Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 11:

  HOTSPOT

  Your network contains one Active Directory domain named contoso.com.

  The domain contains 10 file servers that run Windows Server 2012 R2. You plan to enable BitLocker Drive Encryption (BitLocker) for the operating system drives of the file servers. You need to configure BitLocker policies for the file servers to meet the following requirements:

  

  Ensure that all of the servers use a startup PIN for operating system drives encrypted with BitLocker.

  

  Ensure that the BitLocker recovery key and recovery password are stored in Active Directory.

  Which two Group Policy settings should you configure? To answer, select the appropriate settings in the answer area.

  Hot Area:

  

  

  ---

  Require additional authentication at startup

  Choose how BitLocker-protected operating system drives ca...

  References: https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings

• Question 12:

  HOTSPOT

  Your network contains one Active Directory forest named adatum.com. The forest contains a single domain. The forest contains the domain controllers configured as shown in the following table.

  

  Recently, a domain controller named DC4 was deployed to adatum.com. DC4 is in the Default-First-Site-Name site.

  

  The adatum.com site links are configured as follows.

  The schedule for SiteLink1 is shown in the SiteLink1 exhibit. (Click the Exhibit button.)

  

  The schedule for SiteLink2 is shown in the SiteLink2 exhibit. (Click the Exhibit button.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  

  ---

  

  SiteLink1 replication is not available at 10:00.

  

  SiteLink1 and SiteLink2 replication is available at Friday at 23:00. Replication intervals are 15 minutes and 30 minutes respectively.

  

  DefaultIPSitelink will be used to replicate an object from DC1 to DC4. The replication interval of DefaultIPSitelink is 180 minutes.

• Question 13:

  HOTSPOT

  Your network contains an Active Directory domain named fabrikam.com. You implement DirectAccess and an IKEv2 VPN. You need to view the properties of the VPN connection. Which connection properties should you view? To answer,

  select the appropriate connection properties in the answer area.

  Hot Area:

  

  

  ---

  Position 1 symbolizes a wired network connection. Position 2 indicates the DirectAccess connection. Is located at position 3 the known symbol of wireless (WIFI) connection and the symbol in position 4 identifies a VPN connection.

• Question 14:

  You plan to allow users to run internal applications from outside the company's network. You have a Windows Server 2012 R2 that has the Active Directory Federation Services (AD FS) role installed. You must secure on-premises resources

  by using multi-factor authentication (MFA).

  You need to design a solution to enforce different access levels for users with personal Windows 8.1 or iOS 8 devices.

  Solution: You migrate the AD FS server to Microsoft Azure and connect it to the internal Active Directory instance on the network. Then, you use the Workplace Join process to configure access for personal devices to the on-premises

  resources.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  References: https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/join-to-workplace-from-any-device-for-sso-and-seamless-second-factor-authentication-across-company-applications

• Question 15:

  Your network contains an Active Directory domain named adatum.com. The domain contains the servers shown in the following table.

  

  You need to ensure that you can use Server Manager on DC1 to manage DC2.

  Which two tasks should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Install the Windows PowerShell 2.0 engine on DC1.
  B. Install Microsoft .NET Framework 4 on DC2.
  C. Install Windows Management Framework 3.0 on DC2.
  D. Install Remote Server Administration Tools on DC1.
  E. Install Remote Server Administration Tools on DC2.
  B. Install Microsoft .NET Framework 4 on DC2.
  C. Install Windows Management Framework 3.0 on DC2.

  ---

  Windows Management Framework 3.0 To use this release of Server Manager to access and manage remote servers that are running Windows Server 2008 or Windows Server 2008 R2, you must first install .NET Framework 4.0, and then

  install Windows Management Framework 3.0 on those servers.

  Note: In Windows Server 2012 R2, you can use Server Manager to perform management tasks on remote servers.

  Remote management is enabled by default on servers that are running Windows Server 2012 R2. To manage a server remotely by using Server Manager, you add the server to the Server Manager server pool. You can use Server Manager

  to manage remote servers that are running Windows Server 2008 and Windows Server 2008 R2, but the following updates are required to fully manage these older operating systems (see above).

• Question 16:

  DRAG DROP

  You have a file server named Server1 that runs Windows Server 2012 R2. The folders on Server1 are configured as shown in the following table.

  

  A new corporate policy states that backups must use Windows Azure Online Backup whenever possible.

  You need to identify which technology you must use to back up Server1. The solution must use Windows Azure Online Backup whenever possible.

  What should you identify?

  To answer, drag the appropriate backup type to the correct location or locations. Each backup type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

• Question 17:

  Your network contains an Active Directory forest named adatum.com. All servers run Windows Server 2012 R2. The domain contains four servers. The servers are configured as shown in the following table.

  

  You need to deploy IP Address Management (IPAM) to manage DNS and DHCP. On which server should you install IPAM?

  A. Server1
  B. Server2
  C. Server3
  D. Server4
  D. Server4

  ---

  IPAM can not be installed on a Domain Controller.

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj878342(v=ws.11)

• Question 18:

  Your network contains a single Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. The domain contains 400 desktop computers that run Windows 8 and 10 desktop computers that run Windows XP Service Pack 3 (SP3). All new desktop computers that are added to the domain run Windows 8. All of the desktop computers are located in an organizational unit (OU) named OU1.

  You create a Group Policy object (GPO) named GPO1. GPO1 contains startup script settings. You link GPO1 to OU1.

  You need to ensure that GPO1 is applied only to computers that run Windows XP SP3. What should you do?

  A. Modify the Security settings of OU1.
  B. Run the Set-GPInheritance cmdlet and specify the -target parameter.
  C. Create and link a WMI filter to GPO1.
  D. Run the Set-GPLink cmdlet and specify the -target parameter.
  C. Create and link a WMI filter to GPO1.

  ---

  You can use WMI filters to add a decision on when to apply a given group policy. This can be very useful when users or computers are located in a relatively flat structure instead of specific OU's, for example. Filters can also help when you need to apply certain policies based on server roles, operating system version, network configuration, or other criteria. Windows evaluates these filters in the following order of overall Group Policy Processing:

  1.

  Policies in hierarchy are located.

  2.

  WMI Filters are checked.

  3.

  Security settings are checked.

  4.

  Finally, once everything has `passed', a policy is applied.

  References: https://blogs.technet.microsoft.com/askds/2008/09/11/fun-with-wmi-filters-in-group-policy/

• Question 19:

  You have a failover cluster named Cluster1 that contains four nodes. All of the nodes run Windows Server 2012 R2.

  You need to force every node in Cluster1 to contact immediately the Windows Server Update Services (WSUS) server on your network for updates.

  Which tool should you use?

  A. The Add-CauClusterRole cmdlet
  B. The Wuauclt command
  C. The Wusa command
  D. The Invoke-CauScan cmdlet
  D. The Invoke-CauScan cmdlet

  ---

  The Invoke-CauScancmdlet performs a scan of cluster nodes for applicable updates and returns a list of the initial set of updates that would be applied to each node in a specified cluster.

• Question 20:

  Your network contains one Active Directory Domain Services domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.

  The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify which user accounts were authenticated by RODC01.

  Which Windows PowerShell cmdlet should you run?

  A. Get-AdGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  F. Get-ADAccountAuthorizationGroup
  G. Get-ADAuthenticationPolicySilo
  H. Get-ADAuthenticationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage

  ---

  The Get-ADDomainControllerPasswordReplicationPolicyUsage gets the user or computer accounts that are authenticated by a read-only domain controller (RODC) or that have passwords that are stored on that RODC. References: https://technet.microsoft.com/es-es/library/hh852193(v=wps.620).aspx