Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 391:

  You deploy an Active Directory Federation Services (AD FS) 2.1 infrastructure. The infrastructure uses Active Directory as the attribute store.

  Some users report that they fail to authenticate to the AD FS infrastructure.

  You discover that only users who run third-party web browsers experience issues.

  You need to ensure that all of the users can authenticate to the AD FS infrastructure successfully.

  Which Windows PowerShell command should you run?

  A. Set-ADFSProperties -SSOLifetime 1:00:00
  B. Set-ADFSProperties -AddProxyAuthenticationRules None
  C. Set-ADFSProperties -ExtendedProtectionTokenCheck None
  D. Set-ADFSProperties -ProxyTrustTokenLifetime 1:00:00
  C. Set-ADFSProperties -ExtendedProtectionTokenCheck None

  ---

  

  References: http://technet.microsoft.com/en-us/library/hh237448%28WS.10%29.aspx

• Question 392:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory.

  Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 and Windows Server 2012.

  The network includes a primary data center and a secondary data center. The primary data center includes virtual machines (VMs) running on Windows Server 2008 R2 Hyper-V host servers and Windows Server 2008 R2 Hyper-V host

  servers.

  You plan to use Live Migration to move VMs between Hyper-V host servers. Which of the following statements about the requirements for Hyper-V Live Migration are true? (Choose all that apply).

  A. You can perform live migrations between Windows Server 2012 Hyper-V hosts and Windows Server 2008 R2 Hyper-V hosts.
  B. Live migration requires that the source and destination host servers are connected to shared storage.
  C. The source and destination Hyper-V hosts must have the same processor family (all Intel or all AMD)
  D. Live migration requires that the source and destination host servers are members of a failover cluster.
  E. The source and destination Hyper-V hosts must be members of the same domain.
  C. The source and destination Hyper-V hosts must have the same processor family (all Intel or all AMD)
  E. The source and destination Hyper-V hosts must be members of the same domain.

• Question 393:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The domain has domain controllers that run Windows Server 2008 R2 Service Pack 1

  (SP1) and Windows Server 2012. The functional level of the forest is Windows Server 2008 R2.

  You have enabled the Active Directory Recycle Bin in the ABC.com domain. You discover that a user account was deleted yesterday. You need to recover the deleted user account as quickly as possible.

  Which tool should you use to recover the deleted user account?

  A. Active Directory Users and Computers.
  B. NTDSutil.
  C. Active Directory Administrative Center.
  D. LDP
  C. Active Directory Administrative Center.

• Question 394:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. You are planning to deploy a custom Sales application named SalesApp. All users in the Sales department will use SalesApp. You have installed two Windows Server 2012 servers named ABC-CL1 and ABC-CL2. The two servers will run the Failover Clustering feature and be configured as nodes in a single failover cluster.

  You plan to install SalesApp onto the failover cluster. You need to configure the failover cluster so that ABC-CL1 responds to client requests for the SalesApp application. ABC-CL2 must respond to client requests for the SalesApp application only if ABC-CL1 is offline.

  How should you configure the failover cluster?

  A. You should configure ABC-CL1 as the preferred owner.
  B. You should configure ABC-CL2 as the preferred owner.
  C. You should configure both cluster nodes as the preferred owner.
  D. You should set the Affinity setting to None.
  E. You should set the Affinity setting to Single.
  A. You should configure ABC-CL1 as the preferred owner.

• Question 395:

  Your network contains an Active Directory domain named contoso.com. The domain contains servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the Active Directory Federation Services server role installed.Server2 is a file server.

  Your company introduces a Bring Your Own Device (BYOD) policy.

  You need to ensure that users can use a personal device to access domain resources by using Single Sign-On (SSO) while they are connected to the internal network.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Enable the Device Registration Service in Active Directory.
  B. Publish the Device Registration Service by using a Web Application Proxy.
  C. Configure Active Directory Federation Services (AD FS) for the Device Registration Service.
  D. Install the Work Folders role service on Server2.
  E. Create and configure a sync share on Server2.
  A. Enable the Device Registration Service in Active Directory.
  C. Configure Active Directory Federation Services (AD FS) for the Device Registration Service.

  ---

  *Prepare your Active Directory forest to support devices This is a one-time operation that you must run to prepare your Active Directory forest to support devices. To prepare the Active Directory forest On your federation server, open a Windows PowerShell command window and type: Initialize-ADDeviceRegistration

  *Enable Device Registration Service on a federation server farm node To enable Device Registration Service 1.On your federation server, open a Windows PowerShell command window and type: Enable-AdfsDeviceRegistration 2.Repeat this step on each federation farm node in your AD FS farm.

• Question 396:

  Your network contains an Active Directory domain named contoso.com. The network contains a server named Server1 that runs Windows Server 2012 R2 and a server named Server2 that runs Windows Server 2008 R2 Service Pack 1 (SP1). Server1 and Server2 are member servers. You need to ensure that you can manage Server2 from Server1 by using Server Manager. Which two tasks should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Install Windows Management Framework 3.0 on Server2.
  B. Install Remote Server Administration Tools on Server1.
  C. Install the Windows PowerShell 2.0 engine on Server1.
  D. Install Microsoft .NET Framework 4 on Server2.
  E. Install Remote Server Administration Tools on Server2.
  A. Install Windows Management Framework 3.0 on Server2.
  D. Install Microsoft .NET Framework 4 on Server2.

  ---

  

  References: http://technet.microsoft.com/en-us/library/hh831456.aspx#BKMK_softconfig

• Question 397:

  Your network contains one Active Directory domain named contoso.com. The domain contains 2,000 client computers used by students.

  You recently discover an increase in calls to the helpdesk that relate to security policy to meet the following requirement:

  Modify the UserName of the built-in account named Administrator

  Support a time mismatch between client computers and domain controllers of up to three minutes.

  Which Two security settings should you modify?

  A. Account Policies
  B. Password Policy
  C. Account Lockout Policy
  D. Kerberos Policy
  E. Local Policies
  F. Audit Policy
  G. User Rights Assignment
  H. Security Options
  D. Kerberos Policy
  H. Security Options

  ---

  References: https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/maximum-tolerance-for-computer-clock-synchronization

• Question 398:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com.

  The domain contains 25 servers. All servers run Windows Server 2012 R2.

  You need to create a Windows Firewall rule to prevent administrators from using Internet Explorer to access the Internet while they are logged on interactively to the servers.

  The solution must not prevent administrators from accessing websites on the internal network.

  How should you configure the rule? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  References: https://docs.microsoft.com/en-us/windows/security/identity-protection/windows-firewall/create-an-outbound-program-or-service-rule http://techgenix.com/windows-firewall-domain-networks-private-networks-public-networks/

• Question 399:

  Your network contains an Active Directory domain named contoso.com.

  A previous administrator implemented a Proof of Concept installation of Active Directory Rights Management Services (AD RMS) on a server named Server1. After the proof of concept was complete, the Active Directory Rights Management Services server role was removed.

  You attempt to deploy AD RMS. During the configuration of AD RMS, you receive an error message indicating that an existing AD RMS Service Connection Point (SCP) was found.

  You need to ensure that clients will only attempt to establish connections to the new AD RMS deployment.

  Which should you do?

  A. From DNS, remove the records for Server1.
  B. From DNS, increase the priority of the DNS records for the new deployment of AD RMS.
  C. From Active Directory, remove the computer object for Server1.
  D. From Active Directory, remove the SCP.
  D. From Active Directory, remove the SCP.

  ---

  The Active Directory Rights Management Services (AD RMS) Service Connection Point (SCP) is an object in Active Directory that holds the web address of the AD RMS certification cluster. AD RMS-enabled applications use the SCP to

  discover the AD RMS service; it is the first connection point for users to discover the AD RMS web services.

  Only one SCP can exist in your Active Directory forest. If you try to install AD RMS and an SCP already exists in your forest from a previous AD RMS installation that was not properly deprovisioned, the new SCP will not install properly. It

  must be removed before you can establish the new SCP.

  References:

  http://social.technet.microsoft.com/wiki/contents/articles/710.the-ad-rms-service-connection-point.aspx

• Question 400:

  You work as a Network Administrator at ABC.com. The company network consists of a single Active Directory Domain Services (AD DS) domain named ABC.com. All servers on the network run Windows Server 2012. Company developers are developing a custom line-of-business application named CorpApp. The CorpApp application will be a client/server application. All client computers in the network will have the CorpApp client software installed. The CorpApp server software will run on a Windows Server 2012 server.

  You need to configure a highly-available server solution to host the CorpApp application. You plan to install two Windows Server 2012 servers and configure them as a failover cluster. You install two servers named ABC-App1 and ABC-App2 and configure a failover cluster named ABC-App-CL1. You want to configure the cluster so that CorpApp runs on ABC-App1. You also want to ensure that if CorpApp fails over to ABC-App2 in the event of a problem with ABC-App1, it fails back to ABC-App1 when possible.

  How can you configure the ABC-AppCL1 to meet the requirements?

  A. By configuring the possible owner setting.
  B. By configuring the client affinity to Single.
  C. By configuring the preferred owner setting.
  D. By configuring the client affinity to None.
  E. By configuring the host priority setting.
  C. By configuring the preferred owner setting.