Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 141:

  HOTSPOT

  You have the following Microsoft azure backup policy.

  

  Hot Area:

  

  

  ---

  References: https://azure.microsoft.com/en-us/blog/new-features-in-azure-backup-long-term-retention-offline-backup-seeding-and-more/

• Question 142:

  You have a server named Server1 that runs Windows Server 2012.

  You promote Server1 to a domain controller.

  You need to view the service location (SRV) records that Server1 registers in DNS.

  What should you do on Server1?

  A. Open the Netlogon.dns file.
  B. Run ipconfig /displaydns.
  C. Run Get-DnsServerDiagnostics.
  D. Open the SrC. sys file.
  A. Open the Netlogon.dns file.

  ---

  Netlogon.dns - If you are using non-Microsoft DNS servers to support Active Directory, you can verify SRV locator resource records by viewing Netlogon.dns. Netlogon.dns is located in the %systemroot%\System32\Config folder. You can use a text editor, such as Microsoft Notepad, to view this file.

  The first record in the file is the domain controller's Lightweight Directory Access Protocol (LDAP) SRV record.

  References:

  http://support.microsoft.com/kb/816587/en-us

• Question 143:

  Your role of Systems Administrator at ABC.com includes the management of the company's data center. The data center includes 300 servers running Windows Server 2012 and many iSCSI SANs (Storage Area Networks).

  All servers include an iSCSI initiator and use iSCSI storage. Due to the large number of SANs, it can be difficult to locate available storage on the network. You need to improve iSCSI target discovery functionality for the iSCSI initiators on the network.

  Which of the following provides a dynamic database of the iSCSI devices and related information that are currently available on the network?

  A. Server for NFS
  B. DNS Server
  C. iSNS Server
  D. iSCSI Target Storage Provider
  C. iSNS Server

• Question 144:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2.

  From Server2, you attempt to connect to Server1 by using Computer Management and you receive the following error message: "Computer \\Server1 cannot be found. The network path was not found. "

  From Server1, you successfully connect to Server2 by using Server Manager.

  You need to ensure that you can manage Server1 remotely from Server2 by using Computer Management.

  What should you configure?

  To answer, select the appropriate option in the answer area.

  Hot Area:

  

  

• Question 145:

  HOTSPOT

  Your network contains one Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers are virtual machines that run Windows Server 2012 R2. The functional level of the domain and the forest is Windows Server 2012 R2.

  You plan to decommission a domain controller that holds several operation master roles.

  In the table below, select which tool to use to transfer the domain naming master and which tool to use to transfer the infrastructure master.

  NOTE: Make only one selection in each column.

  Hot Area:

  

  

• Question 146:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named CONT1 and CONT2. Both servers run Windows Server 2012 R2.

  CONT1 has a shared printer named Printer1. CONT2 connects to Printer1 on CONT1.

  When you attempt to remove Printer1 from CONT2, you receive the error message shown in the exhibit. (Click the Exhibit button.)

  

  You successfully delete the other printers installed on CONT2.

  You need to identify what prevents you from deleting Printer1 on CONT2.

  What should you identify?

  A. Printer1 is deployed as part of a mandatory profile
  B. Printer1 is deployed by using a Group Policy object (GPO)
  C. Your user account is not a member of the Print Operators group on CONT2
  D. Your user account is not a member of the Print Operators group on CONT1
  B. Printer1 is deployed by using a Group Policy object (GPO)

• Question 147:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The relevant servers in the domain are configured as shown in the following table.

  

  You plan to create a shared folder on Server1 named Share1. Share1 must only be accessed by users who are using computers that are joined to the domain.

  You need to identify which servers must be upgraded to support the requirements of Share1.

  In the table below, identify which computers require an upgrade and which computers do not require an upgrade. Make only one selection in each row. Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  https://social.technet.microsoft.com/wiki/contents/articles/22703.implementing-dynamic-access-control-in-windows-2012-r2.aspx

• Question 148:

  Which terminology is being described below?

  Time synchronization is critical for the proper operation of many Windows services and line-of- business Applications.

  The __________ uses the Network Time Protocol (NTP) to synchronize computer clocks on the network so that an accurate clock value, or time stamp, can be assigned to network validation requests and resource access requests

  A. Network Services Shell (Netsh)
  B. Listsvc
  C. Fixmbr
  D. Windows Time service (W32time)
  D. Windows Time service (W32time)

• Question 149:

  Your network contains an Active Directory domain named adatum.com. The domain contains a server named CA1 that runs Windows Server 2012 R2. CA1 has the Active Directory Certificate Services server role installed and is configured to

  support key archival and recovery.

  You need to ensure that a user named User1 can decrypt private keys archived in the Active Directory Certificate Services (AD CS) database. The solution must prevent User1 from retrieving the private keys from the AD CS database.

  What should you do?

  A. Assign User1 the Issue and Manage Certificates permission to CA1.
  B. Assign User1 the Read permission and the Write permission to all certificate templates.
  C. Provide User1 with access to a Key Recovery Agent certificate and a private key.
  D. Assign User1 the Manage CA permission to CA1.
  C. Provide User1 with access to a Key Recovery Agent certificate and a private key.

  ---

  

  References: http://social.technet.microsoft.com/wiki/contents/articles/7573.active-directory-certificate-services-pki-keyarchival-and-management.aspx#Protecting_Key_Recovery_Agent_Keys

• Question 150:

  A company has data centers in Seattle and New York. A high-speed link connects the data centers. Each data center runs a virtualization infrastructure that uses Hyper-V Server 2012 and Hyper-V Server 2012 R2. Administrative users from

  the Seattle and New York offices are members of Active Directory Domain Services groups named SeattleAdmins and NewYorkAdmins, respectively.

  You deploy one System Center Virtual Machine Manager (SCVMM) in the Seattle data center. You create two private clouds named SeattleCloud and NewYorkCloud in the Seattle and New York data centers, respectively.

  You have the following requirements:

  Administrators from each data center must be able to manage the virtual machines and services from their location by using a web portal.

  Administrators must not apply new resource quotas or change resource quotas.

  You must manage public clouds by using the existing SCVMM server.

  You must use the minimum permissions required to perform the administrative tasks.

  You need to configure the environment.

  What should you do?

  A. For both the Seattle and New York admin groups, create a User Role and assign it to the Application Administrator profile. Add the Seattle and New York private clouds to the corresponding User Role.
  B. For both the Seattle and New York admin groups, create a User Role and assign it to the Delegated Administrator profile. Add the Seattle and New York private clouds to the corresponding User Role.
  C. For both the Seattle and New York admin groups, create a User Role and assign it to the Tennant Administrator profile. Add the Seattle and New York private clouds to the corresponding User Role.
  D. Add both SeattleAdmins and NewYorkAdmins to the Local Administrators group of each Hyper-V host in Seattle and New York, respectively.
  A. For both the Seattle and New York admin groups, create a User Role and assign it to the Application Administrator profile. Add the Seattle and New York private clouds to the corresponding User Role.

  ---

  References: https://technet.microsoft.com/library/gg610613.aspx