Implementing an Advanced Server Infrastructure (70-414) Free Practice Test

Question 1

You administer an Active Directory Domain Services forest that includes an Active Directory Federation Services (AD FS) server and Azure Active Directory. The fully qualified domain name of the AD FS server is adfs.contoso.com.
You must implement single sign-on (SSO) for a cloud application that is hosted in Azure. All domain users must be able to use SSO to access the application.
You need to configure SSO for the application.
Which two actions should you perform? Each correct answer presents part of the solution.

A. Create a trust between AD FS and Azure Active Directory.

B. In the Azure management portal, activate directory synchronization.

C. Use the AD FS Configuration wizard to specify the domain and administrator for the Azure Active Directory service.

D. Use the Azure Active Directory Synchronization tool to configure user synchronization.

Correct Answer: C,D

Question 2

You install the Service Manager Self-Service Portal on a server named CONTOSOSSP1.
Users report that they receive access denied messages when they try to connect to the portal. You must grant users the minimum required permissions.
You need to ensure that all users in the Contoso domain can access the Service Manager Self-Service Portal.
What should you do?

A. In Service Manager, create a new user role named PortalUsers. Grant the PortalUsers role rights to all catalog items, and then add the Contoso\Domain Users Active Directory Domain Services group to the PortalUsers role.

B. Using the account that you used to install the Self-Service portal, grant the Contoso\Domain Users group Read permissions to the portal.

C. Using the account that you used to install the Self-Serviceportal, grant the Contoso\Domain Users group Contribute permissions to the portal.

D. In Active Directory, create a new group named PortalUsers. Add the PortalUsers group to the Contoso\Domain Users group, and then add the group to the local users group on CONTOSOSSP1.

Correct Answer: C

Question 3

You need to implement App1.
How should you configure the locations? To answer, select the appropriate option from each list in the answer area.

Correct Answer:

Explanation
This should be Cluster3 and use CSV on the Hyper-V Host.
App1 must support dynamic quorum which is a 2012R2 feature. Cluster1 is again 2012.

Question 4

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed. The domain contains a virtual machine named VM1. A developer wants to attach a debugger to VM1.
You need to ensure that the developer can connect to VM1 by using a named pipe.
Which virtual machine setting should you configure?

A. Processor

B. BIOS

C. COM 1

D. Network Adapter

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

You have an Active Directory domain named adatum.com. All servers run Windows Server 2012.
You have a failover cluster named FC1 that contains two servers named Node1 and Node2. Node1 and Node
2 are connected to an iSCSI Storage Area Network (SAN).
You plan to deploy a shared folder named Share1 to FC1.
You need to recommend which cluster resource must be created to ensure that the shared folder can be accessed from both nodes of FC1 simultaneously.
What should you recommend?

A. the DFS Namespace Server cluster role

B. the Generic Application cluster role

C. the clustered File Server role of the File Server for general use type

D. the clustered File Server role of the File Server for scale-out application data type

Correct Answer: D

Question 6

Your network contains an Active Directory domain named contoso.com. The network contains a server named Server1 that runs Windows Server 2012. Server1 has the Active Directory Certificate Services server role installed. Server1 is configured as an offline standalone root certification authority (CA).
You install the Active Directory Certificate Services server role on Server2 and configure the server as an enterprise subordinate CA.
You need to ensure that the certificate issued to Server2 is valid for 10 years.
What should you do first?

A. Modify the CAPolicy.inf file on Server1.

B. Modify the registry on Server2.

C. Modify the CAPolicy.inf file on Server2.

D. Modify the subordinate CA certificate template.

E. Modify the registry on Server1.

Correct Answer: E

Question 7

Your network contains two servers named Hyper1 and Hyper2 that run Windows Server 2012. Hyper1 and Hyper2 have the Hyper-V server role installed and are members of a failover cluster named Cluster1.
The network contains a Fibre Channel Storage Area Network (SAN) named SAN1. SAN1 contains a LUN named LUN1. You plan to host a new virtual machine named VM1 on Cluster1. You need to ensure that VM1 can store data directly on LUN1.
What three actions should you perform?

Correct Answer:

Explanation

Box 1: Configure Hyper1 and Hyper2 to connect to LUN1
Box 2: Create a Virtual Fibre Channel SAN on Hyper1 Hyper2
Box 3: Create a Fibre Channel adapter on VM1
References: https://technet.microsoft.com/en-us/library/dn551169%28v=ws.11%29.aspx?

Question 8

You are evaluating the use of VMM to migrate APP1 for the sales users. You need to identify the effects of the migration.
What should you identify?

A. The virtual machine configuration files will move but the VHDs will remain in the original location. The sales users' access to APP1 will be interrupted.

B. The VHDs and the virtual machine configuration files will move. The sales users will continue to have uninterrupted access to APP1.

C. The VHDs will move but the virtual machine configuration files will remain in the original location. The sales users will continue to have uninterrupted access to APP1.

D. The VHDs and the virtual machine configuration files will move. The sales users' access to APP1 will be interrupted.

Correct Answer: B

Question 9

You need to recommend changes to the existing environment to meet the email requirement.
What should you recommend?

A. Deploy the FabrikamCA root certificate to all of the client computers.

B. Implement a two-way forest trust that has selective authentication.

C. Deploy a user certificate from FabrikamCA to all of the users.

D. Implement qualified subordination.

Correct Answer: D

Welcome to TestSimulate

Microsoft Implementing an Advanced Server Infrastructure (70-414) Free Practice Test