Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 131:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. The network includes a Windows Server 2012 server named ABC-File1. ABC-File1 runs the File and Storage Services server role.

  You need to increase the file storage space on ABC-File1. You attach four new physical hard disks to ABC-File1.

  You need to configure the disks to ensure that no data is lost in the event of a single disk failure while maximizing the storage space that can be used on the disks.

  How should you configure the disks?

  A. You should create a RAID 0 volume.
  B. You should create a RAID 1 volume.
  C. You should create a storage space using the spanned option.
  D. You should create a storage space using the mirror option.
  E. You should create a storage space using the parity option.
  E. You should create a storage space using the parity option.

• Question 132:

  Your network contains an Active Directory domain named contoso.com. The domain contains an IP Address Management (IPAM) server that uses a Windows Internal Database.

  You install a Microsoft SQL Server 2012 instance on a new server.

  You need to migrate the IPAM database to the SQL Server instance.

  Which cmdlet should you run?

  A. Disable-IpamCapability
  B. Update-IpamServer
  C. Move-IpamDatabase
  D. Set-IpamConfiguration
  C. Move-IpamDatabase

  ---

  The Move-IpamDatabase cmdlet migrates the IP Address Management (IPAM) database to a Microsoft SQL Server database.

• Question 133:

  Your network contains one Active Directory domain named contoso.com. The domain contains a file server named Server01 that runs Windows Server 2012 R2. Server01 has an operating system drive and a data drive. Server01 has a trusted Platform Module (TPM).

  Which cmdlet should you run first?

  A. Enable-TPMAutoProvisioning
  B. Unblock-TPM
  C. Install-WindowsFeature
  D. Lock-BitLocker
  C. Install-WindowsFeature

  ---

  The Windows feature BitLocker Drive Encryption is not installed by default. The following call installs the feature with all its components and management tools: Install Windows feature BitLocker -IncludeAllSubFeature -IncludeManagementTools

• Question 134:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1 has the DHCP Server server role installed.

  DHCP is configured as shown in the exhibit. (Click the Exhibit button.)

  

  You discover that client computers cannot obtain IPv4 addresses from DC1.

  You need to ensure that the client computers can obtain IPv4 addresses from DC1.

  What should you do?

  A. Disable the Deny filters.
  B. Authorize DC1.
  C. Activate the scope.
  D. Disable the Allow filters.
  D. Disable the Allow filters.

  ---

  for D:

  There are no items in the deny List. So it means that client computers MAC addresses is not listed in the allow list. So we have to disable the "Allow Filters"

  

  References: http://technet.microsoft.com/en-us/library/ee956897(v=ws.10).aspx

• Question 135:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com.

  All DNS servers host a DNS zone named adatum.com. The adatum.com zone is not Active Directory-integrated.

  An administrator modifies the start of authority (SOA) record for the adatum.com zone.

  After the modification, you discover that when you add or modify DNS records in the adatum.com zone, the changes are not transferred to the DNS servers that host secondary copies of the adatum.com zone.

  You need to ensure that the records are transferred to all the copies of the adatum.com zone.

  What should you modify in the SOA record for the adatum.com zone?

  To answer, select the appropriate setting in the answer area.

  Hot Area:

  

  

  ---

  When a DNS server receives an update through Active Directory replication:

  If the serial number of the replicated record is higher than the serial number in the SOA record of the local copy of the zone, the local zone serial number is set to the serial number in the replicated record.

  Note Each DNS record in the zone has a copy of the zone serial number at the time when the record was last modified.

  If the serial number of the replicated record is the same or lower than the local serial number, and if the local DNS server is configured not to allow zone transfer of the zone, the local zone serial number is not changed.

  If the serial number of the replicated record is the same or lower than the local zone serial number, if the DNS server is configured to allow a zone transfer of the zone, and if the local zone serial number has not been changed since the last zone transfer occurred to a remote DNS server, then the local zone serial number will be incremented. Otherwise that is if a copy of the zone with the current local zone serial number has not been transferred to a remote DNS server, the local zone serial number is not changed.

• Question 136:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.

  All domain controllers in the network run a custom application that was created by developers at ABC.com.

  You want to deploy additional domain controllers using domain controller cloning. You verify that the custom application supports domain controller cloning. You run the Get-ADDCCloningExcludedApplicationList cmdlet and it returns the

  name of the custom application.

  You need to prepare a domain controller for cloning. You plan to create an XML file and add information about the custom application to the file to enable the domain controller to be cloned.

  What should you name the XML file?

  A. DCCIoneConfig.xml
  B. CustomDCCIoneAllowList.xml
  C. Sysprep.xml
  D. ADDCCloningExcludedApplicationList.xml
  B. CustomDCCIoneAllowList.xml

• Question 137:

  Your network contains two Active Directory forests named contoso.com and adatum.com.

  All domain controllers run Windows Server 2012 R2. The adatum.com domain contains a Group Policy object (GPO) named GPO1. An administrator from adatum.com backs up GPO1 to a USB flash drive. You have a domain controller

  named dc1.contoso.com. You insert the USB flash drive in dc1.contoso.com.You need to identify the domain-specific reference in GPO1.

  What should you do?

  A. From the Migration Table Editor, click Populate from Backup.
  B. From Group Policy Management, run the Group Policy Modeling Wizard.
  C. From Group Policy Management, run the Group Policy Results Wizard.
  D. From the Migration Table Editor, click Populate from GPO.
  A. From the Migration Table Editor, click Populate from Backup.

  ---

  References: https://technet.microsoft.com/en-us/library/cc779961(v=ws.10).aspx

• Question 138:

  Your company has a main office and a branch office.

  The network contains an Active Directory domain named contoso.com.

  The main office contains a domain controller named DC1 that runs Windows Server 2012 R2.

  DC1 is a DNS server and hosts a primary zone for contoso.com. The branch office contains a member server named Server1 that runs Windows Server 2012 R2. Server1 is a DNS server and hosts a secondary zone for contoso.com.

  The main office connects to the branch office by using an unreliable WAN link.

  You need to ensure that Server1 can resolve names in contoso.com if the WAN link in unavailable for three days.

  Which setting should you modify in the start of authority (SOA) record?

  A. Retry interval
  B. Refresh interval
  C. Expires after
  D. Minimum (default) TTL
  C. Expires after

  ---

  Used by other DNS servers that are configured to load and host the zone to determine when zone data expires if it is not renewed

• Question 139:

  Note: This question is part of series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

  Your network contains one Active Directory forest named contoso.com. The forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

  

  For the contoso.com domain, a company policy states that administrators must be able to retrieve a list of all the users who have not logged on to the network in the last seven days from any domain controller. You need to ensure that the users' last logon information from the last seven days is replicated to all of the domain controllers.

  What should you use?

  A. Set-ADSite
  B. Set-ADReplicationSite
  C. Set-ADDomain
  D. Set-ADReplicationSiteLink
  E. Set-ADGroup
  F. Set-ADForest
  G. Netdom
  C. Set-ADDomain

  ---

  References: https://technet.microsoft.com/en-us/library/ee617212.aspx

• Question 140:

  You have a file server named Server1 that runs Windows Server 2012 R2. Server1 has following hardware configurations:

  16 GB of RAM

  A single quad-core CPU

  Three network teams that have two network adapters each

  You add additional CPUs and RAM to Server1. You repurpose Server1 as a virtualization host. You install the Hyper-V server role on Server1. You need to create four external virtual switches in Hyper-V.

  Which cmdlet should you run first?

  A. Add-NetLbfoTeamNic
  B. Set-NetAdapter
  C. Remove- NetLbfoTeam
  D. Add-VMNetworkAdapter
  C. Remove- NetLbfoTeam

  ---

  Here we're talking about hardware network adapters which belong to NIC teams Each external virtual switch must be connected to a NIC or a NIC team, so we need 4 NICs or NIC teams but currently only have 3 teams available.

  =>we need to break a team first and then connect the two last external virtual switches to each of the 2"liberated" NIC (another solution could be to add one physical NIC and connect the last external virtual switch to it or add several (two or

  more) NICs, create a NIC team containing them and connect the external virtual switch to the NIC team)

  NIC Teaming (NetLBFO) cmdlets in Windows PowerShell

  Remove-NetLbfoTeam: Removes the specified NIC team from the host.

  NIC Teaming Overview

  NIC Teaming, also known as load balancing and failover (LBFO), allows multiple network adapters on a computer to be placed into a team for the following purposes:

  Bandwidth aggregation Traffic failover to prevent connectivity loss in the event of a network component failure

  This feature has been a requirement for independent hardware vendors (IHVs) to enter the server network adapter market, but until now NIC Teaming has not been included in Windows Server operating systems. Requirements NIC Teaming

  requires the presence of a single Ethernet network adapter, which can be used for separating traffic that is using VLANs. All modes that provide fault protection through failover require at least two Ethernet network adapters. Windows Server?

  2012 supports up to 32 network adapters in a team.

  References: http://technet.microsoft.com/en-us/library/jj130848.aspx

  http://technet.microsoft.com/en-us/library/hh831648.aspx