Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 381:

  A server named Server01 is running Server Core at your companies IT house. It is already configured with the AD DS role but you also want to add AD CS to the server. What must you do to add Active Directory Certificate Services (AD CS) to this server?

  A. Reinstall the server with the full version of Windows Server 2008
  B. Install the AD CS role
  C. Install the RODC role
  D. Install the AD FS role
  B. Install the AD CS role

  ---

  Server 2012 allows AD CS in core mode. http://technet.microsoft.com/en-us/library/hh831373.aspx What's New in AD CS? New and changed functionality Several new capabilities are available in the Windows Server 2012 R2 version of AD CS. They include: Integration with Server Manager Deployment and management capabilities from Windows PowerShell? All AD CS role services run on any Windows Server 2012 R2 version All AD CS role services can be run on Server Core Support for automatic renewal of certificates for non-domain joined computers Enforcement of certificate renewal with same key Support for international domain names Increased security enabled by default on the CA role service AD DS Site Awareness for AD CS and PKI Clients

• Question 382:

  Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.

  The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify whether deleted objects can be removed from the Active Directory Recycle Bin.

  Which cmdlet should you use?

  A. Get-AdGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  F. Get-ADAccountAuthorizationGroup
  G. Get-ADAuthenticationPolicySilo
  H. Get-ADAuthenticationPolicy
  E. Get-ADOptionalFeature

  ---

  The Get-ADOptionalFeature cmdlet gets an optional feature or performs a search to retrieve multiple optional features from an Active Directory.

  Example:Get-ADOptionalFeature 'Recycle Bin Feature'

  Get the optional feature with the name 'Recycle Bin Feature'.

• Question 383:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named dcl.contoso.com.

  You discover that the Default Domain Policy Group Policy objects (GPOs) and the Default Domain Controllers Policy GPOs were deleted.

  You need to recover the Default Domain Policy and the Default Domain Controllers Policy GPOs.

  What should you run?

  A. dcgpofix.exe /target:domain
  B. dcgpofix.exe /target:both
  C. gpfixup.exe /oldnb:contoso/newnb:dc1
  D. gpfixup.exe /dc:dc1.contoso.com
  B. dcgpofix.exe /target:both

  ---

  This command-line tool Dcgpofix there since Windows Server 2003. It allows the rebuild of the two default Group Policy objects (GPOs) Default Domain Policy (DDP) and Default Domain Controllers Policy (ddCDP) or is it the two GPOs to their default settings if you exist. Parameter /Target specifies what you want to restore the two default GPOs. Here the self-explanatory values are domain, DC or Both possible.

  

  The command-line utility GPFixup resolves issues with references to domain names, which can possibly occur during a domain rename

  References: http://technet.microsoft.com/en-us/library/cc739095(v=ws.10).aspx

• Question 384:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named Server1 that runs Windows Server 2012 R2.

  On Server1, you create a work folder named Work1. A user named User1 connects to Work1 from a computer named Computer1.

  You need to identify the last time the documents in Work1 were synchronized successfully from Computer1. What should you do?

  A. From Windows PowerShell, run the Get-SyncShare cmdlet
  B. From Windows PowerShell, run the Get-SyncUserSettings cmdlet
  C. From Server Manager, review the properties of Computer1
  D. From Server Manager, review the properties of User1
  D. From Server Manager, review the properties of User1

• Question 385:

  HOTSPOT

  Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1.

  Your company implements DirectAccess.

  A user named User1 works at a customer's office. The customer's office contains a server named Server1.

  When User1 attempts to connect to Server1, User1 connects to Server1 in adatum.com.

  You need to provide User1 with the ability to connect to Server1 in the customer's office.

  Which Group Policy option should you configure?

  To answer, select the appropriate option in the answer area.

  Hot Area:

  

  

  ---

  By selecting the Prefer local DNS names option, you disable name resolution through corporate network DNS servers and use whatever normal name resolution is available to your client computers. This enables you to access computers like your Windows Home Server by name, but it prevents you from accessing any corporate resources by name.

  Note: When you are on a remote network that is using DirectAccess, all of the name queries from your computer that resolve friendly DNS names that match your organization's DNS name are sent to your corporate DNS name server. Short names are combined with your organization's DNS name. This enables short names for intranet resources such as http://hrweb or \\public to be accessible to you in your remote location. However, this has the effect of making resources on your locally connected network with the same name no longer available by their short name.

• Question 386:

  Your network contains an Active Directory domain named adatum.com. The domain contains a member server named Server1 and a domain controller named DC2. All servers run Windows Server 2012 R2.

  On DC2, you open Server Manager and you add Server1 as another server to manage.

  From Server Manager on DC2, you right-click Server1 as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that when you right-click Server1, you see the option to run the DHCP console.

  What should you do?

  A. On Server1, install the Feature Administration Tools.
  B. On DC2 and Server1, run winrmquickconfig.
  C. On DC2, install the Role Administration Tools.
  D. In the domain, add DC1 to the DHCP Administrators group.
  C. On DC2, install the Role Administration Tools.

  ---

  "In Windows Server 2012 R2 Preview and Windows Server 2012 R2, remote management is enabled by default. Before administrators can connect to a computer that is running Windows Server 2012 R2 Preview or Windows Server 2012 R2 remotely by using Server Manager, Server Manager remote management must be enabled on the destination computer if it has been disabled."

  References: http://technet.microsoft.com/en-us/library/hh921475.aspx

• Question 387:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.

  A Windows Server 2012 named ABC-DFS1 runs the Distributed File System (DFS) role. The company has purchased four new servers. You plan to install Windows Server 2012 with the failover clustering role on the new servers and configure all four servers as nodes in a single failover clustering cluster. You need to configure a highly available folder on the cluster. The folder will be a target in a DFS namespace and will be replicated to other servers on the network. You need to ensure that the folder can configured as a DFS target and be

  replicated to other servers using DFS replication (DFSR). How should you configure the failover cluster?

  A. You should configure the affinity option.
  B. You should configure the possible owner option.
  C. You should configure the Scale-Out File Server option
  D. You should configure the File Server for General Use option.
  E. You should configure the preferred owner option.
  D. You should configure the File Server for General Use option.

• Question 388:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a domain controller named DC1 that runs Windows Server 2012. The domain contains some test client computers that run either Windows XP, Windows Vista, Windows 7, or Windows 8.

  The computer accounts for the test computers are located in an organizational unit (OU) named OU1. You have a Group Policy object (GPO) named GP01 linked to OU1. GPO1 is used to assign several applications to the test computers.

  You need to ensure that when the test computers in OU1 restart, you can see which application installation is running currently.

  Which setting should you modify in GPO1? To answer, select the appropriate setting in the Get answer area.

  Hot Area:

  

  

  ---

  The guidelines shown are located in the section Computer Configuration\Administrative Templates\System.

  Directive: Show Extremely detailed status messages

  This policy setting directs the system to display highly detailed status messages.

  This policy setting is intended for advanced users who need this information.

  If this. enable policy setting, status messages are displayed for each individual step in the startup, shutdown, logon or logoff.

  If you disable this policy setting or do not configure, only the standard system messages are displayed during these operations.

  Note: This policy setting is ignored if the setting "" Status messages to reboot, shutdown, login and logout remove "" is enabled.

  References: http://www.thewindowsclub.com/enable-verbose-status-message-windows

• Question 389:

  HOTSPOT Your network contains one Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 R2. You need to modify the membership of a group named Groupl to include two users named User1 and User2.

  What command should you run? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  Box 1: Add-AdGroupMember Box 2: Group1 Box 3: User1,User2 Add-ADGroupMember adds one or more members to an Active Directory group.

  Example: Command Prompt: C:\\PS>Add-ADGroupMember SvcAccPSOGroup SQL01, SQL02 Adds the user accounts with SamAccountNames SQL01, SQL02 to the group SvcAccPSOGroup. Add-ADGroupMember

  References: https://technet.microsoft.com/en-us/library/ee617210.aspx

• Question 390:

  Your network contains two Hyper-V hosts that run Windows Server 2012 R2. The Hyper-V hosts contains several virtual machines that run Windows Server 2012 R2.

  You install the Network Load Balancing feature on the virtual machines.

  You need to configure the virtual machines to support Network Load Balancing (NLB).

  Which virtual machine settings should you configure?

  A. DHCP guard
  B. Port mirroring
  C. Router guard
  D. MAC address
  D. MAC address

  ---

  For NLB to be configured you need to enable MAC address spoofing. References: http://social.technet.microsoft.com/Forums/windowsserver/en-US/5b3a0a9d-26a2-49ba-bbbe- 29d11fcbb7ce/nlb-on-hyperv?forum=winserverhyperv