New Updated Microsoft MCSA 70-412 Real Exam Questions and Answers Download 231-240

Ensurepass

QUESTION 231

You are employed as a network administrator at consoto.com. Contoso.com has in an Active

Directory domain named contoso.com. All Servers on the contoso.com network have Windows

Server 2012 R2 installed. A contoso.com server, named Server1, hosts the Active Directory

Certificate Services Server role and utilizes a hardware security module (HSM) to safeguard its

private key. You have been instructed to backup the Active Directory Certificate Services (ADCS)

database, log files, and private key regularly. You should not use a utility supplied by the

hardware security module (HSM) creator. Which of the following actions should you take?

 

  1. You should consider scheduling an incremental backup.

  2. You Should consider making use of the certutil.exe command.

  3. You should consider schedulling a differential backup.

  4. You should consider schedulling a copy backup.

 

Correct Answer: B

 

 

QUESTION 232

You are employed as a senior network administrator at contoso.com contoso.com has an active

directory domain named contoso.com. All servers on the contoso.com network have Windows

Server 2012 R2 installed. You are currently running at training exercise for junior network

administrators. You are discussing the DNSSEC NRPT rule properly. Which of the following

describes the purpose of this rule property?

 

  1. It is used to indicate the namespace to which the policy App1ies.

  2. It is used to indicate whether the DNS client should check for DNSSEC validation in the

response.

  1. It is used to indicate DNSSEC must be used to protect DNS traffic for queries belonging to the

namespace.

  1. It is used to indicate whether DNS connections over DNSSEC will use encryption.

 

Correct Answer: B

 

 

QUESTION 233

You are employed as a network administrator at contoso.com. Contoso.com has an active

directory domain named contoso.com. All servers on the contoso.com network have Windows

Server 2012 R2 installed. Contoso.com has a server named server1, which is configured as a file

server. You have been instructed to enable a feature that discovers and eradicates duplication

within data without compromising its reliability or accuracy. Which of the following actions

should you take?

 

  1. You should consider having the Data Deduplication feature enabled.

  2. You should consider having the Storage Spaces feature enabled.

  3. You should consider having the Storage Management feature enabled.

  4. You should consider having the folder redirection feature enabled.

 

Correct Answer: A

 

 

QUESTION 234

You are employed as a network administrator at contoso.com. contoso.com has a single Active

Directory domain named contoso.com. All servers on the Contoso.com network have Windows

Server 2012 R2 installed. Contoso.com has two servers, named server1 and server2 which are

configured in a two-node fail over cluster. You are currently configuration the quorum settings for

the cluster. You want to make use of a quorum mode that allows each node to vote if it is

available and in communication. Which of the following is the mode you should use?

 

  1. Node Majority

  2. Node and Disk Majority

  3. Node and File Share Majority

  4. No Majority: Disk Only

 

Correct Answer: A

 

 

QUESTION 235

You are employed as a network administrator at contoso.com. Contoso.com has a single Active

Directory domain named contoso.com. All servers on the contoso.com network have Windows

Server 2012 R2 installed. You are preparing to install a third-party App1ication on a contoso.com

server, named SERVER1. You find that the App1ication is unable to install completely due to its

driver not being digitally signed. You want to make sure that the App1ication can be installed

successfully. Which of the following actions should you take?

 

  1. You should consider downloading a signed driver.

  2. You should consider having SERVER1 is restored to an earlier date.

  3. You should consider making use of the Disable Driver Signature Enforcement option from the

Advanced Boot Option.

  1. You should consider restarting SERVER1 in safe Mode.

 

Correct Answer: C

 

 

QUESTION 236

You are employed as a senior network administrator at contoso.com.Contoso.com has a single

Active Directory Domain named contoso.com. All servers on the contoso.com network have

Windows Server 2012 R2 installed. You are running a training exercise for junior network

administrator. You are currently discussing the Dnslint.exe tool. W
hich of the following should

this tool be used for? (Choose all that App1y)

 

  1. To help diagnose common DNS name resolution issues.

  2. For developing scripts for configuring a DNS server.

  3. To administer the DNS server Service.

  4. To look for specific DNS record set and sure that they are consistent across multiple DNS

servers.

  1. To verify that DNS records used specifially for Active Directory replication are correct.

  2. To Create and delete zones and resource records.

 

Correct Answer: ADE

 

 

QUESTION 237

You work as an administrator at contoso.com. Contoso.com network consists of a single domain

named contoso.com. All servers on the contoso.com network have Windows Server 2012 R2

installed. Contoso.com has a server, named SERVER1, which has the AD DS, DHCP and DNS server

roles installed. Contoso.com also has a server named SERVER2, which has the DHCP and Remote

Access Server Role installed. You have configured SERVER3, which has the File and Storage

Services Server role installed to automatically acquire an IP address. You then create a filter on

SERVER1. Which of the following is a reason for this configuration?

 

  1. To make sure that SERVER1 issues Server3 an IP address.

  2. To make sure that SERVER1 does not issue SERVER3 an IP address.

  3. To make sure that SERVER3 acquires a constant IP address from SERVER2 only.

  4. To make sure that SERVER3 is configured with a static IP address.

 

Correct Answer: B

 

 

QUESTION 238

You are employed as a senior network administrator at ABC.com. ABC.com has an Active

Directory domain named ABC.com. All servers on the ABC.com network have Windows Server

2012 R2 installed. The ABC.com domain has an Active Directory site configured in London, and an

Active Directory site in New York. You have been instructed to make sure that the synchronization

of account lockout data happens quicker.

 

  1. You should consider editing the options attribute from WANLINK properties.

  2. You should consider editing the options attribute from LANLIK properties.

  3. You should consider editing the options attribute from the DEFAULTSITE1INK properties.

  4. You should consider editing the proxyAddressess attribute from the DEFAULTIPSITE1INK

properties.

 

Correct Answer: C

 

 

QUESTION 239

You are employed as a senior network administrator at ABC.com. ABC.com has an Active

Directory domain named ABC.com. All servers on the ABC.com network have Windows Server

2012 R2 installed. ABC.com has two servers, named SERVER1 and SERVER2 which are configured

in a two-node failover cluster. Server1 includes a folder, named ABCAppData, which is configured

as a Distributed File System (DFS) name space folder target. After configuring another two nodes

in the failover cluster, you are instructed to make sure that access to ABCAppData is highly

available. You also have to make sure that App1ication data is replicated to ABCAppData via DFS

replication. Which following actions should you take?

 

  1. You should consider configuring a scale-out File Server.

  2. You should consider configuring the replication settings for the cluster.

  3. You should consider configuring a file server for general use.

  4. You should consider configuring the Quorum settings.

 

Correct Answer: A

 

 

QUESTION 240

Your network contains an Active Directory domain named contoso.com. All servers run Windows

Server 2012 R2. The domain contains a domain controller named DC1 that is configured as an

enterprise root certification authority (CA). All users in the domain are issued a smart card and

are required to log on to their domain joined client computer by using their smart card. A user

named User1 resigned and started to work for a competing company. You need to prevent User1

immediately from logging on to any computer in the domain. The solution must not prevent

other users from logging on to the domain. Which tool should you use?

 

  1. Active Directory Administrative Center

  2. Active Directory Sites and Services

  3. Active Directory Users and Computers

  4. the Certification Authority console

  5. the Certificates snap-in

  6. Certificate Templates

  7. Server Manager

  8. the Security Configuration Wizard

 

Correct Answer: ACD

 

Instant Access to Download Latest Complete Collection of Microsoft MCSA 70-412 Real Exam

Try Microsoft MCSA 70-412 Free Demo