Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 311:

  Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the Hyper-V server role installed.

  Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4.

  Server1 is configured as shown in the following table.

  

  You install a network monitoring application on VM2.

  You need to ensure that all of the traffic sent to VM3 can be captured on VM2.

  What should you configure?

  A. NUMA topology
  B. Resource control
  C. Resource metering
  D. Virtual Machine Chimney
  E. The VLAN ID
  F. Processor Compatibility
  G. The startup order
  H. Automatic Start Action
  I. Integration Services
  J. Port mirroring
  J. Port mirroring

  ---

  What's New in Hyper-V Virtual Switch Port Mirroring With Port Mirroring, traffic sent to or from a Hyper-V Virtual Switch port is copied and sent to a mirror port. There are a range of applications for port mirroring an entire ecosystem of network visibility companies exist that have products designed to consume port mirror data for performance management, security analysis, and network diagnostics. With Hyper-V Virtual Switch port mirroring, you can select the switch ports that are monitored as well as the switch port that receives copies of all the traffic. The following examples configure port mirroring so that all traffic that is sent and received by both MyVM and MyVM2 is also sent to the VM named MonitorVM. Set-VMNetworkAdapter VMName MyVM PortMirroring Source Set-VMNetworkAdapter VMName MyVM2 PortMirroring Source Set-VMNetworkAdapter VMName MonitorVM PortMirroring Destination

  References: http://technet.microsoft.com/en-us/library/jj679878.aspx#bkmk_portmirror

• Question 312:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and

  Windows Server 2012. You are in the process of installing a new Windows Server 2012 domain controller.

  You install Windows Server 2012 on a server and join it to the domain.

  You then install the Active Directory Domain Services role on the server and run the Active Directory Installation Wizard.

  Which of the following configurations can be performed during the Active Directory Installation Wizard? (Choose all that apply).

  A. Configure the server as a Read Only Domain Controller (RODC)
  B. Install the DNS Server role.
  C. Install the Active Directory Lightweight Domain Services (AD LDS) role.
  D. Configure the server as a Global Catalog server.
  E. Configure the Directory Services Restore Mode (DSRM) password.
  F. Transfer a FSMO (Flexible Single Master Operation) role.
  A. Configure the server as a Read Only Domain Controller (RODC)
  B. Install the DNS Server role.
  D. Configure the server as a Global Catalog server.
  E. Configure the Directory Services Restore Mode (DSRM) password.

• Question 313:

  Note: This question is part of series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

  Your network contains one Active Directory forest named contoso.com. The forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

  

  You need to add an additional UPN Suffix. What should you use?

  A. Set-ADSite
  B. Set-ADReplicationSite
  C. Set-ADDomain
  D. Set-ADReplicationSiteLink
  E. Set-ADGroup
  F. Set-ADForest
  G. Netdom
  F. Set-ADForest

  ---

  References: https://technet.microsoft.com/en-us/library/dd391925(v=ws.10).aspx

• Question 314:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. Server1 and Server2 have the Failover Clustering

  feature installed. The servers are configured as nodes in a failover cluster named Cluster1.

  You add two additional nodes to Cluster1. You need to ensure that Cluster1 stops running if three nodes fail.

  What should you configure?

  A. Affinity None
  B. Affinity Single
  C. The cluster quorum settings
  D. The failover settings
  E. A file server for general use
  F. The Handling priority
  G. The host priority
  H. Live migration
  I. The possible owner
  J. The preferred owner
  C. The cluster quorum settings

  ---

  References: http://technet.microsoft.com/en-us/library/cc731739.aspx

• Question 315:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed.

  On Server1, an administrator creates a virtual machine named VM1.

  A user named User1 is the member of the local Administrators group on Server1.

  User1 attempts to modify the settings of VM1 as shown in the following exhibit. (Click the Exhibit button.)

  

  You need to ensure that User1 can modify the settings of VM1 by running the Set-Vmcmdlet. What should you instruct User1 to do?

  A. Run Windows PowerShell with elevated privileges.
  B. Install the Integration Services on VM1.
  C. Modify the membership of the local Hyper-V Administrators group.
  D. Import the Hyper-V module.
  A. Run Windows PowerShell with elevated privileges.

  ---

  You can only use the PowerShell snap-in to modify the VM settings with the vm cmdlets when you are an Administrator. Thus best practices dictate that User1 run the Powershell with elevated privileges.

  References: http://technet.microsoft.com/en-us/library/jj713439.aspx

• Question 316:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You create a Data Collector Set (DCS) named DCS1.

  You need to configure DCS1 to log data to D:\logs.

  What should you do?

  A. Right-click DCS1 and click Properties.
  B. Right-click DCS1 and click Save template...
  C. Right-click DCS1 and click Export list...
  D. Right-click DCS1 and click Data Manager...
  A. Right-click DCS1 and click Properties.

  ---

  It is under the Directory tab from the DCS properties.

  References: http://technet.microsoft.com/en-us/library/cc749267.aspx

• Question 317:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com.

  You need to identify whether the Company attribute replicates to the global catalog.

  Which part of the Active Directory partition should you view?

  To answer, select the appropriate Active Directory object in the answer area.

  Hot Area:

  

  

  ---

  An Active Directory Lightweight Directory Services (AD LDS) schema defines, using object classes and attributes, the types of objects and data that can be created and stored in an AD LDS directory. The schema can be extended with new classes and attributes, either by administrators or by the applications themselves. In addition, unneeded schema classes and attributes can be deactivated.

  References: http://technet.microsoft.com/en-us/library/cc771975.aspx

• Question 318:

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2.

  The domain contains a domain controller named DC1 that is configured as an enterprise root certification authority (CA).

  All users in the domain are issued a smart card and are required to log on to their domain- joined client computer by using their smart card.

  A user named User1 resigned and started to work for a competing company. You need to prevent User1 immediately from logging on to any computer in the domain.

  The solution must not prevent other users from logging on to the domain.

  Which tool should you use?

  A. Active Directory Users and Computers
  B. Certificate Templates
  C. The Security Configuration Wizard
  D. The Certificates snap-in
  A. Active Directory Users and Computers

  ---

  Disabling or enabling a user account

  To open Active Directory Users and Computers, click Start, click Control Panel, double-click Administrative Tools , and then double-click Active Directory Users and Computers .

  To open Active Directory Users and Computers in Windows Server 2012, click Start, type dsa.msc.

  In the console tree, click Users.

  In the details pane, right-click the user.

  Depending on the status of the account, do one of the following:

  To disable the account, click Disable Account.

  To enable the account, click Enable Account

• Question 319:

  HOTSPOT

  Your network contains an active Directory domain named contoso.com. All client computers are configured as DHCP clients.

  You link a Group Policy object (GPO) named GPO1 to an organization unit (OU) that contains all of the client computer accounts.

  You need to ensure that Network Access Protection (NAP) compliance is evaluated on all of the client computers.

  Which two settings should you configure in GPO1?

  To answer, select the appropriate two settings in the answer area.

  Hot Area:

  

  

  ---

  You can use a NAP client Group Policy object (GPO) to enable required services for NAP to configure the NAP Agent service to start automatically. If you are using NAP with 802.1X enforcement in a wired environment, you can also configure the Wired Autoconfig service to start automatically.

  Step 1: Configure the NAP Agent service to start automatically

  Step 2: Configure the WiredAutoconfig service

  Note: Wired Network

  Wired AutoConfig (dot3svc) is a service that configures the Institute of Electrical and Electronics Engineers (IEEE) 802.1X port-based security settings on IEEE 802.3 Ethernet adapters.

• Question 320:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. All client computers run Windows 7. Group Policy objects (GPOs) are linked to the domain as shown in the exhibit. (Click the Exhibit button.)

  

  GPO2 contains user configurations only and GPO3 contains computer configurations only. You need to configure the GPOs to meet the following requirements:

  

  Ensure that GPO2 only applies to the user accounts in OU2 that are members of a global group named Group2.

  

  Ensure that GPO3 only applies to the computer accounts in OU3 that have more than 100 GB of free disk space.

  What should you do?

  To answer, drag the appropriate setting to the correct GPO. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place: