Microsoft 70-412 Exam Questions Instant Access

Question 1

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the DNS Server server role installed.

You need to configure Server1 to resolve queries for single-label DNS names.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

ARun the Set-DNSServerGlobalNameZone cmdlet.

BModify the DNS suffix search list setting.

CModify the Primary DNS Suffix Devolution setting.

DCreate a zone named ''.''.

ECreate a zone named GlobalNames.

FRun the Set-DNSServerRootHint cmdlet.

Answer : A, E

Deploying a GlobalNames zone

The specific steps for deploying a GlobalNames zone can vary somewhat, depending on the AD DS topology of your network.

Step 1: Create the GlobalNames zone (E)

Step 2: Enable GlobalNames zone support (A)

The Set-DnsServerGlobalNameZone cmdlet enables or disables single-label Domain Name System (DNS) queries. It also changes configuration settings for a GlobalNames zone.

Etc.

http://technet.microsoft.com/en-us/library/cc731744.aspx

http://technet.microsoft.com/en-us/library/jj649907(v=wps.620).aspx

Question 2

Your network contains an Active Directory domain named contoso.com. The domain contains a certification authority (CA).

You suspect that a certificate issued to a Web server is compromised.

You need to minimize the likelihood that users will trust the compromised certificate.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

AStop the Certificate Propagation service.

BModify the validity period of the Web Server certificate template.

CRun certutil and specify the -revoke parameter.

DRun certutil and specify the -deny parameter.

EPublish the certificate revocation list (CRL).
First revoke the certificate, then publish the CRL.

Answer : C, E

Question 3

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DNS Server server role installed.

Server1 has a zone named contoso.com. The zone is configured as shown in the exhibit. (Click the Exhibit button.)

You need to assign a user named User1 permission to add and delete records from the contoso.com zone only.

What should you do first?

AEnable the Advanced view from DNS Manager.

BAdd User1 to the DnsUpdateProxy group.

CRun the New Delegation Wizard.

DConfigure the zone to be Active Directory-integrated.
Secure dynamic updates are only supported or configurable for resource records in zones that are stored in Active Directory Domain Services (AD DS).
Note: To modify security for a resource record
Open DNS Manager.
In the console tree, click the applicable zone.
In the details pane, click the record that you want to view.
On the Action menu, click Properties.
On the Security tab, modify the list of member users or groups that are allowed to securely update the applicable record and reset their permissions as needed.

Answer : D

Question 4

You need to ensure that clients will check at least every 30 minutes as to whether a certificate has been revoked. Which of the following should you configure to accomplish this goal?

AKey recovery agent

BCRL publication interval

CDelta CRL publication interval

DCertificate templates.

Answer : C

Question 5

There are 42 domains in the tailspintoys.com forest. Users in the Melbourne.victoria. australia.tailspintoys.com find the process of authenticating to resources in the Copenhagen. denmark.europe.tailspintoys.com domain to be much too slow.

Which of the following steps can you take to speed up authentication between these domains?

ACreate a forest trust.

BCreate an external trust.

CCreate a shortcut trust.

DConfigure name suffix routing.

Answer : C

Question 6

Your network contains an Active Directory domain named contoso.com. The domain contains two sites named Site1 and Site2 and two domain controllers named DC1 and DC2. Both domain controllers are located in Site1.

You install an additional domain controller named DC3 in Site1 and you ship DC3 to Site2.

A technician connects DC3 to Site2.

You discover that users in Site2 are authenticated by all three domain controllers.

You need to ensure that the users in Site2 are authenticated by DC1 or DC2 only if DC3 is unavailable.

What should you do?

AFrom Network Connections, modify the IP address of DC3.

BIn Active Directory Sites and Services, modify the Query Policy of DC3.

CFrom Active Directory Sites and Services, move DC3.

DIn Active Directory Users and Computers, configure the insDS-PrimaryComputer attribute for the users in Site2.

Answer : C

DC3 needs to be moved to Site2 in AD DS

Incorrect:

Not A. Modifying IP will not affect authentication

Not B. A query policy prevents specific Lightweight Directory Access Protocol (LDAP) operations from adversely impacting the performance of the domain controller and also makes the domain controller more resilient to denial-of-service attacks.

http://technet.microsoft.com/en-us/library/cc759326(v=ws.10).aspx

Question 7

Your company recently deployed a new Active Directory forest named contoso.com. The forest contains two Active Directory sites named Site1 and Site2. The first domain controller in the forest runs Windows Server 2012 R2.

You need to force the replication of the SYSVOL folder from Site1 to Site2.

Which tool should you use?

AActive Directory Sites and Services

BDFS Management

CRepadmin

DDfsrdiag

Answer : D

In Windows Server 2012 R2, Windows Server 2008 R2, or Windows Server 2008, you can force replication immediately by using DFS Management, as described in Edit Replication Schedules. You can also force replication by using the Dfsrdiag SyncNow command. You can force polling by using the Dfsrdiag PollAD command.

http://technet.microsoft.com/en-us/library/cc773238(v=ws.10).aspx#BKMK_072

Microsoft Configuring Advanced Windows Server 2012 Services 70-412 Exam Questions