Latest Real 70-412 Tests Dumps and VCE Exam Questions 121-130

Ensurepass

QUESTION 121

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012. The domain contains a file server named Server1. The domain contains a domain controller named DC1. Server1 contains three shared folders. The folders are configured as shown in the following table.

 

clip_image001

 

Folder2 has a conditional expression of User.Department= = MMarketing”.

 

You discover that a user named User1 cannot access \Server1folder2. User1 can access \Server1folder1 and \Server1folder3.

 

You verify the group membership of User1 as shown in the Member Of exhibit.

 

 

 

 

clip_image002

 

You verify the organization information of User1 as shown in the Organization exhibit.

 

clip_image003

 

You verify the general properties of User1 as shown in the General exhibit.

 

clip_image004

 

You need to ensure that User1 can access the contents of \Server1folder2. What should you do?

 

A.      From a Group Policy object (GPO), set the Support for Dynamic Access Control and Kerberos armoring setting to Always provide claims.

B.      Change the department attribute of User1.

C.      Grant the Full Control NTFS permissions on Folder2 to User1.

D.      Remove User1 from the Accounting global group.

 

Correct Answer: B

 

 

QUESTION 122

You have a server named Server1 that runs Windows Server 2012. You install the File and Storage Services server role on Server1. From Windows Explorer, you view the properties of a folder named Folder1 and you discover that the Classification tab is missing. You need to ensure that you can assign classifications to Folder1 from Windows Explorer manually. What should you do?

 

A.      From Folder Options, clear Hide protected operating system files (Recommended).

B.      Install the File Server Resource Manager role service.

C.      From Folder Options, select the Always show menus.

D.      Install the Share and Storage Management Tools.

 

Correct Answer: B

 

 

QUESTION 123

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. The domain contains two domain controllers. The domain controllers are configured as shown in the following table.

 

clip_image005

 

The Branch site contains a perimeter network. For security reasons, client computers in the perimeter network can communicate with client computers in the Branch site only. You plan to deploy a new RODC to the perimeter network in the Branch site. You need to ensure that the new RODC will be able to replicate from DC10. What should you do first on DC10?

 

A.      Enable the Bridge all site links setting.

B.      Run the Active Directory Domain Services Configuration Wizard.

C.      Create an Active Directory site link bridge.

D.      Create an Active Directory site.

 

Correct Answer: C

 

 

QUESTION 124

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012. Server1 has Microsoft SQL Server 2012 installed. You install the Active Directory Federation Services server role on Server2. You need to configure Server2 as the first Active Directory Federation Services (AD FS) server in the domain. The solution must ensure that the AD FS database is stored in a SQL Server database on Server1. What should you do on Server2?

 

A.      From a command prompt, run fsutil.exe.

B.      From Windows PowerShell, run Install-ADFSFarm.

C.      From Server Manager, install the Federation Service Proxy.

D.      From Server Manager, install the AD FS Web Agents.

 

Correct Answer: B

 

 

QUESTION 125

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains three domain controllers. The domain controllers are configured as shown in the following table.

 

clip_image006

 

You plan to test an application on a server named Server1. Server1 is currently located in Site1. After the test, Server1 will be moved to Site2. You need to ensure that Server1 attempts to authenticate to DC3 first, while you test the application. What should you do?

 

A.      Create a new site and associate the site to an existing site link object.

B.      Modify the priority of site-specific service location (SRV) DNS records for Site2.

C.      Create a new subnet object and associate the subnet object to an existing site.

D.      Modify the weight of site-specific service location (SRV) DNS records Site1.

 

Correct Answer: B

 

 

QUESTION 126

Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1. The File Server Resource Manager role service is installed on Server1.

All servers run Windows Server 2012. A Group Policy object (GPO) named GPO1 is linked to the organizational unit (OU) that contains Server1. The following graphic shows the configured settings in GPO1.

 

clip_image007

 

Server1 contains a folder named Folder1. Folder1 is shared as Share1. You attempt to configure access-denied assistance on Server1, but the Enable access-denied assistance option cannot be selected from File Server Resource Manager. You need to ensure that you can configure access-denied assistance on Server1 manually by using File Server Resource Manager. Which two actions should you perform?

 

A.      Set the Enable access-denied assistance on client for all file types policy setting to Disabled for GPO1.

B.      Set the Customize message for Access Denied errors policy setting to Not Configured for GPO1.

C.      Set the Enable access-denied assistance on client for all file types policy setting to Enabled for GPO1.

D.      Set the Customize message for Access Denied errors policy setting to Enabled for GPO1.

 

Correct Answer: D

 

 

QUESTION 127

Your company has a main office and a remote office. The remote office is used for disaster recovery. The network contains an Active Directory domain named contoso.com. The domain contains member servers named Server1, Server2, Server3, and Server4. All servers run Windows Server 2012. Server1 and Server2 are located in the main office. Server3 and Server4 are located in the remote office. All servers have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. Storage is replicated between the main office and the remote site. You need to ensure that Cluster1 is available if two nodes in the same office fail. What are two possible quorum configurations that achieve the goal? (Each correct answer presents a complete solution. Choose two.)

 

A.      Node Majority

B.      No Majority: Disk Only

C.      Node and File Share Majority

D.      Node and Disk Majority

 

Correct Answer: AB

 

 

QUESTION 128

Your network contains an Active Directory domain named contoso.com. The domain contains four servers named Server1, Server2, Server3, and Server4 that run Windows Server 2012. All servers have the Hyper-V server role and the Failover Clustering feature installed. The servers are configured as shown in the following table.

 

clip_image008

 

Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

 

A.      From Hyper-V Manager on a node in Cluster2, create three virtual machines.

B.      From Hyper-V Manager on a node in Cluster2, modify the Hyper-V settings.

C.      From Failover Cluster Manager on Cluster1, configure each virtual machine for replication.

D.      From Cluster1, add and configure the Hyper-V Replica Broker role.

E.       From Cluster2, add and configure the Hyper-V Replica Broker role.

 

Correct Answer: ACE

 

 

QUESTION 129

Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and child1.contoso.com. The domains contain three domain controllers. The domain controllers are configured as shown in the following table.

 

clip_image009

 

You need to ensure that the KDC support for claims, compound authentication, and kerberos armoring setting is enforced in the child1.contoso.com domain. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.      Upgrade DC1 to Windows Server 2012.

B.      Upgrade DC11 to Windows Server 2012.

C.      Raise the domain functional level of child1.contoso.com,

D.      Raise the domain functional level of contoso.com.

E.       Raise the forest functional level of contoso.com.

 

Correct Answer: BD

 

 

QUESTION 130

You have a server named Server1 that runs Windows Server 2012. The storage on Server1 is configured as shown in the following table.

 

clip_image010

 

You plan to implement Data Deduplication on Server1. You need to identify on which drives you can enable Data Deduplication. Which three drives should you identify? (Each correct answer presents part of the solution. Choose two.)

 

A.      C

B.      D

C.      E

D.      F

E.       G

 

Correct Answer: BDE