70-413 Exam Technology & Digital Applications 4 — Questions and Answers
Question 1: You need to deploy a Windows Server 2012 R2 cluster for a SQL Server application requiring shared storage. Which storage solution is NOT supported for Windows Server Failover Clustering?
- iSCSI target on a server running the same OS version
- Fibre Channel SAN
- SMB 3.0 file share (Scale-Out File Server)
- DAS connected only to one node without cluster validation (Correct answer)
Correct answer: DAS connected only to one node without cluster validation
Failover Clustering requires all nodes to have access to shared storage; DAS connected to only one node fails cluster validation and is unsupported.
Question 2: An IIS application is generating verbose error messages visible to end users. Which IIS feature should you configure to show custom error pages while logging detailed errors server-side?
- Custom Errors set to DetailedLocalOnly (Correct answer)
- Failed Request Tracing (FREB)
- HTTP Logging with W3C format
- Request Filtering rules
Correct answer: Custom Errors set to DetailedLocalOnly
DetailedLocalOnly mode shows detailed errors only on the server console while presenting custom error pages to remote clients, balancing debugging and security.
Question 3: Your organization is planning to deploy a multi-tier application using Windows Server 2012 R2 and Hyper-V. Which Hyper-V feature allows you to isolate application tiers in separate virtual networks without physical switches?
- Hyper-V Virtual Switch with private or internal mode (Correct answer)
- NIC Teaming in Switch Independent mode
- VLAN tagging on the management OS vNIC
- Hyper-V Replica
Correct answer: Hyper-V Virtual Switch with private or internal mode
A Hyper-V private virtual switch isolates VMs from each other and the host, while an internal switch allows host-to-VM communication without external network access.
Question 4: A Windows Server 2012 R2 application requires that port 8443 be open through Windows Firewall. Which PowerShell command adds this inbound rule?
- New-NetFirewallRule -DisplayName 'App 8443' -Direction Inbound -LocalPort 8443 -Protocol TCP -Action Allow
- netsh advfirewall firewall add rule name='App 8443' protocol=TCP dir=in localport=8443 action=allow
- Set-NetFirewallRule -LocalPort 8443 -Action Allow
- Both A and B are correct methods (Correct answer)
Correct answer: Both A and B are correct methods
Both the New-NetFirewallRule PowerShell cmdlet and the netsh advfirewall command are valid methods for adding inbound firewall rules in Windows Server 2012 R2.
Question 5: You need to ensure a critical Windows service restarts automatically after failure. Which tool provides the most granular control over failure actions including running a program on the third failure?
- Services MMC snap-in Recovery tab (Correct answer)
- sc.exe failure command
- Group Policy service settings
- Task Scheduler with event trigger
Correct answer: Services MMC snap-in Recovery tab
The Services snap-in Recovery tab lets you define different actions (restart, run program, reboot) for the first, second, and subsequent failures independently.
Question 6: A company is implementing Branch Cache in Hosted Cache mode. Which server role must be installed on the hosted cache server?
- BranchCache feature with Hosted Cache Server role service (Correct answer)
- DFS Replication role service
- Background Intelligent Transfer Service (BITS)
- File Server Resource Manager
Correct answer: BranchCache feature with Hosted Cache Server role service
The Hosted Cache Server role service, part of the BranchCache feature, must be installed on the branch server that will cache content for local clients.
Question 7: An administrator needs to test a web application's SSL certificate chain without a browser. Which Windows command-line tool can verify the certificate and its chain?
- certutil -verify -urlfetch certificate.cer (Correct answer)
- certmgr.msc /verify
- netsh ssl show sslcert
- openssl s_client (not available by default on Windows Server 2012 R2)
Correct answer: certutil -verify -urlfetch certificate.cer
certutil -verify -urlfetch checks the certificate file and fetches and validates the entire certificate chain including CRL and OCSP checks.
You need to deploy a Windows Server 2012 R2 cluster for a SQL Server application requiring shared storage.
Which storage solution is NOT supported for Windows Server Failover Clustering?