[Free] Download New Updated (August 2016) Microsoft 70-412 Real Exam 181-190

Ensurepass

QUESTION 181

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Rights Management Services server role installed.

 

Your company works with a partner organization that does not have its own Active Directory Rights Management Services (AD RMS) implementation.

 

You need to create a trust policy for the partner organization.

 

The solution must meet the following requirements:

 

clip_image002Grant users in the partner organization access to protected content.

clip_image002[1]Provide users in the partner organization with the ability to create protected content.

 

Which type of trust policy should you create?

 

A.

A federated trust

B.

Windows Live ID

C.

A trusted publishing domain

D.

A trusted user domain

 

Correct Answer: A

 

 

QUESTION 182

Your network contains an Active Directory domain named contoso.com. The domain contains a certification authority (CA). You suspect that a certificate issued to a Web server is compromised. You need to minimize the likelihood that users will trust the compromised certificate. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.

Stop the Certificate Propagation service.

B.

Modify the validity period of the Web Server certificate template.

C.

Run certutil and specify the -revoke parameter.

D.

Run certutil and specify the -deny parameter.

E.

Publish the certificate revocation list (CRL).

 

Correct Answer: CE

Explanation:

First revoke the certificate, then publish the CRL.

 

 

QUESTION 183

Your network contains an Active Directory domain named adatum.com. The domain contains a server named CA1 that runs Windows Server 2012 R2. CA1 has the Active Directory Certificate Services server role installed and is configured to support key archival and recovery. You need to ensure that a user named User1 can decrypt private keys archived in the Active Directory Certificate Services (AD CS) database. The solution must prevent User1 from retrieving the private keys from the AD CS database. What should you do?

 

A.

Assign User1 the Issue and Manage Certificates permission to CA1.

B.

Assign User1 the Read permission and the Write permission to all certificate templates.

C.

Provide User1 with access to a Key Recovery Agent certificate and a private key.

D.

Assign User1 the Manage CA permission to CA1.

 

Correct Answer: C

Explanation:

http://social.technet.microsoft.com/wiki/contents/articles/7573.active-directory-certificate-services-pki-keyarchival-and-management.aspx#Protecting_Key_Recovery_Agent_Keys

 

clip_image004

 

 

QUESTION 184

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 is an enterprise root certification authority (CA) for contoso.com. You need to ensure that the members of a group named Group1 can request code signing certificates. The certificates must be issued automatically to the members. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.

From Certificate Templates, modify the certificate template.

B.

From Certification Authority, add a certificate template to be issued.

C.

From Certificate Authority, modify the CA properties.

D.

From Certificate Templates, duplicate a certificate template.

E.

From Certificate Authority, stop and start the Active Directory Certificate Services (AD CS) service.

 

Correct Answer:
AD

Explanation:

The question ask for issus the certificate automaticly. Only when the Certificate is duplicated you have the possibility to autoenroll the certificate. So the first step is D.

Then you must activate autoenroll. So the certificate must be modified. Thats the second step. Answer A.

 

 

QUESTION 185

Your network contains an Active Directory domain named adatum.com. The domain contains a file server named FS1 that runs Windows Server 2012 R2 and has the File Server Resource Manager role service installed. All client computers run Windows 8. File classification and Access-Denied Assistance are enabled on FS1. You need to ensure that if users receive an Access Denied message, they can request assistance by email from the Access Denied dialog box. What should you configure?

 

A.

A file management task

B.

A classification property

C.

The File Server Resource Manager Options

D.

A report task

 

Correct Answer: C

 

 

 

 

 

 

 

QUESTION 186

HOTSPOT

Your network contains an Active Directory forest.

 

You implement Dynamic Access Control in the forest.

 

You have the claim types shown in the Claim Types exhibit. (Click the Exhibit button.)

 

clip_image006

 

The properties of a user named User1 are configured as shown in the User1 exhibit. (Click the Exhibit button.)

 

clip_image008

 

The output of Whoa mi /claims for a user named User2 is shown in the Whoami exhibit. (Click the Exhibit button.)

 

clip_image010

 

Select Yes if the statement can be shown to be true based on the available information; otherwise select No. Each correct selection is worth one point.

 

clip_image012

 

Correct Answer:

clip_image014

 

 

 

 

 

 

 

 

 

QUESTION 187

DRAG DROP

Your network contains an Active Directory forest. The forest contains a single domain named contoso.com.

 

The forest contains two Active Directory sites named Main and Branch1. The sites connect to each other by using a site link named Main-Branch1. There are no other site links.

 

Each site contains several domain controllers. All domain controllers run Windows Server 2012 R2. Your company plans to open a new branch site named Branch2. The new site will have a WAN link that connects to the Main site only. The site will contain two domain controllers that run Windows Server 2012 R2.

 

You need to create a new site and a new site link for Branch2. The solution must ensure that the domain controllers in Branch2 only replicate to the domain controllers in Branch1 if all of the domain controllers in Main are unavailable.

 

Which three actions should you perform?

 

To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

 

clip_image016

 

Correct Answer:

clip_image018

QUESTION 188

DRAG DROP

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012 R2.

 

You configure a new failover cluster named Cluster1. Server1 and Server2 are nodes in Cluster1. You need to configure the disk that will be used as a witness disk for Cluster1.

 

How should you configure the witness disk?

 

To answer, drag the appropriate configurations to the correct location or locations. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

 

clip_image020

 

Correct Answer:

clip_image022

 

 

QUESTION 189

DRAG DROP

Your network contains an Active Directory domain named contoso.com. The domain contains four member servers named Server1, Server2, Server3, and Server4. Server1 and Server2 run Windows Server 2008 R2.

 

Server1 and Server2 have the Hyper-V server role and the Failover Clustering feature installed.

 

Failover Clustering is configured to provide highly available virtual machines by using a cluster named Cluster1.

 

Cluster1 hosts 10 virtual machines.

 

Server3 and Server4 run Windows Server 2012 R2.

 

You install the Hyper-V server role and the Failover Clustering feature on Server3 and Server4. You create a cluster named Cluster2.

 

You need to migrate cluster resources from Cluster1 to Cluster2. The solution must minimize downtime on the virtual machines.

 

Which five actions should you perform?

 

To answer, move the appropriate five actions from the list of actions to the answer area and arrange them in the correct order.

 

clip_image024

 

Correct Answer:

clip_image026

 

 

 

 

 

 

QUESTION 190

DRAG DROP

You have 3 server named Server1 that runs Windows Server 2012 R2.

 

You are asked to test Windows Azure Online Backup to back up Server1.

 

You need to back up Server1 by using Windows Azure Online Backup.

 

Which four actions should you perform in sequence?

 

To answer, move the appropriate four actions from the list of actions to the answer area and arrange them in the correct order.

 

clip_image028

 

Correct Answer:

clip_image030

 

Free VCE & PDF File for Microsoft 70-412 Real Exam

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…