Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 421:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1 has the DNS Server server role installed.

  The network contains client computers that run either Linux, Windows 7, or Windows 8.

  You have a zone named adatum.com as shown in the exhibit. (Click the Exhibit button.)

  

  You plan to configure Name Protection on all of the DHCP servers.

  You need to configure the adatum.com zone to support Name Protection.

  What should you do?

  A. Change the zone type.
  B. Sign the zone.
  C. Add a DNSKEY record.
  D. Configure Dynamic updates.
  D. Configure Dynamic updates.

• Question 422:

  You deploy a windows Server Update (WSUS) server named Server01.

  You need to prevent the WSUS service on Server01 from being updated automatically.

  What should you do from the update service console?

  A. From the Product and Classification options, modify the Products setting.
  B. From the Automatic Approvals options, modify the Advanced settings.
  C. From the Product and Classification options, modify the Classifications setting.
  D. From the Automatic Approvals options, modify the Default Automatic Approval rule.
  B. From the Automatic Approvals options, modify the Advanced settings.

  ---

  References: https://technet.microsoft.com/en-us/library/cc512630.aspx

• Question 423:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You create a custom Data Collector Set (DCS) named DCS1.

  You need to configure Server1 to start DCS1 automatically when the network usage exceeds 70 percent.

  Which type of data collector should you create?

  A. A performance counter alert
  B. A performance counter data collector
  C. An event trace data collector
  D. A configuration data collector
  A. A performance counter alert

• Question 424:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com.

  Technicians use Windows Deployment Services {WDS) to deploy Windows Server 2012 R2.

  The network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed.

  You need to ensure that you can use WDS to deploy Windows Server 2012 R2 to a virtual machine named VM1.

  Which settings should you configure?

  To answer, select the appropriate settings in the answer area.

  Hot Area:

  

  

  ---

  WDS Allows network-based installation of Windows operating systems, which reduces the complexity and cost when compared to manual installations. Thus you should configure the appropriate network settings.

  References: http://technet.microsoft.com/en-us/library/hh831764.aspx

• Question 425:

  You have a server named Print1 that runs Windows Server 2012 R2.On Print1, you share a printer named Printer1.

  You need to ensure that only the members of the Server Operators group, the Administrators group, and the Print Operators group can send print jobs to Printer1.

  What should you do?

  A. Remove the permissions for the Creator Owner group
  B. Assign the Print permission to the Server Operators group
  C. Remove the permissions for the Everyone group
  D. Assign the Print permission to the Administrators group
  C. Remove the permissions for the Everyone group

  ---

  By default Everyone can print. This permissions need to be removed.

• Question 426:

  You create trusts in Windows Server 2008 with the New Trust Wizard. Which one of the following authentication types is being described below?

  An authentication setting that permits unrestricted access by any users in the specified forest to all available shared resources that are located in any of the domains in the local forest.

  A. Domain-wide authentication
  B. None of these
  C. Selective authentication
  D. Forest-wide authentication
  D. Forest-wide authentication

• Question 427:

  Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role installed and is configured as a standalone certification authority (CA).

  You install a second server named Server2. You install the Online Responder role service on Server2.

  You need to ensure that Server1 can issue an Online Certificate Status Protocol (OCSP) Response Signing certificate to Server2.

  What should you run on Server1?

  A. The certreq.exe command and specify the -policy parameter
  B. The certutil.exe command and specify the -getkey parameter
  C. The certutil.exe command and specify the -setreg parameter
  D. The certreq.exe command and specify the -retrieve parameter
  C. The certutil.exe command and specify the -setreg parameter

• Question 428:

  Your company deploys a new Active Directory forest named contoso.com. The first domain controller in the forest runs Windows Server 2012 R2. The forest contains a domain controller named DC10.

  On DC10, the disk that contains the SYSVOL folder fails.

  You replace the failed disk. You stop the Distributed File System (DFS) Replication service. You restore the SYSVOL folder.

  You need to perform a non-authoritative synchronization of SYSVOL on DC10.

  Which tool should you use before you start the DFS Replication service on DC10?

  A. Active Directory Sites and Services
  B. Dfsmgmt.msc
  C. Ldp
  D. Frsutil
  C. Ldp

  ---

  You need to change the msDFSR-Enabled value before syncing, so you would need to use ADSIEDIT or another tool such as Ldp.

• Question 429:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. A Windows Server 2008 R2 SP1 server named ABC-DHCP1 runs the DHCP Server role. All client computers on the network are assigned dynamic IP configurations from ABC-DHCP1. All domain member servers receive their IP configurations from ABC-DHCP1 using IP Address Reservations. All domain controllers have static IP addresses.

  You install a new Windows Server 2012 server named ABC-Host1. ABC-Host1 has six physical network adapters. Each network adapter is connected to the network. You configure two network adapter teams each containing two of the network adapters.

  You need to configure IP Reservations on ABC-DHCP1 for ABC-Host1. How many reservations should you configure?

  A. 1
  B. 2
  C. 4
  D. 6
  C. 4

• Question 430:

  You work as a Network Administrator at ABC.com. The network contains a single Active Directory Domain Services (AD DS) domain named ABC.com. All servers on the network run Windows Server 2008 R2 Service Pack 1 (SP1).

  You plan to migrate all servers to Windows Server 2012. One Windows Server 2008 R2 server is named ABC-2008DC-1 and is configured as a domain controller for the ABC.com domain. You install Windows Server 2012 on a server, name

  it ABC-2012DC-1 and join it to the domain. You want to configure ABC-2012DC-1 as a domain controller using the install from media (IFM) promotion method.

  What should you do before attempting to promote ABC-2012DC-1?

  A. You should create a computer account for ABC-2012DC-1 in the domain.
  B. You should upgrade ABC-2008DC-1 to Windows Server 2012.
  C. You should back up the System State of ABC-2008DC-1.
  D. You should install the Active Directory Lightweight Directory Services role on ABC-2008DC-1.
  B. You should upgrade ABC-2008DC-1 to Windows Server 2012.