70-412 Configuring Advanced Windows Server 2012 R2 Services - Practice Questions

Question 10 (Volume C)

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2.

Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. Cluster1 has access to four physical disks. The disks are configured as shown in the following table.

You need to ensure that all of the disks can be added to a Cluster Shared Volume (CSV). Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Select all that apply, then click Submit answer.

○
Format Disk2 to use NTFS.
In Windows Server 2012 R2, a disk or storage space for a CSV volume must be a basic disk that is partitioned with NTFS or ReFS, but you cannot use a disk for a CSV that is formatted with FAT or FAT32.
○
Format Disk3 to use NTFS.
ReFS would work fine. In Windows Server 2012 R2, a disk or storage space for a CSV volume must be a basic disk that is partitioned with NTFS or ReFS.
○
Enable BitLocker on Disk4.
Bitlocker must be enabled on all disks for it to work for a CSV.
References: How to Configure BitLocker Encrypted Clustered Disks in Windows Server 2012 http://blogs.msdn.com/b/clustering/archive/2012/07/20/10332169.aspx
○
Disable BitLocker on Disk1.

CSV supports bitlocker, but you would have to enable it on all nodes in the cluster. Therefore we need to disable bitlocker on Disk1.
Incorrect Answers:

Reference / correct answer:

Format Disk2 to use NTFS.
In Windows Server 2012 R2, a disk or storage space for a CSV volume must be a basic disk that is partitioned with NTFS or ReFS, but you cannot use a disk for a CSV that is formatted with FAT or FAT32.

Disable BitLocker on Disk1.

CSV supports bitlocker, but you would have to enable it on all nodes in the cluster. Therefore we need to disable bitlocker on Disk1.
Incorrect Answers:

A. In Windows Server 2012 R2, a disk or storage space for a CSV volume must be a basic disk that is partitioned with NTFS or ReFS, but you cannot use a disk for a CSV that is formatted with FAT or FAT32.

D. CSV supports bitlocker, but you would have to enable it on all nodes in the cluster. Therefore we need to disable bitlocker on Disk1.

Incorrect Answers:

B. ReFS would work fine. In Windows Server 2012 R2, a disk or storage space for a CSV volume must be a basic disk that is partitioned with NTFS or ReFS.

C. Bitlocker must be enabled on all disks for it to work for a CSV.

References: How to Configure BitLocker Encrypted Clustered Disks in Windows Server 2012 http://blogs.msdn.com/b/clustering/archive/2012/07/20/10332169.aspx

Question 11 (Volume C)

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest is Windows Server 2003.

You have a domain outside the forest named litwareinc.com.

You need to configure an access solution to meet the following requirements:

- Users in litwareinc.com must be able to access resources on a server named Server1 in contoso.com.

- Users in the contoso.com forest must be prevented from accessing any resources in litwareinc.com.

- Users in litwareinc.com must be prevented from accessing any other resources in the contoso.com forest.

Which three actions should you perform? (Each correct answer presents part of the solution.

Choose three.)

Select all that apply, then click Submit answer.

○
Configure SID filtering on the trust.
○
Configure forest-wide authentication on the trust.
○
Create a one-way forest trust.
○
Create a one-way external trust
○
Modify the permission on the Server1 object.
○
Configure selective authentication on the trust.

Reference / correct answer:

Create a one-way external trust

Modify the permission on the Server1 object.

Configure selective authentication on the trust.

D (not C): litwareinc.com is outside the forest so we need an external trust (not a forest trust).

E: Must grant the required permissions on Server1.

F (not B): Forexternal trust we must either select Domain-Wide or Selective Authentication (forst-wide authentication is not an option)

BCE

Note:

* You can create an external trust to form a one-way or two-way, nontransitive trust with domains that are outside your forest. External trusts are sometimesnecessary when users need access to resources in a Windows NT 4.0 domain or in a domain that is located in a separate forest that is not joined by a forest trust.

/ To select the scope of authentication for users that areauthenticating through a forest trust, click the forest trust that you want toadminister, and then click Properties.

On the Authentication tab, click either Forest-wide authentication or Selective authentication. / To select the scope of authentication forusers that are authenticating through an external trust, click the external trust that you want to administer, and then click Properties .

On the Authentication tab, click either Domain-wide authentication or Selective authentication.

* The forest-wide authentication setting permits unrestricted access by any users in the trusted forest to all available shared resources in any of the domains inthe trusting forest.

* Forest-wide authentication is generally recommended for users within the same organization.

Question 12 (Volume A)

You have a server named Server1 that runs Windows Server 2012 R2. The storage on Server1 is configured as shown in the following table.

You plan to implement Data Deduplication on Server1.

You need to identify on which drives you can enable Data Deduplication.

Which three drives should you identify? (Each correct answer presents part of the solution. Choose three.)

Select all that apply, then click Submit answer.

○ C
○ D
○ E
○ F
○ G

70-412 – Configuring Advanced Windows Server 2012 R2 Services