Q1. You have a server named Served that runs Windows Server 2012 R2. You connect three new hard disks to Server 1.
You need to create a storage space that contains the three disks.
The solution must meet the following requirements:
. Provide fault tolerance if a single disk fails.
. Maximize the amount of useable storage space.
What should you create?
A. A spanned volume
B. A simple space
C. A parity space
D. A mirrored space
Answer: C
Explanation:
Simple space does not provide fault tolerance, neither does spanned volumes, whereas parity & mirrored spaces do. So the question is parity space or mirrored space to maximize the amount of useable storage space? http://en.wikipedia.org/wiki/Spanned_volume Unlike RAID, spanned volumes have no fault- tolerance, so if any disk fails, the data on the whole volume could be lost. http://arstechnica.com/information-technology/2012/10/storage-spaces-explained-a-greatfeaturewhen-itworks/ Storage Spaces explained: a great feature, when it works Three-way mirroring gives you less usable space than two-way mirroring, but can tolerate the failure of up to two disks at once.
Parity mirroring gives more usable space than either mirroring mode (a 20GB storage space configured with two-way mirroring will require about 40GB of physical disk space, but a 20GB parity storage space requires only about 30GB) but comes with the aforementioned performance hit. http://technet.microsoft.com/en-us/library/jj822938.aspx
Q2. OTSPOT
Your network contains an Active Directory domain named contoso.com.
All DNS servers host a DNS zone named adatum.com. The adatum.com zone is not Active
Directory-integrated.
An administrator modifies the start of authority (SOA) record for the adatum.com zone.
After the modification, you discover that when you add or modify DNS records in the
adatum.com zone, the changes are not transferred to the DNS servers that host secondary
copies of the adatum.com zone.
You need to ensure that the records are transferred to all the copies of the adatum.com
zone.
What should you modify in the SOA record for the adatum.com zone? To answer, select the appropriate setting in the answer area.
Answer:
252. Your manager has asked you to configure the company Windows Server 2008 domain controller. He wants all new computer accounts to be placed in the General OU, when computers join the domain.
Which command should you use to accomplish this?
A. Netdom
B. Dsmove
C. None of these
D. Redircmp
Q3. Your network contains an Active directory forest named contoso.com. The forest contains two child domains named east.contoso.com and west.contoso.com.
You install an Active Directory Rights Management Services (AD RMS) cluster in each child domain.
You discover that all of the users in the contoso.com forest are directed to the AD RMS cluster in east.contoso.com.
You need to ensure that the users in west.contoso.com are directed to the AD RMS cluster in west.contoso.com and that the users in east.contoso.com are directed to the AD RMS cluster in east.contoso.com.
What should you do?
A. Modify the Service Connection Point (SCP)
B. Configure the Group Policy object (GPO) settings of the users in the west.contoso.com domain
C. Configure the Group Policy object (GPO) settings of the users in the east.contoso.com domain
D. Modify the properties of the AD RMS cluster in west.contoso.com
Answer: B
Q4. Your network contains an Active Directory domain named contoso.com. All user accounts
reside in an organizational unit (OU) named OU1.
You create a Group Policy object (GPO) named GPO1.
You link GPO1 to OU1.
You configure the Group Policy preference of GPO1 to add a shortcut named Link1 to the desktop of each user.
You discover that when a user deletes Link1, the shortcut is removed permanently from the desktop.
You need to ensure that if a user deletes Link1, the shortcut is added to the desktop again.
What should you do?
A. Modify the Link1 shortcut preference of GPO1
B. Enable loopback processing in GPO1
C. Enforce GPO1
D. Modify the Security Filtering settings of GPO1
Answer: A
Q5. Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the Hyper-V server role installed.Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4.
Server1 is configured as shown in the following table.
You need to ensure that VM1 can use more CPU time than the other virtual machines when the CPUs on Server1 are under a heavy load.
What should you configure?
A. NUMA topology
B. Resource control
C. Resource metering
D. Virtual Machine Chimney s
E. The VLAN ID
F. Processor Compatibility
G. The startup order
H. Automatic Start Action
I. Integration Services
J. Port mirroring
K. Single-root I/O virtualization
Answer: B
Explanation:
B. Resource controls provide you with several ways to control the way that Hyper-V
allocates resources to virtual machine. Resource control in used in the event where you need to adjust the computing resources of a virtual machine, you can reconfigure the resources to meet the changing needs. You can also specify resource controls to automate how resources are allocated to virtual machines.
References: http://technet.microsoft.com/en-us/library/cc766320(v=ws.10).aspx http://technet.microsoft.com/en-us/library/hh831410.aspx http://technet.microsoft.com/en-us/library/cc742470.aspx Exam Ref 70-410, Installing and Configuring Windows Server 2012, Chapter 3: Configure Hyper-V, Objective 3.1: Create and Configure virtual machine settings, p. 144 Training Guide: Installing and Configuring Windows Server 2012: Chapter 7: Hyper-V Virtualization, Lesson 2: Deploying and configuring virtual machines, p. 335
Q6. RAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.
You plan to install the Active Directory Federation Services server role on Server1 to allow for Workplace Join.
You run nslookupenterpriseregistration and you receive the following results: You need to create a certificate request for Server1 to support the Active Directory Federation Services (AD FS) installation.
How should you configure the certificate request? To answer, drag the appropriate names to the correct locations. Each name may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Q7. OTSPOT
You have a file server named Server1 that runs Windows Server 2012 R2.
Server1 contains a file share that must be accessed by only a limited number of users.
You need to ensure that if an unauthorized user attempts to access the file share, a custom access-denied message appears, which contains a link to request access to the share. The message must not appear when the unauthorized user attempts to access other shares.
Which two nodes should you configure in File Server Resource Manager? To answer, select the appropriate two nodes in the answer area.
Answer:
Q8. DNS record types come in many forms, but which record type is being described below?
Maps a domain name such as www.google.com to an IP address
A. A
B. CNAME
C. MX
D. PTR
Answer: A
Q9. Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Server1 runs Windows Server 2012 R2. Server2 runs Windows Server 2008 R2 Service Pack 1 (SP1) and has the DHCP Server server role installed. You need to manage DHCP on Server2 by using the DHCP console on Server1.
What should you do first?
A. From a command prompt on Server2/ run winrm.exe.
B. From Internet Explorer on Server2, download and install Windows Management Framework 3.0.
C. From Server Manager on Server2, enable Windows Remote Management.
D. From Windows PowerShell on Server1, run Install-WindowsFeature.
Answer: C
Q10. Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 and Server2 are part of a workgroup.
On Server1 and Server2, you create a local user account named Admin1. You add the account to the local Administrators group. On both servers, Admin1 has the same password.
You log on to Server1 as Admin1. You open Computer Management and you connect to Server2.
When you attempt to create a scheduled task, view the event logs, and manage the shared folders, you receive Access Denied messages.
You need to ensure that you can administer Server2 remotely from Server1 by using Computer Management. What should you configure on Server2?
A. From Local Users and Groups, modify the membership of the Remote Management Users group.
B. From Server Manager, modify the Remote Management setting.
C. From Windows Firewall, modify the Windows Management Instrumentation (WMI) firewall rule.
D. From Registry Editor, configure the LocalAccountTokenFilterPolicyresgistry value
Answer: D
Q11. Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC4 that runs Windows Server 2012 R2.
You create a DCCIoneConfig.xml file. You need to clone DC4.
Where should you place DCCIoneConfig.xml on DC4?
A. %Systemroot%\SYSVOL
B. %Systemdrive%
C. %Systemroot%\NTDS
D. %Programdata%\Microsoft
Answer: C
Explanation:
http://technet.microsoft.com/de-de/library/hh831734.aspx
Q12. Your network contains an Active Directory domain named contoso.com. The domain contains six domain controllers. The domain controllers are configured as shown in the following table.
The network contains a server named Server1 that has the Hyper-V server role installed. DC6 is a virtual machine that is hosted on Server1.
You need to ensure that you can clone DC6.
What should you do?
A. Transfer the PDC emulator to DC5
B. Transfer the schema master to DC4
C. Transfer the PDC emulator to DC2
D. Transfer the schema master to DC6
Answer: C
Explanation: A Windows Server 2012 Server running the PDC emulator is required.
The requirements for virtualized DC cloning include:
*
The PDC emulator must run Windows Server 2012. You can clone PDC emulator if it is virtualized.
*
The virtualized DC that is used as a source for cloning must run Windows Server 2012 and be a member of the Cloneable Domain Controllers group.
Note: Using virtualized domain controller cloning in Windows Server 2012 to expedite forest recovery Virtualized domain controller (DC) cloning simplifies and expedites the process for installing additional virtualized DCs in a domain, especially in centralized locations such as datacenters where several DCs run on hypervisors. After you restore one virtual DC in each domain from backup, additional DCs in each domain can be rapidly brought online by using the virtualized DC cloning process. You can prepare the first virtualized DC that you recover, shut it down, and then copy that virtual hard disk as many times as is necessary in order to create cloned virtualized DCs to build out the domain.
Reference: New Features, Assumptions, and Prerequisites for Using This Guide for Planning Active Directory Forest Recovery
Q13. Your company deploys a new Active Directory forest named contoso.com. The first domain controller in the forest runs Windows Server 2012 R2. The forest contains a domain controller named DC10.
On DC10, the disk that contains the SYSVOL folder fails.
You replace the failed disk. You stop the Distributed File System (DFS) Replication service. You restore the SYSVOL folder.
You need to perform a non-authoritative synchronization of SYSVOL on DC10.
Which tool should you use before you start the DFS Replication service on DC10?
A. Active Directory Sites and Services
B. Ultrasound
C. Adsiedit.msc
D. Frsutil
Answer: C
Explanation:
How to perform a non-authoritative synchronization of DFSR-replicated SYSVOL
(like "D2" for FRS)
1.
In theADSIEDIT.MSC tool modify the following distinguished name (DN) value and attribute on each of the domain controllers that you want to make non-authoritative:CN=SYSVOL Subscription,CN=Domain System Volume,CN=DFSR-LocalSettings,CN=<the server name>,OU=Domain Controllers,DC=<domain>msDFSR-Enabled=FALSE
2.
Force Active Directory replication throughout the domain. Etc
Q14. Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. The domain contains a server named Server1.
You install the Windows PowerShell Web Access gateway on Server1.
You need to provide administrators with the ability to manage the servers in the domain by using the Windows PowerShell Web Access gateway.
Which two cmdlets should you run on Server1? (Each correct answer presents part of the solution. Choose two.)
A. Install PswaWebApplication
B. Add PswaAuthorizationRule
C. Set-WSManlnstance
D. Set-WSManQuickConfig
E. Set-BCAuthentication
Answer: A,B
Explanation: Configure PowerShell Web Access Gateway using the following PowerShell Cmdlet. Install-PswaWebApplication –UseTestCertificate Running the cmdlet installs the Windows PowerShell Web Access web application within the IIS Default Web Site container. The cmdlet creates the infrastructure required to run Windows PowerShell Web Access on the default website, https://<server_name>/pswa. Add-PswaAuthorizationRule Adds a new authorization rule to the Windows PowerShell Web Access authorization rule set. Parameters: ComputerGroupName ComputerName ConfigurationName RuleName UserGroupName UserName Credential (Windows Server 2012 R2 and later)
References: http://technet.microsoft.com/en-us/library/hh849867.aspx http://technet.microsoft.com/en-us/library/hh849875.aspx http://technet.microsoft.com/en-us/library/jj592890(v=wps.620).aspx http://technet.microsoft.com/en-us/library/hh848404(v=wps.620).aspx http://technet.microsoft.com/en-us/library/jj592894(v=wps.620).aspx
Q15. You perform a Server Core Installation of Windows Server 2012 R2 on a server named Server1.
You need to add a graphical user interface (GUI) to Server1.
Which tool should you use?
A. the dism.exe command
B. the ocsetup.exe command
C. the setup.exe command
D. the Install-Module cmdlet
Answer: A
Explanation:
The DISM command is called by the Add-WindowsFeature command. Here is the systax for DISM: Dism /online /enable-feature /featurename:ServerCore-FullServer /featurename:Server-Gui-Shell /featurename:Server-Gui-Mgmt