100% Correct of 70-412 rapidshare materials and tutorials for Microsoft certification for IT examinee, Real Success Guaranteed with Updated 70-412 pdf dumps vce Materials. 100% PASS Configuring Advanced Windows Server 2012 Services exam Today!

2021 Apr 70-412 Study Guide Questions:

Q61. You have a server named Server1 that runs Windows Server 2012 R2. 

Windows Server 2012 R2 is installed on volume C. 

You need to ensure that Safe Mode with Networking loads the next time Server1 restarts. 

Which tool should you use? 

A. The Msconfig command 

B. The Bootcfg command 

C. The Restart-Computer cmdlet 

D. The Restart-Server cmdlet 

Answer: A 

Explanation: 

Use system config (Msconfig) to configure boot options. 

Reference: System Configuration – aka MSCONFIG. 

Q62. You have a Hyper-V host named Server1 that runs Windows Server 2012 R2. Server1 contains a virtual machine named VM1 that runs Windows Server 2012 R2. 

You fail to start VM1 and you suspect that the boot files on VM1 are corrupt. 

On Server1, you attach the virtual hard disk (VHD) of VM1 and you assign the VHD a drive 

letter of F. 

You need to repair the corrupt boot files on VM1. What should you run? 

A. bootrec.exe /rebuildbcd 

B. bootrec.exe /scanos 

C. bcdboot.exe f:windows /s c: 

D. bcdboot.exe c:windows /s f: 

Answer: D 

Explanation: 

Enables you to quickly set up a system partition, or to repair the boot environment located on the system partition. The system partition is set up by copying a simple set of Boot Configuration Data (BCD) files to an existing empty partition. 

Reference: BCDboot Command-Line Options 

Q63. Your network contains two Active Directory forests named contoso.com and adatum.com. Each forest contains one domain. Contoso.com has a two-way forest trust to adatum.com. Selective authentication is enabled on the forest trust. 

Contoso contains 10 servers that have the File Server role service installed. Users successfully access shared folders on the file servers by using permissions granted to the Authenticated Users group. 

You migrate the file servers to adatum.com. 

Contoso users report that after the migration, they are unable to access shared folders on the file servers. 

You need to ensure that the Contoso users can access the shared folders on the file servers. 

What should you do? 

A. Disable selective authentication on the existing forest trust. 

B. Disable SID filtering on the existing forest trust. 

C. Run netdom and specify the /quarantine attribute. 

D. Replace the existing forest trust with an external trust. 

Answer: B 

Explanation: 

Although it is not recommended, you can use this procedure to disable security identifier (SID) filter quarantining for an external trust with the Netdom.exe tool. You should consider disabling SID filter quarantining only in the following situations: 

* Users have been migrated to the trusted domain with their SID histories preserved, and you want to grant those users access to resources in the trusting domain (the former domain of the migrated users) based on the sIDHistory attribute. 

Etc. 

Reference: Disabling SID filter quarantining 

http://technet.microsoft.com/en-us/library/cc794713(v=ws.10).aspx 

Q64. You have a server named Server1 that runs Windows Server 2012 R2. 

Each day, Server1 is backed up fully to an external disk. 

On Server1, the disk that contains the operating system fails. 

You replace the failed disk. 

You need to perform a bare-metal recovery of Server1 by using the Windows Recovery 

Environment (Windows RE). 

What should you use? 

A. The Wbadmin.exe command 

B. The Repair-bde.exe command 

C. The Get-WBBareMetalRecovery cmdlet 

D. The Start-WBVolumeRecovery cmdlet 

Answer: A 

Explanation: 

Wbadmin enables you to back up and restore your operating system, volumes, files, folders, and applications from a command prompt. 

Wbadmin start sysrecovery runs a recovery of the full system (at least all the volumes that contain the operating system's state). This subcommand is only available if you are using the Windows Recovery Environment. 

* Wbadmin start sysrecovery -backupTarget Specifies the storage location that contains the backup or backups that you want to recover. This parameter is useful when the storage location is different from where backups of this computer 

Incorrect: 

Not B. Accesses encrypted data on a severely damaged hard disk if the drive was 

encrypted by using BitLocker. Repair-bde can reconstruct critical parts of the drive and 

salvage recoverable data as long as a valid recovery password or recovery key is used to 

decrypt the data. 

Not C. Gets the value that indicates whether the ability to perform bare metal recoveries 

from backups has been added to the backup policy (WBPolicy object). 

Not D. Starts a volume recovery operation. 

Reference: Wbadmin start sysrecovery 

http://technet.microsoft.com/en-us/library/cc742118.aspx 

Q65. HOTSPOT 

Your network contains three Active Directory forests. The forests are configured as shown in the following table. 

A two-way forest trust exists between contoso.com and divisionl.contoso.com. A two-way forest trust also exists between contoso.com and division2.contoso.com. 

You plan to create a one-way forest trust from divisionl.contoso.com to division2.contoso.com. 

You need to ensure that any cross-forest authentication requests are sent to the domain controllers in the appropriate forest after the trust is created. 

How should you configure the existing forest trust settings? 

In the table below, identify which configuration must be performed in each forest. Make only one selection in each column. Each correct selection is worth one point. 

Answer: 

Renew 70-412 download:

Q66. HOTSPOT 

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 and a member server named Server1. All servers run Windows Server 2012 R2. 

You install the IP Address Management (IPAM) Server feature on Server1. 

From the Provision IPAM wizard, you select the Group Policy Based provisioning method and enter a GPO name prefix of IPAM1. 

You need to provision IPAM by using Group Policy. 

What command should you run on Server1 to complete the process? To answer, select the appropriate options in the answer area. 

Answer: 

Q67. HOTSPOT 

Your network contains an Active Directory forest named contoso.com that contains a single 

domain. The forest contains three sites named Site1, Site2, and Site3. 

Domain controllers run either Windows Server 2008 R2 or Windows Server 2012 R2. 

Each site contains two domain controllers. Site1 and Site2 contain a global catalog server. 

You need to create a new site link between Site1 and Site2. The solution must ensure that 

the site link supports the replication of all the naming contexts. 

From which node should you create the site link? 

To answer, select the appropriate node in the answer area. 

Answer: 

Q68. Your network contains two Active Directory forests named contoso.com and adatum.com. All of the domain controllers in both of the forests run Windows Server 2012 R2. The adatum.com domain contains a file server named Servers. 

Adatum.com has a one-way forest trust to contoso.com. 

A contoso.com user name User10 attempts to access a shared folder on Servers and receives the error message shown in the exhibit. (Click the Exhibit button.) 

You verify that the Authenticated Users group has Read permissions to the Data folder. 

You need to ensure that User10 can read the contents of the Data folder on Server5 in the 

adatum.com domain. 

What should you do? 

A. Grant the Other Organization group Read permissions to the Data folder. 

B. Modify the list of logon workstations of the contosoUser10 user account. 

C. Enable the Netlogon Service (NP-In) firewall rule on Server5. 

D. Modify the permissions on the Server5 computer object in Active Directory. 

Answer: D 

Explanation: 

* To resolve the issue, I had to open up AD Users and Computers --> enable Advanced Features --> Select the Computer Object --> Properties --> Security --> Add the Group I want to allow access to the computer (in this case, DomainADomain users) and allow "Allowed to Authenticate". Once I did that, everything worked: 

* For users in a trusted Windows Server 2008 or Windows Server 2003 domain or forest to be able to access resources in a trusting Windows Server 2008 or Windows Server 2003 domain or forest where the trust authentication setting has been set to selective authentication, each user must be explicitly granted the Allowed to Authenticate permission on the security descriptor of the computer objects (resource computers) that reside in the trusting domain or forest. 

Reference: Grant the Allowed to Authenticate Permission on Computers in the Trusting Domain or Forest. 

http://technet.microsoft.com/en-us/library/cc816733(v=ws.10).aspx 

Q69. Your company recently deployed a new Active Directory forest named contoso.com. The forest contains two Active Directory sites named Site1 and Site2. The first domain controller in the forest runs Windows Server 2012 R2. 

You need to force the replication of the SYSVOL folder from Site1 to Site2. 

Which tool should you use? 

A. Active Directory Sites and Services 

B. DFS Management 

C. Repadmin 

D. Dfsrdiag 

Answer: D 

Explanation: 

In Windows Server 2012 R2, Windows Server 2008 R2, or Windows Server 2008, you can force replication immediately by using DFS Management, as described in Edit Replication Schedules. You can also force replication by using the Dfsrdiag SyncNow command. You can force polling by using the Dfsrdiag PollAD command. 

Reference: DFS Replication: Frequently Asked Questions (FAQ) 

http://technet.microsoft.com/en-us/library/cc773238(v=ws.10).aspx#BKMK_072 

Q70. DRAG DROP 

You have 3 server named Server1 that runs Windows Server 2012 R2. You are asked to test Windows Azure Online Backup to back up Server1. You need to back up Server1 by using Windows Azure Online Backup. Which four actions should you perform in sequence? 

To answer, move the appropriate four actions from the list of actions to the answer area and arrange them in the correct order. 

Answer: 

Verified 70-412 forum:

Q71. HOTSPOT 

Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA). 

The domain contains a server named Server1 that runs Windows Server 2012 R2. You install the Active Directory Federation Services server role on Server1. 

You plan to configure Server1 as an Active Directory Federation Services (AD FS) server. The Federation Service name will be set to adfs1.contoso.com. 

You need to identify which type of certificate template you must use to request a certificate for AD FS. 

Answer: 

Q72. You have a cluster named Cluster1 that contains two nodes. Both nodes run Windows Server 2012 R2. Cluster1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2. 

You configure a custom service on VM1 named Service1. 

You need to ensure that VM1 will be moved to a different node if Service1 fails. 

Which cmdlet should you run on Cluster1? 

A. Add-ClusterVmMonitoredItem 

B. Set-ClusterResourceDependency 

C. Enable- VmResourceMetering 

D. Add-ClusterGenericServiceRole 

Answer: A 

Explanation: 

* The Add-ClusterVMMonitoredItem cmdlet configures monitoring for a service or an Event Tracing for Windows (ETW) event so that it is monitored on a virtual machine. If the service fails or the event occurs, then the system responds by taking an action based on the failover configuration for the virtual machine resource. For example, the configuration might specify that the virtual machine be restarted or failover. 

* The decision on whether to failover or restart on the same node is configurable and determined by the failover properties for the virtual machine. 

Reference: Add-ClusterVMMonitoredItem 

Q73. You have a server named Server1 that runs Windows Server 2012 R2. 

You have a subscription to Windows Azure. 

You need to register the Microsoft Azure Backup Agent on Server1. 

What should you do first? 

A. Install the Microsoft System Center 2012 Data Protection Manager (DPM) agent. 

B. Create a backup vault. 

C. Create Site Recovery vault. 

D. Configure a passphrase for the Azure Backup Agent. 

Answer: B 

Explanation: To back up files and data from your Windows Server to Azure, you must create a backup vault in the geographic region where you want to store the data. The main steps include: 

* the creation of the vault you will use to store backups 

* downloading a vault credential 

* the installation of a backup agent 

Reference: Configure Azure Backup to quickly and easily back up Windows Server 

https://azure.microsoft.com/sv-se/documentation/articles/backup-configure-vault/ 

Q74. HOTSPOT 

Your network contains an Active Directory forest. 

You implement Dynamic Access Control in the forest. 

You have the claim types shown in the Claim Types exhibit. (Click the Exhibit button.) 

The properties of a user named User1 are configured as shown in the User1 exhibit. (Click the Exhibit button.) 

The output of Whoami /claims for a user named User2 is shown in the Whoami exhibit. (Click the Exhibit button.) 

Select Yes if the statement can be shown to be true based on the available information; otherwise select No. Each correct selection is worth one point. 

Answer: 

Q75. Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2012 R2. 

The domain contains four servers. The servers are configured as shown in the following table. 

You need to deploy IP Address Management (IPAM) to manage DNS and DHCP. 

On which server should you install IPAM? 

A. DC1 

B. DC2 

C. DC3 

D. Server1 

Answer: D 

Explanation: 

Explanaton: IPAM cannot be installed on Domain Controllers. All servers, except Server1, have the DC role 

Reference: IP Address Management (IPAM) Overview http://technet.microsoft.com/en-us/library/hh831353.aspx