Microsoft.ExamCollection v by.SONYA.21q.Addendum

Size: px

Start display at page:

Download "Microsoft.ExamCollection v by.SONYA.21q.Addendum"

Anastasia James
6 years ago
Views:

1 Microsoft.ExamCollection v by.SONYA.21q.Addendum Number: Passing Score: 700 Time Limit: 120 min File Version: Exam code: Exam name: Windows Server 2012 R2 Configuring Advanced Services Version 1.0

2 Exam A QUESTION 1 You have an enterprise certification authority (CA) named CA1. You have a certificate template named UserAutoEnroll that is based on the User certificate template. Domain users are configured to autoenroll for UserAutoEnroll. A user named User1 has an address defined in Active Directory. A user named User2 does not have an address defined in Active Directory. You discover that User1 was issued a certificate based on UserAutoEnroll template automatically. A request by User2 for a certificate based on the UserAutoEnroll template fails. You need to ensure that all users can autoenroll for certificated based on the UserAutoEnroll template. Which setting should you configure from the properties on the UserAutoEnroll certificate template? A. Issuance Requirements B. Request Handling C. Cryptography D. Subject Name Correct Answer: D /Reference: name. If the name field is populated in the Active Directory user object, that name will be used for user accounts. ( QUESTION 2 Your network contains one Active Directory forest named contoso.com. the forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table. Name Domain Site DC1 Contoso.com Main Office DC2 Contoso.com Main Office DC3 Contoso.com Europe Office DC4 Contoso.com Asia Office DC5 Sales.contoso.com Main Office DC6 Manufacturing.contoso.com Main Office You create a trust between contoso.com and a domain in another forest at a partner company. You need to prevent the sales.contoso.com and the manufacturing.contoso.com names from being used in authentication requests across the forest trust. What should you use? A. Set-ADSite B. Set-ADReplicationSite C. Set-ADDomain D. Set-ADReplicationSiteLink E. Set-ADGroup F. Set-ADForest G. Netdom Correct Answer: G /Reference: : The question seems to be describing "Selective Authentication." I was able to find a Server 2008 article but not (

3 QUESTION 3 Your network contains one Active Directory forest named contoso.com. the forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table. Name Domain Site DC1 Contoso.com Main Office DC2 Contoso.com Main Office DC3 Contoso.com Europe Office DC4 Contoso.com Asia Office DC5 Sales.contoso.com Main Office DC6 Manufacturing.contoso.com Main Office You need to prevent administrators from accidentally deleting any of the site in the forest. What should you use? A. Set-ADSite B. Set-ADReplicationSite C. Set-ADDomain D. Set-ADReplicationSiteLink E. Set-ADGroup F. Set-ADForest G. Netdom Correct Answer: B /Reference: Use the -ProtectedFromAccidentalDeletion switch ( (v=wps.630).aspx) QUESTION 4 Your network contains one Active Directory forest named contoso.com. the forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table. Name Domain Site DC1 Contoso.com Main Office DC2 Contoso.com Main Office DC3 Contoso.com Europe Office DC4 Contoso.com Asia Office DC5 Sales.contoso.com Main Office DC6 Manufacturing.contoso.com Main Office You need ensure that all Active Directory changes are replicated to all of the domain controllers in the forest within 30 minutes. What should you use? A. Set-ADSite B. Set-ADReplicationSite C. Set-ADDomain D. Set-ADReplicationSiteLink E. Set-ADGroup

4 F. Set-ADForest G. Netdom Correct Answer: D /Reference: Use the "-ReplicationFrequencyInMinuites switch ( (v=wps.630).aspx) QUESTION 5 Your network contains one Active Directory forest named contoso.com. the forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table. Name Domain Site DC1 Contoso.com Main Office DC2 Contoso.com Main Office DC3 Contoso.com Europe Office DC4 Contoso.com Asia Office DC5 Sales.contoso.com Main Office DC6 Manufacturiung.contoso.com Main Office You have a trust from contoso.com to another forest named fabrikam.com. You plan to migrate users from contoso.com to fabrikam.com. You need to ensure that the users who migrated to fabrikam.com can continue to access shared resources in contoso.com. the solution must not require administrators to modify permissions to shared resources. What should you use? A. Set-ADSite B. Set-ADReplicationSite C. Set-ADDomain D. Set-ADReplicationSiteLink E. Set-ADGroup F. Set-ADForest G. Netdom Correct Answer: G /Reference: It should be Netdom, you need and enable sidhistory ( cc794801(v=ws.10).aspx) QUESTION 6 Your network contains one Active Directory forest named contoso.com. the forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table. Name Domain Site DC1 Contoso.com Main Office DC2 Contoso.com Main Office DC3 Contoso.com Europe Office DC4 Contoso.com Asia Office DC5 Sales.contoso.com Main Office DC6 Manufacturiung.contoso.com Main Office You need to add an additional UPN Suffix. What should you use?

5 A. Set-ADSite B. Set-ADReplicationSite C. Set-ADDomain D. Set-ADReplicationSiteLink E. Set-ADGroup F. Set-ADForest G. Netdom Correct Answer: F /Reference: ( QUESTION 7 Your network contains one Active Directory forest named contoso.com. the forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table. Name Domain Site DC1 Contoso.com Main Office DC2 Contoso.com Main Office DC3 Contoso.com Europe Office DC4 Contoso.com Asia Office DC5 Sales.contoso.com Main Office DC6 Manufacturiung.contoso.com Main Office You need to replicate users who haven't authenticated against any domain controllers for the last 7 days. What should you use? A. Set-ADSite B. Set-ADReplicationSite C. Set-ADDomain D. Set-ADReplicationSiteLink E. Set-ADGroup F. Set-ADForest G. Netdom Correct Answer: C /Reference: ( -LastLogonReplicationInterval) QUESTION 8 Your network contains one Active Directory forest named adatum.com. The forest contains a single domain. The site topology for the forest is shown in the exhibit. Each site contains one domain controller. You need to ensure that replication between site2 and site4 occurs in 15 minutes or less. What command should you run? To answer select the appropriate options in the answer area. Hot Area:

6 Correct Answer: /Reference: See Example 2: Create a replication site link and set properties for it ( library/hh852320(v=wps.630).aspx) Lower the cost should be higher priority. Notice I put (Select Name.) I am not sure if this is written incorrectly or we need to actually refer to the site topolgy exhibit which would appear int he exam. I would assume the name would be SiteLink2-SiteLink4 but that option is not there. So this is something you will have to pay attention to when you do the exam. QUESTION 9 Your network contains one Active Directory forest named contoso.com. The forest contains a single domain. The domain contains the domain controllers is configured as shown in the following table. Name Site DC1 Site1 DC2 Site2 DC3 Site3 DC4 Site4 The replication topology is configured as shown in the following output. You discover that replication between Dc1 and DC3 takes a few hours. You need to reduce the amount of time it takes to replicate Active Directory changes between DC1 and DC3. What should you do? Case Study Title (Case Study): Cost : 100 DistinguishedName : CN=SiteLink1, CN=IP, CN=Inter-Site Transports, CN=Sites, CN=Configuration, Dc=Adatum, DC=com Name : SiteLink1 ObjectClass : SiteLink ObjectGUID : e1c8c335-b75f a9e-58a0edead21f ReplInterval : 60 SiteList : {CN=Site4, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com, CN=Site2, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com} Cost : 100 DistinguishedName : CN=SiteLink1, CN=IP, CN=Inter-Site Transports, CN=Sites, CN=Configuration, Dc=Adatum, DC=com Name : SiteLink2 ObjectClass :SiteLink

7 ObjectGUID : e-cd56-4a9b-b6ba-cdf3dd7fe0d1 ReplInterval : 60 SiteList : {CN=Site4, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com, CN=Site2, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com} Cost : 100 DistinguishedName : CN=SiteLink3, CN=IP, CN=Inter-Site Transports, CN=Sites, CN=Configuration, Dc=Adatum, DC=com Name : SiteLink3 ObjectClass : SiteLink ObjectGUID : 07a7a37e-a12c-40c f5d2e737b8a9 ReplInterval : 60 SiteList : {CN=Site4, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com, CN=Site3, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com} Cost : 400 DistinguishedName : CN=SiteLink4, CN=IP, CN=Inter-Site Transports, CN=Sites, CN=Configuration, Dc=Adatum, DC=com Name : SiteLink4 ObjectClass : SiteLink ObjectGUID : dc-30fd a-d4552fba2e04 ReplInterval : 45 SiteList : {CN=Site4, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com, CN=Site2, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com} A. Create a site link that connects Site1 and Site3, has a cost of 350, and replicates every 15 minutes. B. Modify SiteLink4 to replicate every 15 minute. C. Disable Site Link bridging. D. Set the cost of SiteLink4 to 100. Correct Answer: D /Reference: n/a QUESTION 10 Your network contains one Active Directory forest named contoso.com. The forest contains a single domain. The domain contains the domain controllers is configured as shown in the following table. Name Site DC1 Site1 DC2 Site2 DC3 Site3 DC4 Site4 The forest contains a member server named Server1. Server1 has an IP address of The forest has the following Active Directory subnet configuration. DistinguishedName : CN= /26, CN=subnets, CN=Sites, CN=Configuration, Location Dc=Adatum, DC=com Name : /26 ObjectClass : subnet ObjectGUID : db362a6c-c0a aaee ab9ea5 Site : CN=Site1, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com, DistinguishedName : CN= /26, CN=subnets, CN=Sites, CN=Configuration, Location Dc=Adatum, DC=com

8 Name : /26 ObjectClass : subnet ObjectGUID : ef afa-41f1-9c5a fc1 Site : CN=Site2, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com, DistinguishedName : CN= /26, CN=subnets, CN=Sites, CN=Configuration, Location Dc=Adatum, DC=com Name : /26 ObjectClass : subnet ObjectGUID : f-a463bbdab8fb Site : CN=Site4, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com, DistinguishedName : CN= /26, CN=subnets, CN=Sites, CN=Configuration, Location Dc=Adatum, DC=com Name : /26 ObjectClass : subnet ObjectGUID : ef5235ab-759b-4dc8-992a-c5ec1dae97a8 Site : CN=Site3, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com, Use the drop down menus to select the answer choice that complete each statement. Hot Area: Correct Answer: /Reference: n/a QUESTION 11 You have a server named Server1 that runs Windows Server 2012 R2 and uses Windows Server Backup.

9 You need to identify whether the backups performed on Server1 support bare metal recovery. Which cmdlet should you run? A. Get-OBMachineSetting B. Get-WBVSSBackupOptions C. Get-WBPolicy D. Get-OBPolicy Correct Answer: C /Reference: Get-OBMachineSetting is for Azure Backup, question asks about Windows Backup GetWBVSSBackupOption cmdlet doesn t exist Get-WBPolicy is for Windows Backup Get-OBPolicy is for Azure Backup, question asks Windows Backup ( library/ee aspx) QUESTION 12 You have a cluster named Cluster1 that contains two nodes. Both nodes run Windows Server 2012 R2. Cluster1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2. You notice that VM1 is marked as being in a critical state in the cluster. You verify that VM1 is functioning correctly. You need to ensure that VM1 is no longer marked as being in a critical state. Which cmdlet should you run? A. Remove-ClusterVmMonitoredItem B. Remove-ClusterResourceDependency C. Reset-ClusterVMMonitoredState D. Clear-ClusterNode Correct Answer: C /Reference: Remove-ClusterVmMonitoredItem actually removes the monitoring so nothing will happen Remove-ClusterResourceDependency - self explanatory has to do with dependencies, not critical state Reset-ClusterVMMonitoredState - This cmdlet resets the Application Critical state of a virtual machine, so that the virtual machine is no longer marked as being in a critical state in the cluster ( technet.microsoft.com/en-us/library/hh847312(v=wps.630).aspx) Clear-ClusterNode - This cmdlet helps ensure that the failover cluster configuration has been completely removed from a node that was evicted. QUESTION 13 You run Get-FSRMClassificationule and you receive the following output ClassificationMechanism : Content Classfier ContentRegularExpression : {\d{2,}} ContentString : ContentStringCaseSensitive : Description : Disabled : False Flags : Lastmodified : 4/18/ :59:47 AM Name : Rule2 Namespace : {D:\} Parameters : {FSRMClearPropertyInternal = 0}

$ContentStringCaseSensitive : Description : Disabled : False Flags : Lastmodified : 4/15/2015 9:17:16 PM Name : Rule1 Namespace : {D:\} Parameters : {FSRMClearPropertyInternal = 0} Property :$

10 Property : Property2 PropertyValue : Value2 ReevaluateProperty : Overwrite PSComputerName : ClassficationMechanism : FolderClassifier ContentRegularExpression : ContentString : ContentStringCaseSensitive : Description : Disabled : False Flags : Lastmodified : 4/15/2015 9:17:16 PM Name : Rule1 Namespace : {D:\} Parameters : {FSRMClearPropertyInternal = 0} Property : Property1 PropertyValue : Value1 ReevaluateProperty : Aggregate PSComputerName : You have a file named file1 that is stored on drive D and has the following content You run the classification with all of the rules Use the drop-down menus top select the answer choice that completes each statement. Hot Area: Correct Answer: /Reference: (

11 QUESTION 14 You network contains one Active Directory domain. The domain contains two Hyper-V Hosts named Host1 and Host2 that run Windows Server 2012 R2. Host1 contains a virtual machine named DC5. DC5 is a domain controller that run Windows Server 2012 R2. You configure Active Directory to support domain controller cloning for DC5, and then you shut down DC5. You need to create a clone of DC5 on Host2. What should you run on each Hyper-V Host.? To answer Drag the appropriate commands or cmdlets to the correct Hyper-V hosts. Each command or cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Select and Place: Correct Answer: /Reference: - Create the cloneconfig file by running ADDCCloneConfig on the source first (Step 2) - Export the source VM (Step 4-2) - Import the source VM into the new host (Step 4-3) QUESTION 15 You network contains one Active Directory domain named adatum.com. The domain contains a DNS server named Server1 that runs Windows Server 2012 R2. All domain computers use Server1 for DNS. You sign adatum.com by using DNSSEC. You need to configure the domain computers to validate DNS responses for adatum.com records. What should you configure in Group Policy? A. Network List Manager Policies B. Network Access Protection (NAP)

12 C. Name Resolution Policy D. Public Key Policy Correct Answer: C /Reference: Name resolution policy needs to be configured in group policy. "In both example 1 and example 2, validation is not required for the secure.contoso.com zone because the Name Resolution Policy Table (NRPT) is not configured to require validation. ( technet.microsoft.com/en-us/library/jj aspx) ( (v=ws.10).aspx) QUESTION 16 You have a server named Server1. A Microsoft Azure Backup of Server1 is created automatically every day. You rename Server1 to Server2. you discover that backups are no longer created in Azure. You need to backup the server to Azure. What should you do? A. From the Azure Management Portal, upload the Server2 certificae as a management certificate. B. On Server2, run the Start-OBRegistration cmdlet. C. On Server2, run the Add-WBBackupTarget cmdlet. D. From the Azure Management Portal, modify the configuration on the backup vault. Correct Answer: B /Reference: ( QUESTION 17 You need to verify whether a DNS response from a DNS server is signed by DNSSEC. What should you run? A. nslookup.exe B. dnscmd.exe C. Get-NetIPAddress D. Resolve-DNSName Correct Answer: D /Reference: n/a QUESTION 18 You network contains one Active Directory domain. The domain contains two Hyper-V hosts named Host1 and Host2 that run Windows Server 2012 R2. Host1 contains a virtual machine named VM1.You plan to move VM1 to Host2. You need to generate a report that lists any configuration issues on Host2 that will prevent VM1 from being moved successfully. Which cmdlet should you use? A. Move-VM

13 B. Compare-VM C. Test-VM D. Debug-VM Correct Answer: B /Reference: ( QUESTION 19 Your network contains One Active Directory forest named adatum.com The forest contains a single domain. The site topology for the forest is shown in th exhibit (Click the Exhibit button) Each site contains one domain controller. Site link bridging is disabled. You need to ensure that changes made to Site1 replicate to Site5 within one replication cycle. What should you create? A. A site link bridge B. A subnet C. A site D. A site link Correct Answer: D /Reference: WARNING! Without the exhibition, there is no certainty. Can be A or D. QUESTION 20 Your network contains two Web servers named Server1 and Server2. Both servers run WIndows Server 2012 R2. Server1 and Server2 are nodes in a Network Load Balancing (NLB) cluster. The NLB cluster as application named App1 that is accessed by using the URL You plan to perform maintenance on Server1. You need to ensure that all new connection server2. The solution must not disconnect the existing connection to Server1 What should you run? A. The Set-NlbClusterNode cmdlet B. The nlb.exe suspend command C. The nlb.exe stop command D. The Suspend-NlbClusterNode cmdlet Correct Answer: D /Reference: ( QUESTION 21 You have the following microsoft azure backup policy backup schedule : 9:00am, 12:00 pm,11:00 pm every day every 1 week(s)

14 dslist : {datasource datasourceid: name:c:\ filespec:filespec filespec:c:\ isexclude:false isrecursive:true } policyname : f77828d2-69b6-4c4b-b98a-e5e20d9ab7e9 retentionpolicy : retention days : 30 week1yltrsschedule : days: monday times: 12:00:00, retentention weeks: 60 month1yltrschedule : days of month : [last,monday] times: 23:00:00 retentention weeks: 90 year1yltrschedule : yearly schedule is not set state : existing policystate : valid Hot Area: Correct Answer:

15 /Reference:

Vendor: Microsoft. Exam Code: Exam Name: Configuring Advanced Windows Server 2012 Services. Version: Demo

Vendor: Microsoft. Exam Code: Exam Name: Configuring Advanced Windows Server 2012 Services. Version: Demo Vendor: Microsoft Exam Code: 70-412 Exam Name: Configuring Advanced Windows Server 2012 Services Version: Demo DEMO QUESTION 1 Your network contains one Active Directory domain. The domain contains two