Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 211:

  HOTSPOT

  Your company has a primary data center and a disaster recovery data center.

  The network contains an Active Directory domain named contoso.com. The domain contains a server named that runs Windows Server 2012 R2. Server1 is located in the primary data center.

  Server1 has an enterprise root certification authority (CA) for contoso.com.

  You deploy another server named Server2 to the disaster recovery data center.

  You plan to configure Server2 as a secondary certificate revocation list (CRL) distribution point.

  You need to configure Server2 as a CRL distribution point (CDP).

  Which tab should you use to configure the required CDP entry? To answer, select the appropriate tab in the answer area.

  Hot Area:

  

  

  ---

  http://technet.microsoft.com/zh-cn/library/jj125369.aspx

• Question 212:

  DRAG DROP

  Your network contains a production Active Directory forest named contoso.com and a test Active Directory forest named test.contoso.com.

  There is no network connectivity between contoso.com and test.contoso.com.

  The test.contoso.com domain contains a Group Policy object (GPO) named GPO1.

  You need to apply the settings in GPO1 to the contoso.com domain.

  Which four actions should you perform? To answer, move the four appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Box 1: Run the Backup-GPO cmdlet in test.contoso.com Box 2: Use removable media to transfer the contents of test.contoso.com to contoso.com Box 3: Run the New-GPO cmdlet in contoso.com Box 4: Run the Import-GPO cmdlet in contoso.com

  References: http://technet.microsoft.com/en-us/library/ee461050.aspx http://technet.microsoft.com/en-us/library/ee461044.aspx

• Question 213:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2.

  You install the DHCP Server server role on Server1 and Server2. You install the IP Address Management (IPAM) Server feature on Server1.

  You notice that you cannot discover Server1 or Server2 in IPAM. You need to ensure that you can use IPAM to discover the DHCP infrastructure.

  Which two actions should you perform? (Each correct answer presents part of the solution. (Choose two.)

  A. On Server2, create an IPv4 scope
  B. On Server1, run the Add-IpamServerInventory cmdlet
  C. On Server2, run the Add-DhcpServerInDc cmdlet
  D. On both Server1 and Server2, run the Add-DhcpServerv4Policy cmdlet
  E. On Server1, uninstall the DHCP Server server role.
  C. On Server2, run the Add-DhcpServerInDc cmdlet
  E. On Server1, uninstall the DHCP Server server role.

  ---

  The Add-DhcpServerInDC cmdlet adds the computer that runs the DHCP server service to the list of authorized Dynamic Host Configuration Protocol (DHCP) server services in the Active Directory. A DHCP server service that runs on a domain joined computer must be authorized in Active Directory so that it can start leasing IP addresses on the network.

  The IPAM server is intended as a single purpose server and should not be installed with other network infrastructure roles such as DNS or DHCP. If IPAM Server is running on a computer that is also running the DHCP Server role, discovery of DHCP servers on the network will be disabled.

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj878315(v=ws.11)

  https://docs.microsoft.com/en-us/powershell/module/dhcpserver/Add-DhcpServerInDC?view=win10-ps

• Question 214:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  On all of the domain controllers, Windows is installed in C:\Windows and the Active Directory database is located in D:\Windows\NTDS\.

  All of the domain controllers have a third-party application installed.

  The operating system fails to recognize that the application is compatible with domain controller cloning.

  You verify with the application vendor that the application supports domain controller cloning.

  You need to prepare a domain controller for cloning.

  What should you do?

  A. In C:\Windows\, create an XML file named DCCIoneConfig.xml and add the application information to the file.
  B. In the root of a USB flash drive, add the application information to an XML file named DefaultDCCIoneAllowList.xml.
  C. In D:\Windows\NTDS\, create an XML file named DCCIoneConfig.xml and add the application information to the file.
  D. In D:\Windows\NTDS\, create an XML file named CustomDCCIoneAllowList.xml and add the application information to the file.
  E. In C:\Windows\System32\Sysprep\Actionfiles\, add the Application information to an XML file named Respecialize.xml.
  D. In D:\Windows\NTDS\, create an XML file named CustomDCCIoneAllowList.xml and add the application information to the file.

  ---

  Place the CustomDCCloneAllowList.xml file in the same folder as the Active Directory database (ntds.dit) on the source Domain Controller.

  

  References: https://dirteam.com/sander/2012/09/10/new-features-in-active-directory-domain-services-in-windows-server-2012-part-13-domain-controller-cloning/

• Question 215:

  Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers. The domain controllers are configured as shown in the following table.

  

  Active Directory Recycle Bin is enabled. You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago. You need to restore the membership of Group1. What should you do?

  A. Export and import data by using Dsamain.
  B. Apply a virtual machine snapshot to VM1.
  C. Recover the items by using Active Directory Recycle Bin.
  D. Modify the isRecycled attribute of Group1.
  A. Export and import data by using Dsamain.

  ---

  As far as the benefits of the Windows 2012 Recycle Bin, they are the same as the Windows 2008 R2 recyclebin with the exception of the new user interface which makes it more user-friendly. These additional benefits include:

  All deleted AD object information including attributes, passwords and group membership can be selected in mass then undeleted from the user interface instantly or via Powershell User-friendly and intuitive interface to filter on AD objects and

  a time period

  Can undelete containers with all child objects

  References:

  https://www.simple-talk.com/sysadmin/exchange/the-active-directory-recycle-bin-in-windows-server-2008-r2/

  http://communities.quest.com/community/quest-itexpert/blog/2012/09/24/the-windows-server-2012-recycle-bin-and-recovery-manager-for-active-directory

• Question 216:

  You have a server named Server1 that runs Windows Server 2012 R2.

  A Microsoft Azure Backup of Server1 is created automatically every day.

  You need to view the items that are included in the backup.

  Which cmdlet should you run?

  A. Get-WBSummary
  B. Get-OBPolicy
  C. Get-OBJob
  D. Get-WBJob
  B. Get-OBPolicy

  ---

  The Get-OBPolicy cmdlet gets the current backup policy that is set for the server, including the details about scheduling backups, files included in the backup, and retention policy Incorrect Answers:

  A: The Get-WBSummary cmdlet gets the history of the backup operations performed. Information returnedincludes when the next backup is scheduled for, details for the last backup, and details of the last successful backup.

  C: The Get-OBJob cmdlet gets a list of operations from a server as OBJob[] objects.

  D: The Get-WBJob cmdlet gets the currently running or previous backup operation (WBJob object). References: https://technet.microsoft.com/en-us/library/hh770406(v=wps.630).aspx

• Question 217:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.

  The network includes a primary data center and a secondary data center. The primary data center includes virtual machines (VMs) running on Windows Server 2012 Hyper-V host servers. A failover cluster in the primary data center named ABC-CL01 contains three Hyper-V host servers named HVHost1, HVHost2 and HVHost3. ABC-CL01 hosts several highly available virtual machines (VMs).

  You need to configure a disaster recovery solution in the event of the data center going offline. You install a Hyper-V host server named HVHostBak. You plan to enable virtual machine replication between ABC-CL01 and HVHostBak. You need to ensure that you can failover VMs from ABC-CL01 to HVHostBak and failover VMs from HVHostBak back to ABC-CL01. You open the Hyper-V Manager console on HVHostBak and configure it as a replica server. You need to configure the replication of the VMs.

  Which two of the following actions should you perform to enable the VM replication?

  A. Install the Hyper-V Replica Broker role on ABC-CL01.
  B. Install the Hyper-V Replica Broker role on HVHostBak.
  C. Open the Hyper-V Manager console on one of the cluster nodes and configure the VMs for replication.
  D. Open the Failover Cluster Manager console on ABC-CL01 and configure the VMs for replication.
  A. Install the Hyper-V Replica Broker role on ABC-CL01.
  D. Open the Failover Cluster Manager console on ABC-CL01 and configure the VMs for replication.

• Question 218:

  Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2. You have a Password Settings object (PSOs) named PSO1. You need to view the settings of PSO1. Which tool should you use?

  A. Get-ADDomainControllerPasswordReplicationPolicy
  B. Get-ADDefaultDomainPasswordPolicy
  C. Active Directory Administrator Centre
  D. Local Security Policies
  C. Active Directory Administrator Centre

  ---

  In Windows Server 2012, fine-grained password policy management is made easier and more visual by providing a user interface for AD DS administrators to manage them in ADAC.

  References: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/adac/introduction-to-active-directory-administrative-center-enhancements--level-100-#fine_grained_pswd_policy_mgmt

• Question 219:

  Your network includes five servers running the operating system Windows Server 2012 R2.

  In the five servers, the Failover Clustering feature is installed. To create a new cluster with the name Cluster1. The configuration of the cluster is shown in the picture (click on the button drawing). Site B is a site for disaster recovery. Server1,

  Server2 and Server3 are configured as the preferred owner of Cluster1. The dynamic quorum management is disabled.

  You are planning a hardware maintenance for Server3.

  You must make sure that the cluster resources remain available to Site A if the WAN connection fails while you are performing maintenance on Server3.

  How do you proceed?

  

  A. Create in StandortA a witness file share.
  B. Remove Server3 the nodes vote.
  C. Remove Server4 and Server5 the nodes vote.
  D. Enable the dynamic quorum administration.
  C. Remove Server4 and Server5 the nodes vote.

  ---

  The quorum configuration in a failover cluster, the number of failures is determined that can be tolerated by the cluster. If another failure occurs, the cluster must stop running. The relevant in this context are failures or node failures -in some

  cases -failure of a witness disk (of a copy of the cluster configuration contains) or a witness file share. It is essential that the cluster is no longer running, enter if too many failures, or if a problem with the communication between the cluster

  nodes is present.

  In Windows Server 2012 and Windows Server 2012 R2, you can a node on the extended quorum settings the "right to vote "escape and manually influence the determination of the majorities in special situations.

  References:

  https://technet.microsoft.com/en-us/library/jj612870.aspx

• Question 220:

  You have a server named Server1 that runs Windows Server 2012 R2 and uses Windows Server Backup. You need to identify whether the backups performed on Server1 support bare metal recovery. Which cmdlet should you run?

  A. Get-OBMachineSetting
  B. Get-WBVSSBackupOption
  C. Get-WBPolicy
  D. Get-OBPolicy
  C. Get-WBPolicy

  ---

  Get-WBPolicy is for Windows Backup

  Incorrect Answers:

  A, D: Get-OBMachineSetting and Get-OBPolicy is for Azure Backup, not for Windows Backup

  B: Get-WBVSSBackupOption cmdlet doesn't exist

  References: https://technet.microsoft.com/en-us/library/Ee706650.aspx