Microsoft Configuring Advanced Windows Server 2012 Services - 070-412 FREE EXAM DUMPS QUESTIONS & ANSWERS
Your network contains 25 Web servers that run Windows Server 2012 R2.
You need to configure auditing policies that meet the following requirements:
* Generate an event each time a new process is created.
* Generate an event each time a user attempts to access a file share.
Which two auditing policies should you configure?
To answer, select the appropriate two auditing policies in the answer area.
Answer Area
You need to configure auditing policies that meet the following requirements:
* Generate an event each time a new process is created.
* Generate an event each time a user attempts to access a file share.
Which two auditing policies should you configure?
To answer, select the appropriate two auditing policies in the answer area.
Answer Area
Correct Answer:
Explanation
* Audit object access
Determines whether to audit the event of a user accessing an object (for example, file, folder, registry key, printer, and so forth) which has its own system access control list (SACL) specified.
* Audit process tracking
This security setting determines whether to audit detailed tracking information for events such as program activation, process exit, handle duplication, and indirect object access.
Reference: https://technet.microsoft.com/en-us/library/cc976403.aspx
Reference: https://technet.microsoft.com/sv-se/library/Cc775520(v=WS.10).aspx
You are about to promote a server running the Windows Server 2012 R2 operating system to domain controller.
The domain is currently running at the Windows Server 2008 domain functional level.
Your account is a member of the Domain Admins group.
Which additional groups should your account be a member of to ensure that the environment is appropriately configured for this domain controller running Windows Server 2012 R2? (Choose two. Each answer forms part of a complete solution.)
The domain is currently running at the Windows Server 2008 domain functional level.
Your account is a member of the Domain Admins group.
Which additional groups should your account be a member of to ensure that the environment is appropriately configured for this domain controller running Windows Server 2012 R2? (Choose two. Each answer forms part of a complete solution.)
Correct Answer: B,C
Vote an answer
Your network contains one Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2. All domain computers have certificates that are issued by a certification authority (CA) named Contoso CA.
A user named User1 performs daily backups of the data on Server1 to a backup vault named Vault1. A user named User2 performs daily backups of the data on Server2 to a vault named Vault2.
You have the administrative credentials for Server2.
You need to restore the data from that last backup of Server1 to Server2.
Which two pieces of information do you require to complete the task? Each correct answer presents part of the solution.
A user named User1 performs daily backups of the data on Server1 to a backup vault named Vault1. A user named User2 performs daily backups of the data on Server2 to a vault named Vault2.
You have the administrative credentials for Server2.
You need to restore the data from that last backup of Server1 to Server2.
Which two pieces of information do you require to complete the task? Each correct answer presents part of the solution.
Correct Answer: A,C
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Which of the following CA types must be deployed on domain-joined computers?
Correct Answer: B,D
Vote an answer
You are considering adding a child domain to the dandenong.melbourne.victoria. australia.contoso.com domain tree.
Which of the following represents the maximum length in characters, including periods, of an Active Directory domain name?
Which of the following represents the maximum length in characters, including periods, of an Active Directory domain name?
Correct Answer: C
Vote an answer
Your network contains one Active Directory forest named contoso.com. The forest contains the domain controllers configured as shown in the following table.
You perform the following actions:
* Create a file named File1.txt in the SYSVOL folder on DC1.
* Create a user named User1 on DC4.
You need to identify on which domain controller or controllers a copy of each object is stored.
What should you identify? To answer, select the appropriate options in the answer area.
You perform the following actions:
* Create a file named File1.txt in the SYSVOL folder on DC1.
* Create a user named User1 on DC4.
You need to identify on which domain controller or controllers a copy of each object is stored.
What should you identify? To answer, select the appropriate options in the answer area.
Correct Answer:
Explanation
Your network contains two Web servers named Server1 and Server2. Both servers run WIndows Server 2012 R2.
Server1
and Server2 are nodes in a Network Load Balancing (NLB) cluster. The NLB cluster as application named App1 that is accessed by using the URL http://app1.contoso.com. You plan to perform maintenance on Server1.
You need to ensure that all new connection server2. The solution must not disconnect the existing connection to Server1 What should you run?
Server1
and Server2 are nodes in a Network Load Balancing (NLB) cluster. The NLB cluster as application named App1 that is accessed by using the URL http://app1.contoso.com. You plan to perform maintenance on Server1.
You need to ensure that all new connection server2. The solution must not disconnect the existing connection to Server1 What should you run?
Correct Answer: C
Vote an answer
Your network contains two Web servers named Server1 and Server2. Both servers run Windows Server 2012 R2.
Server1
and Server2 are nodes in a Network Load Balancing (NLB) cluster. The NLB cluster contains an application named App1 that is accessed by using the URL http://app1.contoso.com.
You plan to perform maintenance on Server1.
You need to ensure that all new connections to App1 are directed to Server2. The solution must not disconnect the existing connections to Server1.
What should you run?
Server1
and Server2 are nodes in a Network Load Balancing (NLB) cluster. The NLB cluster contains an application named App1 that is accessed by using the URL http://app1.contoso.com.
You plan to perform maintenance on Server1.
You need to ensure that all new connections to App1 are directed to Server2. The solution must not disconnect the existing connections to Server1.
What should you run?
Correct Answer: D
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1. The File Server Resource Manager role service is installed on Server1. All servers run Windows Server 2012 R2.
A Group Policy object (GPO) named GPO1 is linked to the organizational unit (OU) that contains Server1.
The following graphic shows the configured settings in GPO1.
Server1 contains a folder named Folder1. Folder1 is shared as Share1.
You attempt to configure access-denied assistance on Server1, but the Enable access-denied assistance option cannot be selected from File Server Resource Manager.
You need to ensure that you can configure access-denied assistance on Server1 manually by using File Server Resource Manager.
Which two actions should you perform?
A Group Policy object (GPO) named GPO1 is linked to the organizational unit (OU) that contains Server1.
The following graphic shows the configured settings in GPO1.
Server1 contains a folder named Folder1. Folder1 is shared as Share1.
You attempt to configure access-denied assistance on Server1, but the Enable access-denied assistance option cannot be selected from File Server Resource Manager.
You need to ensure that you can configure access-denied assistance on Server1 manually by using File Server Resource Manager.
Which two actions should you perform?
Correct Answer: B,C
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Rights Management Services server role installed.
The domain contains a domain local group named Group1.
You create a rights policy template named Template1. You assign Group1 the rights to Template1.
You need to ensure that all the members of Group1 can use Template1.
What should you do?
The domain contains a domain local group named Group1.
You create a rights policy template named Template1. You assign Group1 the rights to Template1.
You need to ensure that all the members of Group1 can use Template1.
What should you do?
Correct Answer: C
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
You have a server named Server1 that runs Windows Server 2012 R2.
You suspect that some protected system files are corrupt.
You need to verify the protected system files on Server1 and replace files that have incorrect versions.
Which tool should you use?
You suspect that some protected system files are corrupt.
You need to verify the protected system files on Server1 and replace files that have incorrect versions.
Which tool should you use?
Correct Answer: B
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Your network contains two Active Directory forests named contoso.com and adatum.com. Each forest contains an Active Directory Rights Management Services (AD RMS) root cluster. All servers run Windows Server 2012 R2.
You need to ensure that the rights account certificates issued in adatum.com are accepted by the AD RMS root cluster in contoso.com.
What should you do in each forest?
To answer, drag the appropriate actions to the correct forests. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
You need to ensure that the rights account certificates issued in adatum.com are accepted by the AD RMS root cluster in contoso.com.
What should you do in each forest?
To answer, drag the appropriate actions to the correct forests. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:
Explanation
A trusted user domain, often referred as a TUD, is a trust between AD RMS clusters that instructs a licensing server to accept rights account certificates (the certificates identifying users) from another AD RMS server in a different Active Directory forest. An AD RMS trust is not the same as an Active Directory trust, but it is similar in that it refers to the ability of one environment to accept identities from another environment as valid subjects.
Illustration:
fc8d52c8-a2d8-4584-be1d-99e67989a944
Reference: Trusted User Domain
Your network contains one Active Directory forest named adatum.com. The forest contains a single domain.
The forest contains the domain controllers configured as shown in the following table.
Recently, a domain controller named DC4 was deployed to adatum.com. DC4 is in the Default-First-Site-Name site.
The adatum.com site links are configured as follows.
The schedule for SiteLink1 is shown in the SiteLink1 exhibit. (Click the Exhibit button.)
The schedule for SiteLink2 is shown in the SiteLink2 exhibit. (Click the Exhibit button.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
The forest contains the domain controllers configured as shown in the following table.
Recently, a domain controller named DC4 was deployed to adatum.com. DC4 is in the Default-First-Site-Name site.
The adatum.com site links are configured as follows.
The schedule for SiteLink1 is shown in the SiteLink1 exhibit. (Click the Exhibit button.)
The schedule for SiteLink2 is shown in the SiteLink2 exhibit. (Click the Exhibit button.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Correct Answer:
Explanation
* SiteLink1 replication is not available at 10:00.
* SiteLink1 and SiteLink2 replication is available at Friday at 23:00. Replication intervals are 15 minutes and 30 minutes respectively.
* DefaultIPSitelink will be used to replicate an object from DC1 to DC4. The replication interval of DefaultIPSitelink is 180 minutes.
You are employed as a network administrator at contoso.com.
Contoso.com has an active directory domain named contoso.com.
All servers on the contoso.com network have Windows Server 2012 R2 installed.
Contoso.com has a server named server1,which is configured as a file server.
You have been instructed to enabled a feature that discovers and eradicates duplication within data without compromising its reliability or accuracy.
Which of the following actions should you take?
Contoso.com has an active directory domain named contoso.com.
All servers on the contoso.com network have Windows Server 2012 R2 installed.
Contoso.com has a server named server1,which is configured as a file server.
You have been instructed to enabled a feature that discovers and eradicates duplication within data without compromising its reliability or accuracy.
Which of the following actions should you take?
Correct Answer: C
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
You want to enable key archiving on a CA.
You need to issue a certificate from a specific template to the user who will recover private keys.
Which certificate template will you use as the basis for this certificate?
You need to issue a certificate from a specific template to the user who will recover private keys.
Which certificate template will you use as the basis for this certificate?
Correct Answer: A
Vote an answer