Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 121:

  You work for a company named ABC.com. Your role of Network Administrator includes the management of the company's Windows 2012 Active Directory Domain Services (AD DS) domain.

  All servers in the network run Windows Server 2012.

  The network includes a Windows Server 2012 server named ABC-File1. ABC-File1 runs the File and Storage Services server role.

  You need to increase the file storage space on ABC-File1. You attach three new 4TB physical hard disks to ABC-File1.

  You need to configure the disks to ensure that no data is lost in the event of a single disk failure while maximizing the storage space that can be used on the disks.

  Which three of the following actions should you perform to configure the disks? (Choose three).

  A. Configure the disks as master boot record (MBR) disks.
  B. Configure the disks as GUID partition table (GPT) disks.
  C. Create a single storage pool.
  D. Create three storage pools.
  E. Create a storage space using the parity option.
  F. Create a storage space using the mirror option.
  B. Configure the disks as GUID partition table (GPT) disks.
  C. Create a single storage pool.
  E. Create a storage space using the parity option.

• Question 122:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. The domain contains a standalone server named Server2 that is located in a perimeter network. Both servers run the default installation of Windows Server 2012 R2.

  You need to manage Server2 remotely from Server1. What should you do?

  A. From Server1, run the Enable-PsRemoting cmdlet.
  B. FromServer2, run the winrm command.
  C. From Server2, run the Enable-PsRemoting cmdlet.
  D. FromServer1, run the winrm command.
  B. FromServer2, run the winrm command.

  ---

  Both servers must be running WinRM, but you would run WinRS (remote shell) from Server1 in order to manage Server2 (which is running WinRM). "WinRS is the Windows Remote Shell. With WinRS, you can query remote Windows machines that are running WinRM. However, keep in mind that your machine also needs to be running WinRM to use WinRS." So B appears to be "more correct" than D.

  References: http://www.windowsnetworking.com/articles-tutorials/windows-server-2008/How-Windows-Server-2008-WinRM-WinRS.html

• Question 123:

  Your network contains one Active Directory domain named contoso.com. The domain contains an IP Address Management (IPAM) server named Server1. Server1 manages several DHCP and DNS servers.

  From Server Manager on Server1, you create a custom role for IPAM.

  You need to assign the role to a group named IP_Admins.

  What should you do?

  A. From Server Manager, create an access scope.
  B. From Server Manager, create an access policy.
  C. From Windows PowerShell, run the Set-IpamConfiguration cmdlet.
  D. From Windows PowerShell, run the Add-Member cmdlet.
  B. From Server Manager, create an access policy.

  ---

  A role is a collection of IPAM operations. You can associate a role with a user or group in Windows using an access policy. Several built-in roles are provided, but you can also create customized roles to meet your business requirements.

  References: https://technet.microsoft.com/en-us/library/dn741281(v=ws.11).aspx https://technet.microsoft.com/en-us/library/mt210435(v=ws.11).aspx

• Question 124:

  A global catalog server is available to directory clients when Domain Name System (DNS) servers can locate it as a global catalog server. In which order do the following events need to occur before the catalog server is ready?

  A) The Net Logon service on the domain controller has updated DNS with global-catalogspecific service (SRV) resource records.

  B) The isGlobalCatalogReadyrootDSE attribute is set to TRUE.

  C) The global catalog receives replication of read-only replicas to the required occupancy level.

  A. C then A, then B
  B. B then C, then A
  C. A then C, then B
  D. C then B, then A
  D. C then B, then A

  ---

  A global catalog server is ready to serve clients when the events, shown below, occur in this order:

  1.

  The global catalog receives replication of read-only replicas to the required occupancy level.

  2.

  The isGlobalCatalogReady rootDSE attribute is set to TRUE.

  3.

  The Net Logon service on the domain controller has updated DNS with global-catalog-specific service (SRV) resource records. References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc816783(v=ws.10)

• Question 125:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012. All client computers on the network run Windows 7 Professional or Windows 8 Pro.

  A group policy object (GPO) is applied to the client computers. The GPO assigns several Windows PowerShell scripts that run when a user logs in to the client computer. Users complain that it takes a long time for the desktop to appear when logging on to client computers.

  How can you reduce the time it takes for the desktop to appear when users log on to client computers?

  A. By setting the "Run startup scripts synchronously" GPO setting to Enabled.
  B. By setting the "Run startup scripts synchronously" GPO setting to Disabled.
  C. By setting the "Run logon scripts synchronously" GPO setting to Enabled.
  D. By setting the "Run logon scripts synchronously" GPO setting to Disabled.
  D. By setting the "Run logon scripts synchronously" GPO setting to Disabled.

• Question 126:

  Your network contains one active directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2. You perform daily backups of the data on Server1 to Microsoft azure.

  You need to restore the data from the 1st backup of Server1 to Server2.

  What should you do first?

  A. On Server2, install the azure backup agent.
  B. In the domain, add server1 to the backup operators group.
  C. From the azure management portal, modify the configuration of the backup vault.
  D. On Server2, install the windows server backup feature.
  A. On Server2, install the azure backup agent.

  ---

  References: https://azure.microsoft.com/en-us/documentation/articles/backup-azure-restore-windows-server/#recover-to-an-alternate-machine

• Question 127:

  HOTSPOT

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 does not have Internet connectivity.

  All roles are removed completely from Server1.

  You mount a Windows Server 2012 R2 installation image to the C:\Source folder.

  You need to install the DNS Server server role on Server1.

  Which folder should you use as the source?

  To answer, select the appropriate folder in the answer area.

  Hot Area:

  

  

  ---

  WinSxS, the side-by-side component store enables administrators to activate any of the features included with Windows Server 2012 R2 without having to supply an installation medium.

  http://blogs.technet.com/b/askpfeplat/archive/2013/02/24/how-to-reduce-the-size-of-the-winsxsdirectory-andfree-up-disk-space-on-windows-server-2012-using-features-on-demand.aspx

• Question 128:

  HOTSPOT

  A user named User1 is a member of Group1 and Group2.

  You create a Group Policy object (GPO) named GPO1.

  You link GPO1 to contoso.com.

  You create the executable rules as shown in the exhibit by using the Create Executable Rules wizard. (Click the Exhibit button.)

  

  To answer, complete each statement according to the information presented in the exhibit. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 129:

  Complete the missing word from the sentence below that is describing one of the new roles in Server 2012:

  By using _________, you can augment an organization's security strategy by protecting information through persistent usage policies, which remain with the information, no matter where it is moved.

  A. ADFS
  B. RODC
  C. ADLDS
  D. AD RMS
  D. AD RMS

  ---

  References: https://technet.microsoft.com/en-us/library/ee221010(v=ws.10).aspx

• Question 130:

  Your network contains one Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2. All domain computers have certificates that are issued by a

  certification authority (CA) named Contoso CA. A user named User1 performs daily backups of the data on Server1 to a backup vault named Vault1. A user named User2 performs daily backups of the data on Server2 to a vault named

  Vault2. You have the administrative credentials for Server2. You need to restore the data from that last backup of Server1 to Server2.

  Which two pieces of information do you require to complete the task? Each correct answer presents part of the solution.

  A. the Microsoft Azure subscription credentials
  B. the Vault2 credentials
  C. the User1 credentials
  D. the Vault1 credentials
  E. the Server1 certificate
  F. the Server2 certificate
  G. the Server1 passphrase
  H. the Server2 passphrase
  D. the Vault1 credentials
  G. the Server1 passphrase

  ---

  We need the Vault1 credentials to be able to access the data in Vault1. We need the passphrase of Server1 to access the backup that was made on Server1.

  References: http://blogs.technet.com/b/rmurphy/archive/2014/12/02/microsoft-azure-backup.aspx