNS Server server role installed. You need to configure Server1 to resolve queries for single-label DNS names. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. B. C. D. E. F.
Run the Set-DNSServerGlobalNameZone cmdlet. Modify the DNS suffix search list setting. Modify the Primary DNS Suffix Devolution setting. Create a zone named ".". Create a zone named GlobalNames. Run the Set-DNSServerRootHint cmdlet.
Answer: AE Explanation: http://technet.microsoft.com/en-us/library/cc731744.aspx http://technet.microsoft.com/en-us/library/jj649907(v=wps.620).aspx
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 52 Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the IP Address Management (IPAM) Server feature installed. Server2 has the DHCP Server server role installed. A user named User1 is a member of the IPAM Users group on Server1. You need to ensure that User1 can use IPAM to modify the DHCP scopes on Server2. The solution must minimize the number of permissions assigned to User1. To which group should you add User1? A. B. C. D.
DHCP Administrators on Server2 IPAM ASM Administrators on Server1 IPAMUG in Active Directory IPAM MSM Administrators on Server1
Answer: A Explanation: The user need rights to change DHCP not IPAM C. Members of the DHCP Administrators group can view and modify any data at the DHCP server. http://technet.microsoft.com/en-us/library/jj878348.aspx http://technet.microsoft.com/en-us/library/cc737716(v=ws.10).aspx QUESTION 53 You have a server named DC2 that runs Windows Server 2012 R2. DC2 contains a DNS zone named adatum.com. The adatum.com zone is shown in the exhibit. (Click the Exhibit button.)
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
You need to configure DNS clients to perform DNSSEC validation for the adatum.com DNS domain. What should you configure? A. B. C. D.
The Network Location settings A Name Resolution Policy The DNS Client settings The Network Connection settings
Answer: B B. The Name Resolution Policy Table (NRPT) is a table that contains rules you can configure to specify DNS settings or special behavior for names or namespaces. The NRPT can be configured using Group Policy or by using the Windows Registry. C. client component that resolves and caches Domain Name System (DNS) domain names. When the DNS Client service receives a request to resolve a DNS name that it does not contain in its cache, it queries an assigned DNS server for an IP address for the name D. Network connections make it possible for computers to access resources on the network and the internet http://technet.microsoft.com/en-us/library/hh831411.aspx#config_client1
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 54 Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the DHCP Server server role installed. Server2 has the Hyper-V server role installed. Server2 has an IP address of 192.168.10.50. Server1 has a scope named Scope1 for the 192.168.10.0/24 network. You plan to deploy 20 virtual machines on Server2 that will be connected to the external network. The MAC addresses for the virtual machines will begin with 00-15-SD-83-03. You need to configure Server1 to offer the virtual machines IP addresses from 192.168.10.200 to 192.168.10.219. Physical computers on the network must be offered IP addresses outside this range. You want to achieve this goal by using the minimum amount of administrative effort. What should you do from the DHCP console? A. B. C. D.
Create reservations. Create a policy. Delete Scope1 and create two new scopes. Configure Allow filters and Deny filters.
Answer: B Explanation: A. With client reservations, it is possible to reserve a specific IP address for permanent use by a DHCP client. A new feature in Windows Server 2012 R2 called policy based assignment allows for even greater flexibility. B. Policy based assignment allows the policy to be scoped to a MAC address and IP range C. 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader D. A DHCP server offers its services to the DHCP clients based on the availability of MAC address filtering. Once the Allow filter is set, all DHCP operations are based on the access controls (allow/deny). http://blogs.technet.com/b/teamdhcp/archive/2012/08/22/granular-dhcp-serveradministrationusing-dhcppolicies-in-windows-server-2012.aspx http://technet.microsoft.com/en-us/library/hh831538.aspx http://technet.microsoft.com/en-us/library/ee405265(v=ws.10).aspx QUESTION 55 Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 has the IP Address Management (IPAM) Server feature installed. A technician performs maintenance on Server1. After the maintenance is complete, you discover that you cannot connect to the IPAM server on Server1. You open the Services console as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that you can connect to the IPAM server. Which service should you start? A. Windows Process Activation Service B. windows Event Collector C. Windows Internal Database 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader D. Windows Store Service (WSService) Answer: C QUESTION 56 Your network contains two Active Directory forests named contoso.com and adatum.com. All of the domain controllers in both of the forests run Windows Server 2012 R2. The adatum.com domain contains a file server named Servers. Adatum.com has a one-way forest trust to contoso.com. A contoso.com user name User10 attempts to access a shared folder on Servers and receives the error message shown in the exhibit. (Click the Exhibit button.)
You verify that the Authenticated Users group has Read permissions to the Data folder. You need to ensure that User10 can read the contents of the Data folder on Server5 in the adatum.com domain. What should you do? A. B. C. D.
Grant the Other Organization group Read permissions to the Data folder. Modify the list of logon workstations of the contoso\User10 user account. Enable the Netlogon Service (NP-In) firewall rule on Server5. Modify the permissions on the Server5 computer object in Active Directory.
Answer: D Explanation: To resolve the issue, I had to open up AD Users and Computers --> enable Advanced Features -> Select the Computer Object --> Properties --> Security --> Add the Group I want to allow access to the computer (in this case, DomainA\Domain users) and allow "Allowed to Authenticate". Once I did that, everything worked: QUESTION 57 Your network contains an Active Directory domain named contoso.com. The domain contains two Active Directory sites named Site1 and Site2. You discover that when the account of a user in Site1 is locked out, the user can still log on to the servers in Site2 for up to 15 minutes by using Remote Desktop Services (RDS). You need to reduce the amount of time it takes to synchronize account lockout information across the domain. Which attribute should you modify? To answer, select the appropriate attribute in the answer area.
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
Answer:
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 58 Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest is Windows Server 2003. You have a domain outside the forest named adatum.com. You need to configure an access solution to meet the following requirements: - Users in adatum.com must be able to access resources in contoso.com. - Users in adatum.com must be prevented from accessing resources in fabrikam.com. - Users in both contoso.com and fabrikam.com must be prevented from accessing resources in adatum.com. What should you create? A. a one-way external trust from adatum.com to fabrikam.com B. a one-way realm trust from fabrikam.com to adatum.com C. a one-way realm trust from adatum.com to fabrikam.com 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader D. a one-way external trust from fabrikam.com to adatum.com Answer: A Explanation: A. A one-way trust is a unidirectional authentication path that is created between two domains. This means that in a one-way trust between Domain A and Domain B, users in Domain A can access resources in Domain B. However, users in Domain B cannot access resources in Domain A. This would allow adatum.com users access to contoso which is desired. B. This would allow contoso.com users access to adatum which must be prevented and used for non windows realm to AD. C. This would allow adatum.com users access to contoso which is desired but realm trust types are used for non windows realm to AD. D. This would allow adatum users access to contoso which must be prevented and You need to make trust relationship where domain contoso.com trusts adatum.com. NOTE: On exam the domain names were changed, so understand the question well http://technet.microsoft.com/en-us/library/cc728024(v=ws.10).aspx
QUESTION 59 Your network contains an Active Directory domain named contoso.com. The domain contains a main office and a branch office. An Active Directory site exists for each office. All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers. The domain controllers are configured as shown in the following table.
DC1 hosts an Active Directory-integrated zone for contoso.com. You add the DNS Server server role to DC2. You discover that the contoso.com DNS zone fails to replicate to DC2. You verify that the domain, schema, and configuration naming contexts replicate from DC1 to DC2. You need to ensure that DC2 replicates the contoso.com zone by using Active Directory replication. Which tool should you use? A. Active Directory Sites and Services B. Ntdsutil C. DNS Manager 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader D. Active Directory Domains and Trusts Answer: A Explanation: A. To control replication between two sites, you can use the Active Directory Sites and Services snap- in to configure settings on the site link object to which the sites are added. By configuring settings on a site link, you can control when replication occurs between two or more sites, and how often B. Ntdsutil.exe is a command-line tool that provides management facilities for Active Directory Domain Services (AD DS) and Active Directory Lightweight Directory Services (AD LDS). You can use the ntdsutil commands to perform database maintenance of AD DS, manage and control single master operations, and remove metadata left behind by domain controllers that were removed from the network without being properly uninstalled. C. DNS Manager is the tool you'll use to manage local and remote DNS Servers D. Active Directory Domains and Trusts is the Microsoft Management Console (MMC) snap-in that you can use to administer domain trusts, domain and forest functional levels, and user principal name (UPN) suffixes. http://technet.microsoft.com/en-us/library/cc731862.aspx http://technet.microsoft.com/en-us/library/cc753343(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc722541.aspx http://technet.microsoft.com/en-us/library/cc770299.aspx Note: If you see question about AD Replication, First preference is AD sites and services, then Repadmin and then DNSLINT. QUESTION 60 Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest is Windows Server 2003. The contoso.com domain contains domain controllers that run either Windows Server 2008 or Windows Server 2008 R2. The functional level of the domain is Windows Server 2008. The fabrikam.com domain contains domain controllers that run either Windows Server 2003 or Windows Server 2008. The functional level of the domain is Windows Server 2003. The contoso.com domain contains a member server named Server1 that runs Windows Server 2012 R2. You install the Active Directory Domain Services server role on Server1. You need to add Server1 as a new domain controller in the contoso.com domain. What should you do? A. B. C. D.
Run the Active Directory Domain Services Configuration Wizard. Run adprep.exe /domainprep, and then run dcpromo.exe. Raise the functional level of the forest, and then run dcprorno.exe. Modify the Computer Name/Domain Changes properties.
Answer: A Explanation: Windows Server 2012 R2 requires a Windows Server 2003 forest functional level. That is, before you can add a domain controller that runs Windows Server 2012 R2 to an existing Active Directory forest, the forest functional level must be Windows Server 2003 or higher. http://blogs.technet.com/b/askpfeplat/archive/2012/09/03/introducing-the-first-windowsserver2012-domaincontroller.aspx http://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx http://technet.microsoft.com/en-us/library/jj574134.aspx
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 61 Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The forest functional level is Windows 2000. The contoso.com domain contains domain controllers that run either Windows Server 2008 or Windows Server 2008 R2. The domain functional level is Windows Server 2008. The fabrikam.com domain contains domain controllers that run either Windows 2000 Server or Windows Server 2003. The domain functional level is Windows 2000 native. The contoso.com domain contains a member server named Server1 that runs Windows Server 2012 R2. You need to add Server1 as a new domain controller in the contoso.com domain. What should you do first? A. B. C. D. E.
Raise the functional level of the contoso.com domain to Windows Server 2008 R2. Upgrade the domain controllers that run Windows Server 2008 to Windows Server 2008 R2. Raise the functional level of the fabrikam.com domain to Windows Server 2003. Decommission the domain controllers that run Windows 2000. Raise the forest functional level to Windows Server 2003.
Answer: D Explanation: D. Server 2003 is the minimum Domain Functional level for any domain in the forest Windows Server 2012 R2 requires a Windows Server 2003 forest functional level. That is, before you can add a domain controller that runs Windows Server 2012 R2 to an existing Active Directory forest, the forest functional level must be Windows Server 2003 or higher. http://technet.microsoft.com/en-us/library/cc771294.aspx
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 62 Your network contains an Active Directory domain named adatum.com. The domain contains four servers. The servers are configured as shown in the following table.
You plan to deploy an enterprise certification authority (CA) on a server named Server5. Server5 will be used to issue certificates to domain-joined computers and workgroup computers. You need to identify which server you must use as the certificate revocation list (CRL) distribution point for Server5. Which server should you identify? A. B. C. D.
Server 3 Server 2 Server 4 Server 1
Answer: C Explanation: A. We cannot use AD DS because workgroup computers must access CRL distribution point B. We cannot use File Share because workgroup computers must access CRL distribution point C. Public facing web server can be used D. AD DS, Web & File Share only http://technet.microsoft.com/en-us/library/cc771079.aspx
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 63 You have a server named Server1 that has the Active Directory Certificate Services server role installed. Server1 uses a hardware security module (HSM) to protect the private key of Server1. You need to ensure that the Active Directory Certificate Services (AD CS) database, log files, and private key are backed up. You perform regular backups of the HSM module by using a backup utility provided by the HSM manufacturer. What else should you do? A. B. C. D.
Run the certutil.exe command and specify the Run the certutil.exe command and specify the Run the certutil.exe command and specify the Run the certutil.exe command and specify the
-backupkey parameter. -backupdb parameter. -backup parameter. -dump parameter.
Answer: B Explanation: A. Backup the Active Directory Certificate Services certificate and private key B. Backup the Active Directory Certificate Services database C. Backup Active Directory Certificate Services D. Dump configuration information or files http://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backupKey http://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backupDB http://technet.microsoft.com/en-us/library/cc732443.aspx#BKMK_backup http://technet.microsoft.com/library/cc732443.aspx#BKMK_dump
QUESTION 64 Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Federation Services (AD FS) server role installed. Adatum.com is a partner organization. You are helping the administrator of adatum.com set up a federated trust between adatum.com and contoso.com. The administrator of adatum.com asks you to provide a file containing the federation metadata of contoso.com. You need to identify the location of the federation metadata file. Which node in the AD FS console should you select? To answer, select the appropriate node in the answer area.
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
Answer:
QUESTION 65 Your network contains three Active Directory forests. Each forest contains an Active Directory Rights Management Services (AD RMS) root cluster. All of the users in all of the forests must be able to access protected content from any of the forests. You need to identify the minimum number of AD RMS trusts required. How many trusts should you identify? A. B. C. D.
3 6 12 16
Answer: C 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader Explanation: 3 Forests. Bi Direcrional test needed means each forest needs 2 other forests TUD file. 3 x 2 =6 http://technet.microsoft.com/en-us/library/ee221071(v=ws.10).aspx
QUESTION 66 Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Rights Management Services server role installed. The domain contains a domain local group named Group1. You create a rights policy template named Template1. You assign Group1 the rights to Template1. You need to ensure that all the members of Group1 can use Template1. What should you do? A. B. C. D.
Configure the email address attribute of Group1. Convert the scope of Group1 to global. Convert the scope of Group1 to universal. Configure the email address attribute of all the users who are members of Group1.
Answer: D Explanation: http://social.technet.microsoft.com/wiki/contents/articles/13130.ad-rms-troubleshootingguide.aspx QUESTION 67 Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed. Server1 hosts 10 virtual machines that run Windows Server 2012 R2. You add a new server named Server2. Server2 has faster hard disk drives, more RAM, and a different processor manufacturer than Server1. You need to move all of the virtual machines from Server1 to Server2. The solution must minimize downtime. What should you do for each virtual machine? A. B. C. D.
Perform a quick migration. Perform a storage migration. Export the virtual machines from Server1 and import the virtual machines to Server2. Perform a live migration.
Answer: C Explanation: C. Other options require same CPU family and cluster http://technet.microsoft.com/en-us/library/hh848491.aspx http://technet.microsoft.com/en-us/library/hh848495.aspx http://technet.microsoft.com/en-us/library/jj628158.aspx The different processor manufacturer is the key here. Storage, Live, and Quick all require same manufacturer. 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 68 You have a datacenter that contains six servers. Each server has the Hyper-V server role installed and runs Windows Server 2012 R2. The servers are configured as shown in the following table.
Host4 and Host5 are part of a cluster named Cluster1. Cluster1 hosts a virtual machine named VM1. You need to move VM1 to another Hyper-V host. The solution must minimize the downtime of VM1. To which server and by which method should you move VM1? A. B. C. D.
To Host3 by using a storage migration To Host6 by using a storage migration To Host2 by using a live migration To Host1 by using a quick migration
Answer: A 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader Explanation: A. Host3 is the only option to allow minimum downtime and has same processor manufacturers B. Live Storage Migration requires same processor manufacturers C. Live migration requires same same processor manufacturers D. Quick migration has downtime NOTE: Exam may have more options but same answer http://technet.microsoft.com/en-us/library/dd446679(v=ws.10).aspx http://technet.microsoft.com/en-us/library/hh831656.aspx http://technet.microsoft.com/en-us/library/jj628158.aspx QUESTION 69 Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. Cluster1 hosts an application named App1. You need to ensure that Server2 handles all of the client requests to the cluster for App1. The solution must ensure that if Server2 fails, Server1 becomes the active node for App1. What should you configure? A. B. C. D. E. F. G. H. I. J. K. L.
Affinity-None Affinity-Single The cluster quorum settings The failover settings A file server for general use The Handling priority The host priority Live migration The possible owner The preferred owner Quick migration the Scale-Out File Server
Answer: J Explanation: http://blogs.msdn.com/b/clustering/archive/2008/10/14/9000092.aspx The preferred owner in a 2 server cluster will always be the active node unless it is down. QUESTION 70 Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. You add two additional nodes to Cluster1. You need to ensure that Cluster1 stops running if three nodes fail. What should you configure? A. B. C. D. E. F.
Affinity-None Affinity-Single The cluster quorum settings The failover settings A file server for general use The Handling priority
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader G. H. I. J. K. L.
The host priority Live migration The possible owner The preferred owner Quick migration the Scale-Out File Server
Answer: C Explanation: C. The quorum configuration in a failover cluster determines the number of failures that the cluster can sustain. http://technet.microsoft.com/en-us/library/cc731739.aspx
QUESTION 71 Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. You configure File Services and DHCP as clustered resources for Cluster1. Server1 is the active node for both clustered resources. You need to ensure that if two consecutive heartbeat messages are missed between Server1 and Server2, Server2 will begin responding to DHCP requests. The solution must ensure that Server1 remains the active node for the File Services clustered resource for up to five missed heartbeat messages. What should you configure? A. B. C. D. E. F. G. H. I. J. K. L.
Affinity-None Affinity-Single The cluster quorum settings The failover settings A file server for general use The Handling priority The host priority Live migration The possible owner The preferred owner Quick migration the Scale-Out File Server
Answer: D Explanation: A. The number of heartbeats that can be missed before failover occurs is known as the heartbeat threshold http://technet.microsoft.com/en-us/library/dn265972.aspx http://technet.microsoft.com/en-us/library/dd197562(v=ws.10).aspx http://blogs.msdn.com/b/clustering/archive/2012/11/21/10370765.aspx QUESTION 72 Your network contains an Active Directory domain named contoso.com. The domain contains two 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader member servers named Server1 and Server2 that run Windows Server 2012 R2. You configure a new failover cluster named Cluster1. Server1 and Server2 are nodes in Cluster1. You need to configure the disk that will be used as a witness disk for Cluster1. How should you configure the witness disk? To answer, drag the appropriate configurations to the correct location or locations. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 73 Your network contains an Active Directory forest named contoso.com that contains a single domain. The forest contains three sites named Site1, Site2, and Site3. Domain controllers run either Windows Server 2008 R2 or Windows Server 2012 R2. Each site contains two domain controllers. Site1 and Site2 contain a global catalog server. 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader You need to create a new site link between Site1 and Site2. The solution must ensure that the site link supports the replication of all the naming contexts. From which node should you create the site link? To answer, select the appropriate node in the answer area.
Answer:
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 74 Your network contains an Active Directory domain named adatum.com. All servers run Windows Server 2012 R2. All domain controllers have the DNS Server server role installed. You have a domain controller named DC1. On DC1, you create an Active Directory-integrated zone named adatum.com and you sign the zone by using DNSSEC. You deploy a new read-only domain controller (RODC) named R0DC1. You need to ensure that the contoso.com zone replicates to R0DC1. What should you configure on DC1? To answer, select the appropriate tab in the answer area.
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
Answer:
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 75 You have a server named Server1 that runs Windows Server 2012 R2. Server1 has a single volume that is encrypted by using BitLocker Drive Encryption (BitLocker). BitLocker is configured to save encryption keys to a Trusted Platform Module (TPM). Server1 is configured to perform a daily system image backup. The motherboard on Server1 is upgraded. After the upgrade, Windows Server 2012 R2 on Server1 fails to start. You need to start the operating system on Server1 as soon as possible. What should you do? A. Start Server1 from the installation media. Run startrec.exe. B. Move the disk to a server that has a model of the old motherboard. Start the server from the installation media. Run bcdboot.exe. C. Move the disk to a server that has a model of the old motherboard. Start the server. Run tpm.msc. D. Start Server1 from the installation media. Perform a system image recovery. Answer: D 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader Explanation: Encryption keys are lost. Nothing mentioned about password/keys recovery. My point is that the only way is to restore the server from a backup. http://social.technet.microsoft.com/Forums/windows/en-US/6b34b4da-b1e2-40388d6d192f973cadea/usingsystem-image-with-a-bitlocker-system-drive QUESTION 76 You have a test server named Server1 that is configured to dual-boot between Windows Server 2008 R2 and Windows Server 2012 R2. You start Server1 and you discover that the boot entry for Windows Server 2008 R2 no longer appears on the boot menu. You start Windows Server 2012 R2 on Server1 and you discover the disk configurations shown in the following table.
You need to restore the Windows Server 2008 R2 boot entry on Server1. What should you do? A. B. C. D.
Run bootrec.exe and specify the /scanos parameter. Run bcdedit.exe and specify the /create store parameter. Run bootcfg.exe and specify the /copy parameter. Run bootrec.exe and specify the /rebuildbcd parameter.
Answer: D QUESTION 77 Hotspot Question You have a server named Server1 that runs Windows Server 2012 R2. Server1 has access to disks that connect to a RAID controller, iSCSI disks, and disks connected to a SCSI controller. You plan to use a tiered storage space on Server1. You need to identify which storage controller and volume type you must use for the tiered storage space. Which storage components should you use? To answer, select the appropriate options in the answer area.
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
Answer:
QUESTION 78 Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The forest contains three Active Directory sites named SiteA, SiteB, and SiteC. The sites contain four domain controllers. The domain controllers are configured as shown in the following table.
An IP site link exits between each site. You discover that the users in SiteC are authenticated by the domain controllers in SiteA and SiteB. You need to ensure that the SiteC users are authenticated by the domain controllers in SiteB, unless all of the domain controllers in SiteB are unavailable. What should you do?
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader A. B. C. D.
Create a site link bridge. Create additional connection objects for DC3 and DC4. Create additional connection objects for DC1 and DC2. Increase the cost of the site link between SiteA and SiteC.
Answer: D Explanation: http://technet.microsoft.com/en-us/library/dd277430.aspx#XSLTsection126121120120
QUESTION 79 You have a file server named Server1 that runs Windows Server 2012 R2. The folders on Server1 are configured as shown in the following table.
A new corporate policy states that backups must use Windows Azure Online Backup whenever possible. You need to identify which technology you must use to back up Server1. he solution must use Windows Azure Online Backup whenever possible. What should you identify? To answer, drag the appropriate backup type to the correct location or locations. Each backup type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader Answer:
QUESTION 80 You have a server named File1 that runs Windows Server 2012 R2. File1 has the File Server role service installed. You plan to back up all shared folders by using Windows Azure Online Backup. You download and install the Windows Azure Online Backup Service Agent on File1. You need to ensure that you use Windows Server Backup to back up data to Windows Azure Online Backup. What should you do? A. From Computer Management, add the File1 computer account to the Backup Operators group. B. From the Services console, modify the Log On settings of the Windows Azure Online Backup Service Agent. C. From Windows Server Backup, run the Register Server Wizard. D. From a command prompt, run wbadmin.exe enable backup. Answer: C Explanation: http://blogs.technet.com/b/windowsserver/archive/2012/03/28/microsoft-onlinebackupservice.aspx
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 81 Your network contains three servers named HV1, HV2, and Server1 that run Windows Server 2012 R2. HV1 and HV2 have the Hyper-V server role installed. Server1 is a file server that contains 3 TB of free disk space. HV1 hosts a virtual machine named VM1. The virtual machine configuration file for VM1 is stored in D:\VM and the virtual hard disk file is stored in E:\VHD. You plan to replace drive E with a larger volume. You need to ensure that VM1 remains available from HV1 while drive E is being replaced. You want to achieve this goal by using the minimum amount of administrative effort. What should you do? A. B. C. D.
Perform a live migration to HV2. Add HV1 and HV2 as nodes in a failover cluster. Perform a storage migration to HV2. Add HV1 and HV2 as nodes in a failover cluster. Perform a live migration to HV2. Perform a storage migration to Server1.
Answer: D 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader QUESTION 82 Your network contains an Active Directory domain named contoso.com. The domain contains a main office and a branch office. An Active Directory site exists for each office. All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers. The domain controllers are configured as shown in the following table.
DC1 hosts an Active Directory-integrated zone for contoso.com. You add the DNS Server server role to DC2. You discover that the contoso.com DNS zone fails to replicate to DC2. You verify that the domain, schema, and configuration naming contexts replicate from DC1 to DC2. You need to ensure that DC2 replicates the contoso.com zone by using Active Directory replication. Which tool should you use? A. B. C. D.
Ntdsutil Repadmin Dnslint Active Directory Domains and Trusts
Answer: B Explanation: If you see question about AD Replication, First preference is AD sites and services, then Repadmin and then DNSLINT. QUESTION 83 You have a server named Server1 that runs Windows Server 2012 R2. Windows Server 2012 R2 is installed on volume C. You need to ensure that Safe Mode with Networking loads the next time Server1 restarts. Which tool should you use? A. B. C. D.
The Msconfig command The Restart-Server cmdlet The Restart-Computer cmdlet The Bootcfg command
Answer: A Explanation: A. Use system config to configure boot options B. Not a valid cmdlet C. Restarts ("reboots") the operating system on local and remote computers. No boot options D. modifies the Boot.ini file no option for safe mode/networking for win8/2012 http://technet.microsoft.com/en-us/library/hh849837.aspx http://support.microsoft.com/kb/317521 http://technet.microsoft.com/en-us/library/cc725967.aspx
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 84 You have a file server named FS1 that runs Windows Server 8. Data Deduplication is enabled on FS1. You need to configure Data Deduplication to run at a normal priority from 20:00 to 06:00 daily. What should you configure? A. B. C. D.
File and Storage Services in Server Manager The Data Deduplication process in Task Manager Disk Management in Computer Management The properties of drive C
Answer: A Explanation: A. In Windows Server 2012 R2, deduplication can be enabled locally or remotely by using Windows PowerShell or Server Manager. http://technet.microsoft.com/en-us/library/hh831700.aspx
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 85 Hotspot Question Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8 Enterprise. You have a remote site that only contains client computers. All of the client computer accounts are located in an organizational unit (CU) named Remote1. A Group Policy object (GPO) named GPO1 is linked to the Remote1 CU. You need to configure BranchCache for the remote site. Which two settings should you configure in GPO1? To answer, select the two appropriate settings in the answer area.
Answer: 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 86 Hotspot Question Your company has a main office and a branch office. An Active Directory site exists for each office. The network contains an Active Directory forest named contoso.com. The contoso.com domain contains three member servers named Server1, Server2, and Server3. All servers run Windows Server 2012 R2. In the main office, you configure Server1 as a file server that uses BranchCache. In the branch office, you configure Server2 and Server3 as BranchCache hosted cache servers. You are creating a Group Policy for the branch office site. In the branch office, you need to configure the client computers that run Windows B to use Server2 and Server3 as BranchCache.
Answer:
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 87 Your network contains two Active Directory forests named contoso.com and fabrikam.com. A two- way forest trust exists between the forests. The contoso.com forest contains an enterprise certification authority (CA) named CAl. You implement cross-forest certificate enrollment between the contoso.com forest and the fabrikam.com forest. On CA1, you create a new certificate template named Template1. You need to ensure that users in the fabrikam.com forest can request certificates that are based on Template1. Which tool should you use? A. B. C. D. E.
Sync-ADObject Pkiview.msc CertificateServices.ps1 Certutil PKISync.ps1
Answer: E Explanation: A. Replicates a single object between any two domain controllers that have partitions in common. B. Monitoring and troubleshooting the health of all certification authorities (CAs) in a public key infrastructure (PKI) are essential administrative tasks facilitated by the Enterprise PKI snap-in. D. use Certutil.exe to dump and display certification authority (CA) configuration information, configure Certificate Services, backup and restore CA components, and verify certificates, key pairs, and certificate chains. E. PKISync.ps1 copies objects in the source forest to the target forest http://technet.microsoft.com/en-us/library/hh852296.aspx http://technet.microsoft.com/en-us/library/cc732261(v=ws.10).aspx http://technet.microsoft.com/en-us/library/ff955845(v=ws.10).aspx
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 88 Hotspot Question Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA). The domain contains a server named Server1 that runs Windows Server 2012 R2. You install the Active Directory Federation Services server role on Server1. You plan to configure Server1 as an Active Directory Federation Services (AD FS) server. The Federation Service name will be set to adfs1.contoso.com. You need to identify which type of certificate template you must use to request a certificate for AD FS.
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
Answer:
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 89 Your network contains an Active Directory domain named contoso.com. The domain contains an IP Address Management (IPAM) server that uses a Windows Internal Database. You install a Microsoft SQL Server 2012 instance on a new server. You need to migrate the IPAM database to the SQL Server instance. Which cmdlet should you run? A. B. C. D.
Disable-IpamCapability Set-IpamConfiguration Update-IpamServer Move-IpamDatabase
Answer: D QUESTION 90 Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role installed and is configured as an enterprise certification authority (CA). You need to ensure that all of the users in the domain are issued a certificate that can be used for the following purposes: - Email security - Client authentication - Encrypting File System (EFS) Which two actions should you perform? (Each correct answer presents part of the solution. Choose 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader two.) A. B. C. D. E.
From a Group Policy, configure the Certificate Services Client - Auto-Enrollment settings. From a Group Policy, configure the Certificate Services Client - Certificate Enrollment Policy settings. Modify the properties of the User certificate template, and then publish the template. Duplicate the User certificate template, and then publish the template. From a Group Policy, configure the Automatic Certificate Request Settings settings.
Answer: AD Explanation: The default user template supports all of the requirements EXCEPT auto enroll as shown below:
However a duplicated template from users has the ability to autoenroll:
The Automatic Certificate Request Settings GPO setting is only available to Computer, not user. http://technet.microsoft.com/en-us/library/dd851772.aspx QUESTION 91 Hotspot Question Your network contains an Active Directory domain named contoso.com. The domain contains two Active Directory sites named Site1 and Site2. You need to configure the replication between the sites to occur by using change notification. Which attribute should you modify?
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
Answer:
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 92 Your network contains an Active Directory domain named contoso.com. The domain contains a main office and a branch office. An Active Directory site exists for each office. All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers. The domain controllers are configured as shown in the following table.
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader DC1 hosts an Active Directory-integrated zone for contoso.com. You add the DNS Server server role to DC2. You discover that the contoso.com DNS zone fails to replicate to DC2. You verify that the domain, schema, and configuration naming contexts replicate from DC1 to DC2. You need to ensure that DC2 replicates the contoso.com zone by using Active Directory replication. Which tool should you use? A. B. C. D.
Dnslint A DNS Manager Active Directory Users and Computers Dnscmd
Answer: A Explanation: Note: If you see question about AD Replication, First preference is AD sites and services, then Repadmin and then DNSLINT. QUESTION 93 Your network contains an Active Directory forest named adatum.com. The forest contains a single domain. The domain contains four servers. The servers are configured as shown in the following table.
You need to update the schema to support a domain controller that will run Windows Server 2012 R2. On which server should you run adprep.exe? A. B. C. D.
Server1 DC3 DC2 DC1
Answer: B Explanation: C. DC3 is the only server that could be assumed to be 64bit 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader http://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx#BKMK_WS2012
QUESTION 94 Hotspot Question Your network contains an Active Directory domain named contoso.com. The domain contains domain controllers that run either Windows Server 2003, Windows Server 2008 R2, or Windows Server 2012 R2. You plan to implement a new Active Directory forest. The new forest will be used for testing and will be isolated from the production network. In the test network, you deploy a server named Server1 that runs Windows Server 2012 R2. You need to configure Server1 as a new domain controller in a new forest named contoso.test. The solution must meet the following requirements: The functional level of the forest and of the domain must be the same as that of contoso.com. Server1 must provide name resolution services for contoso.test. What should you do? To answer, configure the appropriate options in the answer area.
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
Answer:
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
Explanation: When you deploy AD DS, set the domain and forest functional levels to the highest value that your environment can support. This way, you can use as many AD DS features as possible. For example, if you are sure that you will never add domain controllers that run Windows Server 2003 to the domain or forest, select the Windows Server 2008 functional level during the deployment process. However, if you might retain or add domain controllers that run Windows Server 2003, select the Windows Server 2003 functional level. When you deploy a new forest, you are prompted to set the forest functional level and then set the domain functional level. You cannot set the domain functional level to a value that is lower than the forest functional level. Reference: Understanding Active Directory Domain Services (AD DS) Functional Levels REWORDED Very smartly reworded that you need to configure server 1 as new DC in a new forest named contoso.test and "also do name resolution". In the answer you will have to select Windows 2003 as domain and forest functional level and you should also check "Domain name system(DNS) server.... This is not in any dumps * When you deploy AD DS, set the domain and forest functional levels to the highest value that your environment can support. This way, you can use as many AD DS features as possible. For example, if you are sure that you will never add domain controllers that run Windows Server 2003 to the domain or forest, select the Windows Server 2008 functional level during the deployment process. However, if you might retain or add domain controllers that run Windows Server 2003, select the Windows Server 2003 functional level. When you deploy a new forest, you are prompted to set the forest functional level and then set the domain functional level. You cannot set the domain 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader functional level to a value that is lower than the forest functional level. http://technet.microsoft.com/en-us/library/understanding-active-directoryfunctionallevels(v=ws.10).aspx QUESTION 95 Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2. You have a Password Settings object (PSOs) named PSO1. You need to view the settings of PSO1. Which tool should you use? A. B. C. D.
Get-ADDomainControllerPasswordReplicationPolicy Get-ADDefaultDomainPasswordPolicy Server Manager Get-ADFineGrainedPasswordPolicy
Answer: D Explanation: A. Gets the members of the allowed list or denied list of a read-only domain controller's password replication policy B. Gets the default password policy for an Active Directory domain. C. PSO's managed from AD AC or Powershell Only D. Gets one or more Active Directory fine grained password policies. http://technet.microsoft.com/en-us/library/ee617207.aspx http://technet.microsoft.com/en-us/library/ee617244.aspx http://technet.microsoft.com/en-us/library/ee617231.aspx QUESTION 96 Hotspot Question Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Both servers have the IP Address Management (IPAM) Server feature installed. You have a support technician named Tech1. Tech1 is a member of the IPAM Administrators group on Server1 and Server2. You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2. To which group on Server2 should you add Tech1? To answer, select the appropriate group in the answer area.
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
Answer:
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
Explanation: http://www.microsoft.com/en-us/download/dlx/ThankYou.aspx?id=29012
Both WinRMRemoteWMIUsers_ and Remote Management Users have the exact same description. As such, I tested connecting with server manager remotely with a non-administrative account. I tried before adding to either group and got this error: I then added to Remote Management Users and got this error: Note that this is due to access to the event log only. Next I removed from Remote Management Users and added to WinRMRemoteWMIUsers_ and got this error: 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader The error is exactly the same and the explanation is due to event log. In summary, Either one of these answers is correct, however since the document explicitly says use the "WinRMRemoteWMIUsers_" group, then that's what we got to do. QUESTION 97 Drag and Drop Question You have a server named Server2 that runs Windows Server 2012 R2. You have storage provisioned on Server2 as shown in the exhibit. (Click the Exhibit button.) You need to configure the storage so that it appears in Windows Explorer as a drive letter on Server1. Which three actions should you perform in sequence? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
QUESTION 98 70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 Both servers have the IP Address Management (IPAM) Server feature installed. You have a support technician named Tech1. Tech1 is a member of the IPAM Administrators group on Server1 and Server2. You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2. To which group on Server2 should you add Tech1. A. B. C. D.
IPAM MSM Administrators IPAM Administrators winRMRemoteWMIUsers_ Remote Management Users
Answer: C Explanation: A. IPAM MSM Administrators can't access remotely B. IPAM Administrators can't access remotely C. If you are accessing the IPAM server remotely using Server Manager IPAM client RSAT, then you must be a member of the WinRMRemoteWMIUsers group on the IPAM server, in addition to being a member of the appropriate IPAM security group (or local Administrators group). http://msdn.microsoft.com/en-us/library/windows/desktop/aa384295(v=vs.85).aspx http://www.microsoft.com/en-us/download/details.aspx?id=29012 QUESTION 99 Your network contains two Active Directory forests named contoso.com and adatum.com. Both forests contain multiple domains. All domain controllers run Windows Server 2012 R2. Contoso.com has a one-way forest trust to adatum.com. A domain named paris.eu.contoso.com hosts several legacy applications that use NTLM authentication. Users in a domain named london.europe.adatum.com report that it takes a long time to be authenticated when they attempt to access the legacy applications hosted in paris.eu.contoso.com. You need to reduce how long it takes for the london.europe.adatum.com users to be authenticated in paris.eu.contoso.com. What should you do? A. B. C. D.
Create a shortcut trust. Create an external trust between the forest root domains. Disable SID filtering on the existing trust. Create an external trust.
Answer: A Explanation: A. Shortcut trusts are one-way or two-way, transitive trusts that can be used when administrators need to optimize the authentication process. Authentication requests must first travel a trust path between domain trees, and in a complex forest this can take time, which can be reduced with shortcut trusts. B. Use external trusts to provide access to resources located on a Windows NT 4.0 domain or a domain located in a separate forest that is not joined by a forest trust. C. Filters users or SIDs from one domain D. Use external trusts to provide access to resources located on a Windows NT 4.0 domain or a domain located in a separate forest that is not joined by a forest trust http://technet.microsoft.com/en-us/library/cc737939(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc775736(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc772633(v=ws.10).aspx
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 100 Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. You are creating a central access rule named TestFinance that will be used to audit members of the Authenticated Users group for access failure to shared folders in the finance department. You need to ensure that access requests are unaffected when the rule is published. What should you do? A. B. C. D.
Add a User condition to the current permissions entry for the Authenticated Users principal. Set the Permissions to Use the following permissions as proposed permissions. Add a Resource condition to the current permissions entry for the Authenticated Users principal. Set the Permissions to Use following permissions as current permissions.
Answer: B Explanation: http://technet.microsoft.com/en-us/library/jj134043.aspx
Visit PassLeader and Download Full Version 70-412 Exam Dumps
70-412 Exam Dumps
70-412 Exam Questions
70-412 PDF Dumps
http://www.passleader.com/70-412.html
70-412 VCE Dumps