Your network contains an Active Directory domain named contoso.com.
All file servers in the domain run Windows Server 2012.
The computer accounts of the file servers are in anorganizational unit (OU) named OU1.
A Group Policy object (GPO) named GP01 is linked toOU1.
You plan to modify the NTFS permissions for many folders on the file servers by using central access policies.
You need to identify any users who will be denied access to resources that they can currently access once the
new permissions are implemented.
In which order should you perform the five actions?To answer, move all actions from the list of actions to the
answer area and arrange them in the correct order.
Answer:
Explanation:
I hate steps like this because you can create a rule first and then the policy, or you can create the policy and
create the rule during the creation of the policy.
Either way I’m going to go with creating the policyfirst, and then the rule.
This question relates directly to Dynamic Access Control
As a CAP is a AD object that consists of 1 or more individual CARs applied via a GPO
my suggested answer would be reverse the top two selections. In other words you must create a rule before a policy.
The new permissions can be deployed in Proposed (staged) mode initially, allowing you to view entries in the File Server Security Event log and to rectify any errors prior to changing the deployment mode to Current (production)
0
0
Create a Rule
Create a Policy
GPO – Stage Settings
Folder – Change Permissions
Check for Errors
If you change the Folder Permissions before setting the GPO for Staging, then the changes would be ACTIVE, and the users would not be able to access the Folders.
0
0
Lostineurope seems correct. training guides do it this way. create a rule-> create a policy->edit the policy to include staging-> folder level changes -> check for errors. no other way to do it.
0
0
The Microsoft 70-412 exam is a very hard exam to successfully pass. Here you will find free Microsoft practice sample exam test questions that will help you prepare in passing the 70-412 exam:
QUESTION 121
you are employee as a network administrator at abc.com. ABC.com has an active directory domain named ABC.com All servers on the abc.com network have Windows Server 2012 R2 installed and all workstations have windows 8 enterprise installed. ABC.com has established a remote Active directory site that only host workstations.The Computer accounts for these workstations have been placed in an organizational unit (OU),named ABCADRemote,which has a group policy object(GPO) associated with it.
You are in the process of configuration Branchcahce for the remote Active directory site.
You have Already turned Branchcache on.
Which of the following actions should you take next_?
A. You Should consider having the set Branchcache HostedServer Cache mode setting configured
B. You Should consider having the set Branchcache Hostedclient Cache mode settting configured
C. You Should consider having the set Branchcache distributed cache mode setting configured
D. You should consider having the set BranchCache disabled cache mode settings configured
Answer: C
QUESTION 122
You are employed as a network administrator at ABC.com. ABC.com has an active directory domain named ABC.com. ALL servers on the ABC.com network have Windows Server 2012 R2. ABC.com has a server,named server 1, which runs the windows deployment services server role.
You make use of windows server backup to back up server 1. Subsequent to a disk array on server 1 becoming corrupt,you swap the disk array with new hardware.
You now need to recover server1 in the shortest time conceivable.
Which of the following actions should you take?
A. you should consider making use of the Windows Server 2012 R2 installation media to start server1
B. you should consider restoring server1 from a snapshot backup
C. you should consider restoring server 1 from an incremental backup
D. you should consider restoring server 1 from a differential backup
Answer: A
QUESTION 123
You are employed as a senior network administrator at ABC.com. ABC.com has an active directory domain named ABC.com. All servers on the abc.com network windows server2012 installed.
You are currently running a training exercise for junior network administrators.
You are discussing the PKISync.ps1 tool.
Which of the following is true with regards to The PKISync.ps1?
A. it adds a certificate template to the CA
B. it asssists administrators in diagnosing replication problems between windows domain controllers
C. it is used to display information about the digital certificates that are installed on a directAccess client,
DirectAcces server,or intranet resource
D. it copies objects in the source forest to the target forest.
Answer: D
QUESTION 124
You are employed as a network administrator ABC.com.
ABC.com has an active directory domain named ABC.com.
All servers on the ABC.com network have Windows Server 2012 R2 installed.
ABC.com has a server named server1 which is configured as a DHCP server.
You have created a superscope on server1.
Which of the following describes reason for creating a superscope?(choose all that apply.)
A. To support DHCP clients on a single physical network segment where multiple logical ip networks are used.
B. To allow for the sending of network traffic to a group of endpoints destination hosts.
C. To support remote DHCP clients located on the far side of DHCP and BOOTP relay agents.
D. To provide fault tolerance
Answer: AC
QUESTION 125
You are employed as a network administrator at ABC.com. ABC.com has an active directory domain named ABC.com all servers including domain controllers on the ABC.com network have Windows Server 2012 R2 installed. ABC.com has its headquarters in London and an office in paris. The London Office has a domain controller named server1,which is configured as a writeable domain controller that servers as a Global catalog server and a DNS server.
Server1 is configured to host an Active Directory-integrated zone for ABC.com
The Paris office has a Read-Only domain controller (RODC) named server2 which servers as a Global catalog server. After installing the DNS server role on server2, you want to make sure that the ABC.com zone is replicated to server2 via active directory replication.
Which of the following actions should you take?
A. You should consider making use of Active Directory Sites and Services to Configured replication
B. You should consider making use of replmon.exe to configure replication.
C. You should consider making use of repadmin.exe to configure replication
D. You should consider making use of Active Directory Schema To configure replication
Answer: A
QUESTION 126
You are employed as a network administrator at ABC.com.
ABC.com has an Active Directory domain named.
ABC.com all servers on the ABC.com network have Windows Server 2012 R2.
You are running a training exercise for junior network administrators.
You are currently discussing DHCP failover architecture.
You have informed the trainees that DHCP servers can be deployed as fail over partners in either hot standby mode or load sharing mode.
Which of the following is TRUE with regards to hot standby mode? (Choose all that apply)
A. It is when two servers function in a fail over relationship where an active server is responsible for
leasing IP address and configuration data to all clients in a scope or subnet
B. It when two servers in a fail over relationship server IP addresses and options to clients on a given
subnet at the same time
C. It is best suited to deployments where a data center server acts as a standby backup server to a
server at a remote site
D. It is best suited deployments where both servers in a fail over relationship are located at the same
physical site
Answer: AC
QUESTION 127
You are emloyed as a network administrator at ABC.com Abc.com has an Active directory domain named ABC.com all servers on the ABC.com network have Windows Server 2012 R2.
The ABC.com domain has two Active Directory sites configured.
You want to make use of change notification configure replication between these Active Directory Sites.
You have opened DEFAULTIPSITELINK Properties to configure the necessary attribute.
Which of the following is the attribute that needs to be configured?
A. The revisiobn attribute
B. The Options attribute
C. The schedule attribute
D. The proxyAddresses attribute
Answer: B
QUESTION 128
You are employed as a network administrator at ABC.com. ABC.com has an Active Directory domain named ABC.com all servers on the ABC.com network have Windows Server 2012 R2 installed. ABC.com has a server named SERVER1 which has been configured to run the HYPER-V server role Server1 is configures to host multiple vitrual mahines.
When ABC.com acquires a server with a better hardware configuration to SERVER1 you are instructed to relocate the vitrual machines to the new server with as little interruptions as possible.
Which of the following actions should you take ? (Choose all that apply.)
A. You should consider exporting the vitrual machines from Server1.
B. You should consider running a snapshot backup of the SERVER1.
C. You should consider importing the vitrual machine from Server1 to the new server.
D. You shoul consider restoring the snapshot backup on the hard drives of the new server.
Answer: AC
QUESTION 129
You are employed as a network administrator at consoto.com.
Contoso.com has in an Active Directory domain named contoso.com.
All Servers on the contoso.com network have Windows Server 2012 R2 installed.
A contoso.com server ,named Server1,hosts the Active Directory Certificate Services Server role and utilizes a hardware security module(HSM) to safeguard its private key.
You have beed instructed to backup the Active Directory Certificate Services (ADCS) database,log files,and private key regularly.
You should not use a utility supplied by the hardware security module (HSM) creator.
Which of the following actions should you take?
A. You should consider scheduling an incremental backup
B. You Should consider making use of the certutil.exe command.
C. You should consider schedulling a differential backup
D. You should consider schedulling a copy backup
Answer: B
QUESTION 130
……
More questions are on my blog: http://www.ensurepass.net/category/microsoft/70-412-dumps
Hope it can help u a lot!
0
0