Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 361:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role installed and is configured as an enterprise certification authority (CA).

  You need to ensure that all of the users in the domain are issued a certificate that can be used for the following purposes: Email security

  Client authentication

  Encrypting File System (EFS)

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Modify the properties of the User certificate template, and then publish the template.
  B. From a Group Policy, configure the Certificate Services Client Certificate Enrollment Policy settings.
  C. From a Group Policy, configure the Automatic Certificate Request Settings settings.
  D. Duplicate the User certificate template, and then publish the template.
  E. From a Group Policy, configure the Certificate Services Client Auto-Enrollment settings.
  D. Duplicate the User certificate template, and then publish the template.
  E. From a Group Policy, configure the Certificate Services Client Auto-Enrollment settings.

  ---

  The default user template supports all of the requirements EXCEPT autoenroll as shown below:

  

  However a duplicated template from users has the ability to autoenroll:

  

  The Automatic Certificate Request Settings GPO setting is only available to Computer, not user.

  

• Question 362:

  Your IT manager is concerned that someone is trying to gain access to your company's computers by logging on with valid domain user names and various password attempts. Which audit policy should you monitor for these activities?

  A. Policy Change
  B. Account Logon
  C. Privilege Use
  D. Directory Service Access
  B. Account Logon

  ---

  Old (removed questions as came out before the exam release =>unvalid but can be The Account Logon audit category in Windows Server 2008 generates events for credential validation. These events occur on the computer that is authoritative for the credentials

• Question 363:

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has five network adapters.

  Three of the network adapters are connected to a network named LAN1. The two other network adapters are connected to a network named LAN2. You create a network adapter team named Team1 from two of the adapters connected to LAN1. You create a network adapter team named Team2 from the two adapters connected to LAN2. A company policy states that all server IP addresses must be assigned by using a reserved address in DHCP. You need to identify how many DHCP reservations you must create for Server1.

  How many reservations should you identify?

  A. 2
  B. 3
  C. 5
  D. 7
  B. 3

  ---

  1 reservation for the NIC team on LAN1 1 reservation for the stand-alone NIC on LAN1 1 reservation for the NIC team on LAN2 => 3 reservations.

• Question 364:

  Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01.

  You need to add an RODC to the domain by using the Install from Media (IFM) option.

  What command should you use to create the media?

  A. the ntdsutil command
  B. the Set-ADDomain Windows PowerShell cmdlet
  C. the Install-ADDSDomain Windows PowerShell cmdlet
  D. the dsadd command
  E. the dsamain command
  F. the dsmgmt command
  G. the net user command
  H. the Set-ADForest Windows PowerShell cmdlet
  A. the ntdsutil command

  ---

  Too create installation media for a read-only domain controller (RODC), you can run the ntdsutil ifm command on either a writable domain controller or an RODC that runs Windows Server2008/2012.

• Question 365:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 has the DHCP Server server role and the Network Policy Server role service installed.

  Server1 contains three non-overlapping scopes named Scope1, Scope2, and Scope3. Server1 currently provides the same Network Access Protection (NAP) settings to the three scopes.

  You modify the settings of Scope1 as shown in the exhibit. (Click the Exhibit button.)

  

  You need to configure Server1 to provide unique NAP enforcement settings to the NAP non-compliant DHCP clients from Scope1. What should you create?

  A. A network policy that has the MS-Service Class condition
  B. A connection request policy that has the Service Type condition
  C. A network policy that has the Identity Type condition
  D. A connection request policy that has the Identity Type condition
  A. A network policy that has the MS-Service Class condition

  ---

  A. Restricts the policy to clients that have received an IP address from a DHCP scope that matches the specified DHCP profile name. This condition is used only when you are deployingNAP with the DHCP enforcement method. To use the MS-Service Class attribute, in Specify the profile name that identifies your DHCP scope, type the name of an existing DHCP profile. http://technet.microsoft.com/en-us/library/cc731220(v=ws.10).aspx

• Question 366:

  You work for a company named ABC.com. Your role of Network Administrator includes the management of the company's physical and virtual infrastructure. The network includes servers running Windows Server 2008 R2 Service Pack 1

  (SP1) and Windows Server 2012.

  Virtual machines (VMs) are hosted on Windows Server 2012 servers running the Hyper-V role. You install a new Windows Server 2012 Hyper-V host server named ABC-HVHost12. ABCHVHost12 has four Fiber Channel host bus adapters

  (HBAs) and connects to two Fiber Channel SANs using two HBAs per SAN.

  You plan to create VMs on ABC-HVHost12 that will need to access one of the SANs.

  How should you configure ABC-HVHost12?

  A. By creating a Virtual Switch in Hyper-V.
  B. By installing an additional host bus adapter (HBA).
  C. By creating a virtual Fiber Channel SAN in Hyper-V.
  D. By creating a virtual iSCSI SAN in Hyper-V.
  C. By creating a virtual Fiber Channel SAN in Hyper-V.

• Question 367:

  Your network contains an Active Directory domain named adatum.com.

  The domain contains 10 domain controllers that run Windows Server 2012 R2.

  You plan to create a new Active Directory-integrated zone named contoso.com.

  You need to ensure that the new zone will be replicated to only four of the domain controllers.

  What should you do first?

  A. Create an application directory partition.
  B. Create an Active Directory connection object.
  C. Create an Active Directory site link.
  D. Change the zone replication scope.
  A. Create an application directory partition.

  ---

  Application directory partitions An application directory partition is a directory partition that is replicated only to specific domain controllers. A domain controller that participates in the replication of a particular application directory partition hosts a replica of that partition. Only domain controllers running Windows Server 2003 can host a replica of an application directory partition.

  References: https://www.microsoftpressstore.com/articles/article.aspx?p=2217264andseqNum=2

• Question 368:

  Note: This question is part of series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

  Your network contains one Active Directory forest named contoso.com. The forest contains two child domains and six domain controllers. The domain controllers are configured as shown in the following table.

  

  You need to replicate users who haven't authenticated against any domain controllers for the last 7 days.

  What should you use?

  A. Set-ADSite
  B. Set-ADReplicationSite
  C. Set-ADDomain
  D. Set-ADReplicationSiteLink
  E. Set-ADGroup
  F. Set-ADForest
  G. Netdom
  C. Set-ADDomain

  ---

  References: https://technet.microsoft.com/en-us/library/ee617212.aspx

• Question 369:

  Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 and a domain controller named DC2. All servers run Windows Server 2012 R2. All domain controllers are

  configured as DNS servers.

  On Server1, you open Server Manager and you add DC2 as another server to manage.

  From Server Manager on Server1, you right-click DC2 as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that when you right-click DC2, you see the option to run DNS Manager. What should you do?

  A. On DC2 and Server1, run winrm quickconfig
  B. In the domain, add Server1 to the DNS Admins group
  C. On Server1, install the Role Administration Tools
  D. On DC2, install the Feature Administration Tools
  C. On Server1, install the Role Administration Tools

• Question 370:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1.

  You need to create an Active Directory snapshot on DC1.

  Which four commands should you run?

  To answer, move the four appropriate commands from the list of commands to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Box 1: ntdsutil

  Box 2: snapshot

  Box 3: activate instance ntds

  Box 4: create

  Note:

  Create a snapshot of AD DS in Windows Server 2012 R2 by using NTDSUTIL

  1 – On the domain server, open command prompt and type ntdsutil and press enter…

  2 – Next, type snapshot and press enter…

  3 – Next, type activate instance ntds and press Enter…

  4 – Next, type create (this create command is to generate a snapshot of my AD) and press Enter…

  Reference:

  http://technet.microsoft.com/nl-nl/library/cc753609%28v=ws.10%29.aspx

  http://mizitechinfo.wordpress.com/2013/08/13/simple-step-create-a-snapshot-of-ad-ds-in-windows-server-2012-r2-by-using-ntdsutil/