[2021-New] Microsoft 70-412 Dumps With Update Exam Questions (31-40)

70-412 Dumps

70-412 Exam Questions - Online Test

70-412 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Q1. You have a server named Server1 that runs Windows Server 2012 R2.

You modify the properties of a system driver and you restart Server1.

You discover that Server1 continuously restarts without starting Windows Server 2012 R2.

You need to start Windows Server 2012 R2 on Server1 in the least amount of time. The

solution must minimize the amount of data loss.

Which Advanced Boot Option should you select?

A. Repair Your Computer

B. Last Known Good Configuration (advanced)

C. Disable Driver Signature Enforcement

D. Disable automatic restart on system failure

Answer: B

Explanation:

Try using Last Known Good Configuration if you can't start Windows, but it started correctly the last time you turned on the computer.

Reference: Using Last Known Good Configuration

Q2. Your network contains an Active Directory domain named adatum.com. The domain contains a file server named FS1 that runs Windows Server 2012 R2 and has the File Server Resource Manager role service installed. All client computers run Windows 8.

File classification and Access-Denied Assistance are enabled on FS1.

You need to ensure that if users receive an Access Denied message, they can request assistance by email from the Access Denied dialog box.

What should you configure?

A. A file management task

B. A classification property

C. The File Server Resource Manager Options

D. A report task

Answer: C

Explanation:

You can configure access-denied assistance individually on each file server by using the File Server Resource Manager console.

Note:

To configure access-denied assistance by using File Server Resource Manager

Open File Server Resource Manager. In Server Manager, click Tools, and then

click File Server Resource Manager.

Right-click File Server Resource Manager (Local), and then click Configure

Options.

Click the Access-Denied Assistance tab.

Select the Enable access-denied assistance check box.

In the Display the following message to users who are denied access to a folder or

file box, type a message that users will see when they are denied access to a file

or folder.

You can add macros to the message that will insert customized text.

Click Configure email requests, select the Enable users to request assistance

check box, and then click OK.

Click Preview if you want to see how the error message will look to the user.

Click OK.

Reference: Deploy Access-Denied Assistance (Demonstration Steps)

Q3. Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1 has the DNS Server server role installed.

The network contains client computers that run either Linux, Windows 7, or Windows 8.

You have a standard primary zone named adatum.com as shown in the exhibit. (Click the Exhibit button.)

You plan to configure Name Protection on all of the DHCP servers.

You need to configure the adatum.com zone to support Name Protection.

Which two configurations should you perform from DNS Manager? (Each correct answer presents part of the solution. Choose two.)

A. Sign the zone.

B. Store the zone in Active Directory.

C. Modify the Security settings of the zone.

D. Configure Dynamic updates.

E. Add a DNS key record

Answer: B,D

Explanation:

Name protection requires secure update to work. Without name protection DNS names may be hijacked.

You can use the following procedures to allow only secure dynamic updates for a zone.

Secure dynamic update is supported only for Active Directory–integrated zones. If the zone type is configured differently, you must change the zone type and directory-integrate the zone before securing it for Domain Name System (DNS) dynamic updates.

1. (B) Convert primary DNS server to Active Directory integrated primary

2. (D) Enable secure dynamic updates

Reference: DHCP: Secure DNS updates should be configured if Name Protection is enabled on any IPv4 scope

http://technet.microsoft.com/en-us/library/ee941152(v=ws.10).aspx

Q4. HOTSPOT

Your network contains an Active Directory domain named contoso.com.

You have a failover cluster named Cluster1 that contains two nodes named Server1 and Server2. Both servers run Windows Server 2012 R2 and have the Hyper-V server role installed.

You plan to create two virtual machines that will run an application named App1. App1 will store data on a virtual hard drive named App1data.vhdx. App1data.vhdx will be shared by both virtual machines.

The network contains the following shared folders:

An SMB file share named Share1 that is hosted on a Scale-Out File Server. An SMB file share named Share2 that is hosted on a standalone file server. An NFS share named Share3 that is hosted on a standalone file server.

You need to ensure that both virtual machines can use App1data.vhdx simultaneously.

What should you do?

To answer, select the appropriate configurations in the answer area.

Answer:

Q5. Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1. The File Server Resource Manager role service is installed on Server1. All servers run Windows Server 2012 R2.

A Group Policy object (GPO) named GPO1 is linked to the organizational unit (OU) that contains Server1. The following graphic shows the configured settings in GPO1.

Server1 contains a folder named Folder1. Folder1 is shared as Share1.

You attempt to configure access-denied assistance on Server1, but the Enable access-denied assistance option cannot be selected from File Server Resource Manager.

You need to ensure that you can configure access-denied assistance on Server1 manually by using File Server Resource Manager.

Which two actions should you perform?

A. Set the Enable access-denied assistance on client for all file types policy setting to Disabled for GPO1.

B. Set the Customize message for Access Denied errors policy setting to Not Configured for GPO1.

C. Set the Enable access-denied assistance on client for all file types policy setting to Enabled for GPO1.

D. Set the Customize message for Access Denied errors policy setting to Enabled for GPO1.

Answer: C,D

Explanation:

C. To configure access-denied assistance for all file types by using Group Policy . Open Group Policy Management. In Server Manager, click Tools, and then click

Group Policy Management. . Right-click the appropriate Group Policy, and then click Edit. . Click Computer Configuration, click Policies, click Administrative Templates, click

System, and then click Access-Denied Assistance.

Right-click Enable access-denied assistance on client for all file types, and then

click Edit.

Click Enabled, and then click OK.

D. To configure access-denied assistance by using Group Policy (see step 5)

Open Group Policy Management. In Server Manager, click Tools, and then click

Group Policy Management.

Right-click the appropriate Group Policy, and then click Edit.

Click Computer Configuration, click Policies, click Administrative Templates, click

System, and then click Access-Denied Assistance.

Right-click Customize message for Access Denied errors, and then click Edit.

Select the Enabled option.

Etc Reference: Deploy Access-Denied Assistance (Demonstration Steps) http://technet.microsoft.com/en-us/library/hh831402.aspx

Q6. Your network contains one Active Directory domain. The domain contains two Hyper-V

hosts named Host1 and Host2 that run Windows Server 2012 R2.

Host1 contains a virtual machine named VM1.

You plan to move VM1 to Host2.

You need to generate a report that lists any configuration issues on Host2 that will prevent

VM1 from being moved successfully.

Which cmdlet should you use?

A. Move-VM

B. Test-VHD

C. Debug-VM

D. Compare-VM

Answer: C

Reference: Technet, Compare-VM https://technet.microsoft.com/en-us/library/hh848612(v=wps.630).aspx

Q7. You have a server named Server1 that runs Windows Server 2012 R2.

You start Server1 by using Windows RE.

You need to repair the Boot Configuration Data (BCD) store on Server1.

Which tool should you use?

A. Bootim

B. Bootsect

C. Bootrec

D. Bootcfg

Answer: C

Q8. Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role installed and is configured as a standalone certification authority (CA).

You install a second server named Server2. You install the Online Responder role service on Server2.

You need to ensure that Server1 can issue an Online Certificate Status Protocol (OCSP) Response Signing certificate to Server2.

What should you run on Server1?

A. The certreq.exe command and specify the -policy parameter

B. The certutil.exe command and specify the -getkey parameter

C. The certutil.exe command and specify the -setreg parameter

D. The certreq.exe command and specify the -retrieve parameter

Answer: C

Explanation: To prepare a computer running Windows Server to issue OCSP Response Signing certificates

On the server hosting the CA, open a command prompt, and type: certutil -v -setreg policy\EnableRequestExtensionList +1.3.6.1.5.5.7.48.1.5 Stop and restart the CA. You can do this at a command prompt by running the following commands: net stop certsvc

net start certsvc

Reference: Configure a CA to Support OCSP Responders

https://technet.microsoft.com/en-us/library/cc732526.aspx

Q9. Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1 that runs Windows Server 2012 R2. All client computers run Windows 8.

You need to configure a custom Access Denied message that will be displayed to users when they are denied access to folders or files on Server1.

What should you configure?

A. A classification property

B. The File Server Resource Manager Options

C. A file management task

D. A file screen template

Answer: B

Explanation:

Access-denied assistance can be configured by using the File Server Resource Manager console on the file server.

Note: Access-denied assistance is a new feature in Windows Server 2012, which provides the following ways to troubleshoot issues that are related to access to files and folders:

* Self-assistance. If a user can determine the issue and remediate the problem so that they can get the requested access, the impact to the business is low, and no special exceptions are needed in the central access policy. Access-denied assistance provides an access-denied message that file server administrators can customize with information specific to their organizations. For example, an administrator could set the message so that users can request access from a data owner without involving the file server administrator.

Reference: Scenario: Access-Denied Assistance

Q10. You have a server named Server1 that runs Windows Server 2012 R2 and is used for testing.

A developer at your company creates and installs an unsigned kernel-mode driver on Server1. The developer reports that Server1 will no longer start.

You need to ensure that the developer can test the new driver. The solution must minimize the amount of data loss.

Which Advanced Boot Option should you select?

A. Disable Driver Signature Enforcement

B. Disable automatic restart on system failure

C. Last Know Good Configuration (advanced)

D. Repair Your Computer

Answer: A

Explanation:

A. By default, 64-bit versions of Windows Vista and later versions of Windows will load a kernel-mode driver only if the kernel can verify the driver signature. However, this default behavior can be disabled to facilitate early driver development and non-automated testing.

Incorrect:

Not B. specifies that Windows automatically restarts your computer when a failure occurs.

Not C. Developer would not be able to test the driver as needed.

Not D. Removes or repairs critical windows files, Developer would not be able to test the

driver as needed and some file loss.

Reference: Installing Windows Server 2012.

http://technet.microsoft.com/en-us/library/jj134246.aspx

http://msdn.microsoft.com/en-us/library/windows/hardware/ff547565(v=vs.85).aspx