QUESTION 271

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the DHCP Server server role installed. Server2 has the Hyper-V server role installed. Server2 has an IP address of 192.168.10.50. Server1 has a scope named Scope1 for the 192.168.10.0/24 network. You plan to deploy 20 virtual machines on Server2 that will be connected to the external network. The MAC addresses for the virtual machines will begin with 00-15-SD-83-03. You need to configure Server1 to offer the virtual machines IP addresses from 192.168.10.200 to 192.168.10.210. Physical computers on the network must be offered IP addresses outside this range. You want to achieve this goal by using the minimum amount of administrative effort. What should you do from the DHCP console?

 

A.

Create reservations.

B.

Create a policy.

C.

Delete Scope1 and create two new scopes.

D.

Configure Allow filters and Deny filters.

 

Correct Answer: B

 

 

QUESTION 272

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Both servers have the IP Address Management (IPAM) Server feature installed. You have a support technician named Tech1. Tech1 is a member of the IPAM Administrators group on Server1 and Server2. You need to ensure that Tech 1 can use Server Manager on Server1 to manage IPAM on Server2. To which group on Server2 should you add Tech1?

 

A.

Remote Management Users

B.

IPAM MSM Administrators

C.

IPAM Administrators

D.

WinRM Remote WM1 Users

 

Correct Answer: D

 

 

QUESTION 273

Your network contains an Active Directory domain named contoso.com. The domain contains a main office and a branch office. An Active Directory site exists for each office. All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers. The domain controllers are configured as shown in the following table.

 

clip_image002

 

DC1 hosts an Active Directory-integrated zone for contoso.com. You add the DNS Server server role to DC2. You discover that the contoso.com DNS zone fails to replicate to DC2. You verify that the domain, schema, and configuration naming contexts replicate from DC1 to DC2. You need to ensure that DC2 replicates the contoso.com zone by using Active Directory replication. Which tool should you use?

 

A.

Active Directory Sites and Services

B.

Ntdsutil

C.

DNS Manager

D.

Active Directory Domains and Trusts

 

Correct Answer: A

 

 

 

 

 

QUESTION 274

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest is Windows Server 2003. The contoso.com domain contains domain controllers that run either Windows Server 2008 or Windows Server 2008 R2. The functional level of the domain is Windows Server 2008. The fabrikam.com domain contains domain controllers that run either Windows Server 2003 or Windows Server 2008. The functional level of the domain is Windows Server 2003. The contoso.com domain contains a member server named Server1 that runs Windows Server 2012 R2. You install the Active Directory Domain Services server role on Server1. You need to add Server1 as a new domain controller in the contoso.com domain. What should you do?

 

A.

Run the Active Directory Domain Services Configuration Wizard.

B.

Run adprep.exe /domainprep, and then run dcpromo.exe.

C.

Raise the functional level of the forest, and then run dcprorno.exe.

D.

Modify the Computer Name/Domain Changes properties.

 

Correct Answer: A

 

 

QUESTION 275

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The forest functional level is Windows 2000. The contoso.com domain contains domain controllers that run either Windows Server 2008 or Windows Server 2008 R2. The domain functional level is Windows Server 2008. The fabrikam.com domain contains domain controllers that run either Windows 2000 Server or Windows Server 2003. The domain functional level is Windows 2000 native. The contoso.com domain contains a member server named Server1 that runs Windows Server 2012 R2. You need to add Server1 as a new domain controller in the contoso.com domain. What should you do first?

 

A.

Raise the functional level of the contoso.com domain to Windows Server 2008 R2.

B.

Upgrade the domain controllers that run Windows Server 2008 to Windows Server 2008 R2.

C.

Raise the functional level of the fabrikam.com domain to Windows Server 2003.

D.

Decommission the domain controllers that run Windows 2000.

E.

Raise the forest functional level to Windows Server 2003.

 

Correct Answer: D

 

 

QUESTION 276

Your network contains an Active Directory domain named adatum.com. The domain contains four servers. The servers are configured as shown in the following table.

 

clip_image004

 

You plan to deploy an enterprise certification authority (CA) on a server named Server5. Server5 will be used to issue certificates to domain-joined computers and workgroup computers. You need to identify which server you must use as the certificate revocation list (CRL) distribution point for Server5. Which server should you identify?

 

A.

Server3

B.

Server2

C.

Server4

D.

Server1

 

Correct Answer: C

 

 

QUESTION 277

You have a server named Server1 that has the Active Directory Certificate Services server role installed. Server1 uses a hardware security module (HSM) to protect the private key of Server1. You need to ensure that the Active Directory Certificate Services (AD CS) database, log files, and private key are backed up. You perform regular backups of the HSM module by using a backup utility provided by the HSM manufacturer. What else should you do?

 

A.

Run the certutil.exe command and specify the -backupkey parameter.

B.

Run the certutil.exe command and specify the -backupdb parameter.

C.

Run the certutil.exe command and specify the -backup parameter.

D.

Run the certutil.exe command and specify the -dump parameter.

 

Correct Answer: B

 

 

QUESTION 278

You have a file server named Server1 that runs Windows Server 2012 R2. Data Deduplication is enabled on drive D of Server1. You need to exclude D:Folder1 from Data Deduplication. What should you configure?

 

A.

Disk Management in Computer Management

B.

File and Storage Services in Server Manager

C.

the classification rules in File Server Resource Manager (FSRM)

D.

the properties of D:Folder1

 

Correct Answer: B

 

 

QUESTION 279

You manage an environment that has many servers. The servers run Windows Server 2012 R2 and use iSCSI storage. Administrators report that it is difficult to locate available iSCSI resources on the network. You need to ensure that the administrators can locate iSCSI resources on the network by using a central repository. Which feature should you deploy?

 

A.

The iSCSI Target Server role service.

B.

The iSNS Server service feature.

C.

The Windows Standards-Based Storage Management feature.

D.

The iSCSI Target Storage Provider feature.

 

Correct Answer: B

 

QUESTION 280

Your network contains an Active Directory domain named contoso.com. The network contains a file server named Server1 that runs Windows Server 2012 R2. You create a folder named Folder1. You share Folder1 as Share1. The NTFS permissions on Folder1 are shown in the Folder1 exhibit.

 

clip_image006

 

The Everyone group has the Full control Share permission to Folder1.

 

You configure a central access policy as shown in the Central Access Policy exhibit.

 

clip_image008

 

Members of the IT group report that they cannot modify the files in Folder1.

 

You need to ensure that the IT group members can modify the files in Folder1. The solution must use central access policies to control the permissions. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.

On the Classification tab of Folder1, set the classification to Information Technology.

B.

On the Security tab of Folder1, add a conditional expression to the existing permission entry for the IT group.

C.

On Share1, assign the Change Share permission to the IT group.

D.

On the Security tab of Folder1, remove the permission entry for the IT group.

E.

On the Security tab of Folder1, assign the Modify permission to the Authenticated Users group.

 

Correct Answer: AE

 

Free VCE & PDF File for Microsoft 70-412 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…