Free Microsoft 070-412 Exam Dumps Questions & Answers

Your network contains one Active Directory domain named contoso.com. The domain contains an IP Address Management (IPAM) server named Server1. Server1 manages several DHCP and DNS servers.
From Server Manager on Server1, you create a custom role for IPAM.
You need to assign the role to a group named IP_Admins.
What should you do?

• A.  From Server Manager, create an access scope.
• B.  From Windows PowerShell, run the Add-Member cmdlet.
• C.  From Windows PowerShell, run the Set-IpamConfiguration cmdlet.
• D.  From Server Manager, create an access policy.

You have a server named Server1 that runs Windows Server 2012 R2.
Server1 has access to disks that connect to a RAID controller, iSCSI disks, and disks connected to a SCSI controller.
You plan to use a tiered storage space on Server1.
You need to identify which storage controller and volume type you must use for the tiered storage space.
Which storage components should you use?
To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation

Box 1, Storage controller: SCSI
Storage Spaces requirements include:
* Serial ATA (SATA) or Serial Attached SCSI (SAS) connected disks, optionally in a just-a-bunch-of-disks (JBOD) enclosure Note: RAID adapters, if used, must have all RAID functionality disabled Box 2, Storage volume type:
* Storage pools. A collection of physical disks that enable you to aggregate disks, expand capacity in a flexible manner, and delegate administration.
* Storage spaces. Virtual disks created from free space in a storage pool. Storage spaces have such attributes as resiliency level, storage tiers, fixed provisioning, and precise administrative control.

Illustration:
http://www.miru.ch/wp-content/uploads/2013/07/071813_2125_Creatingati1.png Reference: Storage Spaces Overview
https://technet.microsoft.com/en-us/library/hh831739.aspx

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server
2012 R2.
The domain contains a domain controller named DC1 that is configured as an enterprise root certification authority (CA).
All users in the domain are issued a smart card and are required to log on to their domain- joined client computer by using their smart card.
A user named User1 resigned and started to work for a competing company.
You need to prevent User1 immediately from logging on to any computer in the domain. The solution must not prevent other users from logging on to the domain.
Which tool should you use?

• A.  Active Directory Users and Computers
• B.  The Security Configuration Wizard
• C.  The Certificates snap-in
• D.  Certificate Templates

You have a server named Server1 that runs Windows Server 2012 R2.
From Server Manager, you install the Active Directory Certificate Services server role on Server1.
A domain administrator named Admin1 logs on to Server1.
When Admin1 runs the Certification Authority console, Admin1 receives the following error message.

You need to ensure that when Admin1 opens the Certification Authority console on Server1, the error message does not appear.
What should you do?

• A.  Add Admin1 to the Cert Publishers group.
• B.  Install the Active Directory Certificate Services (AD CS) tools.
• C.  Run the Install-AdcsCertificationAuthority cmdlet.
• D.  Modify the PATH system variable.

Your network contains two Active Directory forests named contoso.com and adatum.com. Each forest contains an Active Directory Rights Management Services (AD RMS) root cluster. All servers run Windows Server 2012 R2.
You need to ensure that the rights account certificates issued in adatum.com are accepted by the AD RMS root cluster in contoso.com.
What should you do in each forest?
To answer, drag the appropriate actions to the correct forests. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Correct Answer:

Explanation

A trusted user domain, often referred as a TUD, is a trust between AD RMS clusters that instructs a licensing server to accept rights account certificates (the certificates identifying users) from another AD RMS server in a different Active Directory forest. An AD RMS trust is not the same as an Active Directory trust, but it is similar in that it refers to the ability of one environment to accept identities from another environment as valid subjects.
Illustration:
fc8d52c8-a2d8-4584-be1d-99e67989a944

Reference: Trusted User Domain