Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 341:

  Your network contains an Active Directory forest named contoso.com. The forest contains two sites named Main and Branch. The Main site contains 400 desktop computers and the Branch site contains 150 desktop computers. All of the

  desktop computers run Windows 8.

  In Main, the network contains a member server named Server1 that runs Windows Server 2012.

  You install the Windows Server Update Services server role on Server1.

  You need to ensure that Windows updates obtained from Windows Server Update Services (WSUS) are the same for the computers in each site.

  You want to achieve this goal by using the minimum amount of administrative effort.

  What should you do?

  A. From the Update Services console, create computer groups
  B. From the Update Services console, configure the Computers options
  C. From the Group Policy Management console, configure the Windows Update settings
  D. From the Group Policy Management console, configure the Windows Anytime Upgrade settings
  E. From the Update Services console, configure the Synchronization Schedule options
  C. From the Group Policy Management console, configure the Windows Update settings

  ---

  Create one computer group for Main site and another group for Branch site. You can deploy Windows updates by computer group.

• Question 342:

  You work for a company named ABC.com. Your role of Network Administrator includes the management of the company's physical and virtual infrastructure. The network includes servers running Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012.

  Virtual machines (VMs) are hosted on Windows Server 2012 servers running the Hyper-V role. You install a new Windows Server 2012 Hyper-V host server named ABC-HVHost13. ABC-HVHost13 has eight physical network adapters configured as four network adapter teams. You plan to create five external Hyper-V virtual switches on ABC-HVHost13.

  Which of the following steps should you perform first? (Choose two possible answers).

  A. You should run the Remove-NetLbfoTeam PowerShell cmdlet.
  B. You should run the Add-NetLbfoTeam PowerShell cmdlet.
  C. You should run the Remove- NetLbfoTeamMemberPowerShell cmdlet.
  D. You should run the Add-NetLbfoTeamNic PowerShell cmdlet.
  E. You should run the Add-NetLbfoTeamMember PowerShell cmdlet.
  A. You should run the Remove-NetLbfoTeam PowerShell cmdlet.
  C. You should run the Remove- NetLbfoTeamMemberPowerShell cmdlet.

• Question 343:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You configure Network Access Protection (NAP) on Server1.

  Your company implements a new security policy stating that all client computers must have the latest updates installed. The company informs all employees that they have two weeks to update their computer accordingly.

  You need to ensure that if the client computers have automatic updating disabled, they are provided with full access to the network until a specific date and time.

  Which two nodes should you configure?

  To answer, select the appropriate two nodes in the answer area.

  Hot Area:

  

  

• Question 344:

  Your network contains an Active Directory domain named contoso.com. The domain contains a Web server named www.contoso.com. The Web server is available on the Internet.

  You implement DirectAccess by using the default configuration.

  You need to ensure that users never attempt to connect to www.contoso.com by using DirectAccess. The solution must not prevent the users from using DirectAccess to access other resources in contoso.com.

  Which settings should you configure in a Group Policy object (GPO)?

  A. DirectAccess Client Experience Settings
  B. Name Resolution Policy
  C. DNS Client
  D. Network Connections
  B. Name Resolution Policy

  ---

  

  

  Notice this could have been Network connection:

  

  

  BUT "The solution must not prevent the users from using DirectAccess to access other resources in contoso.com"

  References: http://www.techrepublic.com/blog/10things/10-things-you-should-know-aboutdirectaccess/1371

• Question 345:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2008 R2. The domain contains three servers that run Windows Server 2012. The servers are configured as shown in the following table.

  

  Server1 and Server2 are configured in a Network Load Balancing (NLB) cluster. The NLB cluster hosts a website named Web1 that uses an application pool named App1. Web1 uses a database named DB1 as its data store. You create an

  account named User1.

  You configure User1, as the identity of App1. You need to ensure that contoso.com domain users accessing Web1 connect to DB1 by using their own credentials.

  Which two actions should you perform? (Each correct answer presents part of the solution.

  Choose two.)

  A. Configure the delegation settings of Server3.
  B. Create a Service Principal Name (SPN) for User1.
  C. Configure the delegation settings of User1.
  D. Create a matching Service Principal Name (SPN) for Server1 and Server2.
  E. Configure the delegation settings of Server1 and Server2.
  B. Create a Service Principal Name (SPN) for User1.
  E. Configure the delegation settings of Server1 and Server2.

  ---

  To enable impersonation to connect to the database server, the delegation settings for constrained delegation must (computer only trust for delegation to specified services) can be configured. Subsequently, the service principal name can be

  specified for the identity of the application pool as a delegate service.

  The role of the service principal name to authenticate on SQL Server, if an application opens a connection and uses Windows authentication, passes the SQL Server Native Client to SQL Server computer name, -Instanznamen and optionally

  an SPN. If the connection passes an SPN, it is used without modification.

  When the connection is no SPN, a default service principal name is created based on protocol, server name and instance name used. In both scenarios, the Service Principal Name is sent to the Key Distribution Center to a security token for

  retrieve authenticate the connection. If no security token can be retrieved using NTLM authentication.

  A Service Principal Name (SPN, Service Principal Name) is the name that uniquely identifies a client about an instance of a service. The Kerberos authentication service can an SPN to authenticate a service use. When a client wants to

  connect to a service, it locates an instance of the service, posted an SPN for that instance, connects to the service and transfers the SPN to authenticate to the service.

  The preferred method for authenticating users at SQL Server is Windows authentication. Clients that use Windows authentication to authenticate with NTLM or Kerberos. In an Active Directory environment, Kerberos authentication is always

  performed first. The Kerberos authentication for SQL Server 2005 clients that are using named pipes, not available.

  References:

  https://docs.microsoft.com/en-us/microsoft-desktop-optimization-pack/appv-v4/how-to-configure-the-server-to-be-trusted-for-delegation https://technet.microsoft.com/en-us/library/cc961723.aspx

• Question 346:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012. All client computers run Windows 7 Professional. A server named ABC-CA1 runs Certificate Services and is configured as an Enterprise Certification Authority (CA) for the ABC.com domain. Company security policy states that users should be able to encrypt their files and emails. You want to configure auto-enrollment for certificates that can be used for e-mail encryption and signing, Encrypting File System (EFS), and client authentication. You plan to configure a domain-wide group policy object (GPO) to enable the auto-enrollment.

  What should you do first?

  A. You should duplicate the User certificate template and then publish the duplicated template.
  B. You should duplicate the Code Signing certificate template and then publish the duplicated template.
  C. You should duplicate the Basic EFS certificate template and then publish the duplicated template.
  D. You should duplicate the Computer certificate template and then publish the duplicated template.
  A. You should duplicate the User certificate template and then publish the duplicated template.

• Question 347:

  HOTSPOT Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Both servers have the IP Address Management (IPAM) Server feature installed. You have a support technician named Tech1. Tech1 is a member of the IPAM Administrators group on Server1 and Server2. You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2. To which group on Server2 should you add Tech1? To answer, select the appropriate group in the answer area.

  Hot Area:

  

  

• Question 348:

  Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the Hyper-V server role installed. Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4. Server1 is configured as shown in the following table.

  

  You install Windows Server 2012 on VM2 by using Windows Deployment Services (WDS).

  You need to ensure that the next time VM2 restarts, you can connect to the WDS server by using PXE.

  Which virtual machine setting should you configure for VM2?

  A. NUMA topology
  B. Resource control
  C. Resource metering
  D. Virtual Machine Chimney
  E. The VLAN ID
  F. Processor Compatibility
  G. The startup order
  H. Automatic Start Action I. Integration Services
  J. Port mirroring
  G. The startup order

  ---

  Configure the BIOS of the computer to enable PXE boot, and set the boot order so that it is booting from the network is first.

  References:

  http://technet.microsoft.com/en-us/library/cc766320(v=ws.10).aspx

  Exam Ref 70-410, Installing and Configuring Windows Server 2012, Chapter 3: Configure Hyper-V, Objective 3.1: Create and Configure virtual machine settings, p. 144 Training Guide: Installing and Configuring Windows Server 2012:

  Chapter 7: Hyper-V Virtualization, Lesson 2: Deploying and configuring virtual machines, p. 335

• Question 349:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. You need to commission a new file server in the domain. You install a Windows Server 2012 server named ABC-W12File1 and install the File Server role. You want to use an online backup service in Windows Server Backup to back up the shared folders on ABC-W12File1. You install the Windows Server Backup feature on ABC-W12File1.

  You then register for Windows Azure Online Backup.

  Which two of the following actions should you perform next? (Choose two).

  A. Install the Windows Server Migration Tools feature.
  B. Download and install the Microsoft Online Backup Service Agent.
  C. Run the wbadmin.exe utility.
  D. Register the server in Windows Server Backup.
  E. Register the server in the Windows Azure Online Backup dashboard.
  B. Download and install the Microsoft Online Backup Service Agent.
  D. Register the server in Windows Server Backup.

• Question 350:

  An organization uses an Active Directory Rights Management Services (AD RMS) cluster names RMS1 to protect content for a project.

  You uninstall AD RMS when the project is complete.

  You need to ensure that the protected content is still available after AD RMS is uninstalled.

  Solution: You run the following Windows PowerShell command:

  Set-ItemProperty -Path :\-Name IsDecommissioned -Value $true

  -EnableDecommission

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee221047(v=ws.10)