Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 331:

  Your corporate network includes an Active Directory Domain Services (AD DS) domain named contoso. The domain contains a Windows Server 2012 R2 member server named Server1. On Server1 the Resource Manager role service is

  installed on the file server.

  You need to configure Server1 to the following requirements:

  -Old files that are located in a folder named Folder1, must be moved to a folder named Archiv1.

  

  -All reports must be stored in a network share.

  

  Which two nodes need to Configure? (To be configured dialog box shown in the picture. Click the Drawing button.)

  

  A. Resource Manager File Server (locally)
  B. Quotas
  C. File Screens
  D. Storage Reports Management
  E. Classification rules
  F. File management tasks
  A. Resource Manager File Server (locally)
  F. File management tasks

  ---

  

  For moving old files a file management task can be type file sequence are created.

  The locations for reports on the roster report locations are configured in the Options for the Resource Manager file server. By default, the reports are stored in a local directory.

• Question 332:

  Your network contains several servers that run Windows Server 2012 R2 and client computers that run Windows 8.1.

  You download several signed Windows PowerShell scripts from the Internet. You need to run the PowerShell scripts on all of the servers and all of the client computers. What should you modify first?

  A. the environment variables on all of the servers
  B. the environment variables on all client computers
  C. the execution policy on all of the servers
  D. the execution policy on all of the client computers
  D. the execution policy on all of the client computers

  ---

  The default execution policy of the client computers is Restricted which will prevent the scripts running. Default execution policy of the servers is RemoteSigned which will allow the scripts.

  The default execution policy of Windows Server 2012 is RemoteSigned meaning that as long as a valid signature is used on the scripts, they will run. However, the client computers have a default execution policy of restricted meaning that no scripts will run in PowerShell whatsoever, so this would have to be changed before the scripts could be executed on the client computers.

  References: https://technet.microsoft.com/en-us/library/hh847748.aspx

• Question 333:

  Server manager is a great tool for managing most of your server settings and configuration all in one central place. Which one of the following Server manager Features is used for Storage management, replication and searching?

  A. Dynamic Host Configuration Server
  B. Terminal Services
  C. Domain Name Service
  D. File Services
  D. File Services

• Question 334:

  Your network contains an Active Directory domain named contoso.com. The domain contains client computers that run Either Windows XP, Windows 7, or Windows 8.

  Network Policy Server (NPS) is deployed to the domain.

  You plan to create a system health validator (SHV).

  You need to identify which policy settings can be applied to all of the computers.

  Which three policy settings should you identify? (Each correct answer presents part of the solution. Choose three.)

  A. Automatic updating is enabled.
  B. A firewall is enabled for all network connections.
  C. An antispyware application is on.
  D. Antispyware is up to date.
  E. Antivirus is up to date.
  A. Automatic updating is enabled.
  B. A firewall is enabled for all network connections.
  E. Antivirus is up to date.

  ---

  System health agent (SHA) is a NAP component. System health agent (SHA)

  A component that checks the state of the client computer to determine whether the settings monitored by the SHA are up-to-date and configured correctly. For example, the Windows Security Health Agent (WSHA) can monitor Windows Firewall, whether antivirus software is installed, enabled, and updated, whether antispyware software is installed, enabled, and updated, and whether Microsoft Update Services is enabled and the computer has the most recent security updates from Microsoft Update Services. There might also be SHAs (and corresponding system health validators) available from other companies that provide different functionality.

  References: http://technet.microsoft.com/en-us/library/cc731260.aspx

• Question 335:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1. All servers run Windows Server 2012 R2.

  All domain user accounts have the Division attribute automatically populated as part of the user provisioning process. The Support for Dynamic Access Control and Kerberos armoring policy is enabled for the domain.

  You need to control access to the file shares on Server1 based on the values in the Division attribute and the Division resource property.

  Which three actions should you perform in sequence?

  Select and Place:

  

  

  ---

  * First create a claim type for the property, then create a reference resource property that points back to the claim. Finally set the classification value on the folder.

  * Configure the components and policy

  1. Create claim types

  2. Create resource properties

  Deploy the central access policy

  3. Assign the CAP to the appropriate shared folders on the file server.

• Question 336:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012 R2. You log on to Server1.

  You need to retrieve the IP configurations of Server2.

  Which command should you run from Server1?

  A. winrm get server2
  B. dsquery * -scope base -attrip/server2
  C. winrs -r:server2ipconfig
  D. ipconfig> server2.ip
  C. winrs -r:server2ipconfig

  ---

  Using WinRS

  You can use WinRS to administer a Server Core installation remotely from the command line. WinRS is a command-line tool included in both Windows Vista and the Full installation of Windows Server 2008, which relies on Windows Remote

  Management (WinRM) to execute remote commands, especially for headless servers. WinRM is Microsoft's implementation of the WS-Management protocol, a standard Simple Object Access Protocol (SOAP)-based, firewall-friendly protocol

  that enables hardware and operating systems from different vendors to interoperate. You can think of WinRM as the server side and WinRS the client side of WSManagement.[...] Using WinRS to Administer Server Core in a Domain

  The basic syntax for WinRS commands is as follows:

  winrs -r:target command where target is the name (NetBIOS or FQDN) of the Server Core installation that has had WinRM enabled on it, and command is any command string that you want to execute on the Server Core installation. For

  example, to use WinRS to enable Remote Desktop remotely on a Server Core installation named SEA-SC2, type the following command on any computer running Windows Vista or on a Full installation of Windows Server 2008:winrs -r:SEASC2 cscript %WINDIR%\system32\scregedit.wsf /ar 0

  References:

  http://technet.microsoft.com/en-us/library/dd163506.aspx

  Exam Ref 70-410: Installing and Configuring Windows Server 2012: Objective 4.3: Deploy and Configure the DNS service, Chapter 4 Deploying and Configuring core network services, p. 246 http://technet.microsoft.com/en-us/library/

  dd349801(v=ws.10).aspx

• Question 337:

  You have a server named Server1 that runs a Server Core installation of Windows Server 2012 R2 Standard. You establish a remote management session to Server1.

  You need to identify which task can be performed on Server1 from within the remote management session.

  What should you identify?

  A. Install a feature by using Server Manager.
  B. Modify the network settings by using Sconfig.
  C. Disable services by using Msconfig.
  D. Join a domain by using the System Properties.
  B. Modify the network settings by using Sconfig.

  ---

  In Windows Server 2012 R2, you can use the Server Configuration tool (Sconfig.cmd) to configure and manage several common aspects of Server Core installations. You must be a member of the Administrators group to use the tool. Sconfig.cmd is available in the Minimal Server Interface and in Server with a GUI mode.

  http://technet.microsoft.com/en-us/library/jj647766.aspx Training Guide: Installing and Configuring Windows Server 2012 R2, Chapter 2: Deploying servers, p. 80

• Question 338:

  You install the Service Manager Self-Service Portal on a server named CONTOSOSSP1.

  Users report that they receive access denied messages when they try to connect to the portal.

  You must grant users the minimum required permissions.

  You need to ensure that all users in the Contoso domain can access the Service Manager Self-Service Portal.

  What should you do?

  A. In Active Directory, create a new group named PortalUsers. Add the PortalUsers group to the Contoso \Domain Users group, and then add the group to the local users group on CONTOSOSSP1.
  B. Using the account that you used to install the Self-Service portal, grant the Contoso\Domain Users group Read permissions to the portal.
  C. In Service Manager, create a new user role named PortalUsers. Grant the PortalUsers role rights to all catalog items, and then add the Contoso\Domain Users Active Directory Domain Services group to the PortalUsers role.
  D. Using the account that you used to install the Self-Serviceportal, grant the Contoso\Domain Users group Contribute permissions to the portal.
  B. Using the account that you used to install the Self-Service portal, grant the Contoso\Domain Users group Read permissions to the portal.

  ---

  References: http://www.haroldbato.com/2013/02/scsm-2012-self-service-portal-access.html

• Question 339:

  DRAG DROP

  You plan to deploy a failover cluster that will contain two nodes that run Windows Server 2012 R2.

  You need to configure a witness disk for the failover cluster.

  How should you configure the witness disk?

  To answer, drag the appropriate configurations to the correct location or locations. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

• Question 340:

  You have a server named Server1 that runs a Server Core Installation of Windows Server 2012 R2. You attach a 4-TB disk to Server1.

  The disk is configured as an MBR disk. You need to ensure that you can create a 4-TB volume on the disk.

  Which Diskpart command should you use?

  A. Automount
  B. Convert
  C. Expand
  D. Attach
  B. Convert

  ---

  You will need to convert the disk to a GPT since GPT disks allows for partitioning and not MBR disks.

  References: Exam Ref 70-410: Installing and Configuring Windows Server 2012: Objective 3.2: Create and Configure virtual machine storage, Chapter 3: p. 159 Exam Ref 70-410: Installing and Configuring Server 2012: Objective 1.3: Installing and Configuring servers, Chapter 1: p. 42-43