It is impossible to pass Microsoft 70 412 dumps exam without any help in the short term. Come to Exambible soon and find the most advanced, correct and guaranteed Microsoft 70 412 exam dumps practice questions. You will get a surprising result by our Improved Configuring Advanced Windows Server 2012 Services practice guides.

Q81. DRAG DROP 

Your network contains an Active Directory domain named adatum.com. The domain contains three servers. The servers are configured as shown in the following table. 

Server1 is configured as shown in the exhibit. (Click the Exhibit button.) 

Template1 contains custom cryptography settings that are required by the corporate security team. 

On Server2, an administrator successfully installs a certificate based on Template1. 

The administrator reports that Template1 is not listed in the Certificate Enrollment wizard on Server3, even after selecting the Show all templates check box. 

You need to ensure that you can install a server authentication certificate on Server3. The certificate must comply with the cryptography requirements. 

Which three actions should you perform in sequence? 

To answer, move the appropriate three actions from the list of actions to the answer area 

and arrange them in the correct order. 

Answer: 


Q82. HOTSPOT 

Your network contains an Active Directory domain named contoso.com. The domain contains two DHCP servers named Server1 and Server2. Both servers have multiple IPv4 scopes. 

Server1 and Server2 are used to assign IP addresses for the network IDs of 172.20.0.0/16 and 131.107.0.0/16. 

You install the IP Address Management (IPAM) Server feature on a server named IPAM1 and configure IPAM1 to manage Server1 and Server2. 

Some users from the 172.20.0.0 network report that they occasionally receive an IP address conflict error message. 

You need to identify whether any scopes in the 172.20.0.0 network ID conflict with one another. 

What Windows PowerShell cmdlet should you run? 

To answer, select the appropriate options in the answer area. 

Answer: 


Q83. HOTSPOT 

Your network contains one Active Directory forest. The forest has three sites configured as shown in the following table. 

The forest contains the site links configured as shown in the following table. 

A domain controller named DC2 has an IP address of 192.168.2.2. DC2 and is in Site2. 

You run the following cmdlets. 

New-ADReplicationSite Site3 

New-ADReplacationSubnet –Name “192.168.3.0/24” –Site Site3 

Use the drop-down menus to select the answer choice that completes each statement. 

Answer: 


Q84. Your network contains an Active Directory forest. The forest contains one domain named contoso.com. The domain contains three domain controllers. The domain controllers are configured as shown in the following table. 

DC1 has all of the operations master roles installed. 

You transfer all of the operations master roles to DC2, and then you uninstall Active Directory from DC1. 

You need to ensure that you can use Password Settings objects (PSOs) in the domain. 

What should you do? 

A. Change the domain functional level. 

B. Upgrade DC2. 

C. Run the dcgpofix.exe command. 

D. Transfer the schema master role. 

Answer:

Explanation: 

The domain functional level must be Windows Server 2008 to use PSO's 

Requirements and special considerations for fine-grained password and account lockout policies: 

* Domain functional level: The domain functional level must be set to Windows Server 2008 

or higher. 

Etc. 

Incorrect: 

Not B. DC2 is also Windows Server 2008. 

Not C. Recreates the default Group Policy Objects (GPOs) for a domain 

Not D. Schema isn't up to right level 

Reference: AD DS: Fine-Grained Password Policies 

http://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx 


Q85. Your network contains an Active Directory domain named adatum.com. The domain contains two domain controllers that run Windows Server 2012 R2. The domain controllers are configured as shown in the following table. 

You log on to DC1 by using a user account that is a member of the Domain Admins group, and then you create a new user account named User1. 

You need to prepopulate the password for User1 on DC2. 

What should you do first? 

A. Connect to DC2 from Active Directory Users and Computers. 

B. Add DC2 to the Allowed RODC Password Replication Policy group. 

C. Add the User1 account to the Allowed RODC Password Replication Policy group. 

D. Run Active Directory Users and Computers as a member of the Enterprise Admins group. 

Answer:

Explanation: 

To prepopulate the password cache for an RODC by using Active Directory Users and Computers (see step 1 below). 

Administrative credentials: To prepopulate the password cache for an RODC, you must be a member of the Domain Admins group. 

Click Start, click Administrative Tools, and then click Active Directory Users and 

Computers. 

Ensure that Active Directory Users and Computers points to the writable domain 

controller that is running Windows Server 2008, and then click Domain Controllers. 

In the details pane, right-click the RODC computer account, and then click 

Properties. 

Click the Password Replication Policy tab. 

Click Advanced. 

Click Prepopulate Passwords. 

Type the name of the accounts whose passwords you want to prepopulate in the 

cache for the RODC, and then click OK. 

When you are asked if you want to send the passwords for the accounts to the 

RODC, click Yes. 

Note: You can prepopulate the password cache for an RODC with the passwords of user and computer accounts that you plan to authenticate to it. When you prepopulate the RODC password cache, you trigger the RODC to replicate and cache the passwords for users and computers before the accounts try to log on in the branch office. 

Incorrect: Not C. You don't need to add User1 to the Allowed RODC Password Replication Policy group. As a first step you should run Active.Directory Users and Computers as a member of the Domain/Enterprise Admins group.-

Reference: Password Replication Policy Administration 

http://technet.microsoft.com/en-us/library/cc753470(v=ws.10).aspx#BKMK_pre 


Q86. DRAG DROP 

You have 3 server named Server1 that runs Windows Server 2012 R2. You are asked to test Windows Azure Online Backup to back up Server1. You need to back up Server1 by using Windows Azure Online Backup. Which four actions should you perform in sequence? 

To answer, move the appropriate four actions from the list of actions to the answer area and arrange them in the correct order. 

Answer: 


Q87. HOTSPOT 

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. 

Server1 and Server2 have the Network Load Balancing (NLB) feature installed. The servers are configured as nodes in an NLB cluster named Cluster1. Both servers connect to the same switch. 

Cluster1 hosts a secure web Application named WebApp1. WebApp1 saves user state information in a central database. 

You need to ensure that the connections to WebApp1 are distributed evenly between the nodes. The solution must minimize port flooding. 

What should you configure? To answer, configure the appropriate affinity and the appropriate mode for Cluster1 in the answer area. 

Answer: 


Q88. Your company recently deployed a new Active Directory forest named contoso.com. The first domain controller in the forest runs Windows Server 2012 R2. 

You need to identify the time-to-live (TTL) value for domain referrals to the NETLOGON and SYSVOL shared folders. 

Which tool should you use? 

A. Ultrasound 

B. Replmon 

C. Dfsdiag 

D. Frsutil 

Answer:

Explanation: 

Explanation/Reference: 

DFSDIAG can check your configuration in five different ways: 

Checking referral responses (DFSDIAG /TestReferral) 

Checking domain controller configuration 

Checking site associations 

Checking namespace server configuration 

Checking individual namespace configuration and integrity 

Reference: Five ways to check your DFS-Namespaces (DFS-N) configuration with the 

DFSDIAG.EXE tool 


Q89. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DHCP Server server role installed. 

An administrator installs the IP Address Management (IPAM) Server feature on a server named Server2. The administrator configures IPAM by using Group Policy based provisioning and starts server discovery. 

You plan to create Group Policies for IPAM provisioning. 

You need to identify which Group Policy object (GPO) name prefix must be used for IPAM Group Policies. 

What should you do on Server2? 

A. From Server Manager, review the IPAM overview. 

B. Run the ipamgc.exe tool. 

C. From Task Scheduler, review the IPAM tasks. 

D. Run the Get-IpamConfiguration cmdlet. 

Answer:

Explanation: 

Example: 

http://i.imgur.com/YcHLXhr.jpg 


Q90. HOTSPOT 

Your network contains one Active Directory forest named contoso.com and one Active Directory forest named adatum.com. Each forest contains a single domain. 

You have the domain controllers configured as shown in the following table. 

You perform the following three actions: 

Create a user named User1 on DC3. 

Create a file named File1.txt in the SYSVOL folder on DC1. 

Create a Group Policy object (GPO) named GPO1 on DC1 and link GPO1 to 

Site2. 

You need to identify on which domain controller or controllers each object is stored. 

What should you identify? To answer, select the appropriate options in the answer area. 

Answer: