Moc 3

Front 1

IPAM server can cover IP addresses Space Management from 4 areas what are these areas?

Back 1

1. Planning

2. Managing

3. Tracking

4. Auditing

Front 2

What is the drawback of IPAM?

Back 2

IPAM cannot access IP addresses from stateless ipv6 router

Front 3

What is the default size of the DNS socket pool?

Back 3

2500 ports

Front 4

Client computers will immediately stop communicating on the network if there is no functioning DHCP server, True or false

Back 4

False

Front 5

DHCP failover can work either of two modes what are they

Back 5

1. Standby

2. Load sharing

Front 6

________ enables cryptographically signing DNS records so that client computers can validate responses

Back 6

DNSSEC

Front 7

Branchcache can work in either of two modes, what are they?

Back 7

1. Distributed cache mode,

2. Hosted cache mode

Front 8

What is the difference between DFS and branchcache?

Back 8

Branchcache only caches files that users in a remote locations have accessed. DFS replicates all the contents of folders between the head office and remote location so that all files exist in both locations

Front 9

What is iSCSI initiator?

Back 9

A software component or host adaptor on the server that provides access to iSCSI targets

Front 10

List two Technologies which can make iSCSI high available

Back 10

1. MCS - multiple connections per session

2. MPIO - multiple path input-output

Front 11

What does FSRM stand for?

Back 11

File server resource manager

Front 12

What allows you to use an automated mechanism to create and assign classification properties to files?

Back 12

FCM - File classification management

Front 13

You can configure data deduplication only on volumes that are not system or boot volumes , true or false

Back 13

True

Front 14

What are the three elements when deploying DAC in an organisation?

Back 14

1. claims,

2. resource properties,

3. conditional expressions

Front 15

What is the term of claim?

Back 15

A claim is information that AD DS states about an object which usually is a user or a computer

Front 16

What is the concept of BYOD?

Back 16

A user can byod to access organisations resources

Front 17

You cannot implement DAC without Central access policy , true or false

Back 17

False

Front 18

What is DAC staging?

Back 18

Proposed policy updates before they are enforced

Front 19

What is an AD DS domain?

Back 19

A collection of objects including user and computers

Front 20

What is an AD DS Domain tree?

Back 20

A collection of domains that share contiguous namespace

Front 21

What is an AD DS Forest?

Back 21

A collection of AD DS trees for security

Front 22

What is trust relationship?

Back 22

Authentication Trust pipe between Domains

Front 23

Your company has purchased another company that also uses Windows server 2012 R2 and active directory both companies need to be able to access each other's Forest resources how can you achieve this goal with the least administrative effort?

Back 23

Configure Forest trust between them

Front 24

You can have different Domain functional levels within the forest , true or false

Back 24

True

Front 25

What is in each Domain controller to generate intrasite replication topology?

Back 25

KCC - knowledge consistency checker

Front 26

What is an each Domain controller to generate intersite replication topology

Back 26

ISTG - inter-site topology generator

Front 27

What is the purpose of the bridgehead server?

Back 27

It is a DC used to replicate change within the site to bridgehead servers in other sites. It is used by ISGT.

Front 28

List the best practices when you manage AD sites and replication

Back 28

1 Provide one or more Global service per site , 2 ensure all sites have a appropriate subnets associated, 3 do not setup long intervals without replication, 4. Avoid using SMTP as a protocol for replication

Front 29

Certificate Auto enrollment is an option only on Enterprise CAs, true or false

Back 29

True

Front 30

What are some reasons that an organisation would utilise PKI

Back 30

To improve security, ID control and digital signing of code

Front 31

Your company is currently acquiring another company. both companies run their own PKI. What hierarchy could you create to minimise disruption and continue to provide pki services seamlessly

Back 31

Deploy cross certification

Front 32

To recover private keys, you must configure ca to achieve private keys for specific templates, and you must issue a key recovery agent certificate , true or false

Back 32

True

Front 33

OCSP provides status for a single certificate that clients request, instead of downloading the entire CRL and delta CRLs, true or false

Back 33

True

Front 34

Some documents have been forwarded by email making the documents more difficult to track. You want to be able to prevent employees from forwarding certain emails. What should you Deploy?

Back 34

RMS - Rights Management Services

Front 35

RMS server provide three types of exclusion policies. What are they?

Back 35

1. user,

2. applications,

3. lock-box

Front 36

You want to block users from protecting content by using specific versions of Microsoft PowerPoint. Which exclusion policies should you create?

Back 36

Application exclusion policy

Front 37

You can install an SSL certificate on the AD RMS server when you are performing AD RMS configuration, the benefit is that you can protect the connection between clients and the AD RMS server with SSL, true or false

Back 37

True

Front 38

List best practices when deploying RMS in an organisation

Back 38

1. You must analyse organisation's business requirements before deploying active directory RMS

2. Create necessary templates and ask for feedback on types of templates

3. Strictly control membership of the super users group

Front 39

How can you test whether AD FS is functioning properly

Back 39

Access https://hostname/federationMetaData/2007-06/federationMetaData.xml

Front 40

AD FS is designed to work over the public internet with a web browser interface. True false

Back 40

True

Front 41

Where can you deploy Web Application Proxy server when deploying AD FS in a single organisation scenario?

Back 41

Perimeter network

Front 42

Which self issued certificate needs to be replaced by an internal ca issued certificate or public ca issued certificate so that users can access web applications from internet or the intranet?

Back 42

SSL server communication certificate

Front 43

What can enable SSO for claims where application access from user's own non Domain joined computers which support Windows 8.1 or newer and iOS devices?

Back 43

Workplace join

Front 44

NLB uses how many PowerShell commands to manage all aspects of NLB configuration in Windows 2012?

Back 44

35

Front 45

An NLB cluster can include up to how many nodes?

Back 45

32

Front 46

Clients used to access a service in an NLB cluster by using cluster IP address and MAC address. True or false

Back 46

True

Front 47

There are three NLB cluster operation modes. What are they?

Back 47

1. Unicast

2. multicast

3. internet group management protocol (IGMP) multicast

Front 48

All hosts for network load balancing (NLB) must be on the same subnet. True or false

Back 48

True

Front 49

Nodes in the NLB cluster support both static or dynamic IP addresses. True or false

Back 49

False. it doesn't support dynamic

Front 50

NLB cluster is suitable for both stateful and stateless application high available and high scalable. True or false

Back 50

False

Front 51

Nlb cluster nodes sends ______ every second between nodes in a cluster. if a node misses _____ continually this node will be removed from nlb cluster automatically

Back 51

Heartbeat, 5

Front 52

Why is using a disk-only quorum configuration generally not a good idea

Back 52

Because it creates a single point of failure for the cluster

Front 53

What does LUN stand for

Back 53

Logical unit number

Front 54

Failover clustering for hyper-v in Windows server 2012 has support for up to ______ virtual machines per cluster

Back 54

8000

Front 55

_______ enables administrators to automatically update cluster nodes with little or no loss in availability during the update process

Back 55

CAU - cluster aware updating

Front 56

The cluster migration wizard migrates roles, but not data folders. true or false

Back 56

True

Front 57

What is the main difference between synchronous and asynchronous replication in a multisite cluster scenario

Back 57

Synchronous guarantees the changes made. Asynchronous doesn't guarantee the changes as data may be lost

Front 58

Do you have to implement CSV in order to provide high availability for virtual machines in VMM in Windows Server 2012?

Back 58

No, CSV is only a recommendation.

Front 59

What is the difference between Live migration and Storage Migration?

Back 59

In live Migration, you move the VM from one host to another (storage untouched). In storage Migration, you move VM storage and optionally the configuration files and resources.(VHD/VHDX, check point)

Front 60

All hosts for network load balancing (NLB) must be on the same subnet? True or false

Back 60

True

Front 61

In Windows 2012 R2 host, you cannot use the Extended Replication feature to add a third host machine that can replicate with passive copy? True or False

Back 61

False

Front 62

_______ provides the benefits such as increasing data transfer, minimising host's resource usage while copying and migrating data.

Back 62

ODX - Offload Data Tranasfer

Front 63

What is EFS?

Back 63

Encrypted File System

Front 64

What is PKI?

Back 64

Public Key Infrastructure

Front 65

What is AD CS?

Back 65

Active Directory Certificate Service

Front 66

What is CA?

Back 66

Certificate Authority

Front 67

What is SSL?

Back 67

Secure Sockets Layer

Front 68

What is CRL?

Back 68

Certificate Revocation List

Front 69

What is CDP?

Back 69

Certificate Revocation List Distributed Point

Front 70

What is GAL?

Back 70

Global Address List

Front 71

What is AIA?

Back 71

Authority Information Access

Front 72

What is NDES?

Back 72

Network Device Enrolment Service

Front 73

What is CES?

Back 73

Certificate Enrolment Web-Service

Front 74

What is CEP?

Back 74

Certificate Enrolment Policy

Front 75

What is TPM?

Back 75

Trusted Platform Module

Front 76

What is CSP?

Back 76

Cryptographic Service Software

Front 77

What is IIS?

Back 77

Internet Information Service

Front 78

What is RMS?

Back 78

Rights Management Services

Front 79

What is SDK?

Back 79

Software Development Kit

Front 80

What is AD FS?

Back 80

Active Directory Federation Service

Front 81

What is SSO?

Back 81

Single Sign-On

Front 82

What is NLB

Back 82

Network Load Balancing

Front 83

What is IGMP?

Back 83

Internet Group Management Protocol

Front 84

What is MCS

Back 84

Multiple Connections per Session

Front 85

What is MPIO

Back 85

Multiple Path Input/Output

Front 86

What is CSV?

Back 86

Cluster Shared Volume (shared storage)

Front 87

What is LUN?

Back 87

Logical Unit Number

Front 88

What is ReFS?

Back 88

Resilient File System

Front 89

What is CAU?

Back 89

Cluster Aware Updating

Front 90

What is ODX?

Back 90

Offloaded Data Transfer

Front 91

What is VHD?

Back 91

Virtual Hard Disk

Front 92

What is DPM?

Back 92

Data Protection Manager

Front 93

What is RE

Back 93

Recovery Environment

Front 94

What is RPO?

Back 94

Recovery Point Objective

Front 95

What is RTO

Back 95

Recovery Time Objective

Front 96

What is MMC

Back 96

Microsoft Management Concole

Front 97

What is DFS

Back 97

Distributed File System

Front 98

What is CSR?

Back 98

Certificate Signing Request

Front 99

You have recently installed Windows Server 2012 R2. You have configured a number of services and installed some applications. You decided that it would be a good time to perform a full server backup. What do you need to do first?

Back 99

Install Windows Backup Utility

Front 100

______ allows you to centralize backups, offers 15-minute snapshots of servers and clients, can store backup data on SANs and export to tape.

Back 100

DPM - Data Protection Manager

Front 101

It is best practice to work with the organization's business managers to identify the minimum recovery time for business-critical data. True or False?

Back 101

True

Front 102

Creating a connection object manually between Domain controllers within a site is not typically required or recommended because the KCC does not verify or use the manual connection object for failover. True or False?

Back 102

True

Front 103

What is a snap-in tool that implements Forest trust?

Back 103

AD Trust Tool

Front 104

What are three networks in a failover cluster?

Back 104

1. Client Access Network

2. Internode communicaiton Network

3. Storage Network

Front 105

IPAM accesses which servers?

Back 105

1. DNS

2. DHCP

3. DC

4. NPS