Question 6 of 68

Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server

2012 R2 and has the Hyper-V server role installed.

Server1 hosts 10 virtual machines. A virtual machine named VM1 runs Windows Server 2012 R2 and hosts a processor-intensive application named App1.

Users report that App1 responds more slowly than expected.

You need to monitor the processor usage on VM1 to identify whether changes must be made to the hardware settings of VM1.

Which performance object should you monitor on Server1?

    Correct Answer: C

    To monitor the processor usage of a virtual machine in a Hyper-V environment, it is essential to focus on the virtual processors assigned to that VM. The correct performance object to monitor in this context is the 'Hyper-V Hypervisor Logical Processor.' This performance object provides metrics on the logical processors used by the host, which in turn are allocated to the virtual processors of VMs. Monitoring this will help in identifying how well the virtual machine utilizes the physical CPU resources and whether adjustments to hardware settings are necessary.

Question 7 of 68

You have a server named Server1 that runs Windows Server 2012 R2.

An administrator creates a quota as shown in the Quota exhibit. (Click the Exhibit button.)

You run the dir command as shown in the Dir exhibit. (Click the Exhibit button.)

You need to ensure that D:\Folder1 can only consume 100 MB of disk space.

What should you do?

    Correct Answer: A

    A

    1. In Quota Management, click the Quota Templates node.

    2. In the Results pane, select the template on which you will base your new quota.

    3. Right-click the template and click Create Quota from Template (or select Create Quota from Template from the Actions pane). This opens the Create Quota dialog box with the summary properties of the quota template displayed.

    4. Under Quota path, type or browse to the folder that the quota will apply to.

    5. Click the Create quota on path option. Note that the quota properties will apply to the entire folder.

    Note: To create an auto apply quota, click the Auto apply template and create quotas on existing and new subfolders option. For more information about auto apply quotas, see Create an Auto Apply Quota.

    6. Under Drive properties from this quota template, the template you used in step 2 to create your new quota is preselected (or you can select another template from the list). Note that the template's properties are displayed under Summary of quota properties.

    7. Click Create.

    Create a new Quota on path, without using the auto apply template and create quota on existing and new subfolders.

    Reference: http://technet.microsoft.com/en-us/library/cc755603(v=ws.10).aspx

Question 8 of 68

DRAG DROP -

You are a network administrator of an Active Directory domain named contoso.com.

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the Web Server (IIS) server role installed.

Server1 will host a web site at URL https: //secure.contoso.com. The application pool identity account of the web site will be set to a domain user account named

AppPool1.

You need to identify the setspn.exe command that you must run to configure the appropriate Service Principal Name (SPN) for the web site.

What should you run?

To answer, drag the appropriate objects to the correct location. Each object may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Select and Place:

    Correct Answer:

    Note:

    >

    Adds the specified SPN for the computer, after verifying that no duplicates exist.

    Usage: setspn s SPN accountname -

    For example, to register SPN "http/daserver" for computer "daserver1": setspn -S http/daserver daserver1 http://technet.microsoft.com/en-us/library/cc731241(v=ws.10).aspx

    Attn: with Windows 2008 option is -a but with Windows 2012 it started to show -s

    Definition of an SPN -

    An SPN is the name by which a client uniquely identifies an instance of a service. If you install multiple instances of a service on computers throughout a forest, each service instance must have its own SPN. A particular service instance can have multiple SPNs if there are multiple names that clients might use for authentication. For example, an SPN always includes the name of the host computer on which the service instance is running. Therefore, a service instance might register an SPN for each name or alias of its host.

    Adding SPNs -

    To add an SPN, use the setspn -s service/namehostname command at a command prompt, where service/name is the SPN that you want to add and hostname is the actual host name of the computer object that you want to update. For example, if there is an Active Directory domain controller with the host name server1.contoso.com that requires an SPN for the Lightweight Directory Access Protocol (LDAP), type setspn -s ldap/server1.contoso.com server1, and then press

    ENTER to add the SPN.

    The HTTP service class -

    The HTTP service class differs from the HTTP protocol. Both the HTTP protocol and the HTTPS protocol use the HTTP service class. The service class is the string that identifies the general class of service.

    For example, the command may resemble the following command:

    setspn S HTTP/iis6server1. mydomain.com mydomain\appPool1

    References:

    http://support.microsoft.com/kb/929650/en-us

    http://technet.microsoft.com/en-us/library/cc731241%28v=ws.10%29.aspx

Question 9 of 68

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 R2.

The domain contains two domain controllers. The domain controllers are configured as shown in the following table.

Active Directory Recycle Bin is enabled.

You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago.

You need to restore the membership of Group1.

What should you do?

    Correct Answer: D

    To restore the membership of Group1 after accidental removal, performing an authoritative restore is the appropriate action. Active Directory Recycle Bin is useful for restoring deleted objects, but it does not support the rollback of changes such as the removal of group memberships. An authoritative restore will allow you to restore the state of AD objects, including group memberships, to a point in time before the accidental changes were made.

Question 10 of 68

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2.

You create an Active Directory snapshot of DC1 each day.

You need to view the contents of an Active Directory snapshot from two days ago.

What should you do first?

    Correct Answer: D

    To view the contents of an Active Directory snapshot, you must first mount the snapshot. This is done using the ntdsutil.exe command. Once the snapshot is mounted, you can then use the dsamain.exe command to expose the Active Directory data as an LDAP server. Therefore, the correct first step is to run the ntdsutil.exe command.