[2021-New] Microsoft 70-412 Dumps With Update Exam Questions (101-110)

70-412 Dumps

70-412 Exam Questions - Online Test

70-412 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Q1. You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the DNS Server server role installed.

You need to store the contents of all the DNS queries received by Server1.

What should you configure?

A. Logging from Windows Firewall with Advanced Security

B. Debug logging from DNS Manager

C. A Data Collector Set (DCS) from Performance Monitor

D. Monitoring from DNS Manager

Answer: B

Explanation:

Debug logging allows you to log the packets sent and received by a DNS server. Debug logging is disabled by default, and because it is resource intensive, you should only activate it temporarily when you need more specific detailed information about server performance.

Reference: Active Directory 2008: DNS Debug Logging Facts…

Q2. Your network contains two DNS servers named DNS1 and DNS2 that run Windows Server 2012 R2.

DNS1 has a primary zone named contoso.com. DNS2 has a secondary copy of the contoso.com zone.

You need to log the zone transfer packets sent between DNS1 and DNS2.

What should you configure?

A. Monitoring from DNS Manager

B. Logging from Windows Firewall with Advanced Security

C. A Data Collector Set (DCS) from Performance Monitor

D. Debug logging from DNS Manager

Answer: D

Explanation:

Reference: Active Directory 2008: DNS Debug Logging Facts.

Q3. HOTSPOT

Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA).

The domain contains a server named Server1 that runs Windows Server 2012 R2. You install the Active Directory Federation Services server role on Server1.

You plan to configure Server1 as an Active Directory Federation Services (AD FS) server. The Federation Service name will be set to adfs1.contoso.com.

You need to identify which type of certificate template you must use to request a certificate for AD FS.

Answer:

Q4. DRAG DROP

You plan to deploy a failover cluster that will contain two nodes that run Windows Server

2012 R2.

You need to configure a witness disk for the failover cluster.

How should you configure the witness disk?

To answer, drag the appropriate configurations to the correct location or locations. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Q5. HOTSPOT

You have a file server named Server1 that runs Windows Server 2012 R2.

Server1 contains a file share that must be accessed by only a limited number of users.

You need to ensure that if an unauthorized user attempts to access the file share, a custom access-denied message appears, which contains a link to request access to the share. The message must not appear when the unauthorized user attempts to access other shares.

Which two nodes should you configure in File Server Resource Manager? To answer, select the appropriate two nodes in the answer area.

Answer:

Q6. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Rights Management Services server role installed.

The domain contains a domain local group named Group1.

You create a rights policy template named Template1. You assign Group1 the rights to Template1.

You need to ensure that all the members of Group1 can use Template1.

What should you do?

A. Configure the email address attribute of Group1.

B. Convert the scope of Group1 to global.

C. Convert the scope of Group1 to universal.

D. Configure the email address attribute of all the users who are members of Group1.

Answer: D

Explanation:

Explanation/Reference: When a user or group is created in Active Directory, the mail attribute is an optional attribute that can be set to include a primary email address for the user or group. For AD RMS to work properly, this attribute must be set because all users must have an email attribute to protect and consume content.

Reference: AD RMS Troubleshooting Guide http://social.technet.microsoft.com/wiki/contents/articles/13130.ad-rms-troubleshooting-guide.aspx

Q7. Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012 R2. Both servers have the Hyper-V server role installed.

The network contains an enterprise certification authority (CA). All servers are enrolled automatically for a certificate-based on the Computer certificate template.

On Server1, you have a virtual machine named VM1. VM1 is replicated to Server2.

You need to encrypt the replication of VM1.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. On Server1, modify the Hyper-V Settings.

B. On Server2, modify the settings of VM1.

C. On Server2, modify the Hyper-V Settings.

D. On Server1, modify the settings of VM1.

E. On Server1, modify the settings of the virtual switch to which VM1 is connected.

F. On Server2, modify the settings of the virtual switch to which VM1 is connected.

Answer: B,C

Explanation:

B. Each virtual machine that is to be replicated must be enabled for replication (on the replica server – Server2).

C. To configure the Replica server (here Server2) In Hyper-V Manager, click Hyper-V Settings in the Actions pane. In the Hyper-V Settings dialog, click Replication Configuration. In the Details pane, select Enable this computer as a Replica server. In the Authentication and ports section, select the authentication method. For either authentication method, specify the port to be used (the default ports are 80 for Kerberos over HTTP and 443 for certificate-based authentication over HTTPS). If you are using certificate-based authentication, click Select Certificate and provide the request certificate information.

Etc

Reference: Deploy Hyper-V Replica Step 2: Enable Replication

Q8. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DHCP Server server role installed.

You need to create an IPv6 scope on Server1. The scope must use an address space that is reserved for private networks. The addresses must be routable.

Which IPV6 scope prefix should you use?

A. 2001:123:4567:890A::

B. FE80:123:4567::

C. FF00:123:4567:890A::

D. FD00:123:4567::

Answer: D Explanation:

Explanation/Reference:

* A unique local address (ULA) is an IPv6 address in the block fc00::/7, defined in RFC

4193. It is the approximate IPv6 counterpart of the IPv4 private address.

The address block fc00::/7 is divided into two /8 groups:

/ The block fc00::/8 has not been defined yet.

/ The block fd00::/8 is defined for /48 prefixes, formed by setting the 40 least-significant bits

of the prefix to a randomly generated bit string.

* Prefixes in the fd00::/8 range have similar properties as those of the IPv4 private address

ranges:

/ They are not allocated by an address registry and may be used in networks by anyone

without outside involvement.

/ They are not guaranteed to be globally unique.

/ Reverse Domain Name System (DNS) entries (under ip6.arpa) for fd00::/8 ULAs cannot

be delegated in the global DNS.

Reference: RFC 4193

Q9. Your network contains one Active Directory forest named contoso.com. The forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

You need to prevent administrators from accidentally deleting any of the sites in the forest. What should you use?

A. Set-ADSite

B. Set-ADReplicationSite

C. Set-ADDomain

D. Set-ADReplicationSiteLink

E. Set-ADGroup

F. Set-ADForest

G. Netdom

Answer: B

Explanation: The Set-ADReplicationSite sets the replication properties for an Active

Directory site.

Parameter: -ProtectedFromAccidentalDeletion<Boolean>

Specifies whether to prevent the object from being deleted. When this property is set to

$True, you cannot delete the corresponding object without changing the value of the

property. The acceptable values for this parameter are:

-- $False or 0

-- $True or 1

Reference: Technet, Set-ADReplicationSite

https://technet.microsoft.com/en-us/library/hh852305(v=wps.630).aspx

Q10. Your company has two offices. The offices are located in Seattle and Montreal.

The network contains an Active Directory domain named contoso.com. The domain contains two DHCP servers named Server1 and Server2. Server1 is located in the Seattle office. Server2 is located in the Montreal office. All servers run Windows Server 2012 R2.

You need to create a DHCP scope for video conferencing in the Montreal office. The scope must be configured as shown in the following table.

Which Windows PowerShell cmdlet should you run?

A. Add-DhcpServerv4SuperScope

B. Add-DhcpServerv4MulticastScope

C. Add-DHCPServerv4Policy

D. Add-DchpServerv4Scope

Answer: B

Explanation:

The Add-DhcpServerv4MulticastScope cmdlet adds a multicast scope on the Dynamic Host Configuration Protocol (DHCP) server.

Note: IPv4 multicast addresses are defined by the leading address bits of 1110, originating from the classful network design of the early Internet when this group of addresses was designated as Class D. The Classless Inter-Domain Routing (CIDR) prefix of this group is 224.0.0.0/4. The group includes the addresses from 224.0.0.0 to 239.255.255.255.

Reference: Add-DhcpServerv4MulticastScope