adminQUESTION 1
Your network contains an Active Directory forest named contoso.com. The forest contains three domains.
All domain controllers run Windows Server 2012 R2. https://www.leads4pass.com/70-412.html Latest Microsoft 70-412 PDF Practice Questions
The forest has a two-way realm trust to a Kerberos realm named adatum.com.
You discover that users in adatum.com can only access resources in the root domain of contoso.- com.
You need to ensure that the adatum.com users can access the resources in all of the domains in the forest.
What should you do in the forest?
A. Delete the realm trust and create a forest trust.
B. Delete the realm trust and create three external trusts.
C. Modify the incoming realm trust.
D. Modify the outgoing realm trust.
Correct Answer: D
Explanation:
* A one-way, outgoing realm trust allows resources in your Windows Server domain (the do- main that you are logged on to at the time that you run the New Trust Wizard) to be accessed by users in the Kerberos realm.
* You can establish a realm trust between any non-Windows Kerberos version 5 (V5) realm and an Active Directory domain. This trust relationship allows cross-platform interoperability with 70-412 exam security services that are based on other versions of the Kerberos V5 protocol, for example, UNIX and MIT implementations.
Realm trusts can switch from nontransitive to transitive and back. Realm trusts can also be either one-way or two-way.
QUESTION 2
Your network contains an Active Directory forest named adatum.com. The forest contains a sin- gle domain. The domain contains four servers. The servers are configured as shown in the fol- lowing table.
You need to update the schema to support a domain controller that will run Windows Server 2012 R2.
On which server should you run adprep.exe?
A. Server1
B. DC3
C. DC2
D. DC1
Correct Answer: B
Explanation:
Upgrade Domain Controllers to Windows Server 2012 R2 and Windows Server 2012
You can use adprep.exe on domain controllers that run 64-bit versions of Windows Server 2008 or Windows Server 2008 R2 to upgrade to Windows Server 2012. You cannot upgrade domain controllers that run Windows Server 2003 or 32-bit versions of Windows Server 2008. To re- place them, install domain controllers that run a later version of Windows Server in the 70-412 vce domain, and then remove the domain controllers that Windows Server 2003.
QUESTION 3
Your network contains two Active Directory forests named contoso.com and adatum.com. Contoso.com contains one domain. Adatum.com contains a child domain named child.adatum.- com.
Contoso.com has a one-way forest trust to adatum.com. Selective authentication is enabled on the forest trust.
Several user accounts are migrated from child.adatum.com to adatum.com. Users report that after the migration, they fail to access resources in contoso.com. The users suc- cessfully accessed the resources in contoso.com before the accounts were migrated.
You need to ensure that the migrated users can access the resources in contoso.com.
What should you do?
A. Replace the existing forest trust with an external trust.
B. Run netdom and specify the /quarantine attribute.
C. Disable SID filtering on the existing forest trust.
D. Disable selective authentication on the existing forest trust.
Correct Answer: C
Explanation:
Security Considerations for 70-412 dumps Trusts
Need to gain access to the resources in contoso.com
Disabling SID Filter Quarantining on External Trusts
Although it reduces the security of your forest (and is therefore not recommended), you can dis- able SID filter quarantining for an external trust by using the Netdom.exe tool. You should con- sider disabling SID filter quarantining only in the following situations:
* Users have been migrated to the trusted domain with their SID histories preserved, and you want to grant them access to resources in the trusting domain based on the SID history attribute.
Incorrect:
not B. Enables administrators to manage Active Directory domains and trust relationships from the 70-412 command prompt, /quarantine Sets or clears the domain quarantine not D. Selective authentication over a forest trust restricts access to only those users in a trusted forest who have been explicitly given authentication permissions to computer objects (resource computers) that reside in the trusting forest.
Read more: https://www.leads4pass.com/70-412.html The Microsoft 70-412 exam questions and answers covers all the knowledge points of the real exam. We update our product frequently so our customer can always have the latest version of the brain dumps. We have the most professional expert team to back up our grate quality products. If you still cannot make your decision on purchasing our product, please try our free demo.
Reference: https://www.microsoft.com/en-us/learning/exam-70-412.aspx
Download free Microsoft 70-412 exam pdf study materials: https://drive.google.com/open?id=0B7LFs7RuvDV4RGFUTzZTdnZqdlk