Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 431:

  You have a server named FS1 that runs Windows Server 2012 R2.

  You install the File and Storage Services server role on FS1.

  From Windows Explorer, you view the properties of a shared folder named Share1 and you discover that the Classification tab is missing.

  You need to ensure that you can assign classifications to Share1 from Windows Explorer manually.

  What should you do?

  A. Install the Enhanced Storage feature.
  B. From Folder Options, clear Use Sharing Wizard (Recommend).
  C. Install the File Server Resource Manager role service.
  D. From Folder Options, select Show hidden files, folders, and drives.
  C. Install the File Server Resource Manager role service.

• Question 432:

  Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed. Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4. Server1 is configured as shown in the following table.

  

  You need to ensure that VM1 can use more CPU time than the other virtual machines when the CPUs on Server1 are under a heavy load.

  What should you configure?

  A. NUMA topology
  B. Resource control
  C. Resource metering
  D. Virtual Machine Chimney
  E. The VLAN ID
  F. Processor Compatibility
  G. The startup order
  H. Automatic Start Action
  I. Integration Services
  J. Port mirroring
  B. Resource control

  ---

  Resource controls provide you with several ways to control the way that Hyper-V allocates resources to virtual machine. Resource control in used in the event where you need to adjust the computing resources of a virtual machine, you can reconfigure the resources to meet the changing needs. You can also specify resource controls to automate how resources are allocated to virtual machines.

  

  References: http://technet.microsoft.com/en-us/library/cc766320(v=ws.10).aspx http://technet.microsoft.com/en-us/library/hh831410.aspx http://technet.microsoft.com/en-us/library/cc742470.aspx Exam Ref 70-410, Installing and Configuring Windows Server 2012, Chapter 3: Configure Hyper-V, Objective 3.1: Create and Configure virtual machine settings, p. 144 Training Guide: Installing and Configuring Windows Server 2012: Chapter 7: Hyper-V Virtualization, Lesson 2: Deploying and configuring virtual machines, p. 335

• Question 433:

  You work as a Network Administrator at ABC.com. The network contains a single Active Directory Domain Services (AD DS) domain named ABC.com. You install a new Windows Server 2012 server named ABC-SRV08. During the installation, you select the Server Core Installation option. You then join the server to the domain and configure several server roles.

  You later decide that you want to change the installation of Windows Server 2012 on ABC-SRV08 to include the full graphical user interface (GUI). ABC-SRV08 will continue to perform it's current roles.

  How can you achieve this goal in the minimum amount of time?

  A. By reinstalling Windows Server 2012 and reconfiguring the server roles.
  B. By running the Receive-SmigServerData PowerShell cmdlet.
  C. By running the Install-WindowsFeature PowerShell cmdlet.
  D. By running the Set-WindowsEdition cmdlet in DISM (Deployment Image Servicing and Management).
  C. By running the Install-WindowsFeature PowerShell cmdlet.

• Question 434:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.

  The network includes six Windows Server 2012 servers named ABC-NodeA, ABC-NodeB, ABC-NodeC, ABC-nodeD, ABC-NodeE and ABC-NodeF. All six servers run the failover clustering role. You configure all six servers as nodes in a

  single failover clustering cluster named ABC-CL01. The six servers were added to the cluster in the following order: ABC-NodeA, ABC-NodeB, ABC-NodeC, ABC-nodeD, ABC-NodeE, ABC-NodeF.

  You configure ABC-NodeA, ABC-NodeB and ABC-NodeC as preferred owners for a clustered resource.

  ABC-NodeA fails and the resource fails over to ABC-NodeB. ABC-NodeB then fails and the resource fails over to ABC-NodeC.

  You repair ABC-NodeA and ABC-NodeB and bring both servers back online in the cluster. ABC-NodeC then fails and the clustered resource fails over to another server in the cluster.

  Which server is now hosting the clustered resource?

  A. ABC-NodeA
  B. ABC-NodeB
  C. ABC-NodeC
  D. ABC-NodeD
  E. ABC-NodeE
  F. ABC-NodeF
  A. ABC-NodeA

• Question 435:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Node1and Node2. Node1and Node2 run Windows Server 2012 R2. Node1and Node2 are configured as a two-node failover

  cluster named Cluster2.

  The computer accounts for all of the servers reside in an organizational unit (OU) named Servers.

  A user named User1 is a member of the local Administrators group on Node1and Node2.

  User1 creates a new clustered File Server role named File1 by using the File Server for general use option. A report is generated during the creation of File1 as shown in the exhibit. (Click the Exhibit button.)

  

  File1 fails to start.

  You need to ensure that you can start File1.

  What should you do?

  A. Increase the value of the ms-DS-MachineAccountQuota attribute of the domain.
  B. Assign the user account permissions of User1 to the Servers OU.
  C. Assign the computer account permissions of Cluster2 to the Servers OU.
  D. Recreate the clustered File Server role by using the File Server for scale-out application data option.
  E. Log on to the domain by using the built-in Administrator for the domain, and then recreate the clustered File Server role by using the File Server for general use option.
  C. Assign the computer account permissions of Cluster2 to the Servers OU.

  ---

  When using the failover cluster manager changes you make are not being done as the user but as the cluster machine account. References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn466519(v=ws.11)

• Question 436:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. All servers on the network run Windows Server 2012. You plan to enable external users to connect to the network using a VPN connection. You are deploying Network Access Protection to ensure system health compliance for users that connect over a VPN connection. You install a Windows Server 2012 computer named ABCNAP1 and install the Network Policy Server role. You want to configure ABC-NAP1 as a Network Access Protection (NAP) health policy server for the VPN connections.

  You run the Configure NAP wizard to create a VPN Enforcement policy. However, you are unable to complete the wizard. How can you ensure that you are able to complete the Configure NAP wizard to configure VPN Enforcement?

  A. Configure the IPSEC enforcement method first.
  B. Install a computer certificate on ABC-NAP1.
  C. Install a System Health Agent on ABC-NAP1.
  D. Install a System Health Validator on ABC-NAP1.
  B. Install a computer certificate on ABC-NAP1.

• Question 437:

  Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs.

  You need to prevent all of the GPOs at the site level and at the domain level from being Applied to users and computers in an organizational unit (OU) named OU1.

  You want to achieve this goal by using the minimum amount of administrative effort.

  What should you use?

  A. Dcgpofix
  B. Get-GPOReport
  C. Gpfixup
  D. Gpresult
  E. Gptedit.msc
  F. Import-GPO
  G. Restore-GPO
  H. Set-GPInheritance
  I. Set-GPLink
  J. Set-GPPermission
  H. Set-GPInheritance

  ---

  

  References: http://technet.microsoft.com/en-us/library/ee461032.aspx

• Question 438:

  

  Your network contains an Active Directory forest. The forest contains two domains named contoso.com and corp.contoso.com. The forest contains four domain controllers. The domain controllers are configured as shown in the following table.

  

  All domain controllers are DNS servers. In the corp.contoso.com domain, you plan to deploy a new domain controller named DC5. You need to identify which domain controller must be online to ensure that DC5 can be promoted successfully to a domain controller. Which domain controller should you identify?

  A. DC3
  B. DC4
  C. DC2
  D. DC1
  A. DC3

  ---

  Relative ID (RID) Master:

  Allocates active and standby RID pools to replica domain controllers in the same domain (corp.contoso.com) Must be online for newly promoted domain controllers to obtain a local RID pool that is required to advertise or when existing

  domain controllers have to update their current or standby RID pool allocation.

  The RID master is responsible for processing RID pool requests from all domain controllers in a particular domain. When a DC creates a security principal object such as a user or group, it attaches a unique Security ID (SID) to the object.

  This SID consists of a domain SID (the same for all SIDs created in a domain), and a relative ID (RID) that is unique for each security principal SID created in a domain. Each DC in a domain is allocated a pool of RIDs that it is allowed to

  assign to the security principals it creates. When a DC's allocated RID pool falls below a threshold, that DC issues a request for additional RIDs to the domain's RID master. The domain RID master responds to the request by retrieving RIDs

  from the domain's unallocated RID pool and assigns them to the pool of the requesting DC.

  At any one time, there can be only one domain controller acting as the RID master in the domain.

  References:

  http://support.microsoft.com/kb/223346

  http://en.wikipedia.org/wiki/Flexible_single_master_operation

• Question 439:

  You have a server named Server1.

  A Microsoft Azure Backup of Server1 is created automatically every day.

  You rename Server1 to Server2.

  You discover that backups are no longer created in Azure.

  You need to back up the server to Azure.

  What should you do?

  A. From the Azure Management Portal, modify the configuration of the backup vault.
  B. On Server2, run the Start-OBRegistration cmdlet.
  C. On Server2, run the Add-WBBackupTarget cmdlet.
  D. From the Azure Management Portal, upload the Server2 certificate as a management certificate.
  B. On Server2, run the Start-OBRegistration cmdlet.

  ---

  You will need to reregister the server with the backup vault and it will be considered a new server by Recovery Services. The Start-OBRegistration cmdlet registers the server with using the vault credentials downloaded during enrollment.

• Question 440:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. The domain contains a file server named File1. All servers in the domain run Windows Server 2012 R2.

  You need to create a new volume on File1.

  The new volume must have the following configurations:

  Have the drive letter T

  Have the FAT32 file system

  Be stored on a new virtual hard disk

  In which order should you run the Diskpart commands?

  To answer, move all the Diskpart commands from the list of commands to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Box 1: create vdisk Box 2: attach vdisk Box 3: create partition Box 4: assign Box 5: format

  Note: Example: createvdisk file="C:\vdisks\disk1.vhd" maximum=16000 attachvdisk create partition primary assign letter=g format

  References: http://technet.microsoft.com/en-us/library/gg252576.aspx http://technet.microsoft.com/en-us/library/hh831487.aspx