Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 201:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8 Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1.

  You make a change to GPO1.

  You need to force all of the computers in OU1 to refresh their Group Policy settings immediately. The solution must minimize administrative effort.

  Which tool should you use?

  A. The Secedit command
  B. The Invoke-GpUpdate cmdlet
  C. Group Policy Object Editor
  D. Server Manager
  B. The Invoke-GpUpdate cmdlet

  ---

  References: https://technet.microsoft.com/en-us/library/jj134201.aspx

• Question 202:

  DRAG DROP

  Your network contains two Active Directory forests named contoso.com and adatum.com. All domain controllers run Windows Server 2012 R2.

  A federated trust exists between adatum.com and contoso.com. The trust provides adatum.com users with access to contoso.com resources.

  You need to configure Active Directory Federation Services (AD FS) claim rules for the federated trust.

  The solution must meet the following requirements:

  In contoso.com, replace an incoming claim type named Group with an outgoing claim type named Role.

  In adatum.com, allow users to receive their tokens for the relying party by using their Active Directory group membership as the claim type.

  The AD FS claim rules must use predefined templates.

  Which rule types should you configure on each side of the federated trust?

  To answer, drag the appropriate rule types to the correct location or locations. Each rule type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

  ---

  * Acceptance transform rule set A set of claim rules that you use on a particular claims provider trust to specify the incoming claims that will be accepted from the claims provider organization and the outgoing claims that will be sent to the relying party trust. Used on: Claims provider trusts

  * Issuance Authorization Rule Set A set of claim rules that you use on a relying party trust to specify the claims that will be issued to the relying party. Used on: Relying party trusts Reference: The Role of Claim Rules http://technet.microsoft.com/zh-cn/library/ee913586(v=WS.10).aspx

• Question 203:

  You have a server named File1 that runs Windows Server 2012 R2. File1 has the File Server role service installed. You plan to back up all shared folders by using Microsoft Online Backup.

  You download and install the Microsoft Online Backup Service Agent on File1.

  You need to ensure that you use Windows Server Backup to back up data to Microsoft Online Backup.

  What should you do?

  A. From Computer Management, add the File1 computer account to the Backup Operators group.
  B. From the Services console, modify the Log On settings of the Microsoft Online Backup Service Agent.
  C. From Windows Server Backup, run the Register Server Wizard.
  D. From a command prompt, run wbadmin.exe enable backup.
  C. From Windows Server Backup, run the Register Server Wizard.

  ---

  Download and install the Windows Azure Online Backup Agent After you create an account on the Windows Azure Online Backup website, you can download the Windows Azure Online Backup Agent and install it locally. An Online Backup node then appears in the navigation pane of the Windows Server Backup console, as shown in Figure 12

  

  If you prefer, you can also configure online backups from the Windows Azure Online Backup console, which becomes available after you install the agent. The Windows Azure Online Backup console provides exactly the same set of options as the Online Backup node in the Windows Server Backup console.

  Register server The next step is to register your server. Registering a server enables you to perform backups from that same server only. (Remember this point for the exam.) To register the server, from the Actions menu, select Register Server. The Register Server Wizard includes two configuration steps. First, you are given an opportunity to specify a proxy server if desired. Second, you are asked to provide a passphrase that will be used to encrypt your backup data and a location to save this passphrase in a file. You need to provide this passphrase when you perform a restore operation, so it's essential that you don't lose it. (Microsoft doesn't maintain a copy of your passphrase.) A Generate Passphrase option creates the passphrase for you automatically. After you register a server, new options for Online Backup appear in the Actions pane, including Schedule Backup, Recover Data, Change Properties, and Unregister Server.

• Question 204:

  You work as a Network Administrator at ABC.com. The network contains a single Active Directory Domain Services (AD DS) domain named ABC.com and a workgroup named DMZ. The network includes servers that run Windows Server

  2008 R2 Service Pack 1 (SP1) and Windows Server 2012.

  The network consists of a corporate LAN (local area network) and a perimeter network. A firewall separates the LAN from the perimeter network. All servers in the perimeter network are members of the DMZ workgroup.

  You install a Windows Server 2012 server named ABC-CA1. ABC-CA1 will be configured as an Enterprise Certification Authority and will issue computer certificates to the ABC.com domain computers and the DMZ workgroup computers.

  You need to configure a server to function as a distribution point for the Certificate Revocation List (CRL).

  Which server role should be installed on the CRL distribution point server?

  A. Web Server (IIS).
  B. DNS Server.
  C. Active Directory Domain Services (AD DS).
  D. Active Directory Federation Services (AD FS).
  E. Active Directory Lightweight Directory Services (AD LDS).
  A. Web Server (IIS).

• Question 205:

  You have a print server named Print1 that runs Windows Server 2012 R2. Print1 has 10 shared printers. You need to change the location of the spool folder. What should you modify?

  A. The properties of the Print Spooler service
  B. The Print Server Properties
  C. The user environment variables
  D. The PrintQueue.inf file
  B. The Print Server Properties

  ---

  

• Question 206:

  Your network contains two servers named Server1 and Server2. Both servers run Windows Server 2012 R2. On Server1, you create a Data Collector Set (DCS) named Data1.

  You need to export Data1 to Server2.

  What should you do first?

  A. Right-click Data1 and click Save template...
  B. Right-click Data1 and click Export list...
  C. Right-click Data1 and click Data Manager...
  D. Right-click Data1 and click Properties.
  A. Right-click Data1 and click Save template...

  ---

  Exporting Templates To export a Data Collector Set you create as a template for use on other computers, open Windows Performance Monitor, expand Data Collector Sets, right-click the Data Collector Set you want to export, and click Save Template. Select a directory in which to store theXML file and click Save.

• Question 207:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2.

  You mount an Active Directory snapshot on DC1.

  You need to expose the snapshot as an LDAP server.

  Which tool should you use?

  A. Dsamain
  B. Ntdsutil
  C. Ldp
  D. ADSI Edit
  A. Dsamain

  ---

  Dsamain.exe can you can use to expose the snapshot data as an LDAP server

• Question 208:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. A server named ABC-Win12Admin runs Windows Server 2012. You use ABC-Win12Admin to administer the Windows Server 2012 servers in the domain. You configure several custom Data Collector Sets on ABCWin12Admin to collect performance log data from network servers.

  To preserve disk space on ABC-Win12Admin, you need to automate the deletion of performance log data that is more than one week old. What should you do?

  A. You should modify the Folder Action settings in the properties of the Data Collector Sets.
  B. You should configure a quota on the folder containing the performance log data using File Server Resource Manager.
  C. You should configure a disk quota on the volume that contains the folder containing the performance log data.
  D. You should modify the properties of the %Systemdrive%\PerfLogs folder.
  A. You should modify the Folder Action settings in the properties of the Data Collector Sets.

• Question 209:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.

  You enable and configure Routing and Remote Access (RRAS) on Server1.

  You create a user account named User1.

  You need to ensure that User1 can establish VPN connections to Server1.

  What should you do?

  A. Modify the members of the Remote Management Users group
  B. Add a RADIUS client
  C. Modify the Dial-in setting of User1
  D. Create a connection request policy
  C. Modify the Dial-in setting of User1

  ---

  Access permission is also granted or denied based on the dial-in properties of each user account.

  References: http://technet.microsoft.com/en-us/library/cc772123.aspx

• Question 210:

  Dynamic memory is a great feature that allows you to manage the amount of memory that Hyper-V virtual machines consume. How would you identify the memory a virtual machine consumes when Dynamic Memory is not enabled?

  A. View the amount of RAM listed under Startup in the Memory page of the virtual machine
  B. View the amount of RAM listed under Static in the Memory page of the virtual machine
  C. None of these
  D. View the amount of RAM listed under Maximum in the Memory page of the virtual machine
  A. View the amount of RAM listed under Startup in the Memory page of the virtual machine

  ---

  When dynamic memory is not enabled, the virtual machine is given a static amount of RAM. This value is located under the Startup section of the Memory page of the virtual machine settings. Notice in my screenshot it's enabled: