NEW QUESTION 1
Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2.
Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1.
You add two additional nodes to Cluster1. You need to ensure that Cluster1 stops running if three nodes fail.
What should you configure?

• A. Affinity-None
• B. Affinity-Single
• C. The cluster quorum settings
• D. The failover settings
• E. A file server for general use
• F. The Handling priority
• G. The host priority
• H. Live migration
• I. The possible owner
• J. The preferred owner
• K. Quick migration
• L. the Scale-Out File Server

Answer: C

Explanation: The quorum configuration in a failover cluster determines the number of failures that the cluster can sustain.
Reference: Understanding Quorum Configurations in a Failover Cluster http://technet.microsoft.com/en-us/library/cc731739.aspx

NEW QUESTION 2
DRAG DROP
You have a file server named Server1 that runs Windows Server 2012 R2. The folders on Server1 are configured as shown in the following table.

A new corporate policy states that backups must use Windows Azure Online Backup whenever possible.
You need to identify which technology you must use to back up Server1. The solution must use Windows Azure Online Backup whenever possible.
What should you identify?
To answer, drag the appropriate backup type to the correct location or locations. Each backup type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: * NTFS encrypted
Azure Backup supported
* NTFS compressed Azure Backup supported
* At this time you cannot backup entire Azure Virtual Machines or perform a system state backup of Azure Virtual Machines using Azure Backup.
Note: * NTFS encrypted + NTFS compressed Azure Backup not supported

NEW QUESTION 3
Your network contains an Active Directory forest. The forest contains one domain and two sites named Site1 and Site2, Site contains a domain controller named DC1. Site2 contains a domain controller named DC2.
Replication is allowed between the sites daily from 01:00 to 05:00.
At 14:00, an administrator deletes an organization unit (OU) named OUI from DC1. One hour later, on DC2, an administrator creates a user account named User1 in OU1.
Where will you find the User1 object after replication occurs between the sites?

• A. In the Active Directory Update container
• B. In the Active Directory Recycle Bin
• C. In the Domain Updates container
• D. In the Lost And Found container

Answer: A

NEW QUESTION 4
Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1.
Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed. Server1 hosts 10 virtual machines.
A virtual machine named VM1 runs Windows Server 2012 R2 and hosts a processor- intensive Application named App1.
Users report that App1 responds more slowly than expected.
You need to monitor the processor usage on VM1 to identify whether changes must be made to the hardware settings of VM1.
Which performance object should you monitor on Server1?

• A. Hyper-V Hypervisor Logical Processor
• B. Processor
• C. Hyper-V Hypervisor Root Virtual Processor
• D. Process
• E. Hyper-V Hypervisor Virtual Processor

Answer: E

NEW QUESTION 5
Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role installed and is configured as a standalone certification authority (CA).
You install a second server named Server2. You install the Online Responder role service on Server2.
You need to ensure that Server1 can issue an Online Certificate Status Protocol (OCSP) Response Signing certificate to Server2.
What should you run on Server1?

• A. The certreq.exe command and specify the -policy parameter
• B. The certutil.exe command and specify the -getkey parameter
• C. The certutil.exe command and specify the -setreg parameter
• D. The certreq.exe command and specify the -retrieve parameter

Answer: C

Explanation: To prepare a computer running Windows Server to issue OCSP Response Signing certificates
✑ On the server hosting the CA, open a command prompt, and type:
✑ certutil -v -setreg policyEnableRequestExtensionList +1.3.6.1.5.5.7.48.1.5
✑ Stop and restart the CA. You can do this at a command prompt by running the following commands:
✑ net stop certsvc net start certsvc
Reference: Configure a CA to Support OCSP Responders https://technet.microsoft.com/en-us/library/cc732526.aspx

NEW QUESTION 6
You have a server named Server1 that runs Windows Server 2012 R2. You install the File and Storage Services server role on Server1.
From Windows Explorer, you view the properties of a folder named Folder1 and you discover that the Classification tab is missing.
You need to ensure that you can assign classifications to Folder1 from Windows Explorer
manually.
What should you do?

• A. From Folder Options, clear Hide protected operating system files (Recommended).
• B. Install the File Server Resource Manager role service.
• C. From Folder Options, select the Always show menus.
• D. Install the Share and Storage Management Tools.

Answer: B

Explanation: On the Classification tab of the file properties in Windows Server 2012, File Classification Infra-structure adds the ability to manually classify files. You can also classify folders so that any file added to the classified folder will inherit the classifications of the parent folder.
Reference: What's New in File Server Resource Manager in Windows Server.

NEW QUESTION 7
DRAG DROP
Your network contains one Active Directory domain. The domain contains two Hyper-V hosts named Host1 and Host2 that run Windows Server 2012 R2. Host1 contains a virtual machine named DC5. DC5 is a domain controller that runs Windows Server 2012 R2.
You configure Active Directory to support domain controller cloning for DC5, and then you shut down DC5.
You need to create a clone of DC5 on Host2.
What should you run on each Hyper-V host? To answer, drag the appropriate commands or cmdlets to the correct Hyper-v hosts. Each command or cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: Host1: Export-VM Host2: Import-VM
Use import and export feature, when you want to create a new virtual machine with the same configuration of an existing machine in Hyper-V.
The Export-VM cmdlet exports a virtual machine to disk. The Import-VM cmdlet imports a virtual machine from a file.

NEW QUESTION 8
Which of the following must you back up or have a copy of to be able to ensure that you can restore an AD RMS cluster in the event that a single server hosting all AD RMS components suffers complete data loss? (Choose three answers.)

• A. Cluster key password
• B. Trusted publishing domain
• C. Trusted user domain
• D. AD RMS databases

Answer: ABD

NEW QUESTION 9
Your network contains an Active Directory domain named adatum.com. You create a new Group Policy object (GPO) named GPO1.
You need to verify that GPO1 was replicated to all of the domain controllers. Which tool should you use?

• A. Gpupdate
• B. Gpresult
• C. Group Policy Management
• D. Active Directory Sites and Services

Answer: C

Explanation: In Windows Server 2012, the Group Policy Management Console (GPMC) was enhanced to provide a report for the overall health state of the Group Policy infrastructure for a domain, or to scope the health view to a single GPO.
Reference: Check Group Policy Infrastructure Status http://technet.microsoft.com/en-us/library/jj134176.aspx

NEW QUESTION 10
Your organization is deploying a second Active Directory forest because a substantial number of users need to access a resource that requires significant changes to the Active Directory schema, which are not compatible with your current forest's schema.
You want users in your forest to be able to access any resource in any domain in the new forest.
Which of the following should you do to accomplish this goal?

• A. Configure a forest trust.
• B. Configure an external trust.
• C. Create a shortcut trust.
• D. Configure name suffix routing.

Answer: A

NEW QUESTION 11
You have a file server named Server1 that runs a Server Core Installation of Windows Server 2012 R2.
You need to ensure that users can access previous versions of files that are shared on Server1 by using the Previous Versions tab.
Which tool should you use?

• A. Diskpart
• B. Wbadmin
• C. Vssadmin
• D. Storrept

Answer: C

Explanation: A. Enables you to back up and restore your operating system, volumes, files, folders, and applications from a command prompt.
B. DiskPart is a text-mode command interpreter that enables you to manage objects (disks, partitions, volumes, or virtual hard disks) by using scripts or direct input from a command prompt.
C. The storrept command is installed with File Server Resource Manager and includes subcommands for creating and managing storage reports and storage report tasks, as well as for configuring general administrative options for File Server Resource Manager.
D. Displays current volume shadow copy backups and all installed shadow copy writers and providers. To view the command syntax for any of the commands in the following table, click the command name.
http://technet.microsoft.com/en-us/library/cc754015(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc770877(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc753567(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc754968.aspx

NEW QUESTION 12
Your network contains an Active Directory domain named contoso.com. The domain contains a main office and a branch office.
An Active Directory site exists for each office.
All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers.
DC1 hosts an Active Directory- integrated zone for contoso.com. You add the DNS Server server role to DC2.
You discover that the contoso.com DNS zone fails to replicate to DC2.
You verify that the domain, schema, and configuration naming contexts replicate from DC1 to DC2.
You need to ensure that DC2 replicates the contoso.com zone by using Active Directory replication.
Which tool should you use?

• A. Dnscmd
• B. Dnslint
• C. Repadmin
• D. Ntdsutil
• E. DNS Manager
• F. Active Directory Sites and Services
• G. Active Directory Domains and Trusts
• H. Active Directory Users and Computers

Answer: F

Explanation: http://technet.microsoft.com/en-us/library/cc739941(v=ws.10).aspx If you see question about AD Replication, First preference is AD sites and services, then Repadmin and then DNSLINT.

NEW QUESTION 13
You are employed as a network administrator at contoso.com. contoso.com has a single Active Directory domain named contoso.com.
All servers on the Contoso.com network have Windows Server 2012 R2 installed.
Contoso.com has two servers,named server1 and server2 which are configured in a two- node fail over cluster.
You are currently configuration the quorum settings for the cluster.
You want to make use of a quorum mode that allows each node to vote if it is available and in communication.
Which of the following is the mode you should use?

• A. Node Majority
• B. Node and Disk Majority
• C. Node and File Share Majority
• D. No Majority:Disk Only

Answer: A

Explanation: A. Allows each node to vote
B. Allows each node and a disk witness to vote
C. Allows each node and a File share witness to vote
D. Allows one node with a specified disk to have quorum http://technet.microsoft.com/en-us/library/cc770620(v=ws.10).aspx

NEW QUESTION 14
You have a server named Server1 that runs Windows Server 2012 R2.
Server1 is an enterprise subordinate certification authority (CA). Server1 is issued a server certificate. You need to ensure that users can request certificates from Server1 by using aweb browser. Which three actions should you perform? Each correct answer presents part of the solution.

• A. From server manager, run the add roles and Features wizard.
• B. from internet information services (iis) manager, modify the machine key validation method.
• C. from internet information services (iis) manager, modify the binding of the default web site.
• D. from internet information services (iis) manager, add an application pool.
• E. from server manager, run the ADCS configuration wizard.

Answer: ACE

NEW QUESTION 15
Your network contains two Web servers named Server1 and Server2. Both servers run WIndows Server 2012 R2.
Server1 and Server2 are nodes in a Network Load Balancing (NLB) cluster. The NLB cluster as application named App1 that is accessed by using the URL http://app1.contoso.com. You plan to perform maintenance on Server1.
You need to ensure that all new connection server2. The solution must not disconnect the existing connection to Server1
What should you run?

• A. The Set-NlbClusterNode cmdlet
• B. The nlb.exe suspend command
• C. The nlb.exe stop command
• D. The Suspend-NlbClusterNode cmdlet

Answer: D

NEW QUESTION 16
Your network contains one Active Directory forest named contoso.com. The forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

You need to ensure that all Active Directory changes are replicated to all of the domain controllers in the forest within 30 minutes.
What should you use?

• A. Set-ADSite
• B. Set-ADReplicationSite
• C. Set-ADDomain
• D. Set-ADReplicationSiteLink
• E. Set-ADGroup
• F. Set-ADForest
• G. Netdom

Answer: B

Explanation: The Set-ADReplicationSite cmdlet is used to set the properties for an Active Directory site that is being used for replication. Sites are used in Active Directory to either enable clients to discover network resources (published shares, domain controllers) close to the physical location of a client computer or to reduce network traffic over wide area network (WAN) links. Sites can also be used to optimize replication between domain controllers.
The parameter -ReplicationSchedule<ActiveDirectorySchedule> specifies the default replication schedule for connections within this site (intra-site replication).
Reference: Technet, Set-ADReplicationSite https://technet.microsoft.com/en-us/library/hh852305(v=wps.630).aspx

NEW QUESTION 17
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs a Server Core installation of Windows Server 2012 R2.
You need to deploy a certification authority (CA) to Server1. The CA must support the auto- enrollment of certificates.
Which two cmdlets should you run? (Each correct answer presents part of the solution. Choose two.)

• A. Add-CAAuthoritylnformationAccess
• B. Install-AdcsCertificationAuthority
• C. Add-WindowsFeature
• D. Install-AdcsOnlineResponder
• E. Install-AdcsWebEnrollment

Answer: BE

Explanation:
B. The Install-AdcsCertificationAuthority cmdlet performs installation and configuration of the AD CS CA role service. It can be used to install a root CA.
Example:
Install-AdcsCertificationAuthority –CAType StandaloneRootCA –CACommonName "ContosoRootCA" –KeyLength 2048 –HashAlgorithm SHA1 –CryptoProviderName "RSA#Microsoft Software Key Storage Provider"
E: The Install-AdcsWebEnrollment cmdlet performs initial installation and configuration of the Certification Authority Web Enrollment role service.
Note: Prior to the availability of Certificate Enrollment Web Services, AD CS required that client computers configured for certificate auto-enrollment be connected directly to the corporate network. Certificate Enrollment Web Services allows organizations to enable AD CS using a perimeter network. This allows users and computers outside the corporate network to enroll for certificates.

Certificate Enrollment web service
Reference: Deploying AD CS Using Windows PowerShell