Microsoft 70-412 test 3
C. Create a new site link that contains Montreal and Amsterdam. Remove Amsterdam from
DEFAULTIPSITELINK. Modify the schedule of the new site link. Correct Answer: Your company has
offices in Montreal, New York, and Amsterdam.
The network contains an Active Directory forest named contoso.com.
An Active Directory site exists for each office.
All of the sites connect to each other by using the DEFAULTIPSITELINK site link.
You need to ensure that only between 20:00 and 08:00, the domain controllers in the Montreal office
replicate the Active Directory changes to the domain controllers in the Amsterdam office. The solution
must ensure that the domain controllers in the Montreal and the New York offices can replicate the
Active Directory changes any time of day.
What should you do?
A. Create a new site link that contains Montreal and Amsterdam. Remove Amsterdam from
DEFAULTIPSITELINK. Modify the schedule of DEFAULTIPSITELINK.
B. Create a new site link that contains Montreal and Amsterdam. Create a new site link bridge. Modify
the schedule of DEFAU LTIPSITELINK.
C. Create a new site link that contains Montreal and Amsterdam. Remove Amsterdam from
DEFAULTIPSITELINK. Modify the schedule of the new site link.
D. Create a new site link that contains Montreal and Amsterdam. Create a new site link bridge. Modify
the schedule of the new site link.
E. PKISync.ps1 Correct Answer: Your network contains two Active Directory forests named contoso.com
and adatum.com.
A two- way forest trust exists between the forests.
The contoso.com forest contains an enterprise certification authority (CA) named Server1. You
implement cross-forest certificate enrollment between the contoso.com forest and the adatum.com
forest. On Server1, you create a new certificate template named Template1.
You need to ensure that users in the adatum.com forest can request certificates that are based on
Template1.
Which tool should you use?
A. DumpADO.ps1
B. Repadmin
C. Add-CATemplate
D. Certutil
E. PKISync.ps1
A. Start Server1 from the Windows Server 2012 R2 installation media. Correct Answer: You have a
server named Server1 that runs Windows Server 2012 R2. Server1 has the Windows Deployment
Services server role installed. You back up Server1 each day by using Windows Server Backup. The disk
array on Server1 fails.
You replace the disk array.
You need to restore Server1 as quickly as possible.
What should you do?
,A. Start Server1 from the Windows Server 2012 R2 installation media.
B. Start Server1and press F8.
C. Start Server1 and press Shift+F8.
D. Start Server1 by using the PXE.
D. From the Hyper-V Settings of Server1, modify the Replication Configuration settings. Enable
replication for VM1. Correct Answer: Your network contains two servers named Server1 and Server2
that run Windows Server 2012 R2. Both servers have the Hyper-V server role installed. Server1 and
Server2 are located in different offices. The offices connect to each other by using a high-latency WAN
link.
Server2 hosts a virtual machine named VM1.
You need to ensure that you can start VM1 on Server1 if Server2 fails.
The solution must minimize hardware costs.
What should you do?
A. On Server1, install the Multipath I/O (MPIO) feature.
Modify the storage location of the VHDs for VM1.
B. From the Hyper-V Settings of Server2, modify the Replication Configuration settings. Enable
replication for VM1.
C. On Server2, install the Multipath I/O (MPIO) feature.
Modify the storage location of the VHDs for VM1.
D. From the Hyper-V Settings of Server1, modify the Replication Configuration settings. Enable
replication for VM1.
C. Run the Active Directory Rights Management Services console by using an account that is a member
of the Enterprise Admins group, and then register the Service Connection Point (SCP). Correct Answer:
Your network contains an Active Directory domain named contoso.com.
You deploy a server named Server1 that runs Windows Server 2012 R2.
A local administrator installs the Active Directory Rights Management Services server role on Server1.
You need to ensure that AD RMS clients can discover the AD RMS cluster automatically. What should
you do?
A. Run the Active Directory Rights Management Services console by using an account that is a member
of the Schema Admins group, and then configure the proxy settings.
B. Run the Active Directory Rights Management Services console by using an account that is a member
of the Schema Admins group, and then register the Service Connection Point (SCP).
C. Run the Active Directory Rights Management Services console by using an account that is a member
of the Enterprise Admins group, and then register the Service Connection Point (SCP).
D. Run the Active Directory Rights Management Services console by using an account that is a member
of the Enterprise Admins group, and then configure the proxy settings.
A. The Hyper-V Manager console connected to Server3
D. The Failover Cluster Manager console connected to Cluster1 Correct Answer: Your network contains
an Active Directory domain named contoso.com. The domain contains three servers named Server1,
Server2, and Server3 that run Windows Server 2012 R2. All three servers have the Hyper-V server role
installed and the Failover Clustering feature installed. Server1 and Server2 are nodes in a failover cluster
named Cluster1.
Several highly available virtual machines run on Cluster1.
,Cluster1 has the Hyper-V Replica Broker role installed.
The Hyper-V Replica Broker currently runs on Server1.
Server3 currently has no virtual machines.
You need to configure Cluster1 to be a replica server for Server3 and Server3 to be a replica server for
Cluster1.
Which two tools should you use? (Each correct answer presents part of the solution. Choose two.)
A. The Hyper-V Manager console connected to Server3
B. The Failover Cluster Manager console connected to Server3
C. The Hyper-V Manager console connected to Server1.
D. The Failover Cluster Manager console connected to Cluster1
E. The Hyper-V Manager console connected to Server2
B. A Name Resolution Policy Correct Answer: You have a DNS server named Server1 that runs Windows
Server 2012 R2.
Server1 has a signed zone for contoso.com.
You need to configure DNS clients to perform DNSSEC validation for the contoso.com DNS domain.
What should you configure?
A. The Network Connection settings
B. A Name Resolution Policy
C. The Network Location settings
D. The DNS Client settings
C. hot standby mode failover partners Correct Answer: Your network contains an Active Directory
domain named contoso.com. The domain contains a main office and a branch office. An Active Directory
site exists for each office. The domain contains two servers named Server1 and Server2 that run
Windows Server 2012 R2. Both servers have the DHCP Server server role installed.
Server1 is located in the main office site. Server2 is located in the branch office site. Server1 provides
IPv4 addresses to the client computers in the main office site.
Server2 provides IPv4 addresses to the client computers in the branch office site.
You need to ensure that if either Server1 or Server2 are offline, the client computers can still obtain IPv4
addresses.
The solution must meet the following requirements:
- The storage location of the DHCP databases must not be a single point of failure.
- Server1 must provide IPv4 addresses to the client computers in the branch office site only if Server2 is
offline.
- Server2 must provide IPv4 addresses to the client computers in the main office site only if Server1 is
offline.
Which configuration should you use?
A. load sharing mode failover partners
B. a failover cluster
C. hot standby mode failover partners
D. a Network Load Balancing (NLB) cluster
D. the iSNS Server service feature Correct Answer: Your network contains servers that run Windows
Server 2012 R2.
The network contains a large number of iSCSI storage locations and iSCSI clients.
, You need to deploy a central repository that can discover and list iSCSI resources on the network
automatically.
Which feature should you deploy?
A. the Windows Standards-Based Storage Management feature
B. the iSCSI Target Server role service
C. the iSCSI Target Storage Provider feature
D. the iSNS Server service feature
C. Configure forest-wide authentication. Correct Answer: Your network contains two Active Directory
forests named contoso.com and fabrikam.com. The contoso.com forest contains two domains named
corp.contoso.com and contoso.com. You establish a two-way forest trust between contoso.com and
fabrikam.com. Users from the corp.contoso.com domain report that they cannot log on to client
computers in the fabrikam.com domain by using their corp.contoso.com user account.
When they try to log on, they receive following error message:
"The computer you are signing into is protected by an authentication firewall. The specified account is
not allowed to authenticate to the computer."
Corp.contoso.com users can log on successfully to client computers in the contoso.com domain by using
their corp.contoso.com user account credentials.
You need to allow users from the corp.contoso.com domain to log on to the client computers in the
fabrikam.com forest.
What should you do?
A. Configure Windows Firewall with Advanced Security.
B. Enable SID history.
C. Configure forest-wide authentication.
D. Instruct the users to log on by using a user principal name (UPN).
A. Client Authentication
C. Server Authentication Correct Answer: Your network contains an Active Directory domain named
contoso.com. The domain contains two servers named Server1 and Server2. Both servers have the
Hyper-V server role installed.
You plan to replicate virtual machines between Server1 and Server2.
The replication will be encrypted by using Secure Sockets Layer (SSL).
You need to request a certificate on Server1 to ensure that the virtual machine replication is encrypted.
Which two intended purposes should the certificate for Server1 contain? (Each correct answer presents
part of the solution. Choose two.)
A. Client Authentication
B. Kernel Mode Code Signing
C. Server Authentication
D. IP Security end system
E. KDC Authentication
A. On Server1, modify the settings of VM1.
C. On Server2, modify the Hyper-V Settings. Correct Answer: Your network contains an Active Directory
domain named contoso.com. The domain contains two member servers named Server1 and Server2
that run Windows Server 2012 R2.
C. Create a new site link that contains Montreal and Amsterdam. Remove Amsterdam from
DEFAULTIPSITELINK. Modify the schedule of the new site link. Correct Answer: Your company has
offices in Montreal, New York, and Amsterdam.
The network contains an Active Directory forest named contoso.com.
An Active Directory site exists for each office.
All of the sites connect to each other by using the DEFAULTIPSITELINK site link.
You need to ensure that only between 20:00 and 08:00, the domain controllers in the Montreal office
replicate the Active Directory changes to the domain controllers in the Amsterdam office. The solution
must ensure that the domain controllers in the Montreal and the New York offices can replicate the
Active Directory changes any time of day.
What should you do?
A. Create a new site link that contains Montreal and Amsterdam. Remove Amsterdam from
DEFAULTIPSITELINK. Modify the schedule of DEFAULTIPSITELINK.
B. Create a new site link that contains Montreal and Amsterdam. Create a new site link bridge. Modify
the schedule of DEFAU LTIPSITELINK.
C. Create a new site link that contains Montreal and Amsterdam. Remove Amsterdam from
DEFAULTIPSITELINK. Modify the schedule of the new site link.
D. Create a new site link that contains Montreal and Amsterdam. Create a new site link bridge. Modify
the schedule of the new site link.
E. PKISync.ps1 Correct Answer: Your network contains two Active Directory forests named contoso.com
and adatum.com.
A two- way forest trust exists between the forests.
The contoso.com forest contains an enterprise certification authority (CA) named Server1. You
implement cross-forest certificate enrollment between the contoso.com forest and the adatum.com
forest. On Server1, you create a new certificate template named Template1.
You need to ensure that users in the adatum.com forest can request certificates that are based on
Template1.
Which tool should you use?
A. DumpADO.ps1
B. Repadmin
C. Add-CATemplate
D. Certutil
E. PKISync.ps1
A. Start Server1 from the Windows Server 2012 R2 installation media. Correct Answer: You have a
server named Server1 that runs Windows Server 2012 R2. Server1 has the Windows Deployment
Services server role installed. You back up Server1 each day by using Windows Server Backup. The disk
array on Server1 fails.
You replace the disk array.
You need to restore Server1 as quickly as possible.
What should you do?
,A. Start Server1 from the Windows Server 2012 R2 installation media.
B. Start Server1and press F8.
C. Start Server1 and press Shift+F8.
D. Start Server1 by using the PXE.
D. From the Hyper-V Settings of Server1, modify the Replication Configuration settings. Enable
replication for VM1. Correct Answer: Your network contains two servers named Server1 and Server2
that run Windows Server 2012 R2. Both servers have the Hyper-V server role installed. Server1 and
Server2 are located in different offices. The offices connect to each other by using a high-latency WAN
link.
Server2 hosts a virtual machine named VM1.
You need to ensure that you can start VM1 on Server1 if Server2 fails.
The solution must minimize hardware costs.
What should you do?
A. On Server1, install the Multipath I/O (MPIO) feature.
Modify the storage location of the VHDs for VM1.
B. From the Hyper-V Settings of Server2, modify the Replication Configuration settings. Enable
replication for VM1.
C. On Server2, install the Multipath I/O (MPIO) feature.
Modify the storage location of the VHDs for VM1.
D. From the Hyper-V Settings of Server1, modify the Replication Configuration settings. Enable
replication for VM1.
C. Run the Active Directory Rights Management Services console by using an account that is a member
of the Enterprise Admins group, and then register the Service Connection Point (SCP). Correct Answer:
Your network contains an Active Directory domain named contoso.com.
You deploy a server named Server1 that runs Windows Server 2012 R2.
A local administrator installs the Active Directory Rights Management Services server role on Server1.
You need to ensure that AD RMS clients can discover the AD RMS cluster automatically. What should
you do?
A. Run the Active Directory Rights Management Services console by using an account that is a member
of the Schema Admins group, and then configure the proxy settings.
B. Run the Active Directory Rights Management Services console by using an account that is a member
of the Schema Admins group, and then register the Service Connection Point (SCP).
C. Run the Active Directory Rights Management Services console by using an account that is a member
of the Enterprise Admins group, and then register the Service Connection Point (SCP).
D. Run the Active Directory Rights Management Services console by using an account that is a member
of the Enterprise Admins group, and then configure the proxy settings.
A. The Hyper-V Manager console connected to Server3
D. The Failover Cluster Manager console connected to Cluster1 Correct Answer: Your network contains
an Active Directory domain named contoso.com. The domain contains three servers named Server1,
Server2, and Server3 that run Windows Server 2012 R2. All three servers have the Hyper-V server role
installed and the Failover Clustering feature installed. Server1 and Server2 are nodes in a failover cluster
named Cluster1.
Several highly available virtual machines run on Cluster1.
,Cluster1 has the Hyper-V Replica Broker role installed.
The Hyper-V Replica Broker currently runs on Server1.
Server3 currently has no virtual machines.
You need to configure Cluster1 to be a replica server for Server3 and Server3 to be a replica server for
Cluster1.
Which two tools should you use? (Each correct answer presents part of the solution. Choose two.)
A. The Hyper-V Manager console connected to Server3
B. The Failover Cluster Manager console connected to Server3
C. The Hyper-V Manager console connected to Server1.
D. The Failover Cluster Manager console connected to Cluster1
E. The Hyper-V Manager console connected to Server2
B. A Name Resolution Policy Correct Answer: You have a DNS server named Server1 that runs Windows
Server 2012 R2.
Server1 has a signed zone for contoso.com.
You need to configure DNS clients to perform DNSSEC validation for the contoso.com DNS domain.
What should you configure?
A. The Network Connection settings
B. A Name Resolution Policy
C. The Network Location settings
D. The DNS Client settings
C. hot standby mode failover partners Correct Answer: Your network contains an Active Directory
domain named contoso.com. The domain contains a main office and a branch office. An Active Directory
site exists for each office. The domain contains two servers named Server1 and Server2 that run
Windows Server 2012 R2. Both servers have the DHCP Server server role installed.
Server1 is located in the main office site. Server2 is located in the branch office site. Server1 provides
IPv4 addresses to the client computers in the main office site.
Server2 provides IPv4 addresses to the client computers in the branch office site.
You need to ensure that if either Server1 or Server2 are offline, the client computers can still obtain IPv4
addresses.
The solution must meet the following requirements:
- The storage location of the DHCP databases must not be a single point of failure.
- Server1 must provide IPv4 addresses to the client computers in the branch office site only if Server2 is
offline.
- Server2 must provide IPv4 addresses to the client computers in the main office site only if Server1 is
offline.
Which configuration should you use?
A. load sharing mode failover partners
B. a failover cluster
C. hot standby mode failover partners
D. a Network Load Balancing (NLB) cluster
D. the iSNS Server service feature Correct Answer: Your network contains servers that run Windows
Server 2012 R2.
The network contains a large number of iSCSI storage locations and iSCSI clients.
, You need to deploy a central repository that can discover and list iSCSI resources on the network
automatically.
Which feature should you deploy?
A. the Windows Standards-Based Storage Management feature
B. the iSCSI Target Server role service
C. the iSCSI Target Storage Provider feature
D. the iSNS Server service feature
C. Configure forest-wide authentication. Correct Answer: Your network contains two Active Directory
forests named contoso.com and fabrikam.com. The contoso.com forest contains two domains named
corp.contoso.com and contoso.com. You establish a two-way forest trust between contoso.com and
fabrikam.com. Users from the corp.contoso.com domain report that they cannot log on to client
computers in the fabrikam.com domain by using their corp.contoso.com user account.
When they try to log on, they receive following error message:
"The computer you are signing into is protected by an authentication firewall. The specified account is
not allowed to authenticate to the computer."
Corp.contoso.com users can log on successfully to client computers in the contoso.com domain by using
their corp.contoso.com user account credentials.
You need to allow users from the corp.contoso.com domain to log on to the client computers in the
fabrikam.com forest.
What should you do?
A. Configure Windows Firewall with Advanced Security.
B. Enable SID history.
C. Configure forest-wide authentication.
D. Instruct the users to log on by using a user principal name (UPN).
A. Client Authentication
C. Server Authentication Correct Answer: Your network contains an Active Directory domain named
contoso.com. The domain contains two servers named Server1 and Server2. Both servers have the
Hyper-V server role installed.
You plan to replicate virtual machines between Server1 and Server2.
The replication will be encrypted by using Secure Sockets Layer (SSL).
You need to request a certificate on Server1 to ensure that the virtual machine replication is encrypted.
Which two intended purposes should the certificate for Server1 contain? (Each correct answer presents
part of the solution. Choose two.)
A. Client Authentication
B. Kernel Mode Code Signing
C. Server Authentication
D. IP Security end system
E. KDC Authentication
A. On Server1, modify the settings of VM1.
C. On Server2, modify the Hyper-V Settings. Correct Answer: Your network contains an Active Directory
domain named contoso.com. The domain contains two member servers named Server1 and Server2
that run Windows Server 2012 R2.
