Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 271:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.

  The network includes four Windows Server 2012 servers named ABC-NodeA, ABC-NodeB, ABC-NodeC and ABC-NodeD. All four servers run the failover clustering role. You configure all four servers as nodes in a single failover clustering

  cluster named ABC-CL01. You configure a custom line-of-business application (LOB) as a clustered resource on ABC-CL01.

  ABC-NodeA is the active node for the application.

  You need to reduce the amount of time the application needs to be offline before it fails over to another node in the cluster.

  What setting should you modify?

  A. Host priority.
  B. Affinity settings.
  C. Preferred Owner.
  D. Possible Owner.
  E. Handling Priority.
  F. Cluster failover settings.
  F. Cluster failover settings.

• Question 272:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. Server1 and Server2 have the Failover Clustering

  feature installed.The servers are configured as nodes in a failover cluster named Cluster1.

  You add two additional nodes in Cluster1.

  You have a folder named Folder1 on Server1 that hosts application data. Folder1 is a folder target in a Distributed File System (DFS) namespace.

  You need to provide highly available access to Folder1. The solution must support DFS Replication to Folder1.

  What should you configure?

  A. Affinity - None
  B. Affinity - Single
  C. The cluster quorum settings
  D. The failover settings
  E. A file server for general use
  F. The Handling priority
  G. The host priority
  H. Live migration
  I. The possible owner
  J. The preferred owner
  E. A file server for general use

  ---

  EXAM TIP

  Learn the limitations of SoFS well.

  Don't be tricked into selecting SoFS as the file server type for a new clustered file server just because the question states it will host Application data. If the file server is also used with incompatible features (such as BranchCache, DFS, or File

  Server Resource Manager), or if no CSVs are available, you must choose File Server For General Use as the file server type.

  

• Question 273:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. A server named ABC-File1 runs the File and Storage Services server role. ABC-File1 hosts shared folders on the D: drive. Users access the shared folders from their Windows 7 client computers. A user attempts to recover a previous version of a file in a shared folder on ABC-File1 but discovers that there is no previous versions option. How can you ensure that users can recover files using the Previous Versions function?

  A. By modifying the Share Properties of each shared folder.
  B. By enabling Shadow Copies on the D: drive of ABC-File1.
  C. By adding a condition to the shared folders on ABC-File1.
  D. By modifying the settings of the Recycle Binon ABC-File1.
  B. By enabling Shadow Copies on the D: drive of ABC-File1.

• Question 274:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. A central store is configured on the domain controller named DC1.

  You have a custom administrative template file name App1.admx. App1.admx contains application setting for an application App1. You copy App1.admx to the central store.

  You create a Group Policy object (GPO) name App1_Setting.

  When you edit App1.Settings, you receive the warning message shown in the following exhibit.

  

  An appropriate resource file could not be found for file \\contoso.com\SysVol\contoso.com\

  PoliciesDefinations\App1.admx (error =2):

  The system cannot find the file specified.

  You need to ensure that you can edit the settings for App1_Settings GPO.

  What should you do?

  A. Copy an ADML file to the central store.
  B. Move the ADMX file to the local PolicyDefinations Folder.
  C. Modify the permission of the ADMX File.
  D. Add an Administrative Template to the App1_Settings GPO.
  A. Copy an ADML file to the central store.

  ---

  References: https://support.microsoft.com/en-us/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra

• Question 275:

  In an isolated test environment, you deploy a server named Server1 that runs a Server Core Installation of Windows Server 2012 R2. The test environment does not have Active Directory Domain Services (AD DS) installed.

  You install the Active Directory Domain Services server role on Server1.

  You need to configure Server1 as a domain controller.

  Which cmdlet should you run?

  A. Install-ADDSDomain
  B. Install-ADDSForest
  C. Install-ADDSDomainController
  D. Install-WindowsFeature
  B. Install-ADDSForest

  ---

  Install-ADDSDomainController Installs a domain controller in Active Directory. Install-ADDSDomain Installs a new Active Directory domain configuration. Install-ADDSForest Installs a new Active Directory forest configuration. Install-WindowsFeature Installs one or more Windows Server roles, role services, or features on either thelocal or a specified remote server that is running Windows Server 2012 R2. This cmdlet is equivalent to andreplaces Add-WindowsFeature, the cmdlet that was used to install roles, role services, and features.

  C:\PS>Install-ADDSForest -DomainName corp.contoso.com -CreateDNSDelegation DomainMode Win2008 -ForestMode Win2008R2 -DatabasePath "d:\NTDS" -SysvolPath "d:\SYSVOL" 璍ogPath "e:\Logs"Installs a new forest named corp.contoso.com, creates a DNS delegation in the contoso.com domain, setsdomain functional level to Windows Server 2008 R2 and sets forest functional level to Windows Server 2008,installs the Active Directory database and SYSVOL on the D:\ drive, installs the log files on the E:\ drive andhas the server automatically restart after AD DS installation is complete and prompts the user to provideandconfirm the Directory Services Restore Mode (DSRM) password.http:// technet.microsoft.com/en-us/library/hh974720%28v=wps.620%29.aspx

• Question 276:

  You have decided to install Windows Server 2012 R2 by choosing the Service Core Installation option. If you want to install, configure or uninstall server roles remotely, what tool would you use?

  A. Windows PowerShell
  B. Any of these
  C. Server Manager
  D. Remote Server Administration Tools (RSAT)
  B. Any of these

  ---

  Initial Answer: Windows PowerShell (Only PowerShell can be used to manage server roles remotely to a server core installation.) => FALSE Since 2012, remote installations of server roles to a Core installation are allowed i've justdone it, screenshots as proof:

  

  

  Then, i just had to use Enable-NetFirewallRule to allow remote management using MMC And i can see my FSRM role was correctly remotely installed on my Core Installation (and is remotely managed using FSRM MMC):

  

• Question 277:

  Note: This Question is part of series of question that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in the series.

  Information and detailed provided in a question apply only to that question.

  You network contains one Active Directory domain named contoso.com.

  The forest functional level is Windows Server 2012.

  All servers run Windows Server 2012 R2. All client computer run Windows 8.1.

  The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify whether the members of the protected Users group will be prevented from authenticating by using NTLM.

  Which cmdlet should you use?

  A. Get-ADGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  F. Get-ADAccountAuthorizationGroup
  G. Get-ADAuthenticationPolicySlio
  H. Get-ADAuthenticationPolicy
  D. Get-ADDomain

  ---

  Depending on the account's domain functional level, members of the Protected Users group are further protected due to behavior changes in the authentication methods that are supported in Windows

  If the domain functional level is Windows Server 2012 R2, members of the (Protected Users) group can no longer: Authenticate by using NTLM authentication References: https://technet.microsoft.com/en-us/library/dn466518.aspx https://technet.microsoft.com/en-us/library/Dn518179.aspx

• Question 278:

  RODC comes with a number of features that focus on heightened security with limited functionality to remote office users. Which of the following is (or are) feature(s) of RODC?

  A. All of these
  B. Filtered Attribute Sets
  C. Unidirectional Replication
  D. Read-only DNS
  A. All of these

• Question 279:

  Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8.

  Your company has users who work from home. Some of the home users have desktop computers. Other home users have laptop computers. All of the computers are joined to the domain.

  All of the computer accounts are members of a group named Group1. Currently, the home users access the corporate network by using a PPTP VPN. You implement DirectAccess by using the default configuration and you specify Group1 as

  the DirectAccess client group.

  The home users who have desktop computers report that they cannot use DirectAccess to access the corporate network.

  The home users who have laptop computers report that they can use DirectAccess to access the corporate network.

  You need to ensure that the home users who have desktop computers can access the network by using DirectAccess.

  What should you modify?

  A. The WMI filter for Direct Access Client Settings GPO
  B. The conditions of the Connections to Microsoft Routing and Remote Access server policy
  C. The membership of the RAS and IAS Servers group
  D. The security settings of the computer accounts for the desktop computers
  A. The WMI filter for Direct Access Client Settings GPO

  ---

  The default settings includes creating a GPO that has a WMI filter for laptops only.

  

• Question 280:

  HOTSPOT

  You deploy a Server with a GUI installation of Windows Server 2012 R2 Datacenter.

  From Windows PowerShell, you run the following command:

  Remove-WindowsFeature Server-Gui-Shell.

  In the table below, identify which tools are available on Server1 and which tools are unavailable on Server1.

  Make only one selection in each row. Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  When you uninstall "Server-GUI-Shell" you are left with a "Minimal Server Interface" server.So, File Explorer and IE10 are unavailable, but MMC and Server Manager works.

  References: Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 2: Deploying Servers, p.44 Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Chapter 1: Installing and Configuring Servers, p.19-22