Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 261:

  You administer a group of servers that run Windows Server 2012 R2.

  You must install all updates. You must report on compliance with the update policy on a monthly basis. You need to configure updates and compliance reporting for new devices.

  What should you do?

  A. Deploy the Microsoft Baseline Security Analyzer. Scan the servers and specify the /apply switch.
  B. In Configuration Manager, deploy a new Desired Configuration Management baseline that includes all required updates.
  C. Configure a new group policy to install updates monthly. Deploy the group policy to all servers.
  D. In Operations Manager, create an override that enables the software updates management pack. Apply the new override to the servers
  B. In Configuration Manager, deploy a new Desired Configuration Management baseline that includes all required updates.

  ---

  References: https://technet.microsoft.com/en-us/library/bb680553.aspx

• Question 262:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.

  The network includes four domain controllers. ABC-DC1 and ABC-DC2 run the full standard version of Windows Server 2012. ABC-DC3 and ABC-DC4 run the Server Core version of Windows Server 2012.

  You want to manually uninstall Active Directory from the Server Core installations. How can you uninstall Active Directory from ABC-DC3 and ABC-DC4? (Choose two possible answers).

  A. By running the DCPromo.exe command.
  B. By running the NTDSUtil.exe command.
  C. By running the Uninstall-ADDSDomainController cmdlet.
  D. By running the Install-ADDSDomainController cmdlet.
  E. By running the Remove-WindowsFeature cmdlet.
  F. By running Server Manager from ABC-DC1.
  C. By running the Uninstall-ADDSDomainController cmdlet.
  E. By running the Remove-WindowsFeature cmdlet.

• Question 263:

  You perform a Server Core Installation of Windows Server 2012 R2 on a server named Server1.

  You need to add a graphical user interface (GUI) to Server1.

  Which tool should you use?

  A. The imagex.exe command
  B. The ocsetup.exe command
  C. The setup.exe command
  D. The dism.exe command
  E. The Install-Module cmdlet
  F. the Add-WindowsPackage cmdlet
  D. The dism.exe command

  ---

  The DISM command is called by the Add-WindowsFeature command. Here is the systax for DISM:

  Dism /online /enable-feature /featurename:ServerCore-FullServer /featurename:Server- Gui-Shell /featurename:Server-Gui-Mgmt

  

• Question 264:

  Your network contains multiple subnets. On one of the subnets, you deploy a server named Server1 that runs Windows Server 2012 R2.

  You install the DNS Server server role on Server1, and then you create a standard primary zone named contoso.com. You need to ensure that client computers can resolve IP addresses to host names.

  What should you do first?

  A. Create a GlobalNames zone
  B. Convert the contoso.com zone to an Active Directory-integrated zone
  C. Configure dynamic updates for contoso.com
  D. Create a reverse lookup zone
  D. Create a reverse lookup zone

  ---

  A reverse lookup zone provides IP address-to-hostname resolution. Clients query the DNS server with the IP address and receive the hostname in return. References: https://www.coursehero.com/file/p3bu53k/A-reverse-lookup-zone-provides-IP-address-to-hostname-resolution-Clients-query/

• Question 265:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. The Organizational Unit (OU) structure includes top-level OUs for each office location. Each toplevel OU contains OUs for each company department. Each departmental OU contains the user accounts of the users working in that department in the relevant location. Many Group Policy Objects (GPOs) are applied at the site level, domain level and OU level. You create an OU named TestOU inside one of the departmental OUs. You want to ensure that no GPOs from the site level, domain level, location OU level or department OU level are applied to objects within TestOU.

  How can you quickly achieve this goal?

  A. By running the Set-GPInheritance cmdlet.
  B. By running the Set-GPPermission cmdlet.
  C. By running the New-GPStarterGPO cmdlet.
  D. By running the Remove-GPLink cmdlet.
  E. By running the Set-GPLink cmdlet.
  A. By running the Set-GPInheritance cmdlet.

• Question 266:

  Your network contains two Active Directory forests named contoso.com and adatum.com.

  Each forest contains one domain. Contoso.com has a two-way forest trust to adatum.com. Selective authentication is enabled on the forest trust.

  Contoso contains 10 servers that have the File Server role service installed.

  Users successfully access shared folders on the file servers by using permissions granted to the Authenticated Users group.

  You migrate the file servers to adatum.com.

  Contoso users report that after the migration, they are unable to access shared folders on the file servers.

  You need to ensure that the Contoso users can access the shared folders on the file servers.

  What should you do?

  A. Disable selective authentication on the existing forest trust
  B. Disable SID filtering on the existing forest trust
  C. Run netdom and specify the /quarantine attribute
  D. Replace the existing forest trust with an external trust.
  A. Disable selective authentication on the existing forest trust

  ---

  for A:

  Impact of Selective Authentication

  Because all verification of incoming interforest authentication requests is done locally on the receiving domain controller in the trusting forest, access to resources in the trusting forest is likely to be extremely limited for a broad set of users on

  the network (which is the purpose of this security setting). Consequently, implementing selective authentication might require user education, particularly due to the following reasons:

  Users browsing network resources through My Network Places to resources located in a trusting forest might get access denied messages when attempting to access those resources.

  Resources in the trusting forest that were once available to users in a trusted forest might no longer be available.

  References:

  http://technet.microsoft.com/nl-nl/library/cc755321%28v=ws.10%29.aspx

• Question 267:

  You have a server named Server1 that runs Windows Server 2012 R2.

  On Server1, you configure a custom Data Collector Set (DCS) named DCS1. DCS1 is configured to store performance log data in C:\Logs.

  You need to ensure that the contents of C:\Logs are deleted automatically when the folder reaches 100 MB in size.

  What should you configure?

  A. A File Server Resource Manager (FSRM) file screen on the C:\Logs folder
  B. The Data Manager settings of DCS1
  C. A schedule for DCS1
  D. A File Server Resource Manager (FSRM) quota on the C:\Logs folder
  B. The Data Manager settings of DCS1

  ---

  To configure data management for a Data Collector Set

  1.

  - In Windows Performance Monitor, expand Data Collector Sets and click User Defined.

  2.

  - In the console pane, right-click the name of the Data Collector Set that you want to configure and click Data Manager.

  3.

  - On the Data Manager tab, you can accept the default values or make changes according to your data retention policy. See the table below for details on each option. When Minimum free disk or Maximum folders is selected, previous data will be deleted according to the Resource policy you choose (Delete largest or Delete oldest) when the limit is reached. When Apply policy before the data collector set starts is selected, previous data will be deleted according to your selections before the data collector set creates its next log file. When Maximum root path size is selected, previous data will be deleted according to your selections when the root log folder size limit is reached.

  4.

  - Click the Actions tab. You can accept the default values or make changes. See the table below for details on each option.

  5.

  - When you have finished making your changes, click OK

  

• Question 268:

  Your network contains a Hyper-V host named Server1 that runs Windows Server 2012 R2.

  Server1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2.

  You create a checkpoint of VM1, and then you install an application on VM1. You verify that the application runs properly.

  You need to ensure that the current state of VM1 is contained in a single virtual hard disk file.

  The solution must minimize the amount of downtime on VM1.

  What should you do?

  A. From a command prompt run dism.exe and specify the /commit-image parameter.
  B. From a command prompt, run dism.exe and specify the /delete-image parameter.
  C. From Hyper-V Manager, delete the checkpoint.
  D. From Hyper-V Manager, inspect the virtual hard disk.
  C. From Hyper-V Manager, delete the checkpoint.

  ---

  The Hyper-V PowerShell module has several aliases so that checkpoint and snapshot can be used interchangeably.

  Virtual machine snapshots are file-based snapshots of the state, disk data, and configuration of a virtualmachine at a specific point in time.

  You can take multiple snapshots of a virtual machine, even while it is running.

  You can then revert the virtual machine to any of the previous states by

  Applying a snapshot to the virtualmachine.

  Taking a snapshot of a VM is to in essence freeze the current state and make it a parent disk based on currentstate, and at the same time create a child disk to capture all subsequent changes. -See more at:

  Snapshots require adequate storage space.

  Snapshots are stored as .avhd files in the same location at the virtual hard disk.

  Taking multiple snapshots can quickly consume a large amount of storage space.

  When you use Hyper-V Manager to delete a snapshot, the snapshot is removed from the snapshot tree but the .avhd file is not deleted until you turn off the virtual machine.

  

  References: http://www.laneolson.ca/2009/10/09/hyper-v-snapshots-and-disk-space/ http://blogs.technet.com/b/yungchou/archive/2013/01/23/hyper-v-virtual-hard-disk-vhdopertions-explained.aspx http://zoom.it/12u8 http://www.server-talk.eu/wp-content/uploads/article_2010-05-28_02.png http://blogs.msdn.com/b/virtual_pc_guy/archive/2009/04/15/what-happens-when-i-delete-asnapshot-hyper-v.aspx http://blogs.technet.com/b/yungchou/archive/2013/01/23/hyper-v-virtual-hard-disk-vhd-operations-explained.aspx http://blogs.technet.com/b/josebda/archive/2012/03/20/windows-server-8-beta-hyper-vover-smb-quickprovisioning-a-vm-on-an-smb-file-share.aspx https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/user-guide/checkpoints http://blogs.technet.com/b/josebda/archive/2012/03/20/windows-server-8-beta-hyper-vover-smb-quickprovisioning-a-vm-on-an-smb-file-share.aspx https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/user-guide/checkpoints

• Question 269:

  NOTE: Once you answer this question, you will NOT be able to return to it.

  You manage a Hyper-V 2012 cluster by using System Center Virtual Machine Manager 2012 SP1. You need to ensure high availability for business-critical virtual machines (VMs) that host business-critical SQL Server databases.

  Solution: You configure preferred and possible owners for each business-critical VM.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References: http://www.itprotoday.com/system-center/make-existing-virtual-machine-highly-available

• Question 270:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You add an additional disk to Server1 as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that users can access the additional disk from drive C. What should you do?

  A. Convert Disk 0 and Disk 1 to dynamic disks and extend a volume.
  B. Convert Disk 1 to a dynamic disk and create a spanned volume.
  C. Create a simple volume on Disk 1 and mount the volume to a folder.
  D. Convert Disk 0 to a dynamic disk and add a mirror.
  C. Create a simple volume on Disk 1 and mount the volume to a folder.