Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 161:

  DRAG DROP

  Your network contains three servers. The servers are configured as shown in the following table.

  

  Your company plans to standardize all of the servers on Windows Server 2012 R2.

  You need to recommend an upgrade path for each server.

  The solution must meet the following requirements:

  1. Upgrade the existing operating system whenever possible.

  2. Minimize hardware purchases.

  Which upgrade path should you recommend for each server?

  To answer, drag the appropriate upgrade path to each server in the answer area.Each upgrade path may be used once, more than once, or not at all.

  Select and Place:

  

  

  ---

  Upgrade paths for Windows Server 2012 R2 are limited. In fact, it's easier to specify when you can perform an upgrade than when you can't. If you have a 64-bit computer running Windows Server 2008 or Windows Server 2008 R2, then you can upgrade it to Windows Server 2012 R2 as long as you use the same operating system edition.

  Windows Server 2012 R2 does not support the following:

  - Upgrades from Windows Server versions prior to Windows Server 2008

  - Upgrades from pre-RTM editions of Windows Server 2012 R2

  - Upgrades from Windows workstation operating systems

  - Cross-platform upgrades, such as 32-bit Windows Server 2008 to 64-bit Windows Server 2012

  - Upgrades from any Itanium edition

  - Cross-language upgrades, such as from Windows Server 2008, U.S.English to Windows Server 2012, French In any of these cases, the Windows Setup program will not permit the upgrade to proceed.

  References: http://technet.microsoft.com/en-us/library/jj134246.aspx

• Question 162:

  Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed.

  Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4.

  Server1 is configured as shown in the following table.

  

  VM3 is used to test applications.

  You need to prevent VM3 from synchronizing its clock to Server1.

  What should you configure?

  A. NUMA topology
  B. Resource control
  C. Resource metering
  D. Virtual Machine Chimney
  E. The VLAN ID
  F. Processor Compatibility
  G. The startup order
  H. Automatic Start Action
  I. Integration Services
  J. Port mirroring
  I. Integration Services

  ---

  Integration Services settings on virtual machines includes services such as operating system shutdown, time synchronization, data exchange, Heart beat, and Backup (volume snapshot services. Thus you should disable the time synchronization using Integration Services.

  

  References: http://blogs.technet.com/b/virtualization/archive/2008/08/29/backing-up-hyper-v-virtual-machines.aspx Exam Ref 70-410, Installing and Configuring Windows Server 2012, Chapter 3: Configure Hyper-V, Objective 3.1: Create and Configure virtual machine settings, p. 144

• Question 163:

  Select the missing tool name from the sentence below:

  You can use the _____.exe tool to create installation media for additional domain controllers that you are creating in a domain. By using the Install from Media (IFM) option, you can minimize the replication of directory data over the network. This helps you install additional domain controllers in remote sites more efficiently.

  A. Dsutil
  B. Ntfrsutl
  C. Mqtgsvc
  D. Ntdsutil
  D. Ntdsutil

  ---

  

  References: http://technet.microsoft.com/en-us/library/cc770654(v=ws.10).aspx

• Question 164:

  You have a server named Server1 that has a Server Core installation of Windows Server 2008 R2.

  Server1 has the DHCP Server server role and the File Server server role installed.

  You need to upgrade Server1 to Windows Server 2012 R2 with the graphical user interface (GUI).

  The solution must meet the following requirements:

  Preserve the server roles and their configurations.

  Minimize administrative effort.

  What should you do?

  A. On Server1, run setup.exe from the Windows Server 8 installation media and select Server with a GUI.
  B. Start Server1 from the Windows Server 8 installation media and select Server Core Installation.When the installation is complete, add the Server Graphical Shell feature.
  C. Start Server1 from the Windows Server 8 installation media and select Server with a GUI.
  D. On Server1, run setup.exe from the Windows Server 8 installation media and select Server Core Installation.When the installation is complete, add the Server Graphical Shell feature.
  D. On Server1, run setup.exe from the Windows Server 8 installation media and select Server Core Installation.When the installation is complete, add the Server Graphical Shell feature.

  ---

  Upgrade to 2012 and install GUI shell http://technet.microsoft.com/en-us/library/jj574204.aspx Upgrades that switch from a Server Core installation to the Server with a GUI mode of Windows Server 2012 R2 in one step (and vice versa) are not supported. However, after upgrade is complete, Windows Server 2012 R2 allows you to switch freely between Server Core and Server with a GUI modes.

  Incorrect Answers:

  A. Server is on 2008 R2 core, must install 2012 core and then GUI B, C: Not least effort

  References: http://technet.microsoft.com/library/hh831786.

• Question 165:

  You have 10 domain controllers in a domain. You need to prevent several members of domain admin groups from logging on to the domain controllers. Which two object should you create and configure.

  A. GPO to the domain
  B. authentication policy
  C. authentication policy silo
  D. a central access policy
  E. a user certificate
  A. GPO to the domain
  B. authentication policy

  ---

  References: https://dirteam.com/sander/2014/12/23/new-features-in-active-directory-domain-services-in-windows-server-2012-r2-part-3-authentication-policies-and-authentication-policy-silos/

• Question 166:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2.

  Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. Cluster1 contains a Clustered Shared Volume (CSV).

  A developer creates an application named App1. App1 is NOT a cluster-aware application. App1 stores data in the file system.

  You need to ensure that App1 runs in Cluster1. The solution must minimize development effort.

  Which cmdlet should you run?

  A. Add-ClusterServerRole
  B. Add ClusterGenericApplicationRole
  C. Add-ClusterGenericServiceRole
  D. Add ClusterScaleOutFileServerRole
  B. Add ClusterGenericApplicationRole

  ---

  References: https://docs.microsoft.com/en-us/powershell/module/failoverclusters/add-clustergenericapplicationrole?view=win10-ps

• Question 167:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012. All servers are hosted in a data center. The data center includes a virtual infrastructure based on host servers running Windows Server 2012 Hyper-V. A server named ABC-CA1 runs Certificate Services and is configured as an Enterprise Certification Authority (CA) for the ABC.com domain. The company implements a backup data center. The backup data center connects to the existing primary data center network using a WAN link.

  You want to configure virtual machine (VM) replication to replicate VMs from the primary data center Hyper-V host servers to backup Hyper-V host servers in the backup data center. Company security policy states that the VM replication must be encrypted using SSL (Secure Sockets Layer).

  You plan to request a certificate from the CA to use for the encryption.

  What should you request from ABC-CA1?

  A. You should request a code signing certificate.
  B. You should request a certificate for both Client and Server authentication.
  C. You should request an IPSec certificate.
  D. You should request a certificate for both Server Authentication and IPSec.
  E. You should request a Server Authentication certificate.
  B. You should request a certificate for both Client and Server authentication.

• Question 168:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed. The domain contains a virtual machine

  named VM1.

  A developer wants to attach a debugger to VM1.

  You need to ensure that the developer can connect to VM1 by using a named pipe.

  Which virtual machine setting should you configure?

  A. BIOS
  B. Network Adapter
  C. COM 1
  D. Processor
  C. COM 1

  ---

  Named pipes can be used to connect to a virtual machine by configuring COM 1.

  References: http://support.microsoft.com/kb/819036 http://support.microsoft.com/kb/141709

• Question 169:

  DRAG DROP

  Your network contains two Active Directory forests named contoso.com and adatum.com. Each forest contains an Active Directory Rights Management Services (AD RMS) root cluster.

  All servers run Windows Server 2012 R2.

  You need to ensure that the rights account certificates issued in adatum.com are accepted by the AD RMS root cluster in contoso.com.

  What should you do in each forest? To answer, drag the appropriate actions to the correct forests. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

• Question 170:

  Which terminology is being described below?

  A _________ trust allows resources in your domain (the domain that you are logged on to at the time that you run the New Trust Wizard) to be accessed more quickly by users in another domain (which is nested within another domain tree) in your forest.

  A. one-way, outgoing, shortcut
  B. two-way, incoming, shortcut
  C. one-way, outgoing, forest
  D. two-way, incoming, forest
  A. one-way, outgoing, shortcut

  ---

  The direction of the trust is inverse of the direction of the authorization not forest as we're asked for a trust only between 2 domains. A forest trust would provide trust between every single domain of the forest.