Virtual 70-412 Rapidshare 2021

NEW QUESTION 1
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers.
The domain controllers are configured as shown in the following table.

You configure a user named User1 as a delegated administrator of DC10.
You need to ensure that User1 can log on to DC10 if the network link between the Main site and the Branch site fails.
What should you do?

• A. Add User1 to the Domain Admins group.
• B. On DC10, modify the User Rights Assignment in Local Policies.
• C. Run repadmin and specify the /prp parameter.
• D. On DC10, run ntdsutil and configure the settings in the Roles context.

Answer: C

Explanation:
repadmin /prp will allow the password caching of the local administrator to the RODC. This command lists and modifies the Password Replication Policy (PRP) for read-only domain controllers (RODCs).
Reference: RODC Administration
https://technet.microsoft.com/en-us/library/cc755310%28v=ws.10%29.aspx

NEW QUESTION 2
Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Server1. Server1 runs Windows Server 2012 R2. You create a group Managed Service Account named gService1.
You need to configure a service named Service1 to run as the gService1 account. How should you configure Service1?

• A. From a command prompt, run sc.exe and specify the theconfig parameter.
• B. From the Services console, configure the General settings.
• C. From Windows PowerShell, run Set-Service and specify the -StartupType parameter.
• D. From the Services console, configure the Log On settings.

Answer: A

Explanation:
Executing the sc.exe command with the config parameter will modify service configuration.

NEW QUESTION 3
Your network contains an Active Directory domain named corp.contoso.com.
You deploy Active Directory Rights Management Services (AD RMS).
You have a rights policy template named Template1. Revocation is disabled for the template.
A user named User1 can open content that is protected by Template1 while the user is connected to the corporate network.
When User1 is disconnected from the corporate network, the user cannot open the protected content even if the user previously opened the content.
You need to ensure that the content protected by Template1 can be opened by users who are disconnected from the corporate network.
What should you modify?

• A. The User Rights settings of Template1
• B. The templates file location of the AD RMS cluster
• C. The Extended Policy settings of Template1
• D. The exclusion policies of the AD RMS cluster

Answer: C

Explanation:
* The extended rights policy of a template controls how content licenses are to be implemented. The extended rights policy template settings are specified by using the Active Directory Rights Management Services (AD RMS) administration site. The available settings control persistence of author rights, whether trusted browsers are supported, license persistence within the content, and enforcement of any application-specific data.
* You can add trust policies so that AD RMS can process licensing requests for content that was rights protected.
Reference: Extended Policy Template Information; AD RMS and Server Design http://technet.microsoft.com/en-us/library/ee221071(v=ws.10).aspx

NEW QUESTION 4
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the DNS Server server role installed.
You need to configure Server1 to resolve queries for single-label DNS names.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

• A. Run the Set-DNSServerGlobalNameZone cmdlet.
• B. Modify the DNS suffix search list setting.
• C. Modify the Primary DNS Suffix Devolution setting.
• D. Create a zone named “.”.
• E. Create a zone named GlobalNames.
• F. Run the Set-DNSServerRootHint cmdlet.

Answer: AE

Explanation:
Deploying a GlobalNames zone
The specific steps for deploying a GlobalNames zone can vary somewhat, depending on the AD DS topology of your network.
Step 1: Create the GlobalNames zone (E) Step 2: Enable GlobalNames zone support (A)
The Set-DnsServerGlobalNameZone cmdlet enables or disables single-label Domain Name System (DNS) queries. It also changes configuration settings for a GlobalNames zone.
Etc.
Reference: Deploying a GlobalNames Zone; Set-DnsServerGlobalNameZone http://technet.microsoft.com/en-us/library/cc731744.aspx http://technet.microsoft.com/en-us/library/jj649907(v=wps.620).aspx

NEW QUESTION 5
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.
You attempt to delete a classification property and you receive the error message as shown in the exhibit. (Click the Exhibit button.)

You need to delete the isConfidential classification property. What should you do?

• A. Delete the classification rule that is assigned the isConfidential classification property.
• B. Disable the classification rule that is assigned the isConfidential classification property.
• C. Set files that have an isConfidential classification property value of Yes to No.
• D. Clear the isConfidential classification property value of all files.

Answer: A

Explanation:
You would have to delete the classification rule in order to delete the classification property.

NEW QUESTION 6
You have a server named Server1 that runs Windows Server 2012 R2. Windows Server 2012 R2 is installed on volume C.
You need to ensure that Safe Mode with Command Prompt loads the next time Server1 restarts.
Which tool should you use?

• A. The Restart-Server cmdlet
• B. The Bootcfg command
• C. The Restart-Computer cmdlet
• D. The Bcdedit command

Answer: D

Explanation:
How To Force Windows To Restart in Safe Mode
1. Open Advanced Startup Options in Windows 8
2. Open Command Prompt.
3. With Command Prompt open, execute the correct bcdedit command as shown below based on which Safe Mode option you'd like to start:
Safe Mode:
bcdedit /set {default} safeboot minimal
http://pcsupport.about.com/od/repair-recovery/a/force-or-stop-safe-mode-windows.htm

NEW QUESTION 7
Your network contains an Active Directory domain named contoso.com.
A previous administrator implemented a Proof of Concept installation of Active Directory Rights Management Services (AD RMS) on a server named Server1.
After the proof of concept was complete, the Active Directory Rights Management Services server role was removed.
You attempt to deploy AD RMS.
During the configuration of AD RMS, you receive an error message indicating that an
existing AD RMS Service Connection Point (SCP) was found.
You need to ensure that clients will only attempt to establish connections to the new AD RMS deployment.
Which should you do?

• A. From DNS, remove the records for Server1.
• B. From DNS, increase the priority of the DNS records for the new deployment of AD RMS.
• C. From Active Directory, remove the computer object for Server1.
• D. From Active Directory, remove the SCP.

Answer: D

Explanation:
The Active Directory Rights Management Services (AD RMS) Service Connection Point (SCP) is an object in Active Directory that holds the web address of the AD RMS certification cluster. AD RMS-enabled applications use the SCP to discover the AD RMS service; it is the first connection point for users to discover the AD RMS web services.
Only one SCP can exist in your Active Directory forest. If you try to install AD RMS and an SCP already exists in your forest from a previous AD RMS installation that was not properly deprovisioned, the new SCP will not install properly. It must be removed before you can establish the new SCP.
Reference: The AD RMS Service Connection Point http://social.technet.microsoft.com/wiki/contents/articles/710.the-ad-rms-service-connection-point.aspx

NEW QUESTION 8
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains two DHCP servers named Server1 and Server2. Both servers have multiple IPv4 scopes.
Server1 and Server2 are used to assign IP addresses for the network IDs of 172.20.0.0/16 and 131.107.0.0/16.
You install the IP Address Management (IPAM) Server feature on a server named IPAM1 and configure IPAM1 to manage Server1 and Server2.
Some users from the 172.20.0.0 network report that they occasionally receive an IP address conflict error message.
You need to identify whether any scopes in the 172.20.0.0 network ID conflict with one another.
What Windows PowerShell cmdlet should you run?
To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Type the following command at a Windows PowerShell prompt and press ENTER:
PS C:> Get-IpamRange –AddressFamily IPv4 –AddressCategory Private|where-object
{$_.Overlapping –eq “True”}
The previous command will display any overlapping IP address ranges, if they exist.

NEW QUESTION 9
You are employed as a network administrator at contoso.com. Contoso.com has a single Active Directory domain named contoso.com.
All servers on the contoso.com network have Windows Server 2012 R2 installed.
You are preparing to install a third-party application on a contoso.com server, named SERVER1.
You find that the application is unable to install completely due to its driver not being digitally signed.
You want to make sure that the application can be installed succesfully. Which of the following actions should you take_?

• A. You should consider downloading a signed driver
• B. You should consider having SERVER1 is restored to an earlier date
• C. You should consider making use of the Disable Driver Signature Enforcement option from the Advanced Boot Option.
• D. You should consider restarting SERVER1 in safe Mode

Answer: C

Explanation:
A. The 3rd Party installation would need to be repackaged with a signed driver.
B. The restore to an older date would only work if the earlier date had Driver Sig Enforcement disabled.
C. Disable Driver Signature Enforcement from Advanced Boot Options allows the OS to load without the signed driver requirements
D. Safe Mode will not allow the unsigned driver to be installed, you need to select Disable Driver Signature Enforcement to not required signed drivers http://technet.microsoft.com/en-us/library/bb491036.aspx
http://windows.microsoft.com/en-us/windows-vista/advanced-startup-options-includingsafe- mode

NEW QUESTION 10
Your network contains an Active Directory domain named contoso.com.
Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2.
You have a Password Settings object (PSOs) named PSO1.
You need to view the settings of PSO1. Which tool should you use?

• A. Active Directory Administrative Center
• B. Get-ADAccountResultantPasswordReplication Policy
• C. Group Policy Management
• D. Get-ADDomainControllerPasswordReplication Policy

Answer: A

Explanation:
To implement Fine-Grained Passwords you have to deploy a Windows Server 2012 Domain Controller, with the domain functional level set at Windows Server 2008 or above. You can now accomplish this task in ADAC (Active Directory Administrative Center). Editing or viewing a policy is as simple as expanding the AD tree and selecting the correct policy within the Password Settings container. Right-click Properties; or double-click opens the policy for editing.
Reference: Guest Post: How to use Fine-Grained Passwords in Windows Server 2012 http://blogs.technet.com/b/uktechnet/archive/2012/08/28/guest-post-how-to-use-fine-
grained-passwords-in-windows-server-2012.aspx

NEW QUESTION 11
You have a server named File1 that runs Windows Server 2012 R2.
File1 has the File Server role service installed.
You plan to back up all shared folders by using Windows Azure Online Backup.
You download and install the Windows Azure Online Backup Service Agent on File1. You need to ensure that you use Windows Server Backup to back up data to Windows
Azure Online Backup. What should you do?

• A. From Computer Management, add the File1 computer account to the Backup Operators group.
• B. From the Services console, modify the Log On settings of the Windows Azure Online Backup Service Agent.
• C. From Windows Server Backup, run the Register Server Wizard.
• D. From a command prompt, run wbadmin.exe enable backup.

Answer: C

Explanation:
http://blogs.technet.com/b/windowsserver/archive/2012/03/28/microsoft-online- backupservice.aspx

NEW QUESTION 12
Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.
The domain contains a domain controller named DC1 that is configured as an enterprise root certification authority (CA).
All users in the domain are issued a smart card and are required to log on to their domain- joined client computer by using their smart card.
A user named User1 resigned and started to work for a competing company.
You need to prevent User1 immediately from logging on to any computer in the domain. The solution must not prevent other users from logging on to the domain.
Which tool should you use?

• A. Active Directory Users and Computers
• B. Server Manager
• C. The Certificates snap-in
• D. Active Directory Administrative Center

Answer: D

Explanation:
To disable or enable a user account using Active Directory Administrative Center
1. To open Active Directory Administrative Center, clickStart, clickAdministrative Tools, and then clickActive Directory Administrative Center.
To open Active Directory Users and Computers in Windows Server 2012, clickStart, typedsac.exe.
2. In the navigation pane, select the node that contains the user account whose status you want to change.
3. In the management list, right-click the user whose status you want to change.
4. Depending on the status of the user account, do one of the following:
uk.co.certification.simulator.questionpool.PList@da803f0
Reference: Disable or Enable a User Account

NEW QUESTION 13
Your network contains an Active Directory domain named contoso.com. The domain contains a main office and a branch office.
An Active Directory site exists for each office.
All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers.
The domain controllers are configured as shown in the following table.

DC1 hosts an Active Directory-integrated zone for contoso.com. You add the DNS Server server role to DC2.
You discover that the contoso.com DNS zone fails to replicate to DC2.
You verify that the domain, schema, and configuration naming contexts replicate from DC1 to DC2.
You need to ensure that DC2 replicates the contoso.com zone by using Active Directory replication.
Which tool should you use?

• A. Ntdsutil
• B. Repadmin
• C. Dnslint
• D. Active Directory Domains and Trusts

Answer: B

Explanation:
If you see question about AD Replication, First preference is AD sites and services, then Repadmin and then DNSLINT.

NEW QUESTION 14
You have an enterprise certification authority (CA) named CA1. You have a certificate template named UserAutoEnroll that is based on the User certificate template. Domain users are configured to autoenroll for UserAutoEnroll. A user named User1 has an email address defined in Active Directory. A user named User2 does not have an email address defined in Active Directory. You discover that User1 was issued a certificate based on UserAutoEnroll template automatically. A request by user2 for a certificate based on the UserAutoEnroll template fails. You need to ensure that all users can autoenroll for certificated based on the UserAutoEnroll template.
Which setting should you configure from the properties on the UserAutoEnroll certificate template?

• A. Issuance Requirements
• B. Request Handling
• C. Cryptography
• D. Subject Name

Answer: D

NEW QUESTION 15
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains two Active Directory sites named Site1 and Site2.
You discover that when the account of a user in Site1 is locked out, the user can still log on to the servers in Site2 for up to 15 minutes by using Remote Desktop Services (RDS).
You need to reduce the amount of time it takes to synchronize account lockout information across the domain.
Which attribute should you modify?
To answer, select the appropriate attribute in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Explanation/Reference:
Enabling reciprocal replication between two sites involves modifying the options attribute value on the site link object. With this attribute set on the site link, the KCC creates the connections across the link with the appropriate setting that is in effect. Use ADSI Edit to enable reciprocal replication.

NEW QUESTION 16
HOTSPOT
Your company has a main office and a branch office. The main office is located in Detroit. The branch office is located in Seattle.
The network contains an Active Directory domain named adatum.com. Client computers run either Windows 7 Enterprise or Windows 8 Enterprise.
The main office contains 1,000 client computers and 50 servers. The branch office contains 20 client computers.
All computer accounts for the branch office are located in an organizational unit (OU) named SeattleComputers. A Group Policy object (GPO) named GPO1 is linked to the SeattleComputers OU.
You need to configure BranchCache for the branch office.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
* BranchCache is disabled by default on client computers. Take the following steps to enable BranchCache on client computers:
✑ Turn on BranchCache.
✑ Enable either Distributed Cache mode or Hosted Cache mode.
✑ Configure the client firewall to enable BranchCache protocols.
* Distributed Cache mode
If client computers are configured to use Distributed Cache mode, the cached content is distributed among client computers on the branch office network. No infrastructure or services are required in the branch office beyond client computers running Windows 7.
Hosted Cache mode
In hosted cache mode, cached content is maintained on a computer running Windows Server 2008 R2 on the branch office network.

NEW QUESTION 17
Your network contains an Active Directory forest named adatum.com. The forest contains a single domain. The domain contains four servers. The servers are configured as shown in the following table.

You need to update the schema to support a domain controller that will run Windows Server 2012 R2.
On which server should you run adprep.exe?

• A. Server1
• B. DC3
• C. DC2
• D. DC1

Answer: B

Explanation:
We must use the Windows Server 2008 R2 Server.
Upgrade Domain Controllers to Windows Server 2012 R2 and Windows Server 2012
You can use adprep.exe on domain controllers that run 64-bit versions of Windows Server 2008 or Windows Server 2008 R2 to upgrade to Windows Server 2012. You cannot upgrade domain controllers that run Windows Server 2003 or 32-bit versions of Windows Server 2008. To replace them, install domain controllers that run a later version of Windows Server in the domain, and then remove the domain controllers that Windows Server 2003.
Reference: Upgrade Domain Controllers to Windows Server 2012 R2 and Windows Server 2012, Supported in-place upgrade paths.
http://technet.microsoft.com/en-us/library/hh994618.aspx#BKMK_UpgradePaths

NEW QUESTION 18
Your network contains a perimeter network and an internal network. The internal network contains an Active Directory Federation Services (AD FS) 2.1 infrastructure. The infrastructure uses Active Directory as the attribute store.
You plan to deploy a federation server proxy to a server named Server2 in the perimeter network.
You need to identify which value must be included in the certificate that is deployed to Server2.
What should you identify?

• A. The FQDN of the AD FS server
• B. The name of the Federation Service
• C. The name of the Active Directory domain
• D. The public IP address of Server2

Answer: A

Explanation:
To add a host (A) record to corporate DNS for a federation server On a DNS server for the corporate network, open the DNS snap-in.
1. In the console tree, right-click the applicable forward lookup zone, and then click New Host (A).
2. In Name, type only the computer name of the federation server or federation server cluster (for example, type fs for the fully qualified domain name (FQDN) fs.adatum.com).
3. In IP address, type the IP address for the federation server or federation server cluster (for example, 192.168.1.4).
4. Click Add Host.
Reference: Add a host (A) record to corporate DNS for a federation server http://technet.microsoft.com/en-us/library/cc776786(v=ws.10).aspx

NEW QUESTION 19
Your network contains one Active Directory forest named contoso.com. The forest contains two child domains and six domain controllers.
The domain controllers are configured as shown in the following table.

You need to add an additional UPN Suffix. What should you use?

• A. Set-ADSite
• B. Set-ADReplicationSite
• C. Set-ADDomain
• D. Set-ADReplicationSiteLink
• E. Set-ADGroup
• F. Set-ADForest
• G. Netdom

Answer: F

Explanation:
https://technet.microsoft.com/en-us/library/dd391925(v=ws.10).aspx

NEW QUESTION 20
Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2.
Both servers have the Hyper-V server role installed. Server1 and Server2 are located in different offices. The offices connect to each other by using a high-latency WAN link.
Server2 hosts a virtual machine named VM1.
You need to ensure that you can start VM1 on Server1 if Server2 fails. The solution must minimize hardware costs.
What should you do?

• A. On Server1, install the Multipath I/O (MPIO) featur
• B. Modify the storage location of the VHDs for VM1.
• C. From the Hyper-V Settings of Server2, modify the Replication Configuration setting
• D. Enable replication for VM1.
• E. On Server2, install the Multipath I/O (MPIO) featur
• F. Modify the storage location of the VHDs for VM1.
• G. From the Hyper-V Settings of Server1, modify the Replication Configuration setting
• H. Enable replication for VM1.

Answer: D

Explanation:
You first have to enable replication on the Replica server--Server1--by going to the server and modifying the "Replication Configuration" settings under Hyper-V settings. You then go to VM1--which presides on Server2-- and run the "Enable Replication" wizard on VM1.

NEW QUESTION 21
DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server3. The network contains a standalone server named Server2.
All servers run Windows Server 2012 R2. The servers are configured as shown in the following table.

Server3 hosts an application named App1. App1 is accessible internally by using the URL https://app1.contoso.com. App1 only supports Integrated Windows authentication.
You need to ensure that all users from the Internet are pre-authenticated before they can access App1.
What should you do?
To answer, drag the appropriate servers to the correct actions. Each server may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Box 1: Server1
For all types of application that you can publish using AD FS preauthentication, you must add a AD FS relying party trust to the Federation Service.
Use Server1 as it has AD FS.
Box 2: Server2
When publishing applications that use Integrated Windows authentication, the Web Application Proxy server uses Kerberos constrained delegation to authenticate users to the published application.
Box 3: Server2
To publish a claims-based application
1. On the Web Application Proxy server, in the Remote Access Management console, in the Navigation pane, click Web Application Proxy, and then in the Tasks pane, click Publish.
2. On the Publish New Application Wizard, on the Welcome page, click Next. Etc.
Box 4: Server2
Configure CAs and certificates (see c below)
Web Application Proxy servers require the following certificates in the certificate store on each Web Application Proxy server:
a) A certificate whose subject covers the federation service name. If you want to use Workplace Join, the certificate must also contain the following subject alternative names (SANs): <federation service name>.<domain> and enterpriseregistration.<domain>.
b) A wildcard certificate, a subject alternative name (SAN) certificate, several SAN certificates, or several certificates whose subjects cover each web application.
c) A copy of the certificate issued to external servers when using client certificate preauthentication.

NEW QUESTION 22
DRAG DROP
Your network contains one Active Directory domain. The domain contains two Hyper-V hosts named Host1 and Host2 that run Windows Server 2012 R2. Host1 contains a virtual machine named DC5. DC5 is a domain controller that runs Windows Server 2012 R2.
You configure Active Directory to support domain controller cloning for DC5, and then you shut down DC5.
You need to create a clone of DC5 on Host2.
What should you run on each Hyper-V host? To answer, drag the appropriate commands or cmdlets to the correct Hyper-v hosts. Each command or cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Host1: Export-VM Host2: Import-VM
Use import and export feature, when you want to create a new virtual machine with the same configuration of an existing machine in Hyper-V.
The Export-VM cmdlet exports a virtual machine to disk. The Import-VM cmdlet imports a virtual machine from a file.

NEW QUESTION 23
Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 and Server2 are configured as shown in the following table.

You need to ensure that when new targets are added to Server1, the targets are registered on Server2 automatically.
What should you do on Server1?

• A. Configure the Discovery settings of the iSCSI initiator.
• B. Configure the security settings of the iSCSI target.
• C. Run the Set-WmiInstance cmdlet.
• D. Run the Set-IscsiServerTarget cmdlet.

Answer: C

Explanation:
Explanation/Reference:
Manage iSNS server registration
The iSNS server registration can be done using the following cmdlets, which manages the WMI objects.
To add an iSNS server:
Set-WmiInstance -Namespace rootwmi -Class WT_iSNSServer –Arguments
@{ServerName="ISNSservername"}
Note: The Set-WmiInstance cmdlet creates or updates an instance of an existing WMI class. The created or updated instance is written to the WMI repository.
Reference: iSCSI Target cmdlet reference http://blogs.technet.com/b/filecab/archive/2012/06/08/iscsi-target-cmdlet-reference.aspx

NEW QUESTION 24
Which of the following would you configure if you wanted to block computers running Windows 7 and earlier operating systems from consuming AD RMS-protected content?

• A. Trusted publishing domain
• B. Trusted user domain
• C. Exclusion policies
• D. Super Users

Answer: C

NEW QUESTION 25
HOTSPOT
Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 and Server2 have the Hyper-V server role installed.
Server1 and Server2 have different processor models from the same manufacturer. On Server1, you plan to create a virtual machine named VM1. Eventually, VM1 will be
exported to Server2.
You need to ensure that when you import VM1 to Server2, you can start VM1 from saved snapshots.
What should you configure on VM1?
To answer, select the appropriate node in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Use the Processor Compatibility Mode only in cases where VMs will migrate from one Hyper-V-enabled processor type to another within the same vendor processor family.

NEW QUESTION 26
Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2. You install Windows Server 2012 R2 on a new computer named DC3. You need to manually configure DC3 as a domain controller.
Which tool should you use?

• A. winrm.exe
• B. Server Manager
• C. dcpromo.exe
• D. Active Directory Domains and Trusts

Answer: B

Explanation:
When you try to DCpromo a Server 2012, you get this message:

NEW QUESTION 27
Your network contains an Active Directory forest named contoso.com. The forest contains a single domain.
The forest contains three Active Directory sites named SiteA, SiteB, and SiteC. The sites contain four domain controllers.
The domain controllers are configured as shown in the following table.

An IP site link exits between each site.
You discover that the users in SiteC are authenticated by the domain controllers in SiteA and SiteB.
You need to ensure that the SiteC users are authenticated by the domain controllers in SiteB, unless all of the domain controllers in SiteB are unavailable.
What should you do?

• A. Create a site link bridge.
• B. Create additional connection objects for DC3 and DC4.
• C. Create additional connection objects for DC1 and DC2.
• D. Increase the cost of the site link between SiteA and SiteC.

Answer: D

Explanation:
http://technet.microsoft.com/en-us/library/dd277430.aspx#XSLTsection126121120120

NEW QUESTION 28
Your network contains an Active Directory domain named contoso.com.
The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2.
Server1 has the IP Address Management (IPAM) Server feature installed. Server2 has the DHCP Server server role installed.
A user named User1 is a member of the IPAM Users group on Server1.
You need to ensure that User1 can use IPAM to modify the DHCP scopes on Server2. The solution must minimize the number of permissions assigned to User1.
To which group should you add User1?

• A. DHCP Administrators on Server2
• B. IPAM ASM Administrators on Server1
• C. IPAMUG in Active Directory
• D. IPAM MSM Administrators on Server1

Answer: A

Explanation:
The user need rights to change DHCP not IPAM
C. Members of the DHCP Administrators group can view and modify any data at the DHCP server.
http://technet.microsoft.com/en-us/library/jj878348.aspx http://technet.microsoft.com/en-us/library/cc737716(v=ws.10).aspx

NEW QUESTION 29
......