Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 91:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and

  Windows Server 2012. A server named ABC-Win12Admin runs Windows Server 2012. You use ABC-Win12Admin to administer the Windows Server 2012 servers in the domain. You want to use Server Manager on ABC-Win12Admin to

  manage the Window Server 2008 R2 SP1 servers in the domain.

  What should you do?

  A. Run the Configure-SMRemoting.exe -Enable cmdlet on the Windows Server 2008 R2 SP1 servers.
  B. Add the computer account for ABC-Win12Admin to the RAS and IAS Servers group in Active Directory.
  C. Install the Microsoft .NET Framework 4.0 and Windows Management Framework 3.0 on the Windows Server2008 R2 SP1 servers.
  D. Install the Remote Server Administration Tools on ABC-Win12Admin.
  C. Install the Microsoft .NET Framework 4.0 and Windows Management Framework 3.0 on the Windows Server2008 R2 SP1 servers.

• Question 92:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Both servers have the Hyper-V server role installed.

  You plan to replicate virtual machines between Server1 and Server2. The replication will be encrypted by using Secure Sockets Layer (SSL).

  You need to request a certificate on Server1 to ensure that the virtual machine replication is encrypted.

  Which two intended purposes should the certificate for Server1 contain? (Each correct answer presents part of the solution. Choose two.)

  A. Client Authentication
  B. Kernel Mode Code Signing
  C. Server Authentication
  D. IP Security end system
  E. KDC Authentication
  A. Client Authentication
  C. Server Authentication

  ---

  

  References: http://blogs.technet.com/b/virtualization/archive/2012/03/13/hyper-v-replica-certificaterequirements.aspx

• Question 93:

  Your network contains an Active Directory domain named contoso.com. The network contains a file server named Server1 that runs Windows Server 2012 R2.

  You are configuring a central access policy for temporary employees.

  You enable the Department resource property and assign the property a suggested value of Temp.

  You need to configure a target resource condition for the central access rule that is scoped to resources assigned to Temp only.

  Which condition should you use?

  A. (Department.Value Equals "Temp")
  B. (Resource.Department Equals "Temp")
  C. (Temp.Resource Equals "Department")
  D. (Resource.Temp Equals "Department")
  B. (Resource.Department Equals "Temp")

  ---

  

  References: http://technet.microsoft.com/fr-fr/library/hh846167.aspx

• Question 94:

  Your network contains one Active Directory forest named contoso.com.

  The forest contains a single domain. The domain contains the domain controllers is configured as shown in the following table.

  

  The replication topology is configured as shown in the following output.

  

  You discover that replication between DC1 and DC3 takes a few hours.

  You need to reduce the amount of time it takes to replicate Active Directory changes between DC1 and DC3.

  What should you do?

  A. Create a site link that connects Site1 and Site3, has a cost of 350, and replicates every 15 minutes.
  B. Modify SiteLink4 to replicate every 15 minute.
  C. Disable Site Link bridging.
  D. Set the cost of SiteLink4 to 100.
  D. Set the cost of SiteLink4 to 100.

• Question 95:

  Virtual Network Manager (available from the Hyper-V Manager snap-in) offers three types of virtual networks that you can use to define various networking topologies for virtual machines and the virtualization server.

  Which type of virtual network is isolated from all external network traffic on the virtualization server, as well any network traffic between the management operating system and the external network.

  A. Internal virtual network
  B. Private virtual network
  C. External virtual network
  D. None of these
  B. Private virtual network

• Question 96:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  In a remote site, a support technician installs a server named DC10 that runs Windows Server 2012 R2. DC10 is currently a member of a workgroup.

  You plan to promote DC10 to a read-only domain controller (RODC).

  You need to ensure that a user named Contoso\User1 can promote DC10 to a RODC in the contoso.com domain.

  The solution must minimize the number of permissions assigned to User1.

  What should you do?

  A. Join DC10 to the domain. Run dsmod and specify the /server switch.
  B. From Active Directory Users and Computers, run the Delegation of Control Wizard on the contoso.com domain object.
  C. From Active Directory Users and Computers, pre-create an RODC computer account.
  D. From Active Directory Administrative Center, modify the security settings of the Domain Controllers organizational unit (OU).
  C. From Active Directory Users and Computers, pre-create an RODC computer account.

• Question 97:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. A server named ABC-Win12Admin runs Windows Server 2012. You use ABC-Win12Admin to administer the Windows Server 2012 servers in the domain. A server named ABC-IPAM1 is configured as an IP Address Management (IPAM) Server. You want to manage ABC-IPAM1 from ABC-Win12Admin. You install the IP Address Management (IPAM) client on ABC-Win12Admin. You open Server Manager on ABCWin12Admin but ABC-IPAM1 is not listed.

  How can you manage ABC-IPAM1 from ABC-Win12Admin?

  A. By selecting the Connect to Server option in Computer Management on ABC-Win12Admin.
  B. By enabling Windows Remote Management (WinRM) on ABC-IPAM1.
  C. By adding the computer account of ABC-Win12Admin to the IPAM Multi-Server Management (MSM) administrators group on ABC-IPAM1.
  D. By selecting the Add Server to Manage option in Server Manager on ABC-Win12Admin.
  D. By selecting the Add Server to Manage option in Server Manager on ABC-Win12Admin.

• Question 98:

  Your manager has asked you to configure the company Windows Server 2008 domain controller. He wants all new computer accounts to be placed in the General OU, when computers join the domain. Which command should you use to accomplish this?

  A. Netdom
  B. Dsmove
  C. None of these
  D. Redircmp
  D. Redircmp

  ---

  http://technet.microsoft.com/en-us/library/cc770619(v=ws.10).aspx

• Question 99:

  Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 has the Web Server (IIS) server role installed. On Server1, you install a managed service account named Service1. You attempt to configure the World Wide Web Publishing Service as shown in the exhibit.

  

  You receive the following error message:

  "The account name is invalid or does not exist, or the password is invalid for the account name specified."

  You need to ensure that the World Wide Web Publishing Service can log on by using the managed service account.

  What should you do?

  A. Specify contoso\service1$ as the account name.
  B. Specify [email protected] as the account name.
  C. Reset the password for the account.
  D. Enter and confirm the password for the account.
  A. Specify contoso\service1$ as the account name.

  ---

  A managed service account is designed for service applications such as Internet Information Services, SQL Server, or Exchange to provide the following: Automatic password management, so that these services can be separated from other services on the computer better.

  

  Simplified SPN management Service Principal Name (SPN) that Allows service administrators to set SPNs on these accounts.

  

  In addition, SPN management can be delegated to other administrators.

  Managed service accounts are created using PowerShell cmdlets and managed. The accounts are identified by a dollar sign at the end of the login name. After the logon name is correct, the settings are applied and the account will have the

  right to log on as a service given.

  References: https://blogs.technet.microsoft.com/askds/2009/09/10/managed-service-accounts-understanding-implementing-best-practices-and-troubleshooting/

• Question 100:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.

  The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify whether deleted objects can be recovered from the Active Directory Recycle Bin.

  Which cmdlet should you use?

  A. Get-AdGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  F. Get-ADAccountAuthorizationGroup
  G. Get-ADAuthenticationPolicySilo
  H. Get-ADAuthenticationPolicy
  E. Get-ADOptionalFeature

  ---

  The Get-ADOptionalFeature cmdlet gets an optional feature or performs a search to retrieve multiple optional features from an Active Directory. Example: Get-ADOptionalFeature 'Recycle Bin Feature' Get the optional feature with the name 'Recycle Bin Feature'.

  References: https://technet.microsoft.com/en-us/library/ee617218.aspx