Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 231:

  In Windows Server 2012 R2, you can remove the Server Graphical Shell, resulting in the "Minimal Server Interface." This is similar to a Server with a GUI installation except that some features are not installed. Which of the following features is not installed in this scenario?

  A. MMC
  B. Windows Explorer
  C. Control Panel (subset)
  D. Server Manager
  B. Windows Explorer

  ---

  When you choose the minimal server interface option Internet Explorer 10, Windows Explorer, the desktop, and the Start screen are not installed. Microsoft Management Console (MMC), Server Manager, and a subset of Control Panel are still present.

• Question 232:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012.

  The network includes four Windows Server 2012 servers running the IP Address Management (IPAM) feature. All four IPAM servers are configured for Group Policy-based provisioning. You need to change the provisioning method of one IPAM server to Manual.

  How can you change the provisioning method?

  A. By reinstalling IPAM on the server.
  B. By running theSet-IPAMConfiguration cmdlet.
  C. By running the Add-IpamCustomField cmdlet.
  D. By running the Invoke-IpamGpoProvisioning cmdlet.
  A. By reinstalling IPAM on the server.

• Question 233:

  Your network contains an Active Directory domain named adatum.com. The domain contains several thousand member servers that run Windows Server 2012 R2. All of the computer accounts for the member servers are in an organizational unit (OU) named ServersAccounts. Servers are restarted only occasionally.

  You need to identify which servers were restarted during the last two days.

  What should you do?

  A. Run dsquery computer and specify the -sra /epwc parameter.
  B. Run Get-ADComputer and specify the SearchScope parameter.
  C. Run dsquery server and specify the -o parameter.
  D. Run Get-ADComputer and specify the lastLogon property
  D. Run Get-ADComputer and specify the lastLogon property

  ---

  http://technet.microsoft.com/en-us/library/ee617192.aspx

  SearchScope Specifies the scope of an Active Directory search. Possible values for this parameter are:

  Base or 0

  OneLevel or 1

  Subtree or 2

  A Base query searches only the current path or object.

  A OneLevel query searches the immediate children of that path or object.

  A Subtree query searches the current path or object and all children of that path or object.

  http://technet.microsoft.com/en-us/library/cc732885%28v=ws.10%29.aspx

  Dsquery server

  -o {dn | rdn}

  Specifies the format that dsquery uses to display the search results. A dn value displays the distinguished name of each entry. An rdn value displays the relative distinguished name of each entry. The default value is dn.

  NB: epwc doesn't exist for Dsquery computer so even if i'm not sure it's the best way, the only possible answer is using "Get-ADComputer and specify the lastLogon property"

• Question 234:

  HOTSPOT

  Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the Hyper-V server role installed. Server2 has the Windows Deployment Services server role installed.

  On Server1, you have a virtual machine named VM1.

  You plan to deploy an image to VM1 by using Windows Deployment Services (WDS).

  You need to ensure that VM1 can connect to Server1 by using PXE.

  Which settings should you configure on VM1?To answer, select the appropriate settings in the answer area.

  Hot Area:

  

  

  ---

  The Pre-Boot Execution Environment (PXE) provider for Windows Deployment Services provides client boot services over the network. It registers itself with the WDSServer service (the main server-side service of the Windows Deployment Services solution) and requests a remote procedure call (RPC) endpoint.

  After the Windows Deployment Services server role is installed, you must configure the server by using either the Windows Deployment Services MMC snap-in or the /Initialize-Server command-line option. The PXE provider must be configured properly before it can provide client boot services over the network.

  References:

  http://technet.microsoft.com/en-us/library/cc726550%28v=WS.10%29.aspx

• Question 235:

  HOTSPOT

  You have a Hyper-V host named Server1 that runs Windows Server 2008 R2.All of the virtual machines on Server1 use VHDs.

  You install the Hyper-V server role on a server named Server2 that runs Windows Server 2012 R2.Server2 has the same hardware configurations as Server1.

  You plan to migrate the Hyper-V host from Server1 to Server2 by using the Windows Server Migration Tools.

  In the table below, identify what can be migrated by using the Windows Server Migration Tools. Make only one selection in each row. Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  The following configurations and settings can be migrated automatically include: Most virtual machine configurations. Virtual machines and their data are moved as part of the migration, but some configurations require manual intervention Hyper-V settings. These include the system-wide settings and the authorization store.

  References: http://technet.microsoft.com/en-us/library/ee849855%28v=WS.10%29.aspx

• Question 236:

  Your network contains an Active Directory domain named contoso.com.

  You create a software restriction policy to allow an application named App1 by using a certificate rule. You need to prevent the software restriction policy from applying to users that are members of the local Administrators group.

  What should you do?

  A. Modify the rule for App1
  B. Modify the Enforcement Properties
  C. Modify the Security Levels.
  D. Modify the Trusted Publishers Properties
  B. Modify the Enforcement Properties

  ---

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh994606(v=ws.11)

• Question 237:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 is an enterprise root certification authority (CA) for contoso.com.

  Your user account is assigned the certificate manager role and the auditor role on the contoso.com CA. Your account is a member of the local Administrators group on Server1.

  You enable CA role separation on Server1.

  You need to ensure that you can manage the certificates on the CA.

  What should you do?

  A. Remove your user account from the local Administrators group.
  B. Assign the CA administrator role to your user account.
  C. Assign your user account the Bypass traverse checking user right.
  D. Remove your user account from the Manage auditing and security log user right.
  D. Remove your user account from the Manage auditing and security log user right.

• Question 238:

  Your network contains an Active directory forest named contoso.com. The forest contains two child domains named east.contoso.com and west.contoso.com.

  You install an Active Directory Rights Management Services (AD RMS) cluster in each child domain.

  You discover that all of the users in the contoso.com forest are directed to the AD RMS cluster in east.contoso.com.

  You need to ensure that the users in west.contoso.com are directed to the AD RMS cluster in west.contoso.com and that the users in east.contoso.com are directed to the AD RMS cluster in east.contoso.com.

  What should you do?

  A. Modify the Service Connection Point (SCP)
  B. Configure the Group Policy object (GPO) settings of the users in the west.contoso.com domain
  C. Configure the Group Policy object (GPO) settings of the users in the east.contoso.com domain
  D. Modify the properties of the AD RMS cluster in west.contoso.com
  B. Configure the Group Policy object (GPO) settings of the users in the west.contoso.com domain

  ---

  The west.contoso.com are the ones in trouble that need to be redirected to the west.contoso.com not the east.contoso.com

• Question 239:

  You have virtual machine named VM1.

  VM1 uses a fixed size virtual hard disk (VHD) named diskl.vhd. Diskl.vhd is 200 GB.

  You shut down VM1.

  You need to reduce the size of diskl.vhd.

  Which action should you select from the Edit Virtual Hard Disk Wizard?

  A. Merge
  B. Compact
  C. Shrink
  D. Convert
  D. Convert

  ---

  The Edit Virtual Hard Disk Wizard allows you to Compact, Convert, or Expand the VHD. Compacting reduces the size of a dynamically expanding VHD but not a fixed-size VHD.

  Converting changes the disk format to the newer VHDX.

  This process recreates the virtual disk, and allows you to specify the size of the VHDX.

  References:

  http://blogs.technet.com/b/yungchou/archive/2013/01/23/hyper-v-virtual-hard-disk-vhd-operations-explained.aspx

  http://blogs.technet.com/b/aviraj/archive/2012/05/06/windows-server-2012-convert-vhd-to-vhdx-using-hyper-v-manager.aspx

• Question 240:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.

  Server1 has the Active Directory Federation Services server role installed.

  You need to make configuration changes to the Windows Token-based Agent role service.

  Which tool should you use?

  To answer, select the appropriate tool in the answer area.

  Hot Area:

  

  

  ---