Pass Your Microsoft 70-414 Exam Easy!

@roby999
Q55) not really sure, you could try in Lab, but I'd go for a+b In order to audit AD - The Default Domain Controller policy must first be configured.
Then try
"To apply or modify auditing policy settings for an object using Group Policy":
http://technet.microsoft.com/en-us/library/cc757864%28v=ws.10%29.aspx

@mo - answer is VHD not VHDX:
Da die Basisfestplatte im VHD-Format vorliegt, müssen auch die differenzierenden virtuellen Festplatten im VHD-Format erstellt werden. Alternativ könnte man die Basisfestplatte vor der Erstellung der differenzierenden Festplatten auch in das neuere Format konvertieren und dann differenzierende Festplatten mit dem neuen VHDX-Format verwenden.

I Mean Tera Byte not Giga Byte!

@MO

I suppose you mean Q41.
Because VM1 hard disk's name is VM1.vhd i think it should be A. differencing VHD disks

VHDX let you use disk larger than 2Gb up to 64Gb


------

For the memory option read Anubi's post few line under
http://technet.microsoft.com/en-us/library/hh831766.aspx


------
I try to recreate in lab Q55

IMO best answer shold be

B. Create a new Group Policy object (GPO) that is linked to the Secure OU, and then modify the Audit directory services setting
C. From the Secure OU, modify the Auditing settings.

That's because the key is Audit User, Computer and contact created within the Secure OU

Anyone agree?


Thanks

Sorry, me again:

How about AQ1: Memory options, I think it must bei C Startup RAM

I found this:
Startup RAM
One of the most important concepts to understand regarding dynamic memory is startup RAM. When using dynamic memory, you must assign each VM a value for startup RAM. This value reflects the amount of physical memory the VM will initially use when it's booted. More importantly, the startup RAM also represents the minimum amount of physical memory the VM will ever consume. A VM can't decrease its memory usage below the startup RAM value.

How about differencing discs in Question A32?

I think it must be differencing vhdx and not vhd without the x because auf server 2012

@MO

It's right in the dump! Three way-mirror -> 5 disk

sorry for double posting:

http://social.technet.microsoft.com/wiki/contents/articles/11382.storage-spaces-frequently-asked-questions-faq.aspx

"Three-way mirror spaces must use five or more physical disks"

Something new:
Microsoft says you need 5 discs for a three-way mirror.
the actual dumps say you just need three discs.

@desktopmcse - thanks for the hint!

Testlet1, Q2:
In my opinion answer should be a)
SCCM management point in the main office and SCCM distribution point in each office.

SCCM sites that have clients assigned to them must have a management point to enable client communication:
http://technet.microsoft.com/en-us/library/bb632400.aspx

Basically (not mentioning each step / setting of course),
this should prove we need a management point:

(trainer manual 08-16 Planning and implementing server update infrastructure)

1) in SCCM console use Deploy Software Updates Wizard, create new deployment package,
at some point you gotta choose the location and distribution point(s) for package sources.
2) Site server requests softtware update binaries from download location we defined.
Can be MS Update or local source
3) Site server copies the update binaries to content library on the distribution points.
4) At the client policy poll interval, the client retrieves machine policy from MANAGEMENT POINT,
and reveives the new deployment information
5) Software Update Catalog has changed, client requestes binaries from distribution point
for each required update, stores in local cahce. If deployment type is configured available
updates download when user invokes installation.
6) Client sends state message to MANAGEMENT POINT, reporting successfull install of software.
Management Point forwards the state message to the Site Server, which enters the message
into the db.

(Site Server can of course have the role of management point)

some agree with desktopmcse

Q12 a,b
Q62 a,e
Q55 a,b

Q22 a,b,e
http://technet.microsoft.com/en-us/library/hh852344.aspx
WSUS Autonomous is administered separately, the key is "All updates must be approved from a server in the main office"

Another

Q14
Step 1 Restore a copy of the CA's private key, and then retrieve a copy of the CRL
Step 2 By using Certutil, risign the CRL, and then extend the validity period of the CRL

According to this
http://blogs.technet.com/b/instan/archive/2011/05/23/adcs-ca-server-disaster-recovery-steps-when-smartcard-logon-is-required-but-no-valid-crl-can-be-published.aspx
(ok this is for smartcard logon but could be the same)

Step 3 Copy the CRL to the Web server farm



Many Thanks to all, this is very helpful

I passed yesterday with a score of 850 using Santi's answers. I believe i may have made 2 mistakes as well. There was 1 new question. Thanks for all your efforts santi, seppfuchs and omar and to everyone else who has contributed.

I don't trust those demo pdfs on scribd or what have you .
They just use the dump avail at the time, print it to pdf and attach a price tag to it.
Often they only cause further confusion and clearly contain errors.

Testlet2 Q8:

You cannot use Distributed File System Replication (DFS-R) as your data replication method in a multi-site cluster.

@bla @desktopmcse twice quicker than me
For testlet2 Q8, definitelly seems to be A - Purchase a storage solution that replicates the virtual machines. Configure all of the virtual machines to use dynamic memory.
http://technet.microsoft.com/en-us/library/dd197575(v=ws.10).aspx
Not using Distributed File System Replication: You cannot use the feature in Windows Server 2008 called Distributed File System Replication (DFS-R) as your data replication method in a multi-site cluster. DFS-R only performs its data replication after a file is closed. This works well for files such as documents, presentations, or spreadsheets, but it will not work for files that are held open, such as databases or virtual machines. You must choose a replication option other than DFS-R.

I saw that for Distributed cache mode: A cache is distributed only among Windows 7 branch office clients, and in that case we have 800 wXP clients. As conclusion, correct answer A - DFS, as is written in this dump.

@Santi

once again:

Contoso Q6: DFS
- only WinXP Clients (XP does not support branch cache!)
- one domain controller in branch office
- update all domain controller to windows 2012

http://es.scribd.com/doc/132943896/414-docx
I found this site which disagree with 2 questions of this dump.
Testlet1. Q6
In the dump the answer is A - Distributed File System (DFS). But the site, agree also with @Robby999, says that correct answer is B - BranchCache in Distributed Cache mode. I've dived in some Technet and forums and I think that B is the real right answer.
http://blogs.technet.com/b/brianlewis/archive/2012/11/14/branchcache-in-microsoft-windowws-server-2012.aspx
Business Requirements:
- "Minimize hardware costs and software costs whenever possible". Distributed cache mode does not require a server computer in the branch office.
- "Minimize the amount of network traffic over the VPN whenever possible".
- "Ensure that the users in the branch offices can access files currently on the main office file server if a Internet link fails". Branch office client computers download content from the content servers in the main office and then cache the content for other computers in the same branch office.

Testlet2. Q8
In the dump the answer is B - Upgrade the WAN link. That's the same answer that in http://issuu.com/arthuryerby/docs/70-414demo But the first site says that correct answer is C - Configure all of the virtual machines to use dynamic memory. Implement Distributed File System (DFS) Replication and store the virtual machine files in a replicated folder.
Existing Environment
- All servers run Windows Server 2008 R2.
- The WAN link between the Miami office and the Seattle office is a low bandwidth link with high latency. The link will not be replaced for another year.
IMO:
- If the link won't be replaced until next year, we cannot say that we are going to Upgrade it, and DFS-R consume little bandwidth.
- Every VM has to be configured to use dynamic memory.
- With these points, it's better option C. Isn't it?

I think in the original exam there is no explicit mention of the client OS concerning Contoso Q6. Someone mentioned time ago in SeppFuchs thread I think. Branch Cache uses http(s).
"Ensure that the users in the branch offices can access files currently on the main office file server if a Internet link fails."
Only option DFS.

Contoso - Q6:
Definitely DFS, agree with bla
Adatum - Q8:
I agree with answer A. I think answer b) is not an option
as we gotta find a working solution until our WAN Link will be upgraded.
c,d) is not an option - DFS Replication is not supported with Multi-Site Clusters.

Q12, agree b,c
Q1:
I maybe wrong, but I stick to the answer Operations Manager.
The exam is all about advanced Infrastructure / SCCM + automation.
Operations Manager gives us detailed reporting, alerts
and we can easily monitor if changes are successful.
GPOs may create additional overhead - and a tool for monitoring them
effectively would be, -you guessed it- SCOM

Q62 ? Should it be a,e or a ? We recommend that you use the self-signed token-signing certificate that is generated by AD FS 2.0. By doing so, it manages this certificate for you by default. For example, when this certificate is about to expire, AD FS 2.0 will generate a new self-signed certificate.
Q55 - a,b ?
I think it must be
a) From the Default Domain Controllers Policy, enable the Audit directory services setting.
b) Create a new Group Policy object (GPO) that is linked to the Secure OU, and then modify the Audit directory services setting

"To apply or modify auditing policy settings for an object using Group Policy":
http://technet.microsoft.com/en-us/library/cc757864%28v=ws.10%29.aspx

Don't choose WSUS autonomous . wrong IMHO
What about the SCCM update / management point ?
Thanks guys .

I mean branch office!

@bla

Because of XP clients, maybe DFS is correct.
I was confused about explicit missing file servers in branch cache.

Thanks

@Roby999

me once again. it must be dfs because brache cache only supports >= win7 clients. what do you think?

@Ruby999

or DFS because all the files should be accessable even if the line is broken.
branch cache only "caches" files wich are opened before. if s.o. needs a file which is not in the cache -> access failed. that's why i prefer DFS.

on the other hand :its a MS exam and we will update the environment to W2012 -> Branche Cache Hosted Mode

@bla

you right, only XP client so correct one should be C. Branch Cache Hosted Mode

@Roby999

Branch cache in distributed mode? are u sure? nothing is written aboput the clients?

we do have windows 2012 server -> branch cache in hosted mode.

but i also prefer dfs because we need all the data if the connection is broken.

Q1 B - From Operations Manager, create an alert. Following link and explanations:
Alerts in Operations Manager is best choice because the question states that SC 2012 is already installed and this fix needs applied to all client computers. If this was an issue on only one serveter, then Event viewer would be best action to take.
http://www.alphaeducation.com/download/exam/70-414.pdf

I agree with this link in Q1, but I disagree with the answers for:
- Q12. IMO answer is B and C. The test gives us the answer: B, C and D.
- Q14. The answer of the link has no sense to me, Please, click the link of the test and tell me. What do you think?

@desktopmcse

Q1. You can distribute the tasks event based via GPO!

----------------

@rogue

OMG I completely don't care about R&D Manager! Thank you!

----------------

I now have some question related to CaseStudies

Contoso - Q6

IMO

B. BranchCache in Distributed Cache mode

We don't have any file servers in each branch office

Current Issues
Users report that it can take a long time to download files from network shares in the main office.

----------------

Adatum - Q8

First of all look at Current Issue of the Case Study

The WAN link between the Miami office and the Seattle office is a low bandwidth link with high latency. The link will not be replaced for another year.

So I think B. is incorrect!

Could be A. the right one?



Thank to all

Roby

agreed with r0gue

Testlet1, Q2)

anyone can explain why c) and not a)
A System Center 2012 Configuration Manager management point in the main office and a System Center 2012 Configuration Manager distribution point in each office.

Q1)

Why attach a task to the event ? Might be a solution for a few clients,
but we probably have thousands of clients.
Ok, maybe it could be done with a PS script or some other magic.
But question states that we already have SCCM infrastructure.
We could as well use Operations Manager, -afaik- which will generate an alert
every 4 hours if events are logged and add a recovery task which restarts
the application

hi @ Roby990

q21) must be 3 servers IMHO.
If we're using windows backup R&D managers need to be in group Backup Admins. If they don't have their own server they could backup the stuff of the other dpts too.
"Provide R&D managers with the ability to back up all the files of their department only".

Q65 - The key is to change Cluster1 to a new AD RMS cluster named Cluster2.
We cant deploy 2 AD RMS in a forest so the old one should be removed --> Modify the Service Connection Point (SCP).
Even you mean to move from Cluster1 to Cluster2 and want to use a DNS alias I think it should be done before installing AD RMS on Cluster1. I think you can't use the old name Cluster1 and if you rename DNS alias they don't match with SCP.
I hope this is right!

p.s. : Next friday I'm scheduled for the exam and want pass it.


-----------

Q1 - D. From event viewer, attach a task to the event

I think is only wrong the selection in the dump, the explanation agree with D.

-----------

Q21 - B. 2

The key is view audit logs, so 1 file server for Finance Managers and 1 file server for Human Resources.
Because Sales Manager don't need special requirements could be stored in both file servers (You must identify the minimum amount of file servers)

I don't understand why, but I'm afraid that people achieve better results answering Q65 - B Modify the Service Connection Point (SCP).
Can anybody tell us why?

Thanks @Roby999 and @Anubis for your comments. These are old questions.
Q58 - D - Minimum RAM and we agree with.
Q59 - I think that, if the Settings of the network adapter are referred to VIRTUAL network adapter (bandwidth management), that would be the right one. http://www.techrepublic.com/blog/networking/set-bandwidth-limits-for-hyper-v-vms-with-windows-server-2012/5924
On one hand, we asume that the answer is referred to VIRTUAL network adapter (that wouln't right if it's referred to PHYSICAL network adapter) the problem is that you'll have to configure the VIRTUAL Net Adap in every VM. On the other hand, the question ask ".networking solution that evenly distributes the available bandwidth." and I think that is referred in every moment, not depending of the charge or use of the network. Moreover there is a link, I don't know if this is a reliable source but I though so. Q2 in : http://es.calameo.com/read/00194520942e7d03de414
I have to say that I'm not very sure, but neither my answer nor yours, solve it clearly. Can anybody give us different arguments in one way or in another?
Q65- Your links are also referred to w2008. Anyway, some articles could be applied to w2012 too. I don't know if that the case.
In my opinion, as I wrote forums and dump's explanations, we have to believe that SYSADMIN installed the first AD RMS following these best practice.
http://technet.microsoft.com/en-us/library/jj735304.aspx
AD RMS Installation Best Practices
Use DNS aliases, such as CNAME records, or DNS host records, such as A Records for the fully qualified domain name of the AD RMS cluster.
This allows you to easily add additional servers to the AD RMS cluster and allows you to load balance and perform disaster recovery very easily.
Use DNS aliases, such as CNAME records, or DNS host records, such as A Records for your AD RMS database server.
This makes future migration of your AD RMS databases much easier.

@Anubis

I agree we dont have so much information

I search again and found this http://www.aidanfinn.com/?p=12237

Sorry for my mistake!

@ Robby999

Your link Applies To:
Microsoft Hyper-V Server 2008 R2, Windows Server 2008 R2 with SP1

This here is for Server 2012:
http://technet.microsoft.com/en-us/library/hh831766.aspx
..Minimum memory configuration with RELIABLE restart operation...

I test it in own Lab, see my post at SeppFuchs.

The Problem about that Question is we got no more information about the Configuration of the VMs / Host.

Your network contains an Active Directory Rights Management Services (AD RMS) cluster named Clusterl.
You plan to change Clusterl to a new AD RMS cluster named Cluster2.
You need to ensure that all users retrieve the location of the AD RMS templates from Cluster2.
What should you do?

ANSWER : Modify the Service Connection Point (SCP)

http://technet.microsoft.com/en-gb/library/cc753538.aspx

http://social.technet.microsoft.com/wiki/contents/articles/710.the-ad-rms-service-connection-point.aspx

You have a Hyper-V host named Hyperl that has Windows Server 2012 Installed. Hyperl hosts 20 virtual machines.
Hyperl has one physical network adapter.
You need to implement a networking solution that evenly distributes the available bandwidth on Hyperl to all of the virtual machines.
What should you modify?

ANSWER : The settings of the virtual switch

http://technet.microsoft.com/en-us/library/jj735303.aspx

Your network contains a Hyper-V host named Hostl. Hostl hosts 25 virtual machines. All of the virtual machines are configured to Start automatically when Hostl restarts.

You discover that some of the virtual machines fail to Start automatically when Hostl restarts and require an administrator to Start them manually.
You need to modify the settings of the virtual machines to ensure that they automatically restart when Hostl restarts.
Which settings should you modify?

ANSWER : Startup RAM

http://technet.microsoft.com/en-us/library/ff817651(v=ws.10).aspx

@Roby999
Can you tell us which ones are wrong? If you follow the SeppFuchs forum, you'll see that people is not 100%. Indeed there are people who failed. So it was my intention to do it better.
IMO I've corrected some of the SeppFuchs' that were wrong, following other forums and exams. Obviously I've posted it because I think that the correction is right.
As I said, I'm open to comments, but it's better if these provide solutions. I would like that people who contribute here tell us something interesting. Of course I can make mistakes, but it's better to have arguments and share them.
So, I ask you again, which ones are wrong? Thank you in advance.
Bye

Santi you got so many wrong question!!!
Why you post it?
Look Seppfuchs it should contain the right answer.

Bye,
Roby.

Doubts:
Q53: Your network contains multiple servers that run Windows Server 2012.
The network contains a Storage Area Network (SAN) that only supports Fibre Channel connections. You have two failover clusters.
Cluster 1. File Services. 2 nodes
Cluster 2. Hyper-V hosting 6 nodes
You plan to implement 15 highly available virtual machines on Cluster2. All of the virtual machines will be stored in a single shared folder. You need to ensure that the VHD files of the virtual machines can be stored on the SAN.
What should you do? (Each correct answer presents a complete solution. Choose all that apply.)

IMO
C. From Cluster1, add the iSCSI Target Server cluster role.
D. From Cluster1, configure the clustered File Server role of the File Server for scale-out application data type.

Doubt, some people think that correct answer is:
B. From a node in cluster1, create a virtual fibre channel SAN
D. From cluster1, configure the clustered file server role of the file server for scale out

Which one is correct B or C? Both?

- Q51: A - Modify the registry on Server 1.
http://marckean.wordpress.com/2010/07/28/build-an-offline-root-ca-with-a-subordinate-ca/ Point4.
- Q55: A, C
Creating a New Object: Resulting in multiple Event ID 5137 entries containing all attributes provided explicitly by the security principal that invoked the operation (but not those automatically generated by the system). Note that similar information also gets recorded if audit of User Account Management or Directory Service Access is enabled.
- Q58: D - If dynamic memory is used we don't have startup RAM option!, it's minimal RAM
- Q59: B - Settings of the VIRTUAL network adapter (bandwidth management) .
http://es.calameo.com/read/00194520942e7d03de414 Q2
- Q62: Only A.
http://technet.microsoft.com/en-us/library/jj151794.aspx#bk_requirements
http://technet.microsoft.com/en-us/library/hh852419.aspx
- Q65: A - Create an alias (CNAME)
- Q71: Option 1. Just two server with Hyper-V installed is enough to perform a Live Migration. (Minimize the number of servers)
- Testlet 2. Q10. Answer B:
Export the server authentication certificate and provide the certificate to Trey Research.
Import the server authentication certificate from Trey Research.

Based on SeppFuchs 95q.vce dump but with some answers corrected following diffents forums, technets, dumps, and my experience. I'm preparing 70-414 with these answers. I'm open to every suggestions. Good luck to everybody.
- Q14
1)Restore a copy of the CA's private key and then retrieve a copy of the CRL
2)By using Certutil resign the CRL + then extend the validity period of the CRL
3)By using Certutil, republish the CRL
- Q21: C - 3 Servers. Following:
http://www.testkings.com/exam/70-414.htm

- Q22 answer is A, B, E y F:
A Deploy a Group Policy object (GPO) that has the update location set to Server1.
B On Server2, configure WSUS in Replica mode.
E Deploy a Group Policy object (GPO) that has the update location set to Server2.
F On Server1, configure WSUS in Autonomous mode.
- Q38: C - a host group. You need before a host group. http://technet.microsoft.com/en-us/library/gg610645.aspx
You can create a private cloud from resources in host groups. When you create a private cloud, you select which host groups will be part of the private cloud. You can then allocate all or some of the resources from the selected host groups to the private cloud.