Microsoft.Testking.70-414.v2013-05-01.by.Nos.96q.vce

Anubis

Tuesday, May 28, 2013 5:57 PM UT

@Ocean

You are wrong with the Cloud!

You wrote : Answer indeed is create a private cloud and scope a new host group with it

Install VMM, then do what you wrote. You will see that you can not create a cloud ;-)

Ask yourself what does a Cloud need to be configured before! (and so on .)

It is the Host Group.

Pat

Saturday, May 11, 2013 12:14 AM UT

The Corrector..I've been doing much the same trying to verify each question but there are a number that are left to interpretation that I'm wavering on. Any chance you could send me a copy? If so do you have a link where I could download it from? Appreciate your help!

The Corrector

Friday, May 10, 2013 9:59 PM UT

I took the time to go through EACH question and find proof/confirmation for each answer. Some were found on technet, some in the teacher's guide from the official course. I sent a copy (almost final) to NOS via the forum we used.

Pat

Friday, May 10, 2013 2:33 AM UT

Congrats The Corrector! Is this the dump you used or do you have a modified one that you used to achieve the 9xx result?

The Corrector

Thursday, May 09, 2013 11:29 PM UT

Passed in the 9xx.. Goes to show that I'm good enough to get the right answers even though people keep arguing with me. Good luck guys..

MCSE2012

Thursday, May 09, 2013 1:25 PM UT

passed today. now mcse2012 :) 760

fatrat

Wednesday, May 08, 2013 3:52 PM UT

I passed using anon1. changed branchcache to DFS - High eight hundreds

Ocean

Tuesday, May 07, 2013 9:59 PM UT

I tried uploading but failed. Maybe NOS and yahoo group can take over with new answers.

@corrector this technet confirms your answer:

In Virtual Machine Manager (VMM) in System Center 2012 and in System Center 2012 Service Pack 1 (SP1), self-service user roles were redesigned to provide a richer environment for creating, deploying, and managing virtual machines as well as services in a private cloud.

n VMM in System Center 2012 and in System Center 2012 SP1, self-service users deploy their virtual machines and services to private clouds. This is a change from earlier versions of VMM, in which self-service user roles are assigned host groups, and virtual machines are deployed automatically (and transparently) to the most suitable host in the host group. A private cloud consists of one or more host groups that provide computing capacity and disk resources to self-service user roles. A private cloud can be assigned to multiple self-service user roles. Role-level quotas on each self-service user role that has the private cloud within its scope are used to allocate computing capacity and other storage within the cloud. Member-level quotas set individual limits for self-service user role members.

http://technet.microsoft.com/en-us/library/gg610573.aspx
Answer indeed is create a private cloud and scope a new host group with it.

Nos

Tuesday, May 07, 2013 9:40 PM UT

Exam D Q8.

I am leaning towards B. Overwrite the Template.

According to this article, Change name and No. are options for restoring a template.

http://technet.microsoft.com/en-us/library/gg675092.aspx

what say you?

Ocean

Tuesday, May 07, 2013 7:48 PM UT

Hi Corrector,

i read trough technet article and i think you are correct. The answer of creating a host profile is kind of misleading, because this is what we should do AFTER creating a private cloud and assign it to the a new host group with the self service user. As this is a new feature of SCCM 2012 i was not familiar with it, so thanks for the answer. The question does not state if there is already a cloud present, however we can assume from possible answer of creating one there isnt one already. Thanks for pointing it out.

Nos

Tuesday, May 07, 2013 5:48 PM UT

Very strong evidence points to the cloud being the correct answer. One test taker answered cloud and scored a 9xx. Another stated he got the same test 2x and switched his 2nd attempt to cloud and went from a fail to 850. I am continuing to try and make this .vce better and will upload a new one soon. The most current version and be found in the uploaded link below.

The Corrector

Tuesday, May 07, 2013 5:00 PM UT

One more thing people.. When doing research and posting links, make sure they are relevant to the CURRENT version being tested upon. There have been a lot of changes between versions and this is what leads to wrong information being distributed. The Cloud concept didn't exist in VMM 2007 and 2008..

The Corrector

Tuesday, May 07, 2013 4:46 PM UT

Oh and from the MOC Guide (official training couse): Enabling Self-Service Options in VMM. Before you can use the self-service functionality, you must create the resources to provide a scope for self-service. In VMM, the logical configuration item for delegation and service is a CLOUD or PRIVATE CLOUD. Clouds are the logical groupings of resources, such as host groups, storage and networks with which you can align your business needs.

The Corrector

Tuesday, May 07, 2013 4:44 PM UT

I never said host groups can only be created when creating a private cloud.. Re-read my post. Simply creating a host group will not allow you to delegate anything. When creating a user role, you must scope it toa CLOUD. The cloud contains the host groups. A host group can be part of multiple clouds. As I type this, I am trying it in SCVMM2012. There is NO option anywhere that I can find that allows you to delegate permissions on a host group. Read this..
http://social.technet.microsoft.com/wiki/contents/articles/2785.private-cloud-in-system-center-virtual-machine-manager-2012-part-2-delegate-control.aspx

JieYin

Tuesday, May 07, 2013 3:13 PM UT

Passed with 700 point today, used dump this, this dump have many wrong answer, ba careful and luck.
Exam D Q1:B, Q2:A,Q7:A,Q11:AC
I think.

fatrat

Tuesday, May 07, 2013 2:34 PM UT

@ocean - you have changed my mind. I'm now think "host group" is correct

ClusterBuster

Tuesday, May 07, 2013 9:28 AM UT

I wrote this morning and had almost an identical outcome to Nos, my score was 665. Used dump by John to the letter

Ocean

Tuesday, May 07, 2013 5:17 AM UT

Corrector,

See also this one which states self created VM's can be delegated this way:
http://technet.microsoft.com/en-us/library/bb963716.aspx

One important use of host groups is for administering virtual machine self service. Self-service enables the VMM administrator to grant users permission to create, operate, and manage their own virtual machines within a controlled environment and only on hosts within a specified host group.
To control how self-service users create, operate, and manage virtual machines, the administrator adds self-service policies to a host group.

Ocean

Tuesday, May 07, 2013 5:13 AM UT

Corrector,

Where is your documentation regarding host groups can only be created when creating a private cloud? As for i can see both options can be used, but the question is again not clear enough to let us decide which is the best option.

Creating a private cloud would be total change of administration, not only regarding the security and role based access but also assignment of storage etc.

Thus my answer would be to create just a host group.

As far i can read you can create a host group with SSCM VMM:
http://technet.microsoft.com/en-us/library/gg610645.aspx

Nos

Monday, May 06, 2013 10:41 PM UT

We can try discussing it here.

http://groups.yahoo.com/group/70414

The Corrector

Monday, May 06, 2013 10:36 PM UT

@Azrael: To delegate anything you must create a cloud. When creating the cloud you assign it a host group - you don,t have to create one, there is a "all hosts" group already created. In any case, if you create a host group first, you still can't delegate any rights. I labbed it to prove it.

The Corrector

Monday, May 06, 2013 10:21 PM UT

We need a better forum to discuss these issues.. I have found a lot of confirmations for some answers in the MOC guide but I'm not about to post them here one by one when we're restricted to 5 posts at a time.. :(

The Corrector

Monday, May 06, 2013 9:56 PM UT

Like TestTaker said, Question 11 is

- From the Secure OU, modify the Auditing settings
- From the Default Domain Controllers Policy, enable the Audit directory service Access.

Applying a GPO to an OU affects the objects inside the OU (computers, users, groups, etc.) not to the OU object itself AFAIK..

The Corrector

Monday, May 06, 2013 9:53 PM UT

@TestTaker: SCCM applies delegation on collections, just like SMS before it.

So the answer is one site with a collection for each office. (one SCCM Site, not Active Directory site).

http://blogs.technet.com/b/hhoy/archive/2012/03/07/role-based-administration-in-system-center-2012-configuration-manager.aspx

The Corrector

Monday, May 06, 2013 9:48 PM UT

@TestTaker: You don't need to have shared storage to need a witness file share. Quorum is there to make sure there is an odd number of voters to decide which node remains active.

http://blogs.msdn.com/b/clustering/archive/2011/05/27/10169261.aspx

Azrael

Monday, May 06, 2013 8:30 PM UT

@fatrat & @John

"I think it is A. A cloud - NOT D. A Delegated Administrator
http://blogs.technet.com/b/scvmm/archive/2012/08/30/how-to-create-and-configure-a-private-cloud-in-system-center-2012-virtual-machine-manager.aspx"

If you read the article it states:
"While creating the cloud, assign a host group to the cloud and configure it as appropriate for your environment"

Thus it must be C: A Host Group

John

Monday, May 06, 2013 8:26 PM UT

@fatrat I agree with the answer being cloud. It feels like some of these dump have changed some of the answers for the sake of changing answers.

Sepp Fuchs

Monday, May 06, 2013 8:10 PM UT

Hi
I do not agree with this answer. I think it should be
- Restore a copy of the CA's private key.
- By using Certutil, resign the CRL, and then extend.
- By using Certutil, republish the CRL
Why is it necessary to copy the CRL's to the Webservers? This task is not a manual task. It can be done by certutil -crl. What if I would have 100 Webservers. should I copy all CRL manual to the servers?? No way. or? To publish a CRL I always need the private key from a backup.
Your network contains an Active Directory domain named contoso.com. The network has an Active Directory Certificate Services (AD CS) infrastructure. You publish the certificate revocation list (CRL) to a farm of Web servers.

You are creating a disaster recovery plan for the AD CS infrastructure. You need to recommend which actions must be performed to restore certificate revocation checking if a certification authority (CA) is offline for an extended period of time.

Which three actions should you recommend? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

fatrat

Monday, May 06, 2013 8:09 PM UT

@John I think it is A. A cloud - NOT D. A Delegated Administrator
http://blogs.technet.com/b/scvmm/archive/2012/08/30/how-to-create-and-configure-a-private-cloud-in-system-center-2012-virtual-machine-manager.aspx

fatrat

Monday, May 06, 2013 7:36 PM UT

Its is B: Modify the Service Connection Point (SCP).
http://technet.microsoft.com/en-us/library/cc726080(v=ws.10).aspx

Mcitp2011

Monday, May 06, 2013 7:06 PM UT

continuing discussing with you all.

what do you all think the answer in this question?

Your network contains an Active Directory Rights Management Services (AD RMS) cluster named Cluster1.

You plan to change Cluster1 to a new AD RMS cluster named Cluster2.

You need to ensure that all users retrieve the location of the AD RMS templates from Cluster2.

What should you do?

A)Create an alias (CNAME) record named cluster1.contoso.com that points to Cluster2.
B)Modify the Service Connection Point (SCP).
C)Modify the templates file location of the rights policy templates.
D)Modify the exclusion policies.

wondering if A or B .. what do you think?

fatrat

Monday, May 06, 2013 7:02 PM UT

DFS because branchcache with not work with XP
http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2branchoffice/thread/df2b427c-4ab6-44ab-8bde-7bd6a586105c/

mcitp2011

Monday, May 06, 2013 6:51 PM UT

Thanks friends.dont stop updating ..:) continue to discuss

Contoso Q5:

what do you all think the question in this question?
You need to recommend a solution that resolves the current file server issue. The solution must meet the business requirements.

Business Requirements
The company identifies the following business requirements:

Minimize hardware costs and software costs whenever possible.
Minimize the amount of network traffic over the VPN whenever possible.
Ensure that the users in the branch offices can access files currently on the main office file server if a Internet link fails.

What should you include in the recommendation?

A)Distributed File System (DFS)
B)BranchCache in distributed cache mode
C)BranchCache in hosted cache mode
D)A storage pool

i am wondering whether answer is A or B ?
what do you think?

Nos

Monday, May 06, 2013 6:12 PM UT

UPDATED version, pls download

http://ul.to/xsnwdc1j

John

Monday, May 06, 2013 6:08 PM UT

Your network contains an Active Directory domain named contoso.com. The network contains two
servers named Server1 and Server2. You deploy Active Directory Certificate Services (AD CS).
The certification authority (CA) is configured as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that you can issue certificates based on certificate templates.
What should you do?
A. On Server1, uninstall, and then reinstall AD CS.
B. Configure Server2 as a standalone subordinate CA.
C. Configure Server2 as an enterprise subordinate CA.
D. Configure Server2 as a standalone root CA.
E. On Server1, install the Network Device Enrollment Service role service.
F. On Server1, install the Certificate Enrollment Policy Web Service role service.
G. On Server1, run the Add-CertificateEnrollmentPolicyServercmdlet.
H. On Server1, run the Add-CATemplatecmdlet.
Answer: A

John

Monday, May 06, 2013 6:08 PM UT

Updated dump has these changes:

Your network contains a Hyper-V cluster named Cluster1.
You install Microsoft System Center 2012 Virtual Machine Manager (VMM).
You create a user account for another administrator named User1.
You plan to provide User1 with the ability to manage only the virtual machines that User1 creates.
You need to identify what must be created before you delegate the required permissions.
What should you identify?
A. A cloud
B. A service template
C. A host group
D. A Delegated Administrator
Answer: D

Your network contains an Active Directory domain named contoso.com. The network contains a
server named Server1 that runs Windows Server 2012. Server1 has the Active Directory
Certificate Services server role installed. Serve1l is configured as an offline standalone root
certification authority (CA).
You install the Active Directory Certificate Services server role on Server2 and configure the
server as an enterprise subordinate CA.
You need to ensure that the certificate issued to Server2 is valid for 10 years.
What should you do first?
A. Modify the registry on Server1.
B. Modify the registry on Server2.
C. Modify the CAPolicy.inf file on Server2.
D. Modify the subordinate CA certificate template.
E. Modify the CAPolicy.inf file on Server1.
Answer: B

Explanation: http://technet.microsoft.com/en-us/library/jj125373.aspx

You must prepare the CAPolicy.inf file before installing Active Directory Certificate Services.
But that doesn't mean that is not still valid on 2012.

Nos

Monday, May 06, 2013 5:57 PM UT

After reading the technet article i agree on the Auditing question. Modified that one answer.

http://ul.to/xsnwdc1j

TestTaker

Monday, May 06, 2013 5:44 PM UT

NOS,
I had randomize questions turned on for all these which may have changed the letters. Fortunately I typed out the answers though! May want to keep this in mind if for the rest of my proposed changes.

I still think Exam D Question 11 should be A&C:

A - From the Default Domain Controllers Policy, enable the Audit directory service Access. (we both think this answer is right)
C - From the Secure OU, modify the Auditing settings

Check out the part in the link below on "Step 2: Set up auditing in object SACLs.". This is why I think C is the right answer. It's the same method you do when you want to audit files/folders on NTFS volumes.

http://technet.microsoft.com/en-us/library/cc731607(v=ws.10).aspx

Nos

Monday, May 06, 2013 4:48 PM UT

Testtaker, the link you provide clearly shows the correct answers to be A,B.

And doing a lot of GPO work, this makes the most sense.

Global audit policy
Enabling the global audit policy, Audit directory service access, enables all directory service policy subcategories. You can set this global audit policy in the Default Domain Controllers Group Policy (under Security SettingsLocal PoliciesAudit Policy). In Windows Server 2008, this global audit policy is not enabled by default. Although the subcategory Directory Service Access is enabled for success events by default, the other subcategories are not enabled by default.

How to set up AD DS auditing
This section provides step-by-step procedures for enabling auditing of changes to objects in AD DS. This process consists of two primary steps:
Enabling the global audit policy in Group Policy

TestTaker

Monday, May 06, 2013 4:31 PM UT

Exam D Question 11 should be C&E:

C - From the Secure OU, modify the Auditing settings
E - From the Default Domain Controllers Policy, enable the Audit directory service Access.

http://technet.microsoft.com/en-us/library/cc731607(v=ws.10).aspx

TestTaker

Monday, May 06, 2013 4:04 PM UT

NOS, I'm hoping to take the test next week. I'll throw whichever questions I think are wrong in here :)

Exam D Question 8 should be B I believe (change the name of the service template). According to this technet article:
http://technet.microsoft.com/en-us/library/gg675092.aspx
it says that "In the Name box, enter a name for the service template. If you are restoring a service template, keep the same service template name." which corresponds with the question saying "You need to ensure that the changes to Template1 can be applied TO THE EXISTING instances in the production enviroment.

Nos

Monday, May 06, 2013 3:47 PM UT

Please continue to discuss, and provide Links, I will update this Dump as we go.

Nos

Monday, May 06, 2013 3:45 PM UT

I got the Exam D Q5, and that is actually how i answered it, as I was conflicted about this question.

I took the test on Friday and got a 682. I was devestated. I had the worst possible set of questions, if it was one in doubt, it was on my test. Now to prep for 2nd shot.

I scored roughly on the following.

95% on Design and Implement Identity and access Solutions.

90% on Plan and Implement a Server Virtualiztion Infrastructure.

85% on Plan and Implement a High Available Enterprise Infrastructure.

60-65% on Manage and Maintain a Server Infrastructure

Exam B, Q16, Option D was not available. I don't remember the 4th option.

Exam D, q7 I switched and went with Registry on Server 1

I don't remember all the questions I had, but I will list the ones I had that the consensus is not sure about on the answers.

Exam A.
13, 14

Exam B.
4., 9, 10*

Exam C.
5,7

Exam D.
1,5,7,11,12,18,20,21,25,27

Due the low score on Server infrastructure, I do think we should revisit all questions regarding Service Manager, Operations Manager, etc. Also, I think if the masses can figure out many of the above questions, it will put us in a lot better position, especially Exam B q 10.

Please lets all focus on getting the right answers in the comments.

TestTaker

Monday, May 06, 2013 3:33 PM UT

Exam D Question 5 is also wrong. You need to make an iSCSI connection before you can enable MPIO. Correct order should be:
1. On Server1, add the initiator ID of Server2
2. On Server2, from the iSCSI Initiator Properties, run Quick Connect
3. On Server2, from the iSCSI Initiator Properties, click Connect, and then select Enable multi-path.

http://blogs.technet.com/b/migreene/archive/2009/08/29/3277914.aspx

TestTaker

Monday, May 06, 2013 3:06 PM UT

Exam D Question 2 should be B instead of D although I can't find a technet article backing up my theory. I think SCCM can apply permissions for the collections based on AD site. Can anyone confirm?

TestTaker

Monday, May 06, 2013 2:53 PM UT

Exam D Question 1 should be B. Add Server3 as node in Cluster1.
This is because the question states that app1 will replicate to all nodes in the cluster. C is incorrect because the question says that there is no shared storage hence no need for a file share witness.