Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 151:

  Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed. Server1 hosts 10 virtual machines that run Windows Server 2012 R2. You add a new server named Server2.

  Server2 has faster hard disk drives, more RAM, and a different processor manufacturer than Server1.

  You need to move all of the virtual machines from Server1 to Server2. The solution must minimize downtime.

  What should you do for each virtual machine?

  A. Perform a quick migration.
  B. Perform a storage migration.
  C. Export the virtual machines from Server1 and import the virtual machines to Server2.
  D. Perform a live migration.
  C. Export the virtual machines from Server1 and import the virtual machines to Server2.

  ---

  The different processor manufacturer is the key here. Storage, Live, and Quick all require same manufacturer.

• Question 152:

  Your network contains an Active Directory forest.

  You implement Dynamic Access Control in the forest.

  You have the claim types shown in the Claim Types exhibit. (Click the Exhibit button.)

  

  The properties of a user named User1 are configured as shown in the User1 exhibit. (Click the Exhibit button.)

  The output of Whoami /claims for a user named User2 is shown in the Whoami exhibit. (Click the Exhibit button.)

  

  Select Yes if the statement can be shown to be true based on the available information; otherwise select No. Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  According to the properties User1, the department attribute and the displayName attributes have been set. These two attributes are specified as claim types in the Claim Types exhibit.

  The output of Whoami/claims for User2 shows that user2 has no claims.

  References:

  https://technet.microsoft.com/en-us/library/dn408191(v=ws.11).aspx#BKMK_Claims

• Question 153:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Network Policy Server role service installed.

  You plan to configure Server1 as a Network Access Protection (NAP) health policy server for VPN enforcement by using the Configure NAPwizard.

  You need to ensure that you can configure the VPN enforcement method on Server1 successfully.

  What should you install on Server1 before you run the Configure NAP wizard?

  A. A computer certificate
  B. A system health validator (SHV)
  C. The Remote Access server role
  D. The Host Credential Authorization Protocol (HCAP)
  A. A computer certificate

  ---

  Configure Policies for VPN Enforcement

  The NAP health policy server uses the Network Policy Server (NPS) role service with configured network policies, health policies, and system health validators (SHVs) to evaluate client health based on administrator defined requirements.

  Based on the results of this evaluation, NPS instructs the virtual private network (VPN) server to provide full access to compliant NAP client computers and to restrict access to noncompliant client computers when NAP is deployed using full

  enforcement mode.

  Before performing this procedure, you must install a certificate for Protected Extensible Authentication Protocol (PEAP) authentication. For more information, see Install a Computer Certificate for PEAP

  

  You cannot continue without a valid certificate:

  

  References: http://technet.microsoft.com/fr-fr/library/dd314165%28v=ws.10%29.aspx

• Question 154:

  HOTSPOT

  Your network contains an Active Directory domain named fabrikam.com.

  You implement DirectAccess.

  You need to view the properties of the DirectAccess connection.

  Which connection properties should you view?

  To answer, select the appropriate connection properties in the answer area.

  Hot Area:

  

  

• Question 155:

  DRAG DROP

  Your network contains a single Active Directory domain named contoso.com. The domain contains an Active Directory site named Site1 and an organizational unit (OU) named OU1.

  The domain contains a client computer named Client1 that is located in OU1 and Site1.

  You create five Group Policy objects (GPO). The GPOs are configured as shown in the following table.

  

  You need to identify in which order the GPOs will be applied to Client1.

  In which order should you arrange the listed GPOs?

  To answer, move all GPOs from the list of GPOs to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  GPO3 (linked to site)

  GPO1 (linked to domain)

  GPO4 (linked to domain – enforced)

  GPO2 (linked to OU)

  GPO5 (linked to OU – enforced)

• Question 156:

  DRAG DROP

  You have a server named Server1 that runs Windows Server 2012 R2.

  You add a new internal SAS disk to Server1.

  You need to ensure that the new disk is available to store files.

  Which three cmdlets should you run in sequence?

  To answer, move the appropriate three cmdlets from the list of cmdlets to the answer and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Note:

  The following script accomplishes these four tasks (listed below):

  Initialize-Disk -PartitionStyle MBR -PassThru |

  New-Partition-AssignDriveLetter -UseMaximumSize |

  Format-Volume -FileSystem NTFS -NewFileSystemLabel "disk2" -Confirm:$false

  Use PowerShell to Initialize Raw Disks and to Partition and Format Volumes

  With Windows PowerShell 3.0 in Windows 8 or Windows Server2012, I can perform all of these operations via Windows PowerShell functions from the Storage module. The process is the same as I would do via the Disk Management tool.

  The steps are:

  Get the disk that has a raw partition style.

  Initialize the disk.

  Partition the disk.

  Format the volume.

  Serial Attached SCSI (SAS) is a point-to-point serial protocol that moves data to and from computer storage devices such as hard drives and tape drives. SAS replaces the older Parallel SCSI (Small Computer System Interface, pronounced "scuzzy"), bus technology that first appeared in the mid-1980s.SAS, like its predecessor, uses the standard SCSI command set. SAS offers backward compatibility with SATA, versions 2 and later. This allows for SATA drives to be connected to SAS backplanes. The reverse, connecting SAS drives to SATA backplanes, is not possible.

• Question 157:

  Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1 and a domain controller named DC1. All servers run Windows Server 2012 R2. A Group Policy object (GPO) named GPO1 is linked to the domain.

  Server1 contains a folder named Folder1. Folder1 is shared as Share1.

  You need to ensure that authenticated users can request assistance when they are denied access to the resources on Server1.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Enable the Enable access-denied assistance on client for all file types policy setting for GPO1.
  B. Configure the Customize message for Access Denied errors policy setting of GPO1.
  C. Install the File Server Resource Manager role service on DC1.
  D. Install the File Server Resource Manager role service on Server1.
  E. Assign the Read Attributes NTFS permission on Folder1 to the Authenticated Users group.
  A. Enable the Enable access-denied assistance on client for all file types policy setting for GPO1.
  D. Install the File Server Resource Manager role service on Server1.

  ---

  To configure access-denied assistance by using Group Policy

  Open Group Policy Management. In Server Manager, click Tools, and then click Group Policy Management.

  Right-click the appropriate Group Policy, and then click Edit.

  Click Computer Configuration, click Policies, click Administrative Templates, click System, and then click Access-Denied Assistance.

  Right-click Customize message for Access Denied errors, and then click Edit.

  Select the Enabled option.

  You can configure access-denied assistance within a domain by using Group Policy, or you can configure the assistance individually on each file server by using the File Server Resource Manager console.

  References: https://docs.microsoft.com/en-us/windows-server/identity/solution-guides/deploy-access-denied-assistance--demonstration-steps-

• Question 158:

  Your manager has asked you to create various user objects using Windows PowerShell. Which of the following must you do to accomplish this?

  A. Use the Create-User createUsert
  B. Use the objUser = new OUUser statement
  C. Use the AddUser method of ADSL
  D. Invoke the Create method of OU
  D. Invoke the Create method of OU

  ---

  The user is created by first defining the OU and then invoking the ou Create method.

  

  References: http://www.mysmallcorneroftheweb.co.uk/programming-softwaredevelopement/powershellcreatingconfiguring-a-active-directory-user

• Question 159:

  DRAG DROP

  You have a server that runs Windows Server 2012 R2.

  You create a new work folder named Share1.

  You need to configure Share1 to meet the following requirements:

  1. Ensure that all synchronized copies of Share1 are encrypted.

  2. Ensure that clients synchronize to Share1 every 30 minutes.

  3. Ensure that Share1 inherits the NTFS permissions of the parent folder.

  Which cmdlet should you use to achieve each requirement?

  To answer, drag the appropriate cmdlets to the correct requirements. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

  ---

  

  New-SyncDevicePolicy and the Set-SyncDevicePolicy are invalid commands

  

• Question 160:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.

  On a server named Server2, you perform a Server Core Installation of Windows Server 2012 R2. You join Server2 to the contoso.com domain.

  You need to ensure that you can manage Server2 by using the Computer Management console on Server1.

  What should you do on Server2?

  A. Run sconfig.exe and configure remote management.
  B. Run sconfig.exe and configure Remote Server Administration Tools (RSAT).
  C. Install Windows Management Framework.
  D. Install Remote Server Administration Tools (RSAT).
  A. Run sconfig.exe and configure remote management.

  ---

  In Windows Server 2012, you can use the Server Configuration tool (Sconfig.cmd) to configure and manage several common aspects of Server Core installations. You must be a member of the Administrators group to use the tool. Sconfig.cmd is available in the Minimal Server Interface and in Server with a GUI mode.

  References: http://technet.microsoft.com/en-us/library/jj647766.aspx Training Guide: Installing and Configuring Windows Server 2012, Chapter 2: Deploying servers, p. 80