You have a server named Server1 that runs Windows Server 2012 R2. From Server Manager, you install the Active Directory Certificate Services server role on Server1. A domain administrator named Admin1 logs on to Server1. When Admin1 runs the Certification Authority console, Admin1 receive the following error message. You need to ensure that when Admin1 opens the Certification Authority console on Server1, the error message does not appear. What should you do?

Correct Answer: Add Admin1 to the Cert Publishers group.

Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1. The File Server Resource Manager role service is installed on Server1. All servers run Windows Server 2012 R2. A Group Policy object (GPO) named GPO1 is linked to the organizational unit (OU) that contains Server1. The following graphic shows the configured settings in GPO1. Server1 contains a folder named Folder1. Folder1 is shared as Share1. You attempt to configure access-denied assistance on Server1, but the Enable access-denied assistance option cannot be selected from File Server Resource Manager. You need to ensure that you can configure access-denied assistance on Server1 manually by using File Server Resource Manager. Which two actions should you perform?

Correct Answer: Set the Enable access-denied assistance on client for all file types policy setting to Enabled for GPO1.

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has a single volume that is encrypted by using BitLocker Drive Encryption (BitLocker). BitLocker is configured to save encryption keys to a Trusted Platform Module (TPM). Server1 is configured to perform a daily system image backup. The motherboard on Server1 is upgraded. After the upgrade, Windows Server 2012 R2 on Server1 fails to start. You need to start the operating system on Server1 as soon as possible. What should you do?

Correct Answer: Start Server1 from the installation media. Run startrec.exe.

Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and childl.contoso.com. The domains contain three domain controllers. The domain controllers are configured as shown in the following table. You need to ensure that the KDC support for claims, compound authentication, and kerberos armoring setting is enforced in the child1.contoso.com domain. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Correct Answer: Raise the domain functional level of childl.contoso.com.

You are employed as a senior network administrator at ABC.com. ABC.com has an Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2012 R2 installed. ABC.com has two servers, named SERVER1 and SERVER2 which are configured in a two-node failover cluster. Server1 includes a folder, named ABCAppData, which is configured as a Distributed File System (DFS) name space folder target. After configuring another two nodes in the failover cluster, you are instructed to make sure that access to ABC AppData is highly available. You also have to make sure that application data is replicated to ABCAppData via DFS replication. Which following actions should you take?

Correct Answer: You should consider configuring a scale-out File Server

Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 and Server2 have the Hyper-V server role installed. Server1 and Server2 are configured as Hyper-V replicas of each other. Server2 hosts a virtual machine named VM5. VM5 is replicated to Server1. You need to verify whether the replica of VM5 on Server1 is functional. The solution must ensure that VM5 remains accessible to clients. What should you do from Hyper-V Manager?

Correct Answer: On Server2, execute a Planned Failover.

Your network contains an Active Directory domain named adatum.com. The domain contains two sites named Site1 and Site2 and two domain controllers named DC1 and DC2. DC1 is located in Site1 and DC2 is located in Site2. You install an additional domain controller named DC3 in Site1 and you ship DC3 to Site2. A technician connects DC3 to Site2. You discover that users in Site2 are authenticated only by DC2. You need to ensure that the users in Site2 are authenticated by both DC2 and DC3. What should you do?

Correct Answer: From Active Directory Sites and Services, modify the site link between Site1 and Site2.

You have a server named server1 that runs Window server 2012 R2. You install the DHCP server role on Server1. You need to create a multicast scope on Server1. What is a valid IP address range to use for the multicast scope?

Correct Answer: 172.16.1.10 "" 172.16.2.10

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. Cluster1 contains a cluster disk resource. A developer creates an application named App1. App1 is NOT a cluster-aware application. App1 runs as a service. App1 stores date on the cluster disk resource. You need to ensure that App1 runs in Cluster1. The solution must minimize development effort. Which cmdlet should you run?

Correct Answer: Add-ClusterServerRole

You have a datacenter that contains six servers. Each server has the Hyper-V server role installed and runs Windows Server 2012 R2. The servers are configured as shown in the following table. Host4 and Host5 are part of a cluster named Cluster1. Cluster1 hosts a virtual machine named VM1. You need to move VM1 to another Hyper-V host. The solution must minimize the downtime of VM1. To which server and by which method should you move VM1?

Correct Answer: To Host1 by using a quick migration

You have two servers named Server1 and server2 that run Windows Server 2012 R2. On volume D of Server1, you create a share named Share1. Volume D has 1 TB of free space. Server2 uses 20 GB of disk space. One GB of data is modified daily. You install Windows Server Backup on Server2. You configure Windows Server Backup to perform a daily backup of Server2 and to store the backup in \\Server1 \Share1. The scheduled backup completes successfully on Monday, Tuesday, and Wednesday. Which backups will be available in \\Server1?

Correct Answer: Only the daily backup from Wednesday

Your network contains an Active Directory domain. The domain contains a read-only domain controller (RODC) named RODC1 that runs Windows Server 2012 R2. A domain user named User1 is a member of the following domain groups: ✑ DnsAdmins ✑ Backup Operators ✑ Account Operators ✑ DHCP Administrators ✑ Hyper-V Administrators ✑ Allowed RODC Password Replication Group User1 is authenticated by RODC1. You discover that the password for User1 is not cached on RODC1. Which two groups prevent the password from being cached on RODC1? (Each correct answer presents part of the solution. Choose two.) NOTE: Each correct selection is worth one point.

Correct Answer: DHCP Administrators

Your network contains a perimeter network and an internal network. The internal network contains an Active Directory Federation Services (AD FS) 2.1 infrastructure. The infrastructure uses Active Directory as the attribute store. You plan to deploy a federation server proxy to a server named Server2 in the perimeter network. You need to identify which value must be included in the certificate that is deployed to Server2. What should you identify?

Correct Answer: The name of the Federation Service

Your network contains an Active Directory domain. The domain contains two Hyper-V hosts named Server1 and Server2 that run Windows Server 2012 R2. Live migration is configured in Server1 and Server2. You sign in to Server1, and then you create a virtual machine named VM1 on Server1. You move VM1 to Server2 by using live migration. You need to use live migration to move VM1 back to Server1. You must perform the move from Server1. What should you do first?

Correct Answer: Configure delegation on the Server1 computer object.

You have a server named Server1 that runs Windows Server 2012 R2. From Server Manager, you install the Active Directory Certificate Services server role on Server1. A domain administrator named Admin1 logs on to Server1. When Admin1 runs the Certification Authority console, Admin1 receive the following error message. You need to ensure that when Admin1 opens the Certification Authority console on Server1, the error message does not appear. What should you do?

Correct Answer: Install the Active Directory Certificate Services (AD CS) tools.

Your network contains an Active Directory domain named contoso.com. A previous administrator implemented a Proof of Concept installation of Active Directory Rights Management Services (AD RMS). After the proof of concept was complete, the Active Directory Rights Management Services server role was removed. You attempt to deploy AD RMS. During the configuration of AD RMS, you receive an error message indicating that an existing AD RMS Service Connection Point (SCP) was found. You need to remove the existing AD RMS SCP. Which tool should you use?

Correct Answer: Active Directory Domains and Trusts

You have a server named Server1 that runs Windows Server 2012 R2. Server1 is located in the perimeter network and has the DNS Server server role installed. Server1 has a zone named contoso.com. You App1y a security template to Server1. After you App1y the template, users report that they can no longer resolve names from contoso.com. On Server1, you open DNS Manager as shown in the DNS exhibit. (Click the Exhibit button.) On Server1, you open Windows Firewall with Advanced Security as shown in the Firewall exhibit. (Click the Exhibit button.) You need to ensure that users can resolve contoso.com names. What should you do?

Correct Answer: From DNS Manager, modify the Start of Authority (SOA) of the contoso.com zone.

You have a server named Server1. You install the IP Address Management (IPAM) Server feature on Server1. You need to provide a user named User1 with the ability to set the access scope of all the DHCP servers that are managed by IPAM. The solution must use the principle of least privilege. Which user role should you assign to User1?

Correct Answer: DNS Record Administrator Role

Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1 that runs Windows Server 2012 R2. You create a user account named User1 in the domain. You need to ensure that User1 can use Windows Server Backup to back up Server1. The solution must minimize the number of administrative rights assigned to User1. What should you do?

Correct Answer: Assign User1 the Backup files and directories user right and the Restore files and directories user right.

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. You install the DHCP Server server role on Server1 and Server2. You install the IP Address Management (IPAM) Server feature on Server1. You notice that you cannot discover Server1 or Server2 in IPAM. You need to ensure that you can use IPAM to discover the DHCP infrastructure. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Correct Answer: On Server1, run the Add-IpamServerInventory cmdlet.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DHCP Server server role installed. Server1 has an IPv6 scope named Scope1. You implement an additional DHCP server named Server2 that runs Windows Server 2012 R2. You need to provide high availability for Scope1. The solution must minimize administrative effort. What should you do?

Correct Answer: Install and configure Failover Clustering on Server1 and Server2.

Your network contains two Active Directory forests named contoso.com and corp.contoso.com. User1 is a member of the DnsAdmins domain local group in contoso.com. User1 attempts to create a conditional forwarder to corp.contoso.com but receive an error message shown in the exhibit. (Click the Exhibit button.) You need to configure bi-directional name resolution between the two forests. What should you do first?

Correct Answer: Add User1 to the DnsUpdateProxy group.

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1 has the DNS Server server role installed. The network contains client computers that run either Linux, Windows 7, or Windows 8. You have a standard primary zone named adatum.com as shown in the exhibit. (Click the Exhibit button.) You plan to configure Name Protection on all of the DHCP servers. You need to configure the adatum.com zone to support Name Protection. Which two configurations should you perform from DNS Manager? (Each correct answer presents part of the solution. Choose two.)

Correct Answer: Modify the Security settings of the zone.

Your network contains two Active Directory forests named contoso.com and adatum.com. Each forest contains one domain. Contoso.com has a two-way forest trust to adatum.com. Selective authentication is enabled on the forest trust. Contoso contains 10 servers that have the File Server role service installed. Users successfully access shared folders on the file servers by using permissions granted to the Authenticated Users group. You migrate the file servers to adatum.com. Contoso users report that after the migration, they are unable to access shared folders on the file servers. You need to ensure that the Contoso users can access the shared folders on the file servers. What should you do?

Correct Answer: Run netdom and specify the /quarantine attribute.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs a Server Core installation of Windows Server 2012 R2. You need to deploy a certification authority (CA) to Server1. The CA must support the auto-enrollment of certificates. Which two cmdlets should you run? (Each correct answer presents part of the solution. Choose two.)

Correct Answer: Install-AdcsOnlineResponder

Your network contains an Active Directory forest. The forest contains one domain named adatum.com. The domain contains four domain controllers. The domain controllers are configured as shown in the following table. DC2 has all of the domain-wide operations master roles. DC3 has all of the forest-wide operation master roles. You need to ensure that you can use Password Settings objects (PSOs) in the domain. What should you do first?

Correct Answer: Change the domain functional level.

Your network contains an Active Directory domain named contoso.com. The domain contains four servers named Server1, Server2, Server3, and Server4 that run Windows Server 2012 R2. All servers have the Hyper-V server role and the Failover Clustering feature installed. You need to replicate virtual machines from Cluster1 to Cluster2. Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

Correct Answer: From Cluster2, add and configure the Hyper-V Replica Broker role.

You have a virtual machine named VM1 that runs on a host named Host1. You configure VM1 to replicate to another host named Host2. Host2 is located in the same physical location as Host1. You need to add an additional replica of VM1. The replica will be located in a different physical site. What should you do?

Correct Answer: From VM1 on Host1, click Extend Replication.

Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Both servers have the Hyper-V server role installed. Server1 and Server2 are located in different offices. The offices connect to each other by using a high-latency WAN link. Server1 hosts a virtual machine named VM1. You need to ensure that you can start VM1 on Server2 if Server1 fails. The solution must minimize hardware costs. What should you do?

Correct Answer: On Server2, install the Multipath I/O (MPIO) feature. Modify the storage location of the VHDs for VM1.

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Both servers have the IP Address Management (IPAM) Server feature installed. You have a support technician named Tech1. Tech1 is a member of the IPAM Administrators group on Server1 and Server2. You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2. To which group on Server2 should you add Tech1?

Correct Answer: winRMRemoteWMIUsers_

Your network contains an Active Directory domain named adatum.com. The domain contains two domain controllers that run Windows Server 2012 R2. The domain controllers are configured as shown in the following table. You log on to DC1 by using a user account that is a member of the Domain Admins group, and then you create a new user account named User1. You need to prepopulate the password for User1 on DC2. What should you do first?

Correct Answer: Add DC2 to the Allowed RODC Password Replication Policy group.

Your network contains 20 iSCSI storage appliances that will provide storage for 50 Hyper-V hosts running Windows Server 2012 R2. You need to configure the storage for the Hyper-V hosts. The solution must minimize administrative effort. What should you do first?

Correct Answer: Install the iSCSI Target Server role service and configure iSCSI targets.

You have a failover cluster named Cluster1 that contains four nodes. All of the nodes run Windows Server 2012 R2. You need to force every node in Cluster1 to contact immediately the Windows Server Update Services (WSUS) server on your network for updates. Which tool should you use?

Correct Answer: The Wuauclt command

You create a new virtual disk in a storage pool by using the New Virtual Disk Wizard. You discover that the new virtual disk has a write-back cache of 1 GB. You need to ensure that the virtual disk has a write-back cache of 5 GB. What should you do?

Correct Answer: Delete the virtual disk, and then run the New-StorageSubSystemVirtualDisk cmdlet.

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012 R2. Both servers have the Hyper-V server role installed. The network contains an enterprise certification authority (CA). All servers are enrolled automatically for a certificate-based on the Computer certificate template. On Server1, you have a virtual machine named VM1. VM1 is replicated to Server2. You need to encrypt the replication of VM1. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Correct Answer: On Server2, modify the Hyper-V Settings.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has an enterprise root certification authority (CA) for contoso.com. You deploy another member server named Server2 that runs Windows Server 2012 R2 and has the Web Server (IIS) server role installed. You need to designate a website on Server1 as the certificate revocation list (CRL) distribution point for the C

Correct Answer: Configure a CA policy module.

You have a cluster named Cluster1 that contains two nodes. Both nodes run Windows Server 2012 R2. Cluster1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2. You configure a custom service on VM1 named Service1. You need to ensure that VM1 will be moved to a different node if Service1 fails. Which cmdlet should you run on Cluster1?

Correct Answer: Add-ClusterVmMonitoredItem

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed. You are creating a file management task as shown in the exhibit. (Click the Exhibit button.) You need to ensure that the Include all folders that store the following kinds of data list displays an entry named Corporate Data. What should you do?

Correct Answer: Modify the Folder Usage classification property.

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. Cluster1 has access to four physical disks. The disks are configured as shown in the following table. You need to ensure that all of the disks can be added to a Cluster Shared Volume (CSV). Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Correct Answer: Format Disk2 to use NTFS.

You configure the nodes to use the port rule shown in the exhibit. (Click the Exhibit button.) You need to configure the NLB cluster to meet the following requirements: HTTPS connections must be directed to Server1 if Serverl is available. ✑ HTTP connections must be load balanced between the two nodes. Which three actions should you perform? {Each correct answer presents part of the solution. Choose three.

Correct Answer: From the host properties of Server2, set the Handling priority of the existing port rule to 2.

A user named User1 is a member of the local Administrators group on Node1 and Node2. User1 creates a new clustered File Server role named File1 by using the File Server for general use option. A report is generated during the creation of File1 as shown in the exhibit. (Click the Exhibit button.) File1 fails to start. You need to ensure that you can start File1. What should you do?

Correct Answer: Log on to the domain by using the built-in Administrator for the domain, and then recreate the clustered File Server role by using the File Server for general use option.

Welcome to awslagi.com – Sharing AWS, Google Cloud, Microsoft Azure IT Exams. It's free for all!

Configuring Advanced Windows Server 2012 Services

Configure advanced Windows Server 2012 services with skill.

4.8★★★★★(167 ratings)

16,449 studentsIntermediate

Expand beyond administration into advanced networking, identity, and infrastructure services. The exam covers the deeper server capabilities needed to build resilient and scalable enterprise environments. It is valuable for professionals preparing for more complex infrastructure responsibilities. Passing this exam demonstrates that you can configure advanced services that support business continuity and performance.

What you'll learn

Configure advanced networking- Manage AD services- Implement high availability- Support advanced storage- Secure infrastructure services

70-412

Lectures1

Quizzes0

Duration30 week

Students16,449

$20.00

📢 Unlock Full Access to Success!

"The content displayed here is a promotional preview and contains only 50% of the actual exam database. To access the complete set of updated questions, please upgrade to the Full Version."

👉 Click the button and follow the instructions to secure your full access immediately!