Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 221:

  Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01.

  You need to ensure that when administrators create users in contoso.com, the default user principal name (UPN) suffix is litwareinc.com.

  What cmdlet should you use?

  A. the ntdsutil command
  B. the Set-ADDomain Windows PowerShell cmdlet
  C. the Install-ADDSDomain Windows PowerShell cmdlet
  D. the dsadd command
  E. the dsamain command
  F. the dsmgmt command
  G. the net user command
  H. the Set-ADForest Windows PowerShell cmdlet
  H. the Set-ADForest Windows PowerShell cmdlet

  ---

  With this command, you modify UPN suffix for entire forest

  Example:

  Modify the UPNSuffixes property for the fabrikam.com forestby using the Windows PowerShell command line to modify a local instance of the fabrikam.com forest. Then set the Instance parameter to the local instance.

  $forest = Get-ADForest -Identity fabrikam.com

  $forest.UPNSuffixes = "fabrikam.com","fabrikam","corp.fabrikam.com"

  Set-ADForest -Instance $forest.

  References: https://technet.microsoft.com/en-us/library/ee617221.aspx

• Question 222:

  HOTSPOT

  You run Get-FSRMClassificationule and you receive the following output:

  

  You have a file named file1 that is stored on drive D and has the following content "111000000000111111".

  You run the classification with all of the rules.

  Use the drop-down menus top select the answer choice that completes each statement.

  Hot Area:

  

  

  ---

  References: https://technet.microsoft.com/en-us/library/jj900627%28v=wps.630%29.aspx

• Question 223:

  You work as a Network Administrator at ABC.com. The company network spans four Active Directory Forests. Each forest contains a single Active Directory Domain Services (AD DS) domain. All servers in each domain run either Windows

  Server 2008 R2 Service Pack 1 (SP1) or Windows Server 2012.

  Active Directory Rights Management Services (AD RMS) is deployed throughout the company. An Active Directory Rights Management Services (AD RMS) root cluster is configured in each of the four forests.

  Users may need to access protected content from any of the forests. You need to ensure that an AD RMS cluster in any forest can process a licensing request that includes a rights account certificate (RAC) issued by an AD RMS cluster in

  any other forest.

  How should you configure the AD RMS environment?

  A. You should configure 12 AD RMS Trusted User Domains (TUDs).
  B. You should configure 4AD RMS Trusted User Domains (TUDs).
  C. You should configure 1 AD RMS Trusted User Domains (TUDs).
  D. You should configure 8 AD RMS Trusted User Domains (TUDs).
  A. You should configure 12 AD RMS Trusted User Domains (TUDs).

• Question 224:

  You have a DNS server named DNS1 that runs windows server 2012 R2.

  DNS1 is used to resolve the names of internet resources by using several DNS forwarders.

  You need to prevent DNS1 from performing iterative queries if the DNS forwarders are unable to reslove the queries.

  Which cmdlet should you use?

  A. Remove-DNSServerRootHint
  B. Set-DNSServerPrimaryZone
  C. Set-DNSServerGlobalNameZone
  D. Unregister-DNSserverDrirectoryPartition
  A. Remove-DNSServerRootHint

  ---

  The Remove-DnsServerRootHint cmdlet removes root hints from the list of root hints on a Domain Name System (DNS) server. When you remove a root hint from a DNS server, the DNS server cannot contact the root DNS server on startup and cannot answer queries for names outside its own authoritative zones.

  References: https://docs.microsoft.com/en-us/powershell/module/dnsserver/remove-dnsserverroothint?view=win10-ps

• Question 225:

  You have a Hyper-V host named Server1 that runs Windows Server 2012 R2. Server1 has the virtual switches listed in the following table.

  

  You create a virtual machine named VM1. VM1 has two network adapters. One network adapter connects to vSwitch1. The other network adapter connects to vSwitch2. You configure NIC teaming on VM1.

  You need to ensure that if a physical NIC fails on Server1, VM1 remains connected to the network.

  What should you do on Server1?

  A. Run the Set-VmNetworkAdapterIsolation cmdlet.
  B. Add a new network adapter to VM1.
  C. Modify the properties of the network adapters on VM1.
  D. Run the Set-VmNetworkAdapterAdapterFailoverConfiguration cmdlet.
  C. Modify the properties of the network adapters on VM1.

  ---

  NIC teaming needs to also be enabled in the VM properties.

• Question 226:

  Your network contains one Active Directory domain named contoso.com.

  The domain contains the domain controllers configured as shown in the following table.

  

  The functional level of the domain and the forest is Windows Server 2008. An administrator named Admin1 is a member of the Domain Admins group. You need to ensure that Admin1 can deploy a Windows Server 2012 R2 domain controller to contoso.com.

  What should you do?

  A. Raise the forest functional level.
  B. Run the Set-ADForestMode cmdlet.
  C. Raise the domain functional level.
  D. Run the adprep.exe command.
  D. Run the adprep.exe command.

  ---

  Adprep.exe commands run automatically as needed as part of the AD DS installation process on servers that run Windows Server 2012 or later. The commands need to run in the following cases: Before you add the first domain controller that runs a version of Windows Server that is later than the latest version that is running in your existing domain.

  

  Before you upgrade an existing domain controller to a later version of Windows Server, if that domain controller will be the first domain controller in the domain or forest to run that version of Windows Server.

  

  References: https://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx

• Question 227:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. A Windows Server 2012 server named ABC-DNS1 run the DNS Server role and hosts a primary zone for the ABC.com domain.

  The company has recently opened a branch office. You install a Windows Server 2012 server named ABC-DNS6 in the branch office and install the DNS Server role. To enable name resolution for branch office users, you want to configure ABC-DNS6 to host a secondary DNS zone for the ABC.com domain.

  How should you configure ABC-DNS1?

  A. On the General tab of the ABC.com zone properties, disable dynamic updates.
  B. On the ZoneTransfers tab of the ABC.com zone properties, add ABC-DNS6.
  C. On the Start of Authority (SOA) tab of the ABC.com zone properties, add ABC-DNS6.
  D. On the Forwarders tab of the ABC-DNS1 Server properties, add ABC-DNS6.
  B. On the ZoneTransfers tab of the ABC.com zone properties, add ABC-DNS6.

• Question 228:

  HOTSPOT

  Your network contains one Active Directory forest. The forest has three sites configured as shown in the following table.

  

  The forest contains the site links configured as shown in the following table.

  

  A domain controller named DC2 has an IP address of 192.168.2.2. DC2 and is in Site2. You run the following cmdlets.

  New-ADReplicationSite Site3New-ADReplacationSubnet -Name "192.168.3.0/24" -SiteSite3

  Use the drop-down menus to select the answer choice that completes each statement.

  Hot Area:

  

  

  ---

  References: http://www.vkernel.ro/blog/configuring-active-directory-sites-and-services

• Question 229:

  You have 30 servers that run Windows Server 2012 R2.

  All of the servers are backed up daily by using Windows Azure Backup.

  You need to perform an immediate backup of all the servers to Windows Azure Backup.

  Which Windows PowerShell cmdlets should you run on each server?

  A. Get-OBPolicy | Start-OBBackup
  B. Get-WBPolicy | Start-WBBackup
  C. Start-OBRegistration | Start-OBBackup
  D. Get-WBBackupTarget | Start-WBBackup
  A. Get-OBPolicy | Start-OBBackup

  ---

  A: starts a backup job using a policy Incorrect Answers:

  B: Registers the current computer to Windows Azure Backup. C, D: Not using Azure

  References: http://technet.microsoft.com/en-us/library/hh770406(v=wps.620).aspx http://technet.microsoft.com/en-us/library/hh770426.aspx http://technet.microsoft.com/en-us/library/hh770398.aspx

• Question 230:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. All servers on the network run Windows Server 2012.

  You create a second domain named Dev.ABC.com. The new domain contains a domain controller named ABC-DevDC1. The Dev.ABC.com domain will be used to test domain configurations before applying them to the corporate domain.

  You discover that the Default Domain Controllers Policy on ABC-DevDC1 has become corrupted. You do not have a backup of the Default Domain Controllers Policy.

  How can you recreate the Default Domain Controllers Policy without affecting the Default Domain Policy?

  A. By running the DCDiag /fix command.
  B. By running the DCPromo /adv command.
  C. By running the DCGPOFix /target:domain command.
  D. By running the DCGPOFix /target:dc command.
  D. By running the DCGPOFix /target:dc command.