70-411 - MCSA: Administering Windows Server 2012 - Exam 2

Your network contains a DNS server named Server1 that runs Windows Server 2012. Server1 has a zone named contoso.com. The network contains a server named Server2 that runs Windows Server 2008 R2. Server1 and Server2 are members of an Active Directory domain named contoso.com. You change the IP Address of Server2. Several hours later, some users report they cannot connect to Server2. On the affected users' client computers, you flush the DNS client resolver cache, and the users successfully connect to Server2. You need to reduce the amount of time that the client computers cache DNS records from contoso.com. Which value should you modify in the Start of Authority (SOA) record?

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. You enable and configure Routing and Remote Access (RRAS) on Server1. You create a user account named User1. You need to ensure that User1 can establish VPN connections to Server1. What should you do?

Server1, as a DNS server, hosts a Primary zone. Server2 is the secondary zone contoso.com domain. You need to determine how long Server2 would take to renew records from Server1. What do you configure?

Your network contains an Active Directory domain named fabrikam.com. You implement Direct Access and an IKEv2 VPN. You need to view the properties of the VPN connection. Which connection properties should you view?

You have a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. On Server1, you create a network policy named PPTP_Policy. You need to configure PPTP_Policy to apply only to VPN connections that use the PPTP protocol. What should you configure in PPTP_Policy?

Your network contains a RADIUS server named Server1. You install a new server named Server2 that runs Windows Server 2012 and has Network Policy Server (NPS) installed. You need to ensure that all accounting requests for Server2 are forwarded to Serever1. On Server2, you configure a Connection Request Policy. What else should you configure on Server2?

Your network contains two Active Directory forests named contoso.com and adatum.com. The contoso.com forest contains a server named Server1.contoso.com. The adatum.com forest contains a server named Server2.adatum.com. Both servers have the Network Policy Server role installed. The network contains a server named Server3. Server3 is located in the perimeter network and has the Network Policy Server role service installed. You plan to configure Server3 as an authentication provider for several VPN servers. You need to ensure that a RADIUS requests received by Server3 for a specific VPN server are always forwarded to Server1.contoso.com. Which two should you configure on Server3? (Choose two)

Your network contains an Active Directory domain named fabrikam.com. You implement Direct Access. You need to view the properties of the DirectAccess connection. Which connection properties should you view?

Your network contains an Active Directory domain named contoso.com The domain contains a sever named Server1 that runs Windows Server 2012. You enable and configure Routing and Remote Access (RRAS) on Server1. You create a user account named User1. You need to ensure that User1 can establish VPN connections to Server1. What should you do?

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. All of the DNS servers in both of the domains run Windows Server 2012. The network contains two servers named Server1 and Server2. Server1 hosts an Active Directory-integrated zone for contoso.com Server2 hosts an Active Directory-integrated zone for fabrikam.com. Server1 and Server2 connect to each other by using a WAN link. Client computers that connect to Server1 for name resolution cannot resolve names in fabrikam.com. You need to configure Server1 to support resolution of names in the fabrikam.com zone. The solution must ensure that users in contoso.com can resolve names in the fabrikam.com domain if the WAN link fails. What should you do on Server1?

Your network contains two servers named Server1 and Server2. Both server run Windows Server 2012 and have the DNS server role installed. Server1 hosts a primary zone for contoso.com. Server2 hosts a secondary zone for contoso.com. The zone is not configured to notify secondary servers of the changes automatically. You update several records on Server1. You need to force the replication of the contoso.com zone records from Server1 to Server2. What should you do from Server2?

Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8. Your company has users who work from home. Some of the home users have desktop computers. Other home users have laptop computers. All of the computers are joined to the domain. All of the computer accounts are members of a group named Group1. Currently, the home users access the corporate network by using a PPTP VPN. You implement DirectAccess by using the default configuration and you specify Group1 as the DirectAccess client group. The home users who have desktop computers report that they cannot use DirectAccess to access the corporate network. The home users who have laptop computer report that they can use DirectAccess to access the corporate network. You need to ensure that the home users who have desktop computers can access the network by using DirectAccess. What should you modify?

You have a DNS server named Server1 that has a Server Core Installation on Windows Server 2012. You need to view the time-to-live (TTL) value of a name server (NS) record that is cached by the DNS Server service on Server1. What should you run?

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that hosts the primary DNS zone for contoso.com. All servers dynamically register their host names. You install the new Web servers that host identical copies of your company's intranet website. The servers are configured as follows: Web1.contoso.com=10.0.0.20 and Web2.contoso.com=10.0.0.21. You need to use DNS records to load balance name resolution queries for intranet.contoso.com between the two Web servers. What is the minimum number of DNS records that you should create manually?

You have a Direct Access Server named Server1 running Server 2012. You need to prevent users from accessing websites from an internet connection. What should you configure?

You have a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. You need to configure the ports on Server1 to ensure that client computers can establish VPN connections to Server1. The solution must NOT require the use of certificates or pre-shared keys. What should you modify?

Your network contains multiple Active Directory sites. You have a Distributed File System (DFS) namespace that has a folder target in each site. You discover that some client computers connect to DFS targets in other sites. You need to ensure that client computers only connect to a DFS target in their respective site. What should you modify?

Your network contains an Active Directory domain named contoso.com. You have a failover cluster named Cluster1. All of the nodes in Cluster1 have BitLocker Drive Encryption (BitLocker) installed. You plan to add a new volume to the shared storage of Cluster1. You need to add the new volume to the shared storage. The solution must meet the following requirements: Encrypt the volume, and avoid use maintenance mode on the cluster. Which three actions should you perform? (Choose three)

Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2008. All domain controllers run Windows Server 2008 R2. The domain contains a file server named Server1 that runs Windows Server 2012. Server1 has a BitLocker Drive Encryption (BitLocker)-encrypted drive. Server1 uses a trusted platform Module (TPM) chip. You enable the Turn on TPM backup to Active Directory Domain Services policy settings by using a Group Policy Object (GPO). You need to ensure you can backup the BitLocker recovery information to Active Directory. What should you do?

Your company has a main office and a branch office. The main office is located in Seattle. The branch office is located in Montreal. Each office is configured as an Active Directory site. The network contains an Active Directory domain named adatum.com. The Seattle office contains a file server named Server1. The Montreal office contains a file server named Server2. The servers run Windows Server 2012 and have the File and Storage Services server role., The DFS Namespace role service, and the DFS Replication role service installed. Server1 and Server2 each have a share named Share1 that is replicated by using DFS replication. You need to ensure that users connect to the replicated folder in their respective office when they connect to \\contoso.com\Share1. Which three actions should you perform? (Choose three)

You have a server named Server1 that runs Windows Server 2012. An administrator creates a quota as shown in the Quota exhibit. You run the dir command as shown. You need to ensure that the D:\Folder1 can only consume 100MB of disk space. What should you do?

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012. The domain contains an Organizational Unit (OU) named FileServers_OU. FileServers_OU contains the computer accounts for all of the file servers in the domain. You need to audit the users who successfully access shares on the file servers. Which audit category should you configure?

Your network contains an Active Directory domain named contoso.com. The domain does not contain a certification authority (CA). All servers run Windows Server 2012. All client computers run Windows 8. You need to add a data recovery agent for the Encrypting File System (EFS) to the domain. What two actions should you perform?

Your network contains an Active Directory domain named contoso.com. The domain contains three domain controllers. The domain controllers are configured as follows: Server1 runs Windows Server 2008 R2 and is the PDC Emulator and Infrastructure master. Server2 runs Windows Server 2008 R2 and is the RID master. Server3 runs Windows Server 2012 and is the Schema master. You are creating a Distributed File System (DFS) namespace as shown. You need to identify which configuration prevents you from creating a DFS namespace in Windows Server 2008 mode. What configuration should you identify?

Your network contains an Active Directory domain named adatum.com. The domain contains five servers. The servers are configured as follows: DC1 is a Domain Controller and DNS server. DC2 is a Domain Controller and DHCP server. Server1 is a Windows Deployment Server (WDS) server. Server2 is a Certificate Authority (CA). Server3 is a File Server. All desktop computers in adatum.com run Windows 8 and are configured to use BitLocker Drive Encryption (BitLocker) on al local disk drives. You need to deploy the Network Unlock feature. The solution must minimize the number of features and server roles installed on the network. To which server should you deploy the feature?

You have a server named Server1 that runs Windows Server 2012. Server1 has the File Server Resource Manager role installed. Server1 has a folder named Folder1 that is used by the sales department. You need to ensure that an e-mail notification is sent to the sales manager when a File Screening Audit report is generated. What should you configure on Server1?

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Both servers run Windows Server 2012. Both servers have the File and Storage Services server role, the DFS namespace role service and the Replication role service installed. Server1 and Server2 are part of a Distributed File System (DFS) Replication group named Group1. Server1 and Server2 are separated by a low-speed WAN connection. You need to limit the amount of bandwidth that DFS can use to replicate between Server1 and Server2. What should you modify?

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has the File Server Resource Manager role service installed. You configure a quota threshold as shown in the exhibit. You need to ensure that a user named User1 receives an e-mail notification when the threshold is exceeded. What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1 that runs Windows Server 2012. You view the effective policy settings of Server1 as shown in the exhibit. On Server1, you have a folder named C:\Share1 that is shared as Share1. Share1 contains confidential data. A group named Group1 has full control of the content in Share1. You need to ensure that an entry is added to the event log whenever a member of Group1 deletes a file in Share1. What should you configure?

You have a server named Server1 that runs Windows Server 2012. Server1 has the File Server Resource Manager role service installed. Server1 has a folder named Folder1 that is used by the human resources department. You need to ensure that an email notification is sent immediately to the human resources manager when a user copies an audio file or a video file to Folder1. What should you configure on Server1?

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Both servers run Windows Server 2012. Both servers have the File and Storage Services server role, the DFS Namespace role service, and the DFS Replication role service installed. Server1 and Server2 are part of a Distributed File System (DFS) Replication group named Group1. Server1 and Server2 are connected by using a high-speed LAN connection. You need to minimize the amount of processor resources consumed by DFS Replication. What should you do?

Your company has a main office and two branch offices. The main office is located in New York. The branch offices are located in Seattle and Chicago. The network contains an Active Directory domain named contoso.com. An Active Directory site exists for each office. Active Directory site links exist between the main office and the branch offices. All servers run Windows Server 2012. The domain contains three file servers. The NYC-SVR1 server is in the New York office, the SEA-SRV1 server is located in the Seattle office, and the CHI-SRV1 is located in the Chicago Office. You implement a Distributed File System (DFS) replication group named ReplGroup. ReplGroup is used to replicate a folder on each file server. ReplGroup uses a hub and spoke topology. NYC-SVR1 is configured as the hub server. You need to ensure that replication can occur if NYC-SVR1 fails. What should you do?

Your domain contains a Windows 8 computer named Computer1. Computer1 uses BitLocker. The E:\ drive is encrypted and currently locked. You need to unlock the E:\ drive with the recovery key stored on the C:\. What should you run?

Your network contains and Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. A local account named Admin1 is a member of the Administrators group on Server1. You need to generate an audit event whenever Admin1 is denied access to a file or folder. What should you run?

Your network contains and Active Directory domain named contoso.com. The domain contains a file server named Server1 that runs Windows Server 2012. You view the effective policy settings of Server1 as shown in the exhibit. You need to ensure that an entry is added to the event log whenever a local user account is created or deleted on Server1. What should you do?

On the DFS replication you receive a wrap error on the sysvol on domain controller 4. Which three steps should you do to recover this error in the correct order?

Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2008. All domain controllers run Windows Server 2008 R2. The domain contains a file server named Server1 that runs Windows Server 2012. Server1 has a BitLocker Drive Encryption (BitLocker)-encrypted drive. Server1 uses a Trusted Platform Module (TPM) chip. You enable the Turn on TPM backup to Active Directory Domain Services policy setting by using a Group Policy Object (GPO). You need to ensure that you can back up the BitLocker recovery information to Active Directory. What should you do?

Your network contains an Active Directory domain named adatum.com. You have a Group Policy Object (GPO) that configures the Windows Update settings. Currently, client computers are configured to download updates from Microsoft Update servers. Users choose when the updates are installed. You need to configure all client computers to install Windows updates automatically. Which setting should you configure in the GPO?

Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. All servers run Windows Server 2012. You need to collect error events for all the servers on Server1. The solution must ensure that when new servers are added to the domain, their error events are collected automatically on Server1. Which two actions should you perform? (Choose two)

Your network contains an Active Directory domain called contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server 2012. You enable the EventLog-Application event trace session. You need to set the maximum size of the log file used by the trace session to 10 MB. From which tab should you perform the configuration?