Microsoft 70-412 Exam Questions and Answers 2021

NEW QUESTION 1
Your network contains three servers named HV1, HV2, and Server1 that run Windows Server 2012 R2. HV1 and HV2 have the Hyper-V server role installed. Server1 is a file server that contains 3 TB of free disk space.
HV1 hosts a virtual machine named VM1. The virtual machine configuration file for VM1 is stored in D:VM and the virtual hard disk file is stored in E:VHD.
You plan to replace drive E with a larger volume.
You need to ensure that VM1 remains available from HV1 while drive E is being replaced. You want to achieve this goal by using the minimum amount of administrative effort.
What should you do?

• A. Perform a live migration to HV2.
• B. Add HV1 and HV2 as nodes in a failover cluste
• C. Perform a storage migration to HV2.
• D. Add HV1 and HV2 as nodes in a failover cluste
• E. Perform a live migration to HV2.
• F. Perform a storage migration to Server1.

Answer: D

Explanation: One of the great new features coming in Windows Server 2012 is Storage Migration for Hyper-V. Storage Migration allows an administrator to relocate the source files that make up a virtual machine to another location without any downtime.
Storage Migration creates a copy of the file or files at the new location. Once that is finished, Server 2012 does a final replication of changes and then the virtual machine uses the files in the new location.
Reference: Windows Server 2012 Hyper-V – Part 3: Storage Migration

NEW QUESTION 2
Your network contains an Active Directory domain named contoso.com.
All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers.
The domain controllers are configured as shown in the following table.

The Branch site contains a member server named Server1 that runs Windows Server 2012 R2.
You need to identify which domain controller authenticated the computer account of Server1.
What should you do?

• A. Verify the value of the %LOGONSERVER% environment variable.
• B. Run nltest /sc_query.
• C. Verify the value of the %SESSIONNAME% environment variable.
• D. Run nltest /dsgetsite.

Answer: A

Explanation: A. %LOGONSERVER% is the domain controller that authenticated the current user.
B. Reports on the state of the secure channel the last time that you used it. (The secure channel is the one that the NetLogon service established.)
This parameter lists the name of the domain controller that you queried on the secure channel, also.
D. Returns the name of the site in which the domain controller resides. http://technet.microsoft.com/en-us/library/cc753915(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc731935(v=ws.10).aspx

NEW QUESTION 3
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server3 that runs Windows Server 2012 R2 and has the DHCP Server server role installed.
DHCP is configured as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that only Scope1, Scope3, and Scope5 assign the same DNS servers to DHCP clients. The solution must minimize administrative effort.
What should you do?

• A. Create a superscope and scope-level policies.
• B. Configure the Scope Options.
• C. Create a superscope and a filter.
• D. Configure the Server Options.

Answer: B

Explanation: Any DHCP scope options can be configured for assignment to DHCP clients, such as DNS server.
Reference: Configuring a DHCP Scope. http://technet.microsoft.com/en-us/library/dd759218.aspx

NEW QUESTION 4
You have a server named Server1 that runs Windows Server 2012 R2. You start Server1 by using Windows RE.
You need to repair the Boot Configuration Data (BCD) store on Server1. Which tool should you use?

• A. Bootim
• B. Bootsect
• C. Bootrec
• D. Bootcfg

Answer: C

Explanation: How To Rebuild the BCD in Windows
1. StartAdvanced Startup Optionsif you're using Windows 8.
2. Open Command Prompt from Advanced Startup Options or System Recovery Options menu.
3. At the prompt, type the bootreccommandas shown below and then pressEnter:
bootrec /rebuildbcd.
The bootrec command will search for Windows installations not included in the Boot Configuration Data and then ask you if you'd like to add one or more to it.
Incorrect:
Not B. Bootsect.exe updates the master boot code for hard disk partitions to switch between BOOTMGR and NTLDR. You can use this tool to restore the boot sector on your
computer. This tool replaces FixFAT and FixNTFS.
Not D. The bootcfg command is a Microsoft Windows Server 2003 utility that modifies the Boot.ini file.
Reference: How To Rebuild the BCD in Windows http://pcsupport.about.com/od/fixtheproblem/ht/rebuild-bcd-store-windows.htm

NEW QUESTION 5
You are employed as a network administrator at contoso.com. Contoso.com has an active directory domain named contoso.com.
All servers on the contoso.com network have Windows Server 2012 R2 installed. Contoso.com has a server named server1,which is configured as a file server.
You have been instructed to enabled a feature that discovers and eradicates duplication within data without compromising its reliability or accuracy.
Which of the following actions should you take?

• A. You should consider having the Data Deduplication feature enabled.
• B. You should consider having the Storage Spaces feature enabled.
• C. You should consider having the Storage Management feature enabled.
• D. You should consider having the folder redirection feature enabled.

Answer: A

Explanation: A. Data deduplication involves finding and removing duplication within data without compromising its fidelity or integrity
B. Storage Spaces in Windows Server 2012 R2 and Windows 8 enables cost-effective, optimally used, highly available, scalable, and flexible storage solutions for business-critical (virtual or physical) deployments.
C. Windows Server 2012 R2 enables storage management that is comprehensive and fully scriptable, and administrators can manage it remotely.
D. older Redirection lets administrators redirect the path of a folder to a new location. http://technet.microsoft.com/en-us/library/hh831602.aspx http://technet.microsoft.com/en-us/library/hh831739.aspx http://technet.microsoft.com/en-us/library/hh831751.aspx http://technet.microsoft.com/en-us/library/cc732275.aspx
http://blogs.technet.com/b/filecab/archive/2012/05/21/introduction-to-data-deduplication- inwindows-server-2012.aspx

NEW QUESTION 6
Your network contains an Active Directory domain named contoso.com.
All servers run Windows Server 2012 R2. The domain contains a file server named Server1.
The domain contains a domain controller named DC1. Server1 contains three shared folders.
The folders are configured as shown in the following table.

Folder2 has a conditional expression of User.Department= = MMarketing".
You discover that a user named User1 cannot access \Server1folder2. User1 can access
\Server1folderl and \Server1folder3.
You verify the group membership of User1 as shown in the Member Of exhibit. (Click the Exhibit button.)

You verify the organization information of User1 as shown in the Organization exhibit. (Click the Exhibit button.)

You verify the general properties of User1 as shown in the General exhibit. (Click the Exhibit button.)

You need to ensure that User1 can access the contents of \Server1folder2. What should you do?

• A. From a Group Policy object (GPO), set the Support for Dynamic Access Control and Kerberos armoring setting to Always provide claims.
• B. Change the department attribute of User1.
• C. Grant the Full Control NTFS permissions on Folder2 to User1.
• D. Remove Userl1from the Accounting global group.

Answer: B

Explanation: Conditional Expression and users Department must match http://technet.microsoft.com/en-us/library/jj134043.aspx

NEW QUESTION 7
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server3 that runs Windows Server 2012 R2 and has the DHCP Server server role installed.
DHCP is configured as shown in the exhibit. (Click the Exhibit button.)

Scope1, Scope2, and Scope3 are configured to assign the IP addresses of two DNS servers to DHCP clients. The remaining scopes are NOT configured to assign IP addresses of DNS servers to DHCP clients.
You need to ensure that only Scope1, Scope3, and Scopes assign the IP addresses of the DNS servers to the DHCP clients. The solution must minimize administrative effort.
What should you do?

• A. Create a superscope and a filter.
• B. Create a superscope and scope-level policies.
• C. Configure the Server Options.
• D. Configure the Scope Options.

Answer: D

Explanation: Scope options are applied to any clients that obtain a lease within that particular scope. Active scope option types always apply to all computers obtaining a lease in a given scope unless they are overridden by class or reserved client settings for the option type.
Incorrect:
Not A, not B. A superscope allows a DHCP server to provide leases from more than one scope to clients on a single physical network. It is not applicable here.
Not C. If we configure the Server Options and set the DNS Servers then all DHCP clients would be assigned a DNS server.
Reference: Managing DHCP Options https://technet.microsoft.com/en-us/library/cc958929.aspx

NEW QUESTION 8
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains the two servers.
The servers are configured as shown in the following table.

You investigate a report about the potential compromise of a private key for a certificate issued to Server2.
You need to revoke the certificate issued to Server2. The solution must ensure that the revocation can be reverted.
Which reason code should you select?
To answer, select the appropriate reason code in the answer area.

Answer:

Explanation: If you specify "Certificate Hold" as the reason for revoking the certificate, it typically means that you may want to unrevoke the certificate at a future time. Only certificates that have been revoked with the reason of "Certificate Hold" can be unrevoked.

NEW QUESTION 9
You are employed as a senior network administrator at ABC.com. ABC.com has an Active Directory domain named ABC.com.
All servers on the ABC.com network have Windows Server 2012 R2 installed. You are currently running a training exercise for junior network administrators.
You are discussing the endpoint types supported by Active Directory Federation Services(AD FS).
Which of the following are supported types?(Choose all that apply)

• A. SAML WebSSO
• B. Anonymous
• C. WS-Federation Passive
• D. Client Certicate
• E. WS-Trust

Answer: ACE

Explanation: http://technet.microsoft.com/en-us/library/adfs2-help-endpoints(v=ws.10).aspx

NEW QUESTION 10
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DNS Server server role installed.
Server1 has a zone named contoso.com. The zone is configured as shown in the exhibit. (Click the Exhibit button.)

You need to assign a user named User1 permission to add and delete records from the contoso.com zone only.
What should you do first?

• A. Enable the Advanced view from DNS Manager.
• B. Add User1 to the DnsUpdateProxy group.
• C. Run the New Delegation Wizard.
• D. Configure the zone to be Active Directory-integrated.

Answer: D

Explanation: Secure dynamic updates are only supported or configurable for resource records in zones that are stored in Active Directory Domain Services (AD DS).
Note:To modify security for a resource record
✑ Open DNS Manager.
✑ In the console tree, click the applicable zone.
✑ In the details pane, click the record that you want to view.
✑ On theActionmenu, clickProperties.
✑ On theSecuritytab, modify the list of member users or groups that are allowed to securely update the applicable record and reset their permissions as needed.
Reference: Modify Security for a Resource Record

NEW QUESTION 11
Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2.
Server1 and Server2 have the Hyper-V server role installed.
Server1 and Server2 are configured as Hyper-V replicas of each other.
Server1 hosts a virtual machine named VM1. VM1 is replicated to Server2. You need to verify whether the replica of VM1 on Server2 is functional. The solution must ensure that VM1 remains accessible to clients.
What should you do from Hyper-V Manager?

• A. On Server1, execute a Planned Failover
• B. On Server1, execute a Test Failover
• C. On Server2, execute a Planned Failover
• D. On Server2, execute a Test Failover

Answer: B

NEW QUESTION 12
Your network contains an Active Directory domain named contoso.com.
The domain contains servers named Server1 and Server2 that run Windows Server 2012 R2.
Server1 has the IP Address Management (IPAM) Server feature installed. You install the IPAM client on Server2.
You open Server Manager on Server2 as shown in the exhibit. (Click the Exhibit button.)

You need to manage IPAM from Server2. What should you do first?

• A. On Server1, add the Server2 computer account to the IPAM MSM Administrators group
• B. On Server2, open Computer Management and connect to Server1.
• C. On Server2, add Server1 to Server Manager.
• D. On Server1, add the Server2 computer account to the IPAM ASM Administrators group.

Answer: C

NEW QUESTION 13
Your network contains four Active Directory forests. Each forest contains an Active Directory Rights Management Services (AD RMS) root cluster.
All of the users in all of the forests must be able to access protected content from any of the forests.
You need to identify the minimum number of AD RMS trusts required. How many trusts should you identify?

• A. 3
• B. 6
• C. 12
• D. 16

Answer: C

Explanation: The number of AD RMS trusts required to interact between all AD RMS forests can be defined by using the following formula: N*(N-1).
Here N=4, so the number of trust is 12 (4*3).
Reference: AD RMS Prerequisites, Important considerations for installing AD RMS in a multi-forest environment

NEW QUESTION 14
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has 2 dual-core processors and 16 GB of RAM.
You install the Hyper-V server role in Server1.
You plan to create two virtual machines on Server1.
You need to ensure that both virtual machines can use up to 8 GB of memory.
The solution must ensure that both virtual machines can be started simultaneously.
What should you configure on each virtual machine?

• A. Dynamic Memory
• B. NUMA topology
• C. Memory weight
• D. Ressource Control

Answer: A

NEW QUESTION 15
Your network contains an Active Directory domain named adatum.com.
The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. On Dc1, you open DNS Manager as shown in the exhibit. (Click the Exhibit button.)

You need to change the zone type of the contoso.com zone from an Active Directory- integrated zone to a standard primary zone.
What should you do before you change the zone type?

• A. Unsign the zone.
• B. Modify the Zone Signing Key (ZSK).
• C. Modify the Key Signing Key (KSK).
• D. Change the Key Master.

Answer: A

Explanation: A. Lock icon indicating that it is currently signed with DNSSEC, zone must be unsignes
B. An authentication key that corresponds to a private key used to sign a zone.
C. The KSK is an authentication key that corresponds to a private key used to sign one or more other signing keys for a given zone.
Typically, the private key corresponding to a KSK will sign a ZSK, which in turn has a corresponding private key that will sign other zone data.
D.
http://technet.microsoft.com/en-us/library/hh831411.aspx http://technet.microsoft.com/en-us/library/ee649132(v=ws.10).aspx

NEW QUESTION 16
Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2.
Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1.
Cluster1 hosts an Application named App1.
You need to ensure that Server2 handles all of the client requests to the cluster for App1. The solution must ensure that if Server2 fails, Server1 becomes the active node for App1.
What should you configure?

• A. Affinity-None
• B. Affinity-Single
• C. The cluster quorum settings
• D. The failover settings
• E. A file server for general use
• F. The Handling priority
• G. The host priority
• H. Live migration
• I. The possible owner
• J. The preferred owner
• K. Quick migration
• L. the Scale-Out File Server

Answer: J

Explanation: The preferred owner in a two-server cluster will always be the active node unless it is down.
Reference: Preferred Owners in a Cluster http://blogs.msdn.com/b/clustering/archive/2008/10/14/9000092.aspx

NEW QUESTION 17
Which of the following CA types must be deployed on domain-joined computers?

• A. Enterprise root
• B. Enterprise subordinate
• C. Standalone root
• D. Standalone subordinate

Answer: AB

NEW QUESTION 18
Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2.
Both servers have the Hyper-V server role installed.
The servers have the hardware configurations shown in the following table.

Server1 hosts five virtual machines that run Windows Server 2012 R2. You need to move the virtual machines from Server1 to Server2.
The solution must minimize downtime.
What should you do for each virtual machine?

• A. Export the virtual machines from Server1 and import the virtual machines to Server2.
• B. Perform a live migration.
• C. Perform a quick migration.
• D. Perform a storage migration.

Answer: A

Explanation: None of these migration options will work between different Processors ( AMD/Intel). The only option remaining is to export and re-import the VMs