Your network contains an Active Directory domain named contoso.com.
The domain contains an enterprise certification authority (CA).
The domain contains a server named Server1 that runs Windows Server 2012. You install the Active Directory Federation Services server role on Server1.
You plan to configure Server1 as an Active Directory Federation Services (AD FS) server. The Federation Service name will be set to adfsl.contoso.com.
You need to identify which type of certificate template you must use to request a certificate for AD FS. Which certificate template should you identify?
To answer, select the appropriate template in the answer area.
(2012-08-31) Leveraging Federation Metadata To Setup A Federation Trust (Claims Provider Or
If IIS was not pre-installed and/or if the default website was not already configured with a SSL certificate, the following error will appear. Read it carefully and click on OK. It is recommended to FIRST get a certificate and then connect the ADFS PRX server to the ADFS STS server(s).
If the ADFS PRX server is domain joined, you can request an SSL certificate using the next steps. If the ADFS PRX server is operating as non-domain joined. You will need to do an offline certificate request and then manually deploy it to ADFS PRX server(s).
For now Im assuming it is domain joined as that is easier to describe! […]
In this case Im going to use certificate from the CA in my test/demo environment.
Start the Certificates MMC on the ADFS PRX server and target the local computer. To request a certificate navigate to Certificates (Local Computer) C> Personal C> Certificates. Right-click the last one and then All Tasks C> Request New Certificate.
In this select the Active Directory Enrollment Policy and click on Next:
For this certificate you can leverage the Web Server certificate template. Select the Web Server
certificate template, click on details to expand for more information and click on Properties.
You have a server named Server1 that runs Windows Server 2012.
Server1 has the Hyper-V server role installed.
Server1 is connected to two Fibre Channel SANs and is configured as shown in the following table.
You have a virtual machine named VM1.
You need to configure VM1 to connect to SAN1. What should you do first? A. Create a virtual Fibre Channel SAN.
B. Configure network adapter teaming.
C. Add one HBA.
D. Create a Hyper-V virtual switch.
Correct Answer: A
Section: Storage & High availability
You have a file server named Server1 that runs Windows Server 2012.
Server1 has following hardware configurations:
16 GB of RAM
A single quad-core CPU
Three network teams that have two network adapters each
You add additional CPUs and RAM to Server1. You repurpose Server1 as a virtualization host. You install the Hyper-V server role on Server1.
You need to create four external virtual switches in Hyper-V.
Which cmdlet should you run first?
Correct Answer: D Section: Hyper-V Explanation
Here we’re talking about hardware network adapters which belong to NIC teams
Each external virtual switch must be connected to a NIC or a NIC team, so we need 4 NICs or NIC
teams but currently only have 3 teams available.
=> we need to break a team first and then connect the two last external virtual switches to each of the 2 “liberated” NIC
(an other solution could be to add one physical NIC and connect the last external virtual switch to it.
or add several (two or more) NICs, create a NIC team containing them and connect the external virtual switch to the NIC team)
NIC Teaming (NetLBFO) Cmdlets in Windows PowerShell
Remove-NetLbfoTeam : Removes the specified NIC team from the host.
NIC Teaming Overview
NIC Teaming, also known as load balancing and failover (LBFO), allows multiple network adapters on a computer to be placed into a team for the following purposes:
Traffic failover to prevent connectivity loss in the event of a network component failure
This feature has been a requirement for independent hardware vendors (IHVs) to enter the server network adapter market, but until now NIC Teaming has not been included in Windows Server operating systems.
NIC Teaming requires the presence of a single Ethernet network adapter, which can be used for separating traffic that is using VLANs. All modes that provide fault protection through failover require at least two Ethernet network adapters. Windows Server? 2012 supports up to 32 network adapters in a team.
You perform a Server Core Installation of Windows Server 2012 on a server named Server1.
You need to add a graphical user interface (GUI) to Server1. Which tool should you use? A. The setup.exe command
B. The imagex.exe command
C. The Install-RoleService cmdlet
D. The Add-WindowsFeature cmdlet
Correct Answer: D
Section: Remote Management & Server Core
from the MSPress book “Upgrading your skills to MCSA Windows Server 2012”
Converting a server with a GUI to or from Server Core
You can switch between a Server Core installation and full installation in Windows Server 2012 because
the difference between these installation options is contained in two specific Windows features that can be added or removed.
The first feature, Graphical Management Tools and Infrastructure (Server-Gui-Mgmt-Infra) , provides a minimal server interface and server management tools such as Server Manager and the Microsoft Management Console (MMC). The second feature, Server Graphical Shell (Server-Gui-Shell), is dependent on the first feature and provides the rest of the GUI experience, including Windows Explorer. In Figure 1-9, you can see these two features in the Add Roles And Features Wizard, on the Select Features page, beneath User Interfaces And Infrastructure.
To convert a full installation to a Server Core installation, just remove these two features in Server Manager. Note that removing the first feature will automatically remove the second, dependent feature. […]
You can also remove these graphical interface features in Windows PowerShell . If you have deployed a full installation of Windows Server 2012 and want to convert it to a Server Core installation, run the following Windows PowerShell command:
Uninstall-WindowsFeature Server-GUI-MgmtiInfra -restart
Remember that you only need to specify Server-Gui-Mgmt-Infra for removal to remove both this feature and Server-Gui-Shell. Once the graphical management tools and graphical shell have been removed, the server restarts. When you log back on, you are presented with the Server Core user interface.
The process can be reversed by replacing both features. You can do this from a remote server by using the Add Roles And Features Wizard in Server Manager. You can also do it locally by running the following Windows PowerShell command:
Install-WindowsFeature Server-Gui-Shell -Restart
Note that when you install these two features from Windows PowerShell, you must specify them both. […]
To configure Minimal Server Interface, you can either start with a Server Core installation and add
Graphical Management Tools and Infrastructure
or start with a Server with a GUI and remove Server Graphical Shell. […]
The Graphical Management Tools and Infrastructure feature includes Server Manager and some
other basic administrative tools, but it does not include (i.e among tohers) Windows Explorer.
NB : http://technet.microsoft.com/en-us/library/jj205467.aspx
Installs one or more Windows Server roles, role services, or features on either the local or a specified remote server that is running Windows Server 2012.
This cmdlet is equivalent to and replaces Add-WindowsFeature, the cmdlet that was used to install roles, role services, and features in Windows Server 2008 R2.
Minimal Server Interface
This is new. In Windows Server 2012, with a Server with GUI installation one can remove the Server Graphical Shell (which provides full GUI for server) to set a full server installation with the so-called Minimal Server Interface option with the following PowerShell comlet.
Unstall-WindowsFeature Server-Gui-Shell -Restart
This basically provides a Server with GUI, but without installing Internet Explorer 10, Windows Explorer, the desktop, and the Start screen. Additionally, Microsoft Management Console (MMC), Server Manager, and a subset of Control Panel are still in place.
Minimal Server Interface requires 4 GB more disk space than Server Core alone
You have a server named Server 1 that runs Windows Server 2012.
Server1 has five network adapters.
Three of the network adapters are connected to a network named LAN1. The two other network adapters are connected to a network named LAN2.
You create a network adapter team named Team1 from two of the adapters connected to LAN1. You create a network adapter team named Team2 from the two adapters connected to LAN2.
A company policy states that all server IP addresses must be assigned by using a reserved address in
You need to identify how many DHCP reservations you must create for Server1. How many reservations should you identify?
Correct Answer: B
Section: Network (DNS, DHCP, NIC teaming, IPAM, VPN, NAP, DirectAccess…) Explanation
1 reservation for the NIC team on LAN1
1 reservation for the stand-alone NIC on LAN1
1 reservation for the NIC team on LAN2
=> 3 reservations.
Download Ensurepass Latest 2013 MCSA 70-417 Real Exam Questions , help you to pass exam 100%.