70-412 Question 24
Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012. On Dc1, you open DNS Manager as shown in the exhibit. (Click the Exhibit button.) You need to change the replication scope of the contoso.com zone.What should you do before you change the replication scope?
A. Modify the Zone Transfers settings.
B. Add DC1 to the Name Servers list.
C. Add your user account to the Security settings of the zone.
D. Unsign the zone.
Correct Answer: D
Section: (none)
Explanation:
Explanation/Reference:
70-412 Question 23
Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1. All servers run Windows Server 2012. All domain user accounts have the Division attribute automatically populated as part of the user provisioning process. The Support for Dynamic Access Control and Kerberos armoring policy is enabled for the domain. You need to control access to the file shares on Server1 based on the values in the Division attribute and the Division resource property. Which three actions should you perform in sequence? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
First create a claim type for the property, then create a reference resource property that points back to the claim. Finally set the classification value on the folder.
70-412 Question 22
You have a server named Server2 that runs Windows Server 2012. You have storage provisioned on Server2 as shown in the exhibit. (Click the Exhibit button.) You need to configure the storage so that it appears in Windows Explorer as a drive letter on Server1. Which three actions should you perform in sequence? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
70-412 Question 21
Your network contains an Active Directory domain named contoso.com. All file servers in the domain run Windows Server 2012. The computer accounts of the file servers are in an organizational unit (OU) named OU1. A Group Policy object (GPO) named GP01 is linked to OU1. You plan to modify the NTFS permissions for many folders on the file servers by using central access policies. You need to identify any users who will be denied access to resources that they can currently access once the new permissions are implemented. In which order should you perform the five actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
I hate steps like this because you can create a rule first and then the policy, or you can create the policy and create the rule during the creation of the policy. Either way I'm going to go with creating the policy first, and then the rule.
70-412 Question 20
Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA). The domain contains a server named Server1 that runs Windows Server 2012. You install the Active Directory Federation Services server role on Server1. You plan to configure Server1 as an Active Directory Federation Services (AD FS) server. The Federation Service name will be set to adfsl.contoso. com. You need to identify which type of certificate template you must use to request a certificate for AD FS. Which certificate template should you identify? To answer, select the appropriate template in the answer area.
Hot Area:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
70-412 Question 19
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has the Active Directory Federation Services (AD FS) server role installed. Adatum.com is a partner organization.
You are helping the administrator of adatum.com set up a federated trust between adatum.com and contoso.com. The administrator of adatum.com asks you to provide a file containing the federation metadata ofcontoso.com. You need to identify the location of the federation metadata file. Which node in the AD FS console should you select? To answer, select the appropriate node in the answer area
Hot Area:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
