Pass Your Microsoft 70-411 Exam Easy!

This question, I don't know how to answer it.

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1.

You need to create an Active Directory snapshot on DC1.

Which four commands should you run?

To answer, move the four appropriate commands from the list of commands to the answer area and arrange them in the correct order.

1. dsamain.exe
2. snapshot
3. create
4. ntdsutil.exe
5. activate instance ntds
6. wbadmin.exe

I could create snapshot in two ways.

1. ntdsutil.exe
2. activate instance ntds
3. snapshot
4. create

and

1. ntdsutil.exe
2. snapshot
3. activate instance ntds
4. create

What is correct order? How do I need to answer the question?

Passed today wit 720 , oh boy it was close
although i felt that the exam was too easy this time , there were nevertheless new questions as usual but the others are all in that Mkenzie dump

can anyone tell me if this dump is still valid? if not any recommendations to other dumps?

On q58, I believe the given answer is incorrect. See:
http://technet.microsoft.com/en-us/library/cc754299.aspx

thoughts?

i cleared 411 exam today with 8xx any one need question contact me on fahad.utman@gmail.com thanks sam .. here am going for 412 yahooo

just passed 9XX ... use Sam's

Just passed in USA with a 778. Few I couldn't remember but a great study guide! I think there was maybe 1-3 that I didn't see but I only got through the first 240 questions. Didn't get to the last 48 so they could of been there. Great work! Thanks!

Passed 921 today

Passed 9xx today only with this dump

HI

please help with new version of visual manager
please drop box for me on itanieamos@gmail.com

passed today with 8xx.

dumps is still valid.Passed today with 8xx.Thnks sam

Passed today using this file!!

Still valid in France

Passed with 810 points on 11/11/2013, 5 new questions in exam. Thanks for the dump and the hard work.

@Vera: I opened it with version 3.2.1 (now updated to 3.3)

dears
please check this Qs
you have a AD domain named contoso.com with two OUs OU1 & OU2 and two GPOs GPO1 & GPO2. GPO1 linked to OU1 and GPO2 linked to OU2
OU1 contains a client computer name computer1.OU2 contains a user named
user1
you need to ensure that the GPos applied to computer1 are applied to user1 when user1 logs on
this question repeated for three times the answer was (security filtering) for two times and one time was (GPO links) can anyone tell us what is the right answer

Guys. With which version of Visual CertExam are you opening this dump with?

Passed Very good one only 1 new question.

Passed on 4 Nov with 889/1000. Maybe 1 new question. Some questions in the dump seem to conflict with each other but was a really good dump.

This file could be like 200 or less questions if it wasn't for so many duplicates. I will see if I can clean it up and upload a better version.

The question in Q218 and Q242 is identical, but there is different answers in both of them. Why is the answer in Q218 Network Policy Server (NPS) and in Q242 Set-RemoteAccessRadius?

Your network contains an Active Directory domain named contoso.com. The domain contains a RADIUS server named Server1 that runs Windows Server 2012.
You add a VPN server named Server2 to the network.
On Server1, you create several network policies.
You need to configure Server1 to accept authentication requests from Server2.
Which tool should you use on Server1?

Q218:
A. Connection Manager Administration Kit (CMAK)
B. Routing and Remote Access
C. Network Policy Server (NPS)
D. Set-RemoteAccessRadius

Q242:
A. Set-RemoteAccessRadius
B. Routing and Remote Access
C. Add-RemoteAccessRadius
D. Network Policy Server (NPS)

Passed today with 889 points. This dump is 100% valid. A few questions from Clorida. Study both and you will be just fine.

-there's a typo - i wanted to say ntdsutil, snapshot, activate instance. :-)

@50Cal: thank you :-)
I'm not sure about the answers. I would say the first one dsmgmt and the second one Save template.
Maybe someone else can confirm?

Regarding your question - i think you should run ntdsutil first, snapactivate instance .and then dsamain. But again - maybe i'm wrong.

Can anyone please help me with this question:
Your network contains an Active Directory domain named contoso.com. The domain contains a
domain controller named DC1 that runs Windows Server 2012.

You create an Active Directory snapshot of DC1 each day.

You need to view the contents of an Active Directory snapshot from two days ago.

What should you do first?
A. Run the dsamain.exe command.
B. Stop the Active Directory Domain Services (AD DS) service.
C. Run the ntdsutil.exe command.
D. Start the Volume Shadow Copy Service (VSS).

I think the right answer is A. dsamain.exe

@Pet
Congratulation on passing the exam. Mine is Saturday. Would please tell what the answers are to the new questions you posted ?

Thanks man.

Passed with 9xx, dump still valid.
3 new quiestions:

You need to create Active directory application partition.
Which tool should you use?
a) dsmod
b) dsamain
c) dsmgmt
d) nesth

You have two servers, Server 1 and server 2.
You create a custom data collector set DCS1 on Server 1.
You need to export DCS1 from Server 1 to Server2. What should you do:
a) Right click on DCS1 and click on Export list
b) Right click on DCS1 and click on Save template
c) Right click on DCS1 and click on Data Manager
d) Right click on DCS1 and click on . (don't remember)

New question about Certificate tempate for Bitlocker. It was a hotspot with the Cryptography tab. Not sure what the right asnwer is though.

Passed yesterday in Sweden 8xx.

@Linus: thanks a lot, i hope we're right :-)

hi guys, here are my personal answers

@shezy

Q1 -A
Q2- B

@Pet
Q58 -b
Q87 - 2nd option

in ur fiirst post, I concur with your answers.

Please help with the below Questions:

Q1. How to view TTL value of a Name Server?
a) show-DNSServerCache
b) ipconfig.exe /displaydns


Q2. How to view TTL value of a Cached client?
a) show-DNSServerCache
b) ipconfig.exe /displaydns

Passed 9xx
this vce is helpful. but some wrong answers. therefore study the subject.
used cbt nuggets, sam vce, clorita, david , google alot.
Thanks to everyone!

I'd also need help with the following:

Q58 - is the answer A-gpupdate, or B-F5 as suggested in David's dump? I'd say David is right with the red dotted lines.

Q87 - .you need to configure Kerberos constrained delegation. What's the order of the three steps?
1. Run setspn.exe -L
2. Run setspn.exe -s
3. From the properties.specified services only
OR
1. Run setspn.exe -L
2. From the properties.specified services only
3. Run setspn.exe -s

Q94 - is the correct answer D - import the schema extensions?

Q168 - B or D ???

Q244 - B or D ???

Q266 - anyone please confirm what is the correct answer - A (as per Sam), B (as per David) or C (as Snowden suggested)

Hi guys, can anyone please help me with the following questions?
I think the correct answers should be:

Q127 - D-change the zone type
Q144 - B-Diskpart
Q155 - C-Dsamain
Q158 - A-create computer groups
Q169 - A-folder redirection
Q233 - A-set-ADServiceAccount (since the account already exists, we don't need New-ADSserviceAccount)
Q120 - I think the correct order should be:
1. Create a Windows Security Health Validator (WSHV) configuration
2. Create a health policy
3. Create a network policy

Can anyone confirm, please?

Hello everyone. Can some please help me out with this question:
QUESTION 67
Your network contains an Active Directory domain named adatum.com. The domain contains a server
named Admin1 that runs Windows Server 2012. Admin1 is configured as a Network Policy Server (NPS)
server and as a DHCP server.
You need to ensure that only computers that send a statement of health are checked for Network Access
Protection (NAP) health requirements.
Which two settings should you configure? (Each correct answer presents part of the solution.
Choose two.)
A. The Called Station ID constraints
B. The MS-Service Class conditions
C. The Health Policies conditions
D. The NAS Port Type constraints
E. The NAP-Capable Computers conditions

I have tried to verify the question but I've come across different answers.
Thanks in advance.

@ Linus.

Thank you Linus.

@Jhon,

correction on your first question. The correct answer is : A. File Screen

I got confused because they are similar. the question where the correct answer is Storage Report task is the following :

You have a server named Server1 that runs Windows Server 2012. Server1 has the File Server Resource Manager role service installed.
Server1 has a folder named Folder1 that is used by the sales department.
You need to ensure that an email notification is sent to the sales manager when a File Screening Audit report is generated.
What should you configure on Server1?
A. Afilescreenexception
B. Afilegroup
C. A storage report task
D. A file screen

@ Linus

Thank you Linus, I appreciate you answering my question. My exam is this coming Saturday. hopefully I'll pass.

Pass today 842
thanks all

Passed today with 8xx.

@jhon,

my answer to that is A. Name Resolution Policy

http://technet.microsoft.com/en-us/library/ee649207(v=ws.10).aspx

http://technet.microsoft.com/en-us/library/ee382323(v=ws.10).aspx

@ Linus
Thank you Linus, I had a strong feeling that that was the answer but on this dump it says that it was "A File screen".
One more question, what is the correct answer for the following:
Your network contains an Active Directory domain named contoso.com. The domain contains a Web server
named www.contoso.com. The Web server is available on the Internet.
You implement DirectAccess by using the default configuration.
You need to ensure that users never attempt to connect to www.contoso.com by using DirectAccess. The
solution must not prevent the users from using DirectAccess to access other resources in contoso.com.
Which settings should you configure in a Group Policy object (GPO)?
A. Name Resolution Policy
B. DNS Client
C. Network Connections
D. DirectAccess Client Experience Settings

Different dumps have different answer, but I thing is "B". What do you think ?

@Jhon

answer is: d: Storage Report Task.

http://technet.microsoft.com/en-us/library/cc731423.aspx

Guys, what is the correct answer for the following question:
Manager role service installed. Admin1 has a folder named Folder1 that is used by the human resources
department.
You need to ensure that an email notification is sent immediately to the human resources manager when a
user copies an audio file or a video file to Folder1.
What should you configure on Admin1?
A. A file screen
B. A file screen exception
C. A file group
D. A storage report task

Test still valid. Passed yesterday with score of 889. Also used David's practise test for help.

Passed yesterday!!!
100% valid
50 questions, all from David 278q dump, no new question.
Thanks David, Sam, Snowden and the other guyz.

Adios 411!!! 412: here I'm going!!!! :)

Passed today with marks 90x. The dump is really good and few question which are wrong are as follows

Mount VHD - Correct answer is Diskpart.
Epposed AD snapshot - Correct answer is DSAdmin.exe

In addtion to the the answers are shuffled for some question in the Exam. So Be careful while choosing options.

Good Luck !!!

This dump very valid, just one new question on exam today.
I have pass exam, thanks.

passed today - 9xx
not even one new question.
thx sam

What do you think about the new vce posted on 24-Oct
Microsoft Testinside 70-411 v2013-10-24 by David 278q.vce

There is a lot of change in the answer.
Some question are fixed
(Q93/Q218/Q241/Q252/Q264)
(Q193/Q202/Q238/Q267)
Others, like drag & drop, have a different answer, never mentioned here.

passed today, all questions from this dump

Thanks a lot to SAM and all

I have re-worked this file to allow for hot areas and select and place and uploaded it. The exam is exactly the same, I changed no answers. I just made it a little easier to help gauge your mark by creating the exam so that it can grade correctly. Thanks to the original poster who really did all the work. Watch for this in the next couple of days.

Again, I did no validation or changes, only made it more accurately gradeable. I also added sections and made each question part of the correct section based on the MS page that talks about the break down. I did happen to also find that there were several questions that had questions in the answers. I moved those to their own questions. I also split it into several exams, just to add the ability to limit down the number of questions during practice. Shrunk the screen images to managable view size, and turned the exhibits into proper exhibits. The studying still seems valid on this exam, but I felt it would help out the community as well if I shared the modifications. I did NOT modify the information or answers in any fashion.

i pass today 840

Still valid. Passed today in Russia. 8xx
1-2 new question.
Пока-пока 70-411.

Still valid. Passed today

Q174. Your network contains a server named Server1 that has the Network Policy and Access Services server role installed. All of the network access servers forward connection requests to Server1. You create a new network policy on Server1.

You need to ensure that the new policy applies only to connection requests from Microsoft RAS servers that are located on the 192.168.0.0/24 subnet.

Which two configurations should you perforin? (Each correct answer presents part of the solution. Choose two.)

A. Set the MS-RAS Vendor ID condition to $teelHead.

B. Set the Called Station ID constraint to 192.168.0.

C. Set the Client IP4 Address condition to 192.168.0.0/24.

D. Set the MS-RAS Vendor ID condition to ^311$.

E. Set the Called Station ID constraint to 192.168.0.0/24.

F. Set the Client IP4 Address condition to 192.168.0.

Sam answer : D and F. can anybody confirm this is correct?

Q169: I think the correct answer its "A", folder redirection. Not editing each profile user.

@ Snowden Please could you send me the amended dump with alterations as i am taking the exam tomorrow. 25/10/2013.

Thanks Budd really appreciate all your input

Passed yesterday with 9**, not many new questions, good dump, having an understanding of the content will help a lot, I watched trainsignal/cbt nuggets and read a book/technet.

passed with an 842, still valid

@Snowden about Q166:

I was looking for the error message online and encountered the issue a few times. It seems that it is a replication issue. As it is a user from a child domain, the infrastructure master is responsible for replicating universal group memberships to GC's. If anything changes, the user is temporarily unavailable until replication has taken place.

It could be that the infrastructure master hasn't replicated yet, but it could also be that it has a GC installed, in which case it won't replicate that to other domains.

http://technet.microsoft.com/en-us/library/cc773108(v=WS.10).aspx

http://social.technet.microsoft.com/Forums/windowsserver/en-US/748f6be8-89a5-4637-a0c5-3fc5d0523460/problem-with-group-members-directory-object-not-found

Hi Guys,

For Q142, I think the answer is wrong. It should be:

1- Add boot image to Server1 (needed to create the capture image in next step).
2- Add Capture image to Server1
3- Start Server2 by using PXE.

No need to add an install image as the question asked just only for capturing that image of server2.

Please let me know if you agree.

Cheers guys

The

Q266: When you attempt to add Service1 from Server1 to the delegation setting of Server2, you discover that Service1 is not listed in the Available services list.
You need to ensure that you can add Service1 for constrained delegation. What should you do first?
Correct answer should be D) From a command prompt, run the setspn.exe command. ?

enought of trolling.

Now about Q66.Q105:
http://technet.microsoft.com/en-us/library/cc772401%28v=ws.10%29.aspx
"The CA certificate must be present in the Trusted Root Certification Authorities certificate store on the local computer,
whether that computer is a client or a server, for other certificates issued by the CA to be trusted."
http://technet.microsoft.com/en-us/library/cc730811.aspx
"hen the server receives a certificate from a client computer, trust for the certificate is established because the server running NPS finds the issuing CA certificate in its own Trusted Root Certification Authorities certificate store."

Who can stand for the Personal store? Why?

@Tony from Netherlands:You need to identify which domain controller causes the issue shown in the error message,
it does not ask for which role causes the issue. now does DC10 lost the user?
"You open Active Directory Users and Computers on a client computer and connect to DC1" . DC1 doesn't know the user from child domain but knows the group members.
Infracture Master is well configured, not on PDC.
I have no clue but stupid as it gets the "identify which domain controller causes the issue" maybe is DC1 ??
that's him that reports the error to the user.. LOL

@L from Unknown: I tryed the PXE and it works with the 00000.MAC

@marisgoo: http://technet.microsoft.com/en-us/library/cc766200%28v=ws.10%29.aspx#BKMK_MultiKeyOneUSB

@jamestatus/marisgoo,

the question mentioned that there was an early attempt to use the recovery key (perhaps using the manage -bde -unlock e: recovery c:).

The command manage-bde -protectors get e: will display the key protection method. Thus, this information may be needed for the work around?

Its just my own analysis, I may be wrong. Any more thoughts?

ref:
http://technet.microsoft.com/en-us/library/dd875513(v=ws.10).aspx#BKMK_protectors

@marisgoo I also think the answer is manage-bde -unlock e: -recovery c: as this actually unlocks and specifies the correct drive, I've had this answer on my notes for the last week anyway.

Hello,

Q156: I think the correct answer is B: manage-bde -unlock e: -recovery c:
but dump says A: manage-bde -protectors get e:
Anyone has a clue on this?

@snowden; @L OK, Thanks, no doubts.
Q123: I think the correct answer its D, you should configure SPN with service managed account, dont you think?

@margsoo:Snowden is right,Give it a go if you have a test lab and u will kno what he means

Prometric got up. No new questions in the exam. But i still got 9** . Cheers.
Bye bye 411.

Someone approved examination test alone Sam studying or have many questions erroneous?

@Mark I have to agree with you there. I think the answer to Q168 should be D. DC11

exam still valid 873. 4 new questions

@L from Unknown: thank you for showing that way to prestaging. It looks works with 001422012345 and 00000000000000000000001422012345. I will assume it's correct because wds let me do "Next" but I didn't try a pxe install.
@marisgoo from Unknown:"You install the Windows Deployment Services (WDS) server role on Server1.You need to capture an image of Server2 on Server1." If you install the WDS you need/must create a boot image and from there create the capture image before you PXE the other machine or you will not have a boot image to start the capture image. http://www.wikihow.com/Image-With-Windows-Deployment-Services-%28WDS%29

Hello,

@snowden: Q142, i think Sam answer is correct, check this:

https://social.technet.microsoft.com/wiki/contents/articles/11680.creating-a-capture-image-in-wds.aspx

To capture the image you need to start with PXE.

Regards

@snowden

Q189 the dump has the right answer.

mac address for prestaging will start with 0000:.

Refer to the below:
http://jesin.tk/how-to-prestage-a-computer-in-active-directory/

Besides I just wanted to tell you a big thank you,Your the man

Together with technet articles, the product itself, and a book on the subject a good dump, yes. Wording and thus answers sometimes different, soooo; understand what you`re cramming for.

Passed today with a 837 using Sam and Clorita together with a few CBT Nuggets. 90% of the question were from this dump. With maybe 1 or 2 new ones.

You have a server named Admin1 that has the Web Server (115) server role installed. You obtain a Web Server certificate.You need to configure a website on Admin1 to use Secure Sockets Layer (SSL). To which store should you import the certificate?

Personal or Trusted? anyone? and why?

@manolo: I have lost track of what I changed already at my resume dump taken from sam dump. sorry

@Snowden
VCE publications are taking too long.
Could you post the correct answers to update the VCE for myself ??

Dump still valid, passed with 8xx.
No new questions

please can you tell us what were the new questions about and possible answers?
to update the dumps, thank you.

Passed few minute ago.851
This dump is still valid

Passed today. Score 800.
Only one new question about bitlock (via hotspot).
Thanks Sam!

Passed today 8xx
few new questions
Thanks everyone :)

thanks to all who responded to my Q. orangejulius, snowden, ron, george.g .

on other note, there are a couple of people here who promised they will upload a new, better revised vce of sam? where are they?. could you please upload?.thanks!

who was the person complaining about Prometric.i totally agree with him.Super Slack.hate it when services are not available when needed.

@Ryan,
Can you give us sime more info about new Questions if you still rmember tham?

Thanks for help

Hi Guys,

Please if you can confirm the answer for Q27. The answer should be A as I think. We need a "Capture" image and not a "boot" image. Please correct me if I am wrong.

Thanks for your help guys

Passed from last couple f of hours Vaild Exam thx Sam

the Q are :

6-8-13-17-21-29-38-42-45-47-53-66-70
-83-97-108-109-114-118-129-134-140-146
-147-158-167-170-178-180-182-195-210
-236-237-247-250-252-253-254-258-259
-261-267-268-269-271-274

hint : check the ans. of 267 - 259

Good Luck

Passed today with 790. 11 new questions. about half of the new questions were hot spot questions. If you Study outside of the dump you should be good. I wouldn't just use this dump as the sole resource of passing this exam. I ran through this dump twice.

Also, I will go through the dump and mark the questions i had.

Passed yesterday with 8xx! Only 1 new question about BitLocker.
Dump is valid! THX!!!

Passed yesterday, dump is still valid, but u shood also study yor books cos sum of da answers r wrong, Thnx very much Sam.

Passed today with 8xx!! Only had 2 new questions!! Thanks for the dump.

Q237 should be A. the regular Audit Policy settings as the current config is only logging failed events

http://technet.microsoft.com/en-us/library/cc737542(v=ws.10).aspx

Same here.

passed with 890.

4 new questions.
Q165/Q229/Q255 - I did not have authoritative restore in the answers so also went with tombstone reanimation.

Q193/Q202/Q238/Q267 - GPO links was not in the answers so I also went with loopback processing


if my test ever shows up it should be good practice exam for time being.

Passed today with 905. 50 questions (I expected 70). 4 new questions.
Q165/Q229/Q255 - I did not have authoritative restore in the answers so I went with tombstone reanimation.
Q193/Q202/Q238/Q267 - GPO links was not in the answers so I went with loopback processing
Q233 - Install-ADServiceAccount was not in the answers. I had the same choices as Antoine.

GL everyone!

Q272 is wrong

the dfl is already 2008. all of the answer look inadequate. anyone have an idea of how this question should be worded? I think htere is a duplicate of this one as well.

Can someone explain Q168. I don't understand it. I thought this was an issue if the GC is on an infrastructure master in a multi-domain setup

I agree with JamesTatus:

Q184, The answer should be:
New-ADServiceAccount
Install-ADServiceAccount
Modify the settings of AppPool1

Dump is still valid in EU, passed with 889.
It was very helpful,
thanks!

50 questions. 2-5-6-15-17-21-29-32-33-37-38-41-44-45-47-49-52-53-59-278-275-274-267-265-263-262

Thank you Sam, Snowden and the other guys. Pass today still valid 931 points. I have read passguide and Sam. passguide 89,-. Diverend answers. Thank you. Now up to 412.

Pass 2day with 889/1000 of this dump.
thanks Sam , Snowden , Orangejulius .
All question of this dump' Sam

P/s: Now hit 70-412 .thank so much ..

@all help?
Q161: confirm question?
ntdsutil>snapshot>activave instance ntds>create ?

thank alots

@eric Q189, I understand you can only prestage with MAC, GUID and ipv6 DUID.
MacAddress: http://en.wikipedia.org/wiki/MAC_address
ex: 0123456789ab
http://en.wikipedia.org/wiki/Globally_unique_identifier
ex: 3F2504E0-4F89-11D3-9A0C-0305E82C3301
http://ipv6friday.org/blog/2011/12/dhcpv6/
ex: 00-01-00-01-14-77-21-A2-00-50-56-AA-5E-EE
but I may be wrong.

@Sam Q142: You generalize Server2.You install the Windows Deployment Services (WDS) server role on Server1.You need to capture an image of Server2 on Server1.Which three actions should you perform?
Looks more correct to me:

Add a bootimage to server1, add a capture image to server1, start server2 PXE

Q189: When pre-staging a computer for WDS do you have to pad the MAC address with zeros like it says in the answer? I can't find where it says to do this in MS documentation.

Hi

Hello Ricardo
are you able to send be updated dump file please to soydlm@gmail.com as my exam is in four days.

Thanks

@Matt Q:169 It's A)?
I haven't get there yet at that question on my reviews.
http://blogs.technet.com/b/filecab/archive/2012/03/30/configuring-primary-computers-for-folder-redirection-and-roaming-profiles-in-windows-server-8-beta.aspx
http://technet.microsoft.com/en-us/library/hh848267.aspx

Q282. first choice is "run setspn and specify -/ parameter". This is clearly a mistake, any ideas what should be the correct answer?

Couple more corrections:

Q95, and any question about transferring DNS to Unix should be Using the Advanced tab of the DNS server. You have to enable BIND secondaries to transfer to a Unix based Server. Without enabling that it can't tranfer to Unix (Set this up yesterday at home using Server 2012 and RedHat)

Q. 169

Answer should be A. From a Group Policy object (GPO), configure the Folder Redirection settings.

C. (what the dump says is the answer) is way off. That would use wayyyy more bandwidth, not to mention be a hassle to configure.

@Orangejulius
About Q255

But the answer in Sam's test is correct, right?

You can recover security group membership by tombstone reanimation. doesn't matter if it's for 1 or 100 members.

http://social.technet.microsoft.com/Forums/en-US/4d15f07a-7f7d-422a-8a2e-3122e7753b80/how-can-restore-deleted-ou-and-security-group-through-any-free-tool-or-script-asap

@Ron,
Here is the article:
http://blogs.technet.com/b/niraj_kumar/archive/2009/02/05/active-directory-snapshot-new-feature-in-windows-2008.aspxa

A little ways down it shows the following with a picture:

1. Create a snapshot:
open CMD.exe, Ntdsutil, activate instance ntds, snapshot, create, list all.

@Snowden, here is a link I found concerning RODC promotion: http://technet.microsoft.com/en-us/library/dd378860%28v=ws.10%29.aspx
so you first prestage an account, create the answer file and then run dcpromo.exe /UseExistingAccount:Attach /unattend:"<Path to answer file>"

If you edit the File1.txt and change DCAccountName=TESTE to DCAccountName=TESTE123 for example and run dcpromo against it, you get:
C:Windowssystem32>dcpromo.exe /CreateDCAccount /ReplicaDomainDNSName:home.loca
l /unattend:C:UsersAdministratorDesktopFile1.txt /UserName:homeadministrator
/Password:balblablablablablapasswordbçablabla
The dcpromo unattended operation is replaced by the ADDSDeployment
"some blablabla from Microsoft"
----------------------------------------
The following actions will be performed:
Create a computer account for a new read-only domain controller for the domain "
home.local".

Computer name: TESTE123.home.local
Site: Lisboa

Additional Options:
Read-only domain controller: "Yes"
Global catalog: No
DNS Server: No

Source DC: DC1.home.local

Password Replication Policy:
Allow: HOMEAllowed RODC Password Replication Group
Deny: BUILTINAdministrators
Deny: BUILTINServer Operators
Deny: BUILTINBackup Operators
Deny: BUILTINAccount Operators
Deny: HOMEDenied RODC Password Replication Group

Delegation for RODC Installation and Administration:
HOMEuser1


----------------------------------------

Starting.
.
You have successfully created an account for a read-only domain controller (RODC
). You will be able to attach the server that you want to be the RODC to this ac
count by running the Add Roles Wizard in Server Manager on that server.

An account for the read-only domain controller "TESTE123" is now created in the
domain "home.local".

The domain controller account is assigned to the site "Lisboa". You can manage s
ites with the Active Directory Sites and Services administrative tool.

Active Directory Domain Services (AD DS) binaries will remain installed. To unin
stall AD DS binaries, use Server Manager to remove the AD DS role.

@Snowden : thanks for ur details.i see

@Havana Le: the pre-stage of a RODC export file works to pre-stage with dcpromo using the exported file. with the txt file you can't promote anything,you just can pre-stage the RODC, that's what comes from the wizard.
dcpromo works? Yes it works to prestage RODC using a script at AD! dcpromo can promote a server? No, it can not! not even with a script.
Question at dump is wrong ? maybe.someone that had it at exam please tell us. DCPROMO MUST BE RUN AT THE DC! not at the future RODC.You're just creating the server RODC object with dcpromo.
File1.txt format:
; DCPROMO unattend file (automatically generated by dcpromo)
; Usage:
; dcpromo.exe /CreateDCAccount /ReplicaDomainDNSName:home.local /unattend:C:UsersAdministratorDesktopdcp.txt
;
[DCInstall]
; Read-Only Replica DC promotion (stage 1)
DCAccountName=TESTE
; RODC Password Replication Policy
PasswordReplicationDenied="BUILTINAdministrators"
PasswordReplicationDenied="BUILTINServer Operators"
PasswordReplicationDenied="BUILTINBackup Operators"
PasswordReplicationDenied="BUILTINAccount Operators"
PasswordReplicationDenied="HOMEDenied RODC Password Replication Group"
PasswordReplicationAllowed="HOMEAllowed RODC Password Replication Group"
DelegatedAdmin="HOMEuser1"
SiteName=Lisboa
InstallDNS=No
ConfirmGc=No
ReplicationSourceDC=DC1.home.local

@Ron: Microsoft shows it can be done both ways:
In New Action, type the name or browse to the file path that contains Ntdsutil.exe and in Add arguments (optional), type the following command, and then press ENTER: ntdsutil "activate instance ntds" snapshot create quit quit.
From that page I can not understand what should be the more correct way, I presume both are ok, there is no diference at reality. Can't be sure exam takes the same as I do. I would prefere first select the ntds and then go for the snapshot and create.

I did the exam today and barely passed. But glad a pass is a pass. Thanks SAM for this dump & other who have corrected some questions here.
I used this dump + CBT Nuggets + Study book. More than 10 new questions.

Help ?
Q75: confirm question below for sure :
A. Add-windowsfeature cmdlet
B. Dcpromo command
C. Dism command
D. Install -ADDSDomaincontroller cmdlet
E. Install Windowsfeature cmdlet

thanks

@karthik : Can u post smthing to share for everybody ur exam?
How much question in this dump?
Confirm some questions below of whole ?
thanks to share .

Passed with 9**.
Thanks everyone

@ Matt, can you please forward the technet link. Did you checkout my link. It gives good detail on the steps and that Sam's answer is correct.

Sorry it's been a while since I have posted. I finally sit my exam Friday, after being screwed over by Prometric for 2 weeks. I swear I won't do another Microsoft exam after my MCSA until they switch off of Prometric.

As far as the AD Snapshot the correct answer is: ADSIedit, Activate the Instance, Snapshot, Create. At least according to Microsoft's technet articles.

@ Snowden , check this out http://technet.microsoft.com/en-us/library/cc753609(v=ws.10).aspx for the AD snapshot question

@SAM Q87: You need to identify in which order the GPOs will be applied to Client1. In which order should you arrange the listed GPOs? To answer, move all GPOs from the list of GPOs to the answer area and arrange them in the correct order.
GPO-links that are enforced cannot be blocked from the parent container.
Without enforcement from above, the settings of the GPO links at the higher level (parent) are overwritten by settings in GPOs linked to child organizational units, if the GPOs contain conflicting settings.

With enforcement, the parent GPO link always has precedence.

Site enforcement
domain enforcement
OU enforcement
OU
domain

Leaving us with the following order:
GPO3
GPO2
GPO5
GPO4
GPO1

Is this wrong or is just me?

@Daniel: You need to activate the correct instance of ntds to perform maintenance tasks. The standard instance of Active Directory is "ntds", so we use "activate instance ntds"
doing Ntdsutil "ac i ntds" "sn" "c" "q" "q" or Ntdsutil "sn" "ac i ntds" "c" "q" "q"
works. because "ac i ntds" is a subcommand of both ntdsutil and snapshot. I understand it's just a matter of what you like to do first. but what the exam whats you do do? Microsoft states that: "Before you can run the snapshot subcommand, you must run the activate instance subcommand in Ntdsutil to set an active instance." http://technet.microsoft.com/en-us/library/cc731620.aspx Example: ntdsutil: activate instance ntds <- showing ntdsutil prompt tell us that you didn't run snapshot.
I may just be too much "perfect" or trying to please Microsoft. lol

@Snowden

I assume Sam's answer is correct. See this link:
http://mizitechinfo.wordpress.com/2013/08/13/simple-step-create-a-snapshot-of-ad-ds-in-windows-server-2012-r2-by-using-ntdsutil/

@Sam Q161: You need to create an Active Directory snapshot on DC1. Which four commands should you run?
Correct answer order should be ntdsutil, activate instance ntds, snapshot, create.

@ELMO/everybody

I have uploaded yesterday passguide 70-712 Q247 converted PDF into vce. will take 3 days until seen on the site.
took me 2 days do do it as i want, read useful :) i did not change anything (maybe some mistakes during conversation, but did not find any for now)

once more, many thanks to the PDF uploaders :)
cheers

@Orangejulius

I am currently creating a vce based off of sinapore's recently shared pdf 247Q passguide for 412. Hope to see you as active for 412 studies. Great Job.

@ Mark

You are correct. That question is still Tombstone Reanimation.

@ Antoine

My initial guess is that the dump answers are wrong on Q233. I recall my answers were the same as 253.

Also, I forgot to mention that Q93/Q218/Q241/Q252/Q264 for me was actually Network Policy Server (NPS), not New-NPSradiusclient. I suspect MS is shifting the wording for this from test to test. They result in the same answer though.

Thanks for creating an updated VCE Ricardo. Hopefully it will help the rest of you as much as Sam and Kiran helped me. Now, on to 412!!!

@ snowden and sam
could you tell me how accurate are the answers of the passguide dump, that sam uploaded ?
my exam is in the next week

Q184, shouldn't the answer be:

New-ADServiceAccount
Install-ADServiceAccount
Modify the settings of AppPool1

The answer given instead has to install a 2012 domain controller instead of using Install-ADServiceAccount - how can the service account be used though without being installed? Anyone agree with my above answer?

Hi

Hello Ricardo :)
are you able to send be updated dump file please to george.gxyz@gmail.com as my exam is in two days.

Thanks :)

I have uploaded an updated exam with all the updates provided by Orangejulius and have also fixed many of the hot area and drag n drop answers from Sam's original exam. Hopefully it will get published soon.

This dump is still valid passed a few days ago 952/1000. Make sure you verify the answers as a lot of them are wrong in the dump.

q224 the correct answer is still tombstone reanimation? The difference between it and q229 that here the whole group is deleted and in q229 only some users from that group

@Orangejulius. Q 233 there is no Install-ADServiceAccount.

Server1 and Server2 host a load-balanced website named Web1. Web1 runs by using an application pool named WebApp1. WebApp1 uses a group Managed Service Account named gMSA1 as its identity.

Domain users connect to Web1 by using either the name Web1.contoso.com or the alias myweb.contoso.com.

You discover the following:

When the users access Web1 by using Web1.contoso.com, they authenticate by using Kerberos.
When the users access Web1 by using myweb.contoso.com, they authenticate by using NTLM.

You need to ensure that the users can authenticate by using Kerberos when they connect by using myweb.contoso.com.

What should you do?


A. Run the Set-ADServiceAccount cmdlet.
B. Run the New-ADServiceAccount cmdlet.
C. Modify the properties of the WebApp1 application pool.
D. Modify the properties of the Web1 website.

Please help me!

Well done Orangejulius , you are the man :)

Are you able to upload updated dump for the rest of us to practice , if yes please help as soon as you can I am having my exam in two days.

Tanks for you help :)

Passed with 9**.

Install-ADServiceAccount appears to be correct for 233 and 253. I had this question.

GPO-Links is definitely the answer to Q193/Q202/Q238/Q267. It's possible they could throw in Loopback, but this is our 3rd confirmation.

Another question I had, Q165/Q229/Q255, is NOT Tombstone Reanimation. It appears to be AUTHORITATIVE RESTORE. This is another possible toss-up if the questions are different.

Q117 is definitely A, B, D

Q166/Q178/Q265 I also had, and is "Managed By" tab.

36, 37, 38, 39, 45, 46, 47, 48 featured prominently on my test, and at least 4 were on it.

Others I noticed: 2, 4, 5, 13, 17, 21, 29, 33, 34, 40, 42, 49, 52, 63, 68, 72.

Good luck everyone, and thanks a million Sam and Kiran.

@Sam Q117: You need to ensure that users connect to the replicated folder in their respective office when they connect to \contoso.comShare1.
Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)
Why "Create a new topology.", the only topology you can create with 2 servers is Full mesh - "Share1 that is replicated by using DFS Replication"
My opinion is that you need to "Modify the Referrals settings".
What should be the correct answer on this? ABD ?

Q209 is empty and the answer is "enable client-side targeting". Does anyone know the question?

Dump still valid in UK passed yesterday. BE AWARE some of the answers are WRONG!

@Melvin: http://technet.microsoft.com/en-us/library/cc708480%28v=ws.10%29.aspx
If your disk gets full, you can install a new, larger disk and then move the update files to the new location. To do this, after you create the new disk drive, you will need to run the WSUSutil.exe tool (with the movecontent command) to move the update files to the new disk. For this procedure, see Managing WSUS from the Command Line.
"WSUS1 has the Windows Server Update Services server role installed and has one volume." I understand with this that wsus is installed and configured already. if not Windows Server Update Services Configuration Wizard is the solution because you can choose at the initial configuration where to place the wsus files. I would choose the movecontent, for me the wsus was configured at the time when disk is added.

@Sam: Q94-You enable the Turn on TPM backup to Active Directory Domain Services policy setting by using a Group Policy object (GPO).
You need to ensure that you can back up the BitLocker recovery information to Active Directory.
Why you choose the answer? I'm reading http://technet.microsoft.com/en-us/library/jj635854.aspx and looks like there is a need to extend the schema for 2008 R2 to support Windows 8/2012 TPM owner authorization value.
Windows Server 2012 R2 and Windows Server 2012 include the required schema extensions by default.
Anyone tested this, I don't have now a 2008R2 domain installed at lab to test this.

@ Orangejulius , for 233 and 253 , i did some research but all the options looks similar. I will dfntly go for New-AdServiceAccount for 233. And for 253 , i will go for the dumps answer of Install-ADServiceAccount.wont have much reasons to explain why.

@ Melvin

I think SAM is right

A

If your disk gets full, you can install a new, larger disk and then move the update files to the new location. To do this, after you create the new disk drive, you will need to run the WSUSutil.exe tool (with the movecontent command) to move the update files to the new disk. For this procedure, see Managing WSUS from the Command Line.

Which is correct answer?
Q131
You have a server named WSUS1 that runs Windows Server 2012. WSUS1 has the Windows Server Update Services server role installed and has one volume.
You add a new hard disk to WSUS1 and then create a volume on the hard disk.
You need to ensure that the Windows Server Update Services (WSUS) update files are stored on the new volume.
What should you do?

A. From a command prompt, run wsusutil.exe and specify the movecontent parameter.

B. From the Update Services console, run the Windows Server Update Services Configuration Wizard.

C. From the Update Services console, configure the Update Files and Languages option.

D. From a command prompt, run wsusutil.exe and specify the export parameter.

---
From Sam : A. From a command prompt,runwsusutil.exe and specify the movecontentparameter.

From Clorita: B. From the Update Services console, run the Windows Server Update Services Configuration Wizard.

The key to remember is that one pertains to a DNS server, the other is just a basic name server. The powershell command is for DNS, the ipconfig command is for the name server.

I'm taking the test in the next day. Any idea what the solution to 233/253 is? No one has really stated an opinion. I'm a little baffled myself.

Thanks everyone!

@Miami and JamesTatus,

youre right. thanks for clarifying that.

@Miami, ipconfig /displaydns also lists the TTL

The difference is, this is typically for client side cache, whereas Show-DnsServerCache is for the cached records on the DNS server in the DNS server cache.

@Melvin, when you use Show-DNSserverCache you can see TTL.
I think Orangejulius is right.

@Miami, my answer to that question is

B. ipconfig.exe /displaydns

if you run that command, TTL value will be displayed.

I uploaded a version of Sam's vce.
I fixed some questions, based in your comments in this page.
I also created groups of 55 question each, hotspots and drag & drop.

Hi guys, good progress here for sure. here is 70-412

Latest passguide VCE 70-412 http://adf.ly/XYMph

I schedule my exam to next monday. Im studing this dump, is sufficient to pass the exam?

I already read the book exam 70-411 from Microsoft and view the cbt nuggets vídeos.

Thanks anyway,

Pass today with 910, there were two new questions but it is enough to pass the test. Thank you Sam.

Hi Sam thanks a lot for this dumps. it's really valid as i cleared the exam on 12OCT - 2013. oly 1 new question came that too sam already confirmed about this. got 850

Very Valid! Just Passed with 873!!

Thanks Sam

Passed today in The Netherlands with score 778!! Thx a lot for this .vce!

@Shinda for 169 I agree, I think it should be A.

@Danny for 95, shouldn't you modify the advanced settings so that you can enable bind secondaries? This is typically required when introducing Unix BIND servers into Windows.

Invalid Yesterday With 677 . :( Still Invalid 411-412 Fuck This Situation

Q58 - I agree Press F5 should be the answer this will change it from a Red Dash Underline to Green which means this setting is used

Everything I've seen in the last week says this dump is still valid for 800-850 in the US. If you know your stuff too you should pass.

Exam E, q40 , all answers seems correct to me.Did a physical check on my WSHV settings. All options are available on it.

Confused on the steps for Exam C, q20 ,the three actions needed to log all DHCP clients that have Windows Firewall disabled. Following Cbt nuggets , the process is simple but mostly includes all actions.
1) Click on Configure NAP. In this process, Remediation server group is created.
- this will automatically create connection request policy NAP_DHCP.
- this will auto create NAP DHCP network policies. Compliant n Non-Compliant.
-2 health policies will also be created.
- we than have to adjust the NAP requirements on NAP->SHV->WSHV according to our demand. which is windows firewall disabled.

So what could be the correct step?? Any ideas

@ Miami

The two are asking for difference things: The first is asking for the TTL of the client DNS on the server.

The second is a DNS server, not a member server. It's asking for the TTL from the server cache. Similar questions, but with different solutions.

Can anyone explain me this:

You have a server named Admin1 that has a Server Core Installation on Windows Server 2012.

You need to view the time-to-live (TTL) value of a host name that is cached on Admin1.

What should you run?

A. dnscacheugc.exe
B. ipconfig.exe /displaydns
C. nslookup.exe
D. Show-DNSserverCache

Answer: B
===========================================================

You have a DNS server named Admin1 that has a Server Core Installation on Windows Server 2012.

You need to view the time-to-live (TTL) value of a name server (NS) record that is cached by the DNS Server service on Admin1.

What should you run?

A. Show-DNSServerCache
B. dnscacheugc.exe
C. ipconfiq.exe /displaydns
D. nslookup.exe

Answer: A

Q169 - the question states that must minimize network traffic
I believe the answer is using Group Policy Folder redirection, as this uses linking of the documents folder rather than changing the whole profile directory to the server path.
Also if you change the whole profile path each time you log onto a computer it will download the entire profile to the computer including the Documents folder therefore increasing traffic

let me know if this sound wrong

@ Esso Answer on Q31 is SSTP

http://blogs.technet.com/b/rrasblog/archive/2006/06/14/which-ports-to-unblock-for-vpn-traffic-to-pass-through.aspx

Guys what is the correct answer for EXAM F Q 31 ?

Took the test this week, loopback processing was not an answer, GPO links was.

Also got Q264,Q218,Q252,Q242,Q93 and the options were:

A) New-ADServiceAccount
B) Mod properties gMSA1 account
C) New-NPSRADUISCLIENT
D) Install-ADServiceAccount

New question about creating the network unlock certificate for bitlocker.

@Snowden

Q193/Q202/Q238/Q267

Danny @ Oct 09 2013, 5:29 PM states that he took the test and passed, but loopback processing was not an answer. He thought GPO-links was correct.

I could swear Loopback is correct as well, but if it's not in the answers.

@Bahar

Q88 - In Kiran's dump, he includes a hotspot where the correct answer is "PXE response" tab. I think that is actually correct.

Q163 - Answers are blank in Kiran's as well. Snowden's link has the answer though, appears to be "Microsoft Software Key Storage Provider." Perhaps "Minimum key size" of 2048 with be part of the answer.

Great job everyone. we'll tackle this thing yet.

@Orangejulius, it is correct, he should press F5 at server side at the IE policies. I tested it right now and that works fine.
http://4sysops.com/archives/internet-explorer-10-administration-part-3-group-policy-preferences/
@bahar:
Q88 answers is at Clorita dump,I am using a Domain Admins account to run the console and the service is running under local system.I try approve Requests from Pending devices, then I got notice Access Denied, (WIndows Server 2003 R2). And why Architecture x64, clients are x86 ? Is that the reason and how to fix it? I beleive it's C) To grant permissions to approve a pending computer.
Q163:Provider Category? http://technet.microsoft.com/en-us/library/jj574173.aspx

could someone advise for Q163 Q88, there are NO ANSWERS

@Havana Le
Thanks for your response.

As for Q58 he may be right, that IE10 or 11.
@Orangejulius e-mail me please at me.snowden@mt2014.com

Q193/Q202/Q238/Q267 - Loopback processing,
https://social.technet.microsoft.com/wiki/contents/articles/2548.windows-server-understand-user-group-policy-loopback-processing-mode.aspx
Q233/Q253 - No idea to, need to debug it with more time.

Q144 - DISKPART for SURE
Q155 - DSadmin for SURE
Q166/Q178/Q265 - manage by tab of the rodc
Q93/Q218/Q241/Q252/Q264 - NPS or New-NpsRadiusClient
Q165/Q229/Q255 - admin deleted the group members, didn't delete the users or group. we just want to recover who was on that group. now what should the superadmin do?

@Snowden

Thanks! I forgot to remove Q15/75 out of the list. We decided earlier that dcpromo was indeed the correct answer due to the script.

As for Q58, we had one user claim that the group policy was already being enforced due to the red lock lines in the picture. He said they had a similar issue in their own environment, and that F5 in the options screen fixed it. I personally thought it was Gpupdate /force, but that comment made me doubt it a bit. I'll probably just got with gpupdate either way.

I'll update the list with a new entry once we have consensus on Q193/Q202/Q238/Q267 and Q233/Q253.

Thanks!

@Orangejulius, correct answers
Q93:"New-NpsRadiusClient"
Q58 - gpupdate
Q117 - A, B, D
Q15/Q75 - DCPromo, remember that does not promote RODC!! Just creates the object at the DC, already promoted. close the RODC pre-stage wizard for dcpromo to run ;)

@ Mark

According to Ron, "New-NpsRadiusClient" in Q93 is a correct answer as well. We've heard a few reports of this. I agree with this.

To those requesting possible mistakes/corrections again, these are either correct answers to questions in contention, or outright wrong answers. As stated before, these correspond to a mix of Kiran and Sam's question numbers, so the question may be 1 number above or below the actual question number. As usual, please tell me if any of these are correct, incorrect, or if any more mistakes are found. My end goal is to post a fixed version after I complete me test Tuesday.

Changes I believe are correct:

Q144 - DISKPART
Q155 - DSadmin
Q166/Q178/Q265 - manage by tab of the rodc
Q93/Q218/Q241/Q252/Q264 - NPS or New-NpsRadiusClient
Q165/Q229/Q255 - Tombstone Reanimation

Changes I'm unsure of:

Q58 - Press F5, not gpupdate?
Q117 - A, B, D?
Q15/Q75 - Install-ADDSDomainController or DCPromo?
Q193/Q202/Q238/Q267 - Loopback processing suspected, but according to Danny it's GPO links
Q233/Q253 - No idea. Need some more feedback.

Passed today, this dump is a help but still needed to study additional material

it's a very good dump, I passed today, thanks Sam, your dump was rly a help,
I just wanna ask if someone checked the new dump by Jessica? it look similar to this dump, a friend will make his exam on Monday and wanna know if its gd or not ! thanks a lot

Matthew from United Kingdom and that new question was what, about what ???

Still valid, passed today, thx a lot!

Good dump. Still valid in the netherlands.

I passed today with 8xx of 1000

@Orangejulius, "Q93/Q218/Q241/Q252/Q264 - NPS"
In Q93 there is an answer "New-NpsRadiusClient", is that the one?

@snowden and Sam

Please drop me a mail. Require some help with the 412 exam.
kiranjagganath@gmail.com

Today I passed it in Hungary. I found only one new question, all the others were from this dump. Before you start to learn, check the comments, because some of the answers are not correct in the dump. Anyway, Thank you Sam! :)

@snowden

There has been a lot of discussion regarding selected questions/answers in this dump. I highly suggest going through this board before studying this dump. Orangejulius put together a well defined list. Check his message from Oct 08 2013, 1:13 AM.

Someone to check the answers on Sam and Clorita? I'm doing it as I did for 70-410. Anyone to exchange answers and new questions? email me at me.snowden@mt2014.com
I'm checking Clorita dump right now, moving to Sam next
Orangejulius? Danny? Ron?

Valid in egypt 890
10/10/2014 just 3 new questions

@bahar :
U can find 2 dumps nofenofe 329q vs Snowden 426q (confirm with small number incorrect) .
70-410 valid in vietnam today with total 50 q in dump nofenofe.
U have to make sure ur answer because this dump nofenofe has many wrong answers. and using Snowden to find out the correct answer.
thanks

@Havana Le
would you please tell me on which dump you studied

Passed today with 8xx
thanks Sam!
Learn you book very well with this dump and u will be oke.

@Tam : i passed 410 today.see u in list at edt.now hit 411.thanks Sam

Dumped is still valid passed today with a 857.