Ensurepass

QUESTION 61

Your network contains an Active Directory forest named adatum.com. The forest contains a single

domain. The domain contains four servers. The servers are configured as shown in the following

table.

 

clip_image001

 

You need to update the schema to support a domain controller that will run Windows Server

2012 R2. On which server should you run adprep.exe?

 

A.      Server1

B.      DC3

C.      DC2

D.      DC1

 

Correct Answer: B

 

 

 

QUESTION 62

Your network contains an Active Directory domain named contoso.com. The domain contains

domain controllers that run either Windows Server 2003, Windows Server 2008 R2, or Windows

Server 2012 R2. You plan to implement a new Active Directory forest. The new forest will be used

for testing and will be isolated from the production network. In the test network, you deploy a

server named Server1 that runs Windows Server 2012 R2. You need to configure Server1 as a

new domain controller in a new forest named contoso.test. The solution must meet the

following.

 

clip_image003

clip_image005

 

Select two options below.

 

A.      There is no need to set the Forest Functional Level.

B.      Set Forest Functional Level to Windows 2003.

C.      Set Forest Functional Level to Windows 2008

D.      Set Forest Functional Level to Windows 2008 R2.

E.       Set Forest Functional Level to Windows 2012.

F.       There is no need to set the Domain Functional Level.

G.      Set Domain Functional Level to Windows 2003.

H.      Set Domain Functional Level to Windows 2008

I.        Set Domain Functional Level to Windows 2008 R2.

J.        Set Domain Functional Level to Windows 2012.

 

Correct Answer: BFH

 

 

QUESTION 63

Your network contains two Active Directory forests named contoso.com and fabrikam.com. The

contoso.com forest contains two domains named corp.contoso.com and contoso.com. You

establish a two-way forest trust between contoso.com and fabrikam.com. Users from the

corp.contoso.com domain report that they cannot log on to client computers in the fabrikam.com

domain by using their corp.contoso.com user account. When they try to log on, they receive

following error message:

 

“The computer you are signing into is protected by an authentication firewall. The specified

account is not allowed to authenticate to the computer.”

 

Corp.contoso.com users can log on successfully to client computers in the contoso.com domain

by using their corp.contoso.com user account credentials. You need to allow users from the

corp.contoso.com domain to log on to the client computers in the fabrikam.com forest. What

should you do?

 

A.      Configure Windows Firewall with Advanced Security.

B.      Enable SID history.

C.      Configure forest-wide authentication.

D.      Instruct the users to log on by using a user principal name (UPN).

 

Correct Answer: C

 

 

 

QUESTION 64

Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2.

Both servers have the Hyper-V server role installed. The servers have the hardware

configurations shown in the following table.

 

clip_image006

 

Server1 hosts five virtual machines that run Windows Server 2012 R2. You need to move the

virtual machines from Server1 to Server2. The solution must minimize downtime. What should

you do for each virtual machine?

 

A.      Export the virtual machines from Server1 and import the virtual machines to Server2.

B.      Perform a live migration.

C.      Perform a quick migration.

D.      Perform a storage migration.

 

Correct Answer: A

 

 

QUESTION 65

Your network contains an Active Directory domain named contoso.com. The domain contains two

servers named Server1 and Server2. Both servers have the Hyper-V server role installed. You plan

to replicate virtual machines between Server1 and Server2. The replication will be encrypted by

using Secure Sockets Layer (SSL). You need to request a certificate on Server1 to ensure that the

virtual machine replication is encrypted. Which two intended purposes should the certificate for

Server1 contain? (Each correct answer presents part of the solution. Choose two.)

 

A.      Client Authentication

B.      Kernel Mode Code Signing

C.      Server Authentication

D.      IP Security end system

E.       KDC Authentication

 

Correct Answer: AE

 

QUESTION 66

Your network contains an Active Directory domain named contoso.com. The domain contains two

member servers named Server1 and Server2 that run Windows Server 2012 R2. Both servers

have the Hyper-V server role installed. The network contains an enterprise certification authority

(CA). All servers are enrolled automatically for a certificate-based on the Computer certificate

template. On Server1, you have a virtual machine named VM1. VM1 is replicated to Server2. You

need to encrypt the replication of VM1. Which two actions should you perform? (Each correct

answer presents part of the solution. Choose two.)

 

A.      On Server1, modify the settings of VM1.

B.      On Server2, modify the settings of VM1.

C.      On Server2, modify the Hyper-V Settings.

D.      On Server1, modify the Hyper-V Settings.

E.       On Server1, modify the settings of the virtual switch to which VM1 is connected.

F.       On Server2, modify the settings of the virtual switch to which VM1 is connected.

 

Correct Answer: AF

 

 

QUESTION 67

Your network contains an Active Directory domain named contoso.com. The domain contains a

file server named Server1 that runs Windows Server 2012 R2. You create a user account named

User1 in the domain. You need to ensure that User1 can use Windows Server Backup to back up

Server1. The solution must minimize the number of administrative rights assigned to User1. What

should you do?

 

A.      Add User1 to the Backup Operators group.

B.      Add User1 to the Power Users group.

C.      Assign User1 the Backup files and directories user right and the Restore files and directories

user right.

D.      Assign User1 the Backup files and directories user right.

 

Correct Answer: D

 

 

QUESTION 68

You have a server named Server1 that runs Windows Server 2012 R2 and is used for testing. A

developer at your company creates and installs an unsigned kernel-mode driver on Server1. The

developer reports that Server1 will no longer start. You need to ensure that the developer can

test the new driver. The solution must minimize the amount of data loss. Which Advanced Boot

Option should you select?

 

A.      Disable Driver Signature Enforcement

B.      Disable automatic restart on system failure

C.      Last Know Good Configuration (advanced)

D.      Repair Your Computer

 

Correct Answer: A

 

 

QUESTION 69

You have a failover cluster named Cluster1 that contains four nodes. All of the nodes run

Windows Server 2012 R2. You need to schedule the installation of Windows updates on the

cluster nodes. Which tool should you use?

 

A.      The Wusa command

B.      The Invoke-CauScan cmdlet

C.      The Add-CauClusterRole cmdlet

D.      The Wuauclt command

 

Correct Answer: C

 

 

QUESTION 70

Your network contains an Active Directory domain named contoso.com. The domain contains two

member servers named Server1 and Server2. All servers run Windows Server 2012 R2. Server1

and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in

a failover cluster named Cluster1. You add two additional nodes in Cluster1. You have a folder

named Folder1 on Server1 that hosts App1ication data. Folder1 is a folder target in a Distributed

File System (DFS) namespace. You need to provide highly available access to Folder1. The solution

must support DFS Replication to Folder1. What should you configure?

 

A.      Affinity-None

B.      Affinity-Single

C.      The cluster quorum settings

D.      The failover settings

E.       A file server for general use

F.       The Handling priority

G.      The host priority

H.      Live migration

I.        The possible owner

J.        The preferred owner

K.       Quick migration

L.       The Scale-Out File Server

 

Correct Answer: E

 

Instant Access to Download Testing Software & PDF File for Microsoft 70-412 Real Exam

Instant Access to Try Microsoft 70-412 Free Demo

Comments are closed.