Pass Your Microsoft 70-414 Exam Easy!

@Ocean

You are wrong with the Cloud!

You wrote : Answer indeed is create a private cloud and scope a new host group with it

Install VMM, then do what you wrote. You will see that you can not create a cloud ;-)

Ask yourself what does a Cloud need to be configured before! (and so on .)

It is the Host Group.

The Corrector..I've been doing much the same trying to verify each question but there are a number that are left to interpretation that I'm wavering on. Any chance you could send me a copy? If so do you have a link where I could download it from? Appreciate your help!

I took the time to go through EACH question and find proof/confirmation for each answer. Some were found on technet, some in the teacher's guide from the official course. I sent a copy (almost final) to NOS via the forum we used.

Congrats The Corrector! Is this the dump you used or do you have a modified one that you used to achieve the 9xx result?

Passed in the 9xx.. Goes to show that I'm good enough to get the right answers even though people keep arguing with me. Good luck guys..

passed today. now mcse2012 :) 760

I passed using anon1. changed branchcache to DFS - High eight hundreds

I tried uploading but failed. Maybe NOS and yahoo group can take over with new answers.

@corrector this technet confirms your answer:

In Virtual Machine Manager (VMM) in System Center 2012 and in System Center 2012 Service Pack 1 (SP1), self-service user roles were redesigned to provide a richer environment for creating, deploying, and managing virtual machines as well as services in a private cloud.

n VMM in System Center 2012 and in System Center 2012 SP1, self-service users deploy their virtual machines and services to private clouds. This is a change from earlier versions of VMM, in which self-service user roles are assigned host groups, and virtual machines are deployed automatically (and transparently) to the most suitable host in the host group. A private cloud consists of one or more host groups that provide computing capacity and disk resources to self-service user roles. A private cloud can be assigned to multiple self-service user roles. Role-level quotas on each self-service user role that has the private cloud within its scope are used to allocate computing capacity and other storage within the cloud. Member-level quotas set individual limits for self-service user role members.

http://technet.microsoft.com/en-us/library/gg610573.aspx
Answer indeed is create a private cloud and scope a new host group with it.

Exam D Q8.

I am leaning towards B. Overwrite the Template.

According to this article, Change name and No. are options for restoring a template.

http://technet.microsoft.com/en-us/library/gg675092.aspx

what say you?

Hi Corrector,

i read trough technet article and i think you are correct. The answer of creating a host profile is kind of misleading, because this is what we should do AFTER creating a private cloud and assign it to the a new host group with the self service user. As this is a new feature of SCCM 2012 i was not familiar with it, so thanks for the answer. The question does not state if there is already a cloud present, however we can assume from possible answer of creating one there isnt one already. Thanks for pointing it out.

Very strong evidence points to the cloud being the correct answer. One test taker answered cloud and scored a 9xx. Another stated he got the same test 2x and switched his 2nd attempt to cloud and went from a fail to 850. I am continuing to try and make this .vce better and will upload a new one soon. The most current version and be found in the uploaded link below.

One more thing people.. When doing research and posting links, make sure they are relevant to the CURRENT version being tested upon. There have been a lot of changes between versions and this is what leads to wrong information being distributed. The Cloud concept didn't exist in VMM 2007 and 2008..

Oh and from the MOC Guide (official training couse): Enabling Self-Service Options in VMM. Before you can use the self-service functionality, you must create the resources to provide a scope for self-service. In VMM, the logical configuration item for delegation and service is a CLOUD or PRIVATE CLOUD. Clouds are the logical groupings of resources, such as host groups, storage and networks with which you can align your business needs.

I never said host groups can only be created when creating a private cloud.. Re-read my post. Simply creating a host group will not allow you to delegate anything. When creating a user role, you must scope it toa CLOUD. The cloud contains the host groups. A host group can be part of multiple clouds. As I type this, I am trying it in SCVMM2012. There is NO option anywhere that I can find that allows you to delegate permissions on a host group. Read this..
http://social.technet.microsoft.com/wiki/contents/articles/2785.private-cloud-in-system-center-virtual-machine-manager-2012-part-2-delegate-control.aspx

Passed with 700 point today, used dump this, this dump have many wrong answer, ba careful and luck.
Exam D Q1:B, Q2:A,Q7:A,Q11:AC
I think.

@ocean - you have changed my mind. I'm now think "host group" is correct

I wrote this morning and had almost an identical outcome to Nos, my score was 665. Used dump by John to the letter

Corrector,

See also this one which states self created VM's can be delegated this way:
http://technet.microsoft.com/en-us/library/bb963716.aspx

One important use of host groups is for administering virtual machine self service. Self-service enables the VMM administrator to grant users permission to create, operate, and manage their own virtual machines within a controlled environment and only on hosts within a specified host group.
To control how self-service users create, operate, and manage virtual machines, the administrator adds self-service policies to a host group.

Corrector,

Where is your documentation regarding host groups can only be created when creating a private cloud? As for i can see both options can be used, but the question is again not clear enough to let us decide which is the best option.

Creating a private cloud would be total change of administration, not only regarding the security and role based access but also assignment of storage etc.

Thus my answer would be to create just a host group.

As far i can read you can create a host group with SSCM VMM:
http://technet.microsoft.com/en-us/library/gg610645.aspx

We can try discussing it here.

http://groups.yahoo.com/group/70414

@Azrael: To delegate anything you must create a cloud. When creating the cloud you assign it a host group - you don,t have to create one, there is a "all hosts" group already created. In any case, if you create a host group first, you still can't delegate any rights. I labbed it to prove it.

We need a better forum to discuss these issues.. I have found a lot of confirmations for some answers in the MOC guide but I'm not about to post them here one by one when we're restricted to 5 posts at a time.. :(

Like TestTaker said, Question 11 is

- From the Secure OU, modify the Auditing settings
- From the Default Domain Controllers Policy, enable the Audit directory service Access.

Applying a GPO to an OU affects the objects inside the OU (computers, users, groups, etc.) not to the OU object itself AFAIK..

@TestTaker: SCCM applies delegation on collections, just like SMS before it.

So the answer is one site with a collection for each office. (one SCCM Site, not Active Directory site).

http://blogs.technet.com/b/hhoy/archive/2012/03/07/role-based-administration-in-system-center-2012-configuration-manager.aspx

@TestTaker: You don't need to have shared storage to need a witness file share. Quorum is there to make sure there is an odd number of voters to decide which node remains active.

http://blogs.msdn.com/b/clustering/archive/2011/05/27/10169261.aspx

@fatrat & @John

"I think it is A. A cloud - NOT D. A Delegated Administrator
http://blogs.technet.com/b/scvmm/archive/2012/08/30/how-to-create-and-configure-a-private-cloud-in-system-center-2012-virtual-machine-manager.aspx"

If you read the article it states:
"While creating the cloud, assign a host group to the cloud and configure it as appropriate for your environment"

Thus it must be C: A Host Group

@fatrat I agree with the answer being cloud. It feels like some of these dump have changed some of the answers for the sake of changing answers.

Hi
I do not agree with this answer. I think it should be
- Restore a copy of the CA's private key.
- By using Certutil, resign the CRL, and then extend.
- By using Certutil, republish the CRL
Why is it necessary to copy the CRL's to the Webservers? This task is not a manual task. It can be done by certutil -crl. What if I would have 100 Webservers. should I copy all CRL manual to the servers?? No way. or? To publish a CRL I always need the private key from a backup.
Your network contains an Active Directory domain named contoso.com. The network has an Active Directory Certificate Services (AD CS) infrastructure. You publish the certificate revocation list (CRL) to a farm of Web servers.

You are creating a disaster recovery plan for the AD CS infrastructure. You need to recommend which actions must be performed to restore certificate revocation checking if a certification authority (CA) is offline for an extended period of time.

Which three actions should you recommend? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

@John I think it is A. A cloud - NOT D. A Delegated Administrator
http://blogs.technet.com/b/scvmm/archive/2012/08/30/how-to-create-and-configure-a-private-cloud-in-system-center-2012-virtual-machine-manager.aspx

Its is B: Modify the Service Connection Point (SCP).
http://technet.microsoft.com/en-us/library/cc726080(v=ws.10).aspx

continuing discussing with you all.

what do you all think the answer in this question?

Your network contains an Active Directory Rights Management Services (AD RMS) cluster named Cluster1.

You plan to change Cluster1 to a new AD RMS cluster named Cluster2.

You need to ensure that all users retrieve the location of the AD RMS templates from Cluster2.

What should you do?

A)Create an alias (CNAME) record named cluster1.contoso.com that points to Cluster2.
B)Modify the Service Connection Point (SCP).
C)Modify the templates file location of the rights policy templates.
D)Modify the exclusion policies.

wondering if A or B .. what do you think?

DFS because branchcache with not work with XP
http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2branchoffice/thread/df2b427c-4ab6-44ab-8bde-7bd6a586105c/

Thanks friends.dont stop updating ..:) continue to discuss

Contoso Q5:

what do you all think the question in this question?
You need to recommend a solution that resolves the current file server issue. The solution must meet the business requirements.

Business Requirements
The company identifies the following business requirements:

Minimize hardware costs and software costs whenever possible.
Minimize the amount of network traffic over the VPN whenever possible.
Ensure that the users in the branch offices can access files currently on the main office file server if a Internet link fails.

What should you include in the recommendation?

A)Distributed File System (DFS)
B)BranchCache in distributed cache mode
C)BranchCache in hosted cache mode
D)A storage pool

i am wondering whether answer is A or B ?
what do you think?

UPDATED version, pls download

http://ul.to/xsnwdc1j

Your network contains an Active Directory domain named contoso.com. The network contains two
servers named Server1 and Server2. You deploy Active Directory Certificate Services (AD CS).
The certification authority (CA) is configured as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that you can issue certificates based on certificate templates.
What should you do?
A. On Server1, uninstall, and then reinstall AD CS.
B. Configure Server2 as a standalone subordinate CA.
C. Configure Server2 as an enterprise subordinate CA.
D. Configure Server2 as a standalone root CA.
E. On Server1, install the Network Device Enrollment Service role service.
F. On Server1, install the Certificate Enrollment Policy Web Service role service.
G. On Server1, run the Add-CertificateEnrollmentPolicyServercmdlet.
H. On Server1, run the Add-CATemplatecmdlet.
Answer: A

Updated dump has these changes:

Your network contains a Hyper-V cluster named Cluster1.
You install Microsoft System Center 2012 Virtual Machine Manager (VMM).
You create a user account for another administrator named User1.
You plan to provide User1 with the ability to manage only the virtual machines that User1 creates.
You need to identify what must be created before you delegate the required permissions.
What should you identify?
A. A cloud
B. A service template
C. A host group
D. A Delegated Administrator
Answer: D

Your network contains an Active Directory domain named contoso.com. The network contains a
server named Server1 that runs Windows Server 2012. Server1 has the Active Directory
Certificate Services server role installed. Serve1l is configured as an offline standalone root
certification authority (CA).
You install the Active Directory Certificate Services server role on Server2 and configure the
server as an enterprise subordinate CA.
You need to ensure that the certificate issued to Server2 is valid for 10 years.
What should you do first?
A. Modify the registry on Server1.
B. Modify the registry on Server2.
C. Modify the CAPolicy.inf file on Server2.
D. Modify the subordinate CA certificate template.
E. Modify the CAPolicy.inf file on Server1.
Answer: B

Explanation: http://technet.microsoft.com/en-us/library/jj125373.aspx

You must prepare the CAPolicy.inf file before installing Active Directory Certificate Services.
But that doesn't mean that is not still valid on 2012.

After reading the technet article i agree on the Auditing question. Modified that one answer.

http://ul.to/xsnwdc1j

NOS,
I had randomize questions turned on for all these which may have changed the letters. Fortunately I typed out the answers though! May want to keep this in mind if for the rest of my proposed changes.

I still think Exam D Question 11 should be A&C:

A - From the Default Domain Controllers Policy, enable the Audit directory service Access. (we both think this answer is right)
C - From the Secure OU, modify the Auditing settings

Check out the part in the link below on "Step 2: Set up auditing in object SACLs.". This is why I think C is the right answer. It's the same method you do when you want to audit files/folders on NTFS volumes.

http://technet.microsoft.com/en-us/library/cc731607(v=ws.10).aspx

Testtaker, the link you provide clearly shows the correct answers to be A,B.

And doing a lot of GPO work, this makes the most sense.

Global audit policy
Enabling the global audit policy, Audit directory service access, enables all directory service policy subcategories. You can set this global audit policy in the Default Domain Controllers Group Policy (under Security SettingsLocal PoliciesAudit Policy). In Windows Server 2008, this global audit policy is not enabled by default. Although the subcategory Directory Service Access is enabled for success events by default, the other subcategories are not enabled by default.

How to set up AD DS auditing
This section provides step-by-step procedures for enabling auditing of changes to objects in AD DS. This process consists of two primary steps:
Enabling the global audit policy in Group Policy

Exam D Question 11 should be C&E:

C - From the Secure OU, modify the Auditing settings
E - From the Default Domain Controllers Policy, enable the Audit directory service Access.

http://technet.microsoft.com/en-us/library/cc731607(v=ws.10).aspx

NOS, I'm hoping to take the test next week. I'll throw whichever questions I think are wrong in here :)

Exam D Question 8 should be B I believe (change the name of the service template). According to this technet article:
http://technet.microsoft.com/en-us/library/gg675092.aspx
it says that "In the Name box, enter a name for the service template. If you are restoring a service template, keep the same service template name." which corresponds with the question saying "You need to ensure that the changes to Template1 can be applied TO THE EXISTING instances in the production enviroment.

Please continue to discuss, and provide Links, I will update this Dump as we go.

I got the Exam D Q5, and that is actually how i answered it, as I was conflicted about this question.

I took the test on Friday and got a 682. I was devestated. I had the worst possible set of questions, if it was one in doubt, it was on my test. Now to prep for 2nd shot.

I scored roughly on the following.

95% on Design and Implement Identity and access Solutions.

90% on Plan and Implement a Server Virtualiztion Infrastructure.

85% on Plan and Implement a High Available Enterprise Infrastructure.

60-65% on Manage and Maintain a Server Infrastructure

Exam B, Q16, Option D was not available. I don't remember the 4th option.

Exam D, q7 I switched and went with Registry on Server 1

I don't remember all the questions I had, but I will list the ones I had that the consensus is not sure about on the answers.

Exam A.
13, 14

Exam B.
4., 9, 10*

Exam C.
5,7

Exam D.
1,5,7,11,12,18,20,21,25,27

Due the low score on Server infrastructure, I do think we should revisit all questions regarding Service Manager, Operations Manager, etc. Also, I think if the masses can figure out many of the above questions, it will put us in a lot better position, especially Exam B q 10.

Please lets all focus on getting the right answers in the comments.

Exam D Question 5 is also wrong. You need to make an iSCSI connection before you can enable MPIO. Correct order should be:
1. On Server1, add the initiator ID of Server2
2. On Server2, from the iSCSI Initiator Properties, run Quick Connect
3. On Server2, from the iSCSI Initiator Properties, click Connect, and then select Enable multi-path.

http://blogs.technet.com/b/migreene/archive/2009/08/29/3277914.aspx

Exam D Question 2 should be B instead of D although I can't find a technet article backing up my theory. I think SCCM can apply permissions for the collections based on AD site. Can anyone confirm?

Exam D Question 1 should be B. Add Server3 as node in Cluster1.
This is because the question states that app1 will replicate to all nodes in the cluster. C is incorrect because the question says that there is no shared storage hence no need for a file share witness.