Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 1:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory forest. The network includes servers that run Windows Server 2008 R2 and Windows Server 2012. The forest contains three domains: a root domain named ABC.com, a child domain named US.ABC.com and another child domain named Research.US.ABC.com. The ABC.com root domain contains two Windows Server 2012 domain controllers named ABC-DC1 and ABC-DC2. ABC-DC1 contains the forest FSMO roles. ABC-DC1 contains the forest FSMO roles. ABC-DC2 contains the domain FSMO roles for the ABC.com domain.

  The US.ABC.com domain contains two Windows Server 2008 R2 domain controllers named USABC- DC1 and US-ABC-DC2. US-ABC-DC1 contains the domain FSMO roles for the US.ABC.com domain. US-ABC-DC2 is configured as a Global Catalog Server. The Research.US.ABC.com domain contains two Windows Server 2012 domain controllers named Res-US-ABC-DC1 and Res-US-ABC-DC2. Res-US-ABC-DC1 contains the domain FSMO roles for the Res.US.ABC.com domain. Res-US-ABC-DC2 is configured as a Global Catalog Server.

  All domain controllers in the forest are configured as DNS Servers. You plan to install a Windows Server 2008 R2 domain controller in the Research.US.ABC.com domain.

  Which of the existing domain controllers must be online in order to create the planned additional domain controller?

  A. ABC-DC1
  B. US-ABC-DC1
  C. US-ABC-DC1 and US-ABC-DC2
  D. Res-US-ABC-DC1
  E. Res-US-ABC-DC1 and Res-US-ABC-DC2
  F. US-ABC-DC1 and Res-US-ABC-DC1
  D. Res-US-ABC-DC1

• Question 2:

  Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.

  The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify which domain controller must be online when cloning a domain controller.

  Which cmdlet should you use?

  A. Get-AdGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  F. Get-ADAccountAuthorizationGroup
  G. Get-ADAuthenticationPolicySilo
  H. Get-ADAuthenticationPolicy
  D. Get-ADDomain

  ---

  We must verify the PDC emulator role is hosted by a domain controller that runs Windows Server 2012 and that it is online and reachable by the cloned domain controller during cloning.

  You can combine the following Active Directory Windows PowerShell Module cmdlets to return the version of the PDC emulator:

  Get-adddomaincontroller

  Get-adcomputer

  If not provided the domain, these cmdlets assume the domain of the computer where run.

  The following command returns PDCE and Operating System info:

  get-adcomputer(Get-ADDomainController -Discover -Service "PrimaryDC").name -property * | format-list dnshostname,operatingsystem,operatingsystemversion

• Question 3:

  Your corporate network includes an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a Windows Server 2012 R2 computer that is named Server1. On Server1 the role Windows Server Update

  Services is installed.

  You want to use a Group Policy object (GPO) to assign members of a computer group.

  Which settings you will configure?

  

  A. Configure Automatic Updates
  B. Specify intranet Microsoft update service
  C. Enable Software Notifications
  D. Enable recommended updates via Automatic Updates
  E. Enable Client-side targeting
  F. Allow signed updates from an intranet Microsoft update service location
  E. Enable Client-side targeting

  ---

  Computer can either manually or using the policy setting Client-side target association enable to computer groups of the Windows Server Update Services can be added. The Directive Enable Client-side target mapping indicates the target

  group name or the name that will be used to receive updates from Microsoft Update Service on the intranet. If the status to "Enabled" is set, the specified target group information to the Microsoft Update service will be sent on the intranet.

  This uses this information to determine which updates will be made available on the computer. If the Microsoft update service location on the intranet supports multiple audiences, multiple, semicolon-separated group names can be specified

  by this Directive. Otherwise, a single group must be specified.

  If the status is set to "Disabled" or "Not Configured", no target group information to the Microsoft Update service will be sent on the intranet.

  Note:

  This policy applies only when the Microsoft Update service on the intranet, which this Computer use is configured to support client-side target allocation. This policy has no effect when the policy is "intranet specify for Microsoft update service

  location" is disabled or not configured.

  This policy is not supported on Windows RT. Enabling this policy on PCs running Windows RT runs has no effect.

  

  References: https://docs.microsoft.com/en-us/windows/deployment/update/waas-wu-settings#allow-signed-updates-from-an-intranet-microsoft-update-service-location

• Question 4:

  Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the Hyper-V server role installed.

  Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4.

  Server1 is configured as shown in the following table.

  

  VM2 sends and receives large amounts of data over the network.

  You need to ensure that the network traffic of VM2 bypasses the virtual switches of the parent partition.

  What should you configure?

  A. NUMA topology
  B. Resource control
  C. Resource metering
  D. Virtual Machine Chimney
  E. The VLAN ID
  F. Processor Compatibility
  G. The startup order
  H. Automatic Start Action
  I. Integration Services
  J. Port mirroring
  K

  ---

  Single-root I/O virtualization -capable network adapters can be assigned directly to a virtual machine to maximize network throughput while minimizing network latency and the CPU overhead required for processing network traffic.

  References: http://technet.microsoft.com/en-us/library/cc766320(v=ws.10).aspx http://technet.microsoft.com/en-us/library/hh831410.aspx Exam Ref 70-410, Installing and Configuring Windows Server 2012, Chapter 3: Configure Hyper-V, Objective 3.1: Create and Configure virtual machine settings, p. 144 Training Guide: Installing and Configuring Windows Server 2012: Chapter 7: Hyper-V Virtualization, Lesson 2: Deploying and configuring virtual machines, p. 335

• Question 5:

  Your network contains an active directory domain named Contoso.com. The domain contains two servers named server1 and server2 that run Windows Server 2012 R2. You create a security template named template1 by using the security template snap-in. You need to apply template1 to server2.

  Which tool should you use?

  A. Security Configuration and Analysis
  B. Server Manager
  C. Security Template
  D. Computer management
  A. Security Configuration and Analysis

  ---

  A. Template was already created -Provide standard security option to use in security policies

  B. Needs to be applied at the GP level

  C. Security templates are inactive until imported into a Group Policy object or the SecurityConfiguration and Analysis

  D. Tool to ID windows problems

  

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj730960(v=ws.11) https://support.microsoft.com/en-us/products/windows?os=windows-10

• Question 6:

  Your network contains an Active Directory domain named contoso.com. The domain contains a member server named HVServer1. HVServer1 runs Windows Server 2012 R2 and has the Hyper-V server role installed.

  HVServer1 hosts two virtual machines named Server1 and Server2. Both virtual machines connect to a virtual switch named Switch1.

  On Server2, you install a network monitoring application named App1.

  You need to capture all of the inbound and outbound traffic to Server1 by using App1.

  Which two commands should you run from Windows PowerShell? (Each correct answer presents part of the solution. Choose two.)

  A. Get-VM "Server2" | Set-VMNetworkAdapter -IovWeight 1
  B. Get-VM "Server1" | Set-VMNetworkAdapter -Allow/Teaming On
  C. Get-VM "Server1" | Set-VMNetworkAdapter -PortMirroring Source
  D. Get-VM "Server2" | Set-VMNetworkAdapter -PortMirroring Destination
  E. Get-VM "Server1" | Set-VMNetworkAdapter -IovWeight 0
  F. Get-VM "Server2" | Set-VMNetworkAdapter-AllowTeaming On
  C. Get-VM "Server1" | Set-VMNetworkAdapter -PortMirroring Source
  D. Get-VM "Server2" | Set-VMNetworkAdapter -PortMirroring Destination

  ---

  Note:

  Get-VM will get the virtual machines from one or more Hyper-V hosts.

  -

  ComputerName is used to specify one or more Hyper-V hosts from which virtual machines are to be retrieved. NetBIOS names, IP addresses, and fully-qualified domain names are allowable. The default is the local computer -- use "localhost" or a dot (".") to specify the local computer explicitly.

  Set-VMNetworkAdapter is used to configure features of the virtual network adapter in a virtual machine or the management operating system.

  -

  PortMirroring is used to specify the port mirroring mode for the network adapter to be configured.

  With Port Mirroring, traffic sent to or from a Hyper-V Virtual Switch port is copied and sent to a mirror port. There are a range of applications for port mirroring - an entire ecosystem of network visibility companies exist that have products designed to consume port mirror data for performance management, security analysis, and network diagnostics. With Hyper-V Virtual Switch port mirroring, you can select the switch ports that are monitored as well as the switch port that receives copies of all the traffic.

  References: http://technet.microsoft.com/en-us/library/jj679878.aspx

• Question 7:

  You create a new virtual disk in a storage pool by using the New Virtual Disk Wizard.

  You discover that the new virtual disk has a write-back cache of 1 GB.

  You need to ensure that the virtual disk has a write-back cache of 5 GB.

  What should you do?

  A. Detach the virtual disk, and then run the Resize-VirtualDisk cmdlet
  B. Detach the virtual disk, and then run the Set-VirtualDisk cmdlet
  C. Delete the virtual disk, and then run the New-StorageSubSystemVirtualDisk cmdlet
  D. Delete the virtual disk, and then run the New-VirtualDisk cmdlet
  D. Delete the virtual disk, and then run the New-VirtualDisk cmdlet

  ---

  You must set the write-back cache during the initial new disk creation. This setting is not configurable once the VHD has been created.

• Question 8:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. You use a Windows Server 2008 R2 (SP1) domain member server named ABC-Admin1 to manage other servers in the network. You install a new Windows Server 2008 R2 (SP1) server named ABC-SRV12. You join ABCSRV12 to the ABC.com domain as a member server and install the necessary software on ABCSRV12 to ensure that you can manage the server from other computers. You configure the Windows PowerShell Script Execution Policy on ABC-SRV12 to Unrestricted. What should you do next to ensure that you can manage ABC-SRV12 from ABC-Admin1?

  A. You should run the Enable-PSRemoting PowerShell cmdlet.
  B. You should run the Configure-SMRemoting.ps1 script.
  C. You should run the Convert-Path PowerShell cmdlet.
  D. You should run the Connect-PSSession PowerShell cmdlet.
  A. You should run the Enable-PSRemoting PowerShell cmdlet.

• Question 9:

  Your network contains two Web servers named Server1 and Server2. Both servers run Windows Server 2012 R2.

  Server1 and Server2 are nodes in a Network Load Balancing (NLB) cluster. The NLB cluster contains an application named App1 that is accessed by using the URL http://app1.contoso.com.

  You plan to perform maintenance on Server1. You need to ensure that all new connections to App1 are directed to Server2.

  The solution must not disconnect the existing connections to Server1

  What should you run?

  A. The Set-NlbCluster cmdlet
  B. The Set-NlbClusterNode cmdlet
  C. The Stop-NlbCluster cmdlet
  D. The Stop-NlbClusterNode cmdlet
  D. The Stop-NlbClusterNode cmdlet

  ---

  The Stop-NlbClusterNode cmdlet stops a node in an NLB cluster. When you use the stop the nodes in the cluster, client connections that are already in progress are interrupted. To avoid interrupting active connections, consider using the drain parameter, which allows the node to continue servicing active connections but disables all new traffic to that node.

  -Drain

  Drains existing traffic before stopping the cluster node. If this parameter is omitted, existing traffic will be dropped.

• Question 10:

  HOTSPOT

  File1 has been encrypted by Contoso\admin1.

  File2 has been encrypted by Server1\admin1.

  File3 has been encrypted by Server1\administrator.

  You need to back up the DRA agents.

  Who is the owner of each of the agents?

  You should to select one in every file.

  Hot Area:

  

  

  ---

  By default, the data recovery agent is defined to be the administrator account. On stand-alone workstations and workgroup machines, the administrator account is the local administrator; on domain-joined machines, the administrator account is the first domain controller's administrator account. I think the first one is in the Contoso Domain, so the Agent should be Contoso/Administrator. The other ones seem to be a local machine. It depends how the