Which tool should you use?

Checking referral responses – DFSDIAG /TestReferral

Checks Distributed File System (DFS) referrals by performing the following tests:

When you use the DFSPath parameter without arguments, this command validates that the referral list includes all trusted domains.

When you specify a domain, the command performs a health check of domain controllers (Dfsdiag /testdcs) and tests the site associations and domain cache of the local host.
When you specify a domain and \SYSVOL or \NETLOGON, in addition to performing the same health checks as when you specify a domain, the command checks that the Time To Live (TTL) of SYSVOL or NETLOGON referrals match the default value of 900 seconds.
When you specify a namespace root, in addition to performing the same health checks as when you specify a domain, the command performs a DFS configuration check (Dfsdiag /TestDFSConfig) and a namespace integrity check (Dfsdiag /TestDFSIntegrity).
When you specify a DFS folder (link), in addition to performing the same health checks as when you specify a namespace root, the command validates the site configuration for folder targets (Dfsdiag /testsites) and validates the site association of the local host.

I took the exam recently and failed. I studied this exam and another similar one, but I fail short by a question or two. Take my advice and be sure of the answers yourself since some of the back and forth on some answers actually leaves a lot of confusion in the end…

http://blogs.technet.com/b/filecab/archive/2008/10/24/what-does-dfsdiag-do.aspx

Just want to say – thank you to everyone who contributed to these postings. Definitely helped A LOT when taking 70-412.

dfsdiag /testreferrals /dfspath:\\domain.co.uk

@David S, congrats on the pass. can you please give us a clue on the new questions asked or refer us to the materials you used. congrats once again..

These are 13 New Question, Please let’s find the answer to help each other

Q 1: You have an enterprise certification authority (CA) named CA1.
You have a certificate template named UserAutoEnroll that is based on the User certificate template. Domain users are configured to autoenroll for UserAutoEnroll.
A user named User1 has an email address defined in Active Directory. A user named User2 does not have an email address defined in Active Directory.
You discover that User1 was issued a certificate based on UserAutoEnroll template automatically. A request by user2 for a certificate based on the UserAutoEnroll template fails.
You need to ensure that all users can autoenroll for certificated based on the UserAutoEnroll template.
Which setting should you configure from the properties on the UserAutoEnroll certificate template?
A. Issuance Requirements
B. Request Handling
C. Cryptography
D. Subject Name

Q 2: Your network contains one Active Directory forest named contoso.com. the forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

Name Domain Site
DC1 Contoso.com Main Office
DC2 Contoso.com Main Office
DC3 Contoso.com Europe Office
DC4 Contoso.com Asia Office
DC5 Sales.contoso.com Main Office
DC6 Manufacturiung.contoso.com Main Office

You create a trust between contoso.com and a domain in another forest at a partner company.
You need to prevent the sales.contoso.com and the manufacturing.contoso.com names from being used in authentication requests across the forest trust.

What should you use?

A. Set-ADSite
B. Set-ADReplicationSite
C. Set-ADDomain
D. Set-ADReplicationSiteLink
E. Set-ADGroup
F. Set-ADForest
G. Netdom

Q 3: Your network contains one Active Directory forest named contoso.com. the forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

Name Domain Site
DC1 Contoso.com Main Office
DC2 Contoso.com Main Office
DC3 Contoso.com Europe Office
DC4 Contoso.com Asia Office
DC5 Sales.contoso.com Main Office
DC6 Manufacturiung.contoso.com Main Office

You need to prevent administrators from accidently deleting any of the site in the forest.
What should you use?

A. Set-ADSite
B. Set-ADReplicationSite
C. Set-ADDomain
D. Set-ADReplicationSiteLink
E. Set-ADGroup
F. Set-ADForest
G. Netdom

Q 4: Your network contains one Active Directory forest named contoso.com. the forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

Name Domain Site
DC1 Contoso.com Main Office
DC2 Contoso.com Main Office
DC3 Contoso.com Europe Office
DC4 Contoso.com Asia Office
DC5 Sales.contoso.com Main Office
DC6 Manufacturiung.contoso.com Main Office

You need ensure that all Active Directory changes are replicated to all of the domain controllers in the forest within 30 minutes.
What should you use?

A. Set-ADSite
B. Set-ADReplicationSite
C. Set-ADDomain
D. Set-ADReplicationSiteLink
E. Set-ADGroup
F. Set-ADForest
G. Netdom

Q 5: Your network contains one Active Directory forest named contoso.com. the forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

Name Domain Site
DC1 Contoso.com Main Office
DC2 Contoso.com Main Office
DC3 Contoso.com Europe Office
DC4 Contoso.com Asia Office
DC5 Sales.contoso.com Main Office
DC6 Manufacturiung.contoso.com Main Office

You have a trust from contoo.com to another forest named fabrikam.com.
You plan to migrate users from contodo.com to fabrikam.com.
You need to ensure that the users who migrated to fabrikam.com can continue to access shared resources in contoso.com. the solution must not require administrators to modify permissions to shared resources.

What should you use?

A. Set-ADSite
B. Set-ADReplicationSite
C. Set-ADDomain
D. Set-ADReplicationSiteLink
E. Set-ADGroup
F. Set-ADForest
G. Netdom

Q 6: your network contains one Active Directory forest named adatum.com. The forest contains a single domain.
The site topology for the forest is shown in the exhibit.

Each site contain s one domain controller.
You need to ensure that replication between site2 and site4 occurs in 15 minutes or less.
What command should you run? To answer select the appropriate options in the answer area.

Answer Area
New-AdReplicationSiteLink
New-ADReplicationLinkBridge
Set-ADReplicationConnection
Set-ADReplicationSiteLink
Set-ADReplicationSiteLinkBridge

-name

SiteLink3
SiteLink6
SiteLink1, SiteLink2

-SitesIncluded Site2, Site4 – ReplicationFrequencyinMinutes 15 –Cost

70
110
400

Q 7: your network contains one Active Directory forest named contoso.com. The forest contains a single domain. The domain contains the domain controllers is configured as shown in the following table.
Name Site
DC1 Site1
DC2 Site2
DC3 Site3
DC4 Site4

The replication topology is configured as shown in the following output.

Cost : 100
DistinguishedName : CN=SiteLink1, CN=IP, CN=Inter-Site Transports, CN=Sites, CN=Configuration, Dc=Adatum, DC=com
Name : SiteLink1
ObjectClass : SiteLink
ObjectGUID : e1c8c335-b75f-4612-8a9e-58a0edead21f
ReplInterval : 60
SiteList : {CN=Site4, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com,
CN=Site2, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com}

Cost : 100
DistinguishedName : CN=SiteLink1, CN=IP, CN=Inter-Site Transports, CN=Sites, CN=Configuration, Dc=Adatum, DC=com
Name : SiteLink2
ObjectClass :SiteLink
ObjectGUID : 9516948e-cd56-4a9b-b6ba-cdf3dd7fe0d1
ReplInterval : 60
SiteList : {CN=Site4, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com,
CN=Site2, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com}

Cost : 100
DistinguishedName : CN=SiteLink3, CN=IP, CN=Inter-Site Transports, CN=Sites, CN=Configuration, Dc=Adatum, DC=com
Name : SiteLink3
ObjectClass : SiteLink
ObjectGUID : 07a7a37e-a12c-40c4-8042-f5d2e737b8a9
ReplInterval : 60
SiteList : {CN=Site4, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com,
CN=Site3, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com}

Cost : 400
DistinguishedName : CN=SiteLink4, CN=IP, CN=Inter-Site Transports, CN=Sites, CN=Configuration, Dc=Adatum, DC=com
Name : SiteLink4
ObjectClass : SiteLink
ObjectGUID : 508810dc-30fd-4845-982a-d4552fba2e04
ReplInterval : 45
SiteList : {CN=Site4, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com,
CN=Site2, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum, DC=com}

You discover that replication between Dc1 and DC3 takes a few hours.
You need to reduce the amount of time it takes to replicate Active Directory changes between DC1 and DC3.
What should you do?
A. Create a site link that connects Site1 and Site3, has a cost of 350, and replicates every 15 minutes.
B. Modify SiteLink4 to replicate every 15 minute.
C. Disable Site Link bridging.
D. Set the cost of SiteLink4 to 100.

Q 8: your network contains one Active Directory forest named contoso.com. The forest contains a single domain. The domain contains the domain controllers is configured as shown in the following table.
Name Site
DC1 Site1
DC2 Site2
DC3 Site3
DC4 Site4

The forest contains a member server named Server1. Server1 has an IP address of 172.16.10.66.
The forest has the following Active Directory subnet configuration.

DistinguishedName : CN=172.16.10.0/26, CN=subnets, CN=Sites, CN=Configuration,
Location Dc=Adatum, DC=com
Name : 172.16.10.0/26
ObjectClass : subnet
ObjectGUID : db362a6c-c0a9-4703-aaee-191083ab9ea5
Site : CN=Site1, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum,
DC=com,

DistinguishedName : CN=172.16.10.64/26, CN=subnets, CN=Sites, CN=Configuration,
Location Dc=Adatum, DC=com
Name : 172.16.10.64/26
ObjectClass : subnet
ObjectGUID : ef101558-3afa-41f1-9c5a-717453436fc1
Site : CN=Site2, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum,
DC=com,

DistinguishedName : CN=172.16.10.192/26, CN=subnets, CN=Sites, CN=Configuration,
Location Dc=Adatum, DC=com
Name : 172.16.10.192/26
ObjectClass : subnet
ObjectGUID : 33137047-6711-4195-940f-a463bbdab8fb
Site : CN=Site4, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum,
DC=com,

DistinguishedName : CN=172.16.10.128/26, CN=subnets, CN=Sites, CN=Configuration,
Location Dc=Adatum, DC=com
Name : 172.16.10.128/26
ObjectClass : subnet
ObjectGUID : ef5235ab-759b-4dc8-992a-c5ec1dae97a8
Site : CN=Site3, CN=Sites, CN=Configuration, DC=Adatum, DC=Adatum,
DC=com,

Use the drop down menus to select the answer choice that complete each statement.

Answer Area

If you promote Server1 to a domain controller, its server object will be created in [answer area]
Site1
Site2
Site3
Site4

If you perform an Active Directory search from a domain member that has an IP address of 172.16.10.116, you will attempt to connect [answer area]
DC1
DC2
DC3
DC4

Q:9 You have a server named Server1 that runs Windows Server 2012 R2 and uses Windows Server Backup.
You need to identify whether the backups performed on Server1 support bare metal recovery.

Which cmdlet should you run?

A. Get-OBMachineSetting
B. GetWBVSSBackupOption
C. Get-WBPolicy
D. Get-OBPolicy

Q:10 You have a cluster named Cluster1 that contains two nodes. Both nodes run Windows Server 2012 R2. Cluster1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2.
You notice that VM1 is marked as being in a critical state in the cluster.
You verify that VM1 is functioning correctly.
You need to ensure that VM1 is no longer marked as being in a critical state.

Which cmdlet should you run?

A. Remove-ClusterVmMonitoredItem
B. Remove-ClusterResourceDependency
C. Reset-ClusterVMMonitoredState
D. Clear-ClusterNode

Q:11 You run Get-FSRMClassificationule and you receive the following output

ClassificationMechanism : Content Classfier
ContentRegularExpression : {\d{2,}}
ContentString :
ContentStringCaseSensitive :
Description :
Disabled : False
Flags :
Lastmodified : 4/18/2015 12:59:47 AM

Name : Rule2
Namespace : {D:\}
Parameters : {FSRMClearPropertyInternal = 0}
Property : Property2
PropertyValue : Value2
ReevaluateProperty : Overwrite
PSComputerName :

ClassficationMechanism : FolderClassifier
ContentRegularExpression :
ContentString :
ContentStringCaseSensitive :
Description :
Disabled : False
Flags :
Lastmodified : 4/15/2015 9:17:16 PM
Name : Rule1
Namespace : {D:\}
Parameters : {FSRMClearPropertyInternal = 0}
Property : Property1
PropertyValue : Value1
ReevaluateProperty : Aggregate
PSComputerName :

You have a file named file1 that is stored on drive D and has the following content
“111000000000111111”
You run the classification with all of the rules
Use the drop-down menus top select the answer choice that completes each statement.

File1 has [answer choice]

Only Property1 set to value1
Only Property2 set to value2
Property1 set to value1 and property2 set to value2
Neither Property1 nor Property2 set

If you modify File1 [answer choice]

Only the value of Property1 is
Only the value of Property2 is
the value of Property1 and Property2 are
Neither the value of Property1 nor the value of Property2 is

Q:12 You network contains one Active Directory domain. The domain contains two Hyper-V Hosts named Host1 and Host2 that run Windows Server 2012 R2. Host1 contains a virtual machine named DC5. DC5 is a domain controller that run Windows Server 2012 R2.
You configure Active Directory to support domain controller cloning for DC5, and then you shut down DC5.
You need to create a clone of DC5 on Host2
What should you run on each Hyper-V Host.? To answer Drag the appropriate commands or cmdlets to the correct Hyper-V hosts. Each command or cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Command and cmdlets

Export-VM
Import-VM
Move-VM
New-ADDCCloneConfigFile

Answer Area

Host1: Command or cmdlet
Host2: Command or cmdlet

Q: 13 You network contains one Active Directory domain named adatum.com. The domain contains a DNS server named Server1 that runs Windows Server 2012 R2. All domain computers use Server1 for DNS.
You sign adatum.com by using DNSSEC.
You need to configure the domain computers to validate DNS responses for adatum.com records.
What should you configure in Group Policy?

A. Network List Manager Policies
B. Network Access Protection (NAP)
C. Name Resolution Policy
D. Public Key Policy

Q9 is C and not D, because get get-wbpolicy has to do with windows backup while get-obpoliy(online backup policy has to do with azure backup

Q 5, is G Netdom /enablesidhistory:yes

My Answers are

Q1: A (Issuance Requirements is where you set what the certificate is used for)
Q4: D (This is the PS command that lets you set COSTS on replications between sites)
Q7: D (Seems the best way to reduce the time by reducing the cost to 100, plus the other answers look wrong and wouldnt work anyway)
Q8: Site 2 and DC3
Q9: C
Q10: C (“Resets the Application Critical state of a virtual machine, so that the virtual machine is no longer marked as being in a critical state in the cluster.”)
Q11: Only the value of Property2 is (ReevaluateProperty : Overwrite)
Q12: Host1: Command or cmdlet: New-ADDCCloneConfigFile? Host2: Command or cmdlet: Import-VM?
Q13: C

please help to solve this questions.

1 question : you have a cluster named cluster1 that contains two nodes.
both nodes run windows server 2012 r2.
cluster1 hosts a virtual machine named vm1 that runs windows server 2012 r2.
you configure a custom service on vm1 named service1.
you need to ensure that vm1 will be moved to a different node3 if service1 fails.
which comdlet should you run on cluster1?

options:
a. set-clusterresiurcedependency
b.add-clustergenericservicerole
c.enable-vmresourcemetering
d.add-clustervmmonitoreditem

Ans. B

2 question: you have the following microsoft azure backup policy

backup schedule : 9:00am, 12:00 pm,11:00 pm
every day
every 1 week(s)

dslist : {datasource
datasourceid:1576400609127590137
name:c:\
filespec:filespec
filespec:c:\
isexclude:false
isrecursive:true

}

policyname : f77828d2-69b6-4c4b-b98a-e5e20d9ab7e9
retentionpolicy : retention days : 30

week1yltrsschedule :
days: monday
times: 12:00:00,
retentention weeks: 60

month1yltrschedule :
days of month : [last,monday]
times: 23:00:00
retentention weeks: 90

year1yltrschedule :
yearly schedule is not set

state : existing
policystate : valid

options:
—-of the backups that are created daily at 9:00, a maximum of recovery points will be available for restore:
30
60
90
122
366
512

—-ifa backup is perfgormed on monday,january 31, at 9:00,the backup will be retained for:
30 days
60 weeks
90 month

3 qouestion:
Your network contains one Active Directory forest named contoso.com. the forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

Name Domain Site
DC1 Contoso.com Main Office
DC2 Contoso.com Main Office
DC3 Contoso.com Europe Office
DC4 Contoso.com Asia Office
DC5 Sales.contoso.com Main Office
DC6 Manufacturiung.contoso.com Main Office

for the contoso.com doamin, a company policy states that administrators must be able to retrive a list of all the users who have not logged on to the network in the last seven days from any domain controllers

What should you use?

A. Set-ADSite
B. Set-ADReplicationSite
C. Set-ADDomain
D. Set-ADReplicationSiteLink
E. Set-ADGroup
F. Set-ADForest
G. Netdom

Ans. C Set-ADDomain -LastLogonReplicationInterval “7”

4 question:
you havea dns server named server1 that runs windows server 2012 r2.
you need to disable recursion on server1
whatare three possible ways to achive the goal?each correct answer presents a complete solution

a: create a reverse lookup zone named 0.in-addr.arpa.
b: create a forward lookup zone named globalnames
c : from dns manager,modify the advanced properties of server1
d: from dns manager,modify the forwarders properties of server1
e: create a forward lookup zones named “”
f: run dnscmd.exe and specify the /config parameter

Ans. C, F, E dnscmd /Config /NoRecursion {1|0}

5 question:
your network uses the 192.168.2.0/23 address space.
you are configuring video conferencving infrastructure.
you need to configure the dhcp server to lease ip address for multicast address for video conferencing.
what command should you run on the dhcp server?to answer,select the apprperiate options in the answer area

add-dhcpserverv4multicastscope -name “vc scope”
-startscope —————-

192.168.2.10
225.0.0.10
239.0.0.1
fd80::
ff00::

-endrange ———————

192.168.2.255

225.0.0.250
240.0.0.0
fe80:
ff02:

6 QUESTION:

your network contans one active directory domain named contoso.com.the domain contains two servers named server1` and server2 that run windows server 2012 r2 .
you perform daily backups of the data on server1 to microsoft azure.
you need to restore the data from the lst backup of server1 to server2.
what should you do first?

a:on server2,install the azure backup agent.
b:in the domain, add server1 to the backup operators group.
c:from the azure management portal, modify the configuration of the backup vault.
d:on server2,install the windows server backup feature.

7 question:

Your network contains one Active Directory forest named contoso.com. the forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

Name Domain Site
DC1 Contoso.com Main Office
DC2 Contoso.com Main Office
DC3 Contoso.com Europe Office
DC4 Contoso.com Asia Office
DC5 Sales.contoso.com Main Office
DC6 Manufacturiung.contoso.com Main Office

you need to enable universal group membership caching for the europe office and asia office sites.

What should you use?

A. Set-ADSite
B. Set-ADReplicationSite
C. Set-ADDomain
D. Set-ADReplicationSiteLink
E. Set-ADGroup
F. Set-ADForest
G. Netdom

Ans. B set-adreplicationsite or setadobject if you see it as an option.

8 question:

you have dhcp server named server1 that runs windows server 2012r2.
server1 has two scope production and development.
currebntly,all dhcp clients register their host name in a dns zone named contoso.com.
you need to ensure that only the clients that obtain an ip address from the development scope,register their host name in a dns zone named dev.contoso.com.
what should you do?

a. modify the advanced settings of the dhcp server.
b. run the set-dhcpserver4scope cmdlet.
c. modify the dns settings of the development scope.
d. run the add-dhcpserver4policy cmdlet.

9 question:

your network contains one active directory domain.the domain contains the servers configured as shown in the following table.

server1 domain controllers
dns server

server2 domain controllers
dns server

server3 dns server

server1 hasthe zones shown in the following table:

zone name zone type Isautocreated Isdsintegrated Isreverselookupzone Issigned

adatum.com primary false false false false
contoso.com primary false true false false
litwareinc.com secondary false true false false

server3 has the following output:

zone name zone type Isautocreated Isdsintegrated Isreverselookupzone Issigned

contoso.com secondary false true false false
litwareinc.com primary false true false false

use the drop down list must select trhe answer choice that completes each assignment.

—you can protect [answer choice] by using dnssec:

only adatum.com
only contoso.com
only litwareinc.com
only contoso.com and adatum.com
contoso.com,adatum.com and litwareinc.com

—on server1,you configure permissions for the contoso.com zone.the permission will be efficitive on [answer choice]:

server1 only
server1 and server2 only
server1 and server3 only
server1,server2 and server3.

10 question:

your network contains an active directory domain anmed contoso.com.
the domain contains the server named server1 that runs windows server 2012r2.
server1 has the active directory rights management services server role installed.

the domain contains a domain local group named group1
you create a rights policy template named template1.
you need to ensure that all the members of group1 can use template1.

wht should you do?

a: convert the scope of group1 to universal and assign group1 the rights to template1
b: convert the scope of group1 to global and configure the email address attribute of group1.
c:configure the email address attribute of group1 and configure the email address attribute of all the users are members of group1.
d: configure the email address of all the users who are members of group1 and assign group1 the rights to template1.

ans. D

11 questions:

you have a server that runs windows server 2012r2.
you create a new work folder named share1.
you need to configure share1 to meet the follwoing requirements:

*ensure that all synchronized copies of share1 are encrypted.
*ensure that clients synchronize to share1 every 30 minutes.
*ensure that share1 inherits the ntfs permissions of the parent folder.

which command should you use to achive each requirements?

to answer,drag the appropriate cmdlets to the correct requirements.each cmdlet may be used once.more than once,or not at all.
you may need to drag ther splitbacr between panes or scroll to view cmdlet?

cmdlets:

enable-synshare
new-syncdevicepolicy
new-syncshare
set-syncdevicepolicy
set-syncserversetting
set-synshare

answer area:

ensure that all synchronized copies of share1 area encrypted ——-set-syncshare
ensure that clients synchronize to share1 every 30 minutes —–set-syncserversetting
ensure that share1 inherits the ntfs permissions of the percentage —set-syncshare

is the new update for 70-412 ? the one i have is 2015 update. please guys help me!!!!!!