412-21

1.

1 point

How does AD RMS protect a Microsoft Office file that has been transferred out of the organization to
an external recipient?

a. The external recipient will not be able to open the file because they cannot contact the AD RMS server

b. The external recipient will not be able to open the file because they will not know the unlock password

c. The external recipient will not be able to open the file because they do not have an account on the AD RMS server

d. The external recipient will not be able to open the file because they do not have the AD RMS integrated version of Office installed

2.

1 point

What is the name of the location in Active Directory where information about the AD RMS server is
published?

a. Service Record

b. Service Advertisement Point

c. Service Locator Record

d. Service Connection Point

3.

1 point

What issue should you be aware of if you perform the installation of AD RMS onto a Domain
Controller?

a. AD RMS will only work for that domain

b. The AD RMS service account will be a domain administrator

c. The AD RMS service account will not support Kerberos authentication

d. AD RMS will not be able to automatically create a Service Connection Point

4.

1 point

Which AD RMS group members have access to only policy template administration in the AD RMS
console?

a. AD RMS Policy Administrators

b. AD RMS Policy Template Administrators

c. AD RMS Template Managers

d. AD RMS Template Administrators

5.

1 point

To enable Kerberos authentication with AD RMS, you will need to be a member of which groups?
(Choose all that apply)

a. AD RMS Enterprise Administrators

b. Enterprise Admins

c. Domain Admins

d. Schema Admins

6.

1 point

To enable Kerberos authentication with AD RMS, you will need to perform which of the following
actions? (Choose all that apply)

a. Raise the forest functional level to Windows Server 2008 R2

b. Set the Internet Information Services (IIS) useAppPoolCredentials variable to True

c. Set the User Principal Name (UPN) value for the AD RMS service account

d. Set the Service Principal Names (SPN) value for the AD RMS service account

7.

1 point

What tools provided in Windows Server 2012 R2 allow you to view the SCP configuration in Active
Directory? (Choose all that apply)

a. Active Directory Users and Computers

b. ADSI Edit

c. LDP

d. SCP Edit

8.

1 point

To enable mobile devices running Windows Mobile 6 and above operating systems to obtain
certificates and licenses for their users, you will need to edit the NTFS permissions of a file. What file
must you edit the permissions for?

a. MobileDeviceConfiguration.asmx

b. WindowsMobileADRMSConfiguration.asmx

c. MobileDeviceParticipate.asmx

d. MobileDeviceCertification.asmx

9.

1 point

What is the name of the objects that are used to enforce the rights a user or group has on rightsprotected
content?

a. Protections policy templates

b. Rights policy templates

c. Restrictions policy templates

d. Rights protection templates

10.

1 point

Which AD RMS template right would be required to allow a user the ability to use part of the
contents of the protected document in a new document?

a. Export (Save As)

b. Save

c. Extract

d. Edit

11.

1 point

Generally speaking, what could be considered the absolute minimum rights that a user could be
granted via AD RMS that would allow the user to still consume the document?

a. View

b. Edit

c. Save

d. Extract

12.

1 point

Why is it generally recommended to not delete an RMS template that has previously been used to
assign rights to documents?

a. The documents will revert to the default permissions for their location

b. The documents will revert to the permissions they had before RMS was applied

c. The documents will become inaccessible to all users except the super users group

d. The documents will become accessible to all users, including those who previously had no rights

13.

1 point

A Temporary Rights Account Certificate has a validity period of how long?

a. 15 minutes

b. 1 hour

c. 4 hours

d. 1 day

14.

1 point

When you back up the entire AD RMS system, which of the following databases will you need to
back up? (Choose all that apply)

a. Directory services database

b. Logging database

c. Configuration database

d. Rights database

15.

1 point

Which of the following must be deleted when you have to recreate a new AD RMS cluster within an
Active Directory domain?

a. AD RMS SID

b. Publishing license

c. Client Licensor Certificate

d. Service Connection Point