Proper study guides for Regenerate Microsoft Configuring Advanced Windows Server 2012 Services certified begins with Microsoft 70-412 preparation products which designed to deliver the Guaranteed 70-412 questions by making you pass the 70-412 test at your first time. Try the free 70-412 demo right now.

2021 Jan 70-412 simulations

Q71. DRAG DROP 

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. 

You plan to install the Active Directory Federation Services server role on Server1 to allow for Workplace Join. 

You run nslookup enterprise registration and you receive the following results: 

You need to create a certificate request for Server1 to support the Active Directory Federation Services (AD FS) installation. 

How should you configure the certificate request? 

To answer, drag the appropriate names to the correct locations. Each name may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 

Answer: 


Q72. Your network contains one Active Directory domain named contoso.com. The domain contains the domain controllers configured as shown in the following table. 

The functional level of the domain and the forest is Windows Server 2008. 

An administrator named Admin1 is a member of the Domain Admins group. 

You need to ensure that Admin1 can deploy a Windows Server 2012 R2 domain controller to contoso.com. 

What should you do? 

A. Raise the forest functional level. 

B. Run the Set-ADForestMode cmdlet. 

C. Raise the domain functional level. 

D. Run the adprep.exe command. 

Answer: D 

Explanation: Adprep.exe commands run automatically as needed as part of the AD DS installation process on servers that run Windows Server 2012 or later. The commands need to run in the following cases: 

* Before you add the first domain controller that runs a version of Windows Server that is later than the latest version that is running in your existing domain. 

* Before you upgrade an existing domain controller to a later version of Windows Server, if that domain controller will be the first domain controller in the domain or forest to run that version of Windows Server. 

Reference: Running Adprep.exe 

https://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx 


Q73. HOTSPOT 

Your network contains an Active Directory domain named contoso.com. The domain contains two Active Directory sites named Site1 and Site2. 

You need to configure the replication between the sites to occur by using change notification. 

Which attribute should you modify? 

Answer: 


Q74. HOTSPOT 

Your network contains an Active Directory domain named adatum.com. All servers run Windows Server 2012 R2. All domain controllers have the DNS Server server role installed. 

You have a domain controller named DC1. 

On DC1, you create an Active Directory-integrated zone named adatum.com and you sign 

the zone by using DNSSEC. 

You deploy a new read-only domain controller (RODC) named RODC1. You need to ensure that the contoso.com zone replicates to RODC1. What should you configure on DC1? 

To answer, select the appropriate tab in the answer area. 

Answer: 


Q75. HOTSPOT 

Your network contains an Active Directory forest. 

You implement Dynamic Access Control in the forest. 

You have the claim types shown in the Claim Types exhibit. (Click the Exhibit button.) 

The properties of a user named User1 are configured as shown in the User1 exhibit. (Click the Exhibit button.) 

The output of Whoami /claims for a user named User2 is shown in the Whoami exhibit. (Click the Exhibit button.) 

Select Yes if the statement can be shown to be true based on the available information; otherwise select No. Each correct selection is worth one point. 

Answer: 


Most recent 70-412 brain dumps:

Q76. Your network contains one Active Directory domain named contoso.com. The domain contains three users named User1, User2, and User3. 

You need to ensure that the users can log on to the domain by using the user principal names (UPNs) shown in the following table. 

What should you use? 

A. the Set-ADDomain cmdlet 

B. the Add-DNSServerSecondaryZone cmdlet 

C. the Setspn command 

D. the Set-ADUser cmdlet 

Answer: D 

Reference: Technet, Set-ADUser https://technet.microsoft.com/en-us/library/ee617215.aspx 


Q77. Your network contains an Active Directory domain named contoso.com. The domain contains two sites named Site1 and Site2 and two domain controllers named DC1 and DC2. Both domain controllers are located in Site1. 

You install an additional domain controller named DC3 in Site1 and you ship DC3 to Site2. 

A technician connects DC3 to Site2. 

You discover that users in Site2 are authenticated by all three domain controllers. 

You need to ensure that the users in Site2 are authenticated by DC1 or DC2 only if DC3 is unavailable. 

What should you do? 

A. From Network Connections, modify the IP address of DC3. 

B. In Active Directory Sites and Services, modify the Query Policy of DC3. 

C. From Active Directory Sites and Services, move DC3. 

D. In Active Directory Users and Computers, configure the insDS-PrimaryComputer attribute for the users in Site2. 

Answer: C 

Explanation: 

DC3 needs to be moved to Site2 in AD DS 

Incorrect: 

Not A. Modifying IP will not affect authentication 

Not B. A query policy prevents specific Lightweight Directory Access Protocol (LDAP) 

operations from adversely impacting the performance of the domain controller and also 

makes the domain controller more resilient to denial-of-service attacks. 

Reference: Move a domain controller between sites 

http://technet.microsoft.com/en-us/library/cc759326(v=ws.10).aspx 


Q78. DRAG DROP 

Your network contains an Active Directory domain named contoso.com. The domain contains four member servers named Server1, Server2, Servers, and Server4. All servers run Windows Server 2012 R2. 

Server1 and Server2 are located in a site named Site1. Server3 and Server4 are located in a site named Site2. The servers are configured as nodes in a failover cluster named Cluster1. 

Cluster1 is configured to use the Node Majority quorum configuration. 

You need to ensure that Server1 is the only server in Site1 that can vote to maintain quorum. 

What should you run from Windows PowerShell? 

To answer, drag the appropriate commands to the correct location. Each command may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 

Answer: 


Q79. Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. 

Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. 

Cluster1 hosts an Application named App1. 

You need to ensure that Server2 handles all of the client requests to the cluster for App1. The solution must ensure that if Server2 fails, Server1 becomes the active node for App1. 

What should you configure? 

A. Affinity-None 

B. Affinity-Single 

C. The cluster quorum settings 

D. The failover settings 

E. A file server for general use 

F. The Handling priority 

G. The host priority 

H. Live migration 

I. The possible owner 

J. The preferred owner 

K. Quick migration 

L. the Scale-Out File Server 

Answer: J 

Explanation: 

The preferred owner in a two-server cluster will always be the active node unless it is down. 

Reference: Preferred Owners in a Cluster 

http://blogs.msdn.com/b/clustering/archive/2008/10/14/9000092.aspx 


Q80. Your network contains an Active Directory domain named contoso.com. The domain 

contains a certification authority (CA). 

You suspect that a certificate issued to a Web server is compromised. 

You need to minimize the likelihood that users will trust the compromised certificate. 

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) 

A. Stop the Certificate Propagation service. 

B. Modify the validity period of the Web Server certificate template. 

C. Run certutil and specify the -revoke parameter. 

D. Run certutil and specify the -deny parameter. 

E. Publish the certificate revocation list (CRL). 

Answer: C,E 

Explanation: First revoke the certificate, then publish the CRL.