Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 441:

  Your network contains a perimeter network and an internal network. The internal network contains an Active Directory Federation Services (AD FS) infrastructure. The infrastructure uses Active Directory as the attribute store. All servers run Windows Server 2012 R2.

  You plan to deploy a Web Application Proxy to a server named Server2 in the perimeter network.

  You need to identify which value must be included in the certificate that is deployed to Server2. What should you identify?

  A. The name of the Federation Service
  B. The name of the Active Directory domain
  C. The FQDN of the AD FS server
  D. The public IP address of Server2
  A. The name of the Federation Service

  ---

  Web Application Proxy servers require the following certificates in the certificate store on each Web Application Proxy server:

  A certificate whose subject covers the federation service name. If you want to use Workplace Join, the certificate must also contain the following subject alternative names (SANs): . and

  enterpriseregistration..

  A wildcard certificate, a subject alternative name (SAN) certificate, several SAN certificates, or several certificates whose subjects cover each web application.

  A copy of the certificate issued to external servers when using client certificate preauthentication.

  References: https://technet.microsoft.com/en-us/library/dn383647(v=ws.11).aspx#BKMK_Certs

• Question 442:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA).

  The domain contains a server named Server1 that runs Windows Server 2012 R2. You install the Active Directory Federation Services server role on Server1.

  You plan to configure Server1 as an Active Directory Federation Services (AD FS) server. The Federation Service name will be set to adfs1.contoso.com.

  You need to identify which type of certificate template you must use to request a certificate for AD FS.

  Which certificate template should you identify? To answer, select the appropriate template in the answer area.

  Hot Area:

  

  

  ---

  http://blogs.msdn.com/b/alextch/archive/2011/06/27/installing-a-stand-along-adfs-service.aspx

• Question 443:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 contains a virtual machine named VM1 that runs Windows Server 2012 R2.

  You need to ensure that a user named User1 can install Windows features on VM1. The solution must minimize the number of permissions assigned to User1.

  To which group should you add User1?

  A. Server Operators on Server1
  B. Power Users on VM1
  C. Administrators on VM1
  D. Hyper-V Administrators on Server1
  D. Hyper-V Administrators on Server1

  ---

  *The Hyper-V role enables you to create and manage a virtualized computing environment by using virtualization technology that is built in to Windows Server 2012. Hyper-V virtualizes hardware to provide an environment in which you can

  run multiple operating systems at the same time on one physical computer, by running each operating system in its own virtual machine.

  *Simplified authorization

  The Hyper-V Administrators group is introducedin Windows Server 2012and is implemented as a local security group.

  What value does this change add?

  This group can reduce the number of users that belong to the local Administrators group while providing users with access to Hyper-V.

  What works differently?

  The Hyper-V Administrators group is a new local security group. Add users to this group instead of the local Administrators group to provide them with access to Hyper-V. Members of the Hyper-V Administrators have complete and

  unrestricted access to all features of Hyper-V.

• Question 444:

  Your network contains an Active Directory domain named contoso.com.

  You install Windows Server 2012 R2 on a new server named Server1 and you join Server1 to the domain.

  You need to ensure that you can view processor usage and memory usage information in Server Manager.

  What should you do?

  A. From Server Manager, click Configure Performance Alerts.
  B. From Performance Monitor, create a Data Collector Set (DCS).
  C. From Performance Monitor, start the System Performance Data Collector Set (DCS).
  D. From Server Manager, click Start Performance Counters.
  D. From Server Manager, click Start Performance Counters.

  ---

  You should navigate to the Server Manager snap-in and there click on All Servers, and then Performance Counters. The Performance Counters, when started can be set to collect and display data regarding processor usage, memory usage,

  amongst many other resources like disk-related and security related data, that can be monitored.

  References:

  http://technet.microsoft.com/en-us/library/bb734903.aspx

• Question 445:

  Your network contains two servers named Server 1 and Server 2 that run Windows Server 2012 R2. Both servers have the Hyper-V server role installed. Server1 and Server2 are located in different offices. The offices connect to each other

  by using a high-latency WAN link.

  Server 1 hosts a virtual machine named VM1.

  You need to ensure that you can start VM1 on Server2 if Server1 fails. The solution must minimize hardware costs.

  What should you do?

  A. From the Hyper-V Settings of Server2, modify the Replication Configuration settings. Enable replication for VM1.
  B. on Server 1, install the Multipath I/O (MPIO) feature. Modify the storage location of the VHDs for VM1.
  C. on Server2, install the Multipath I/O (MPIO) feature. Modify the storage location of the VHDs for VM1.
  D. From the Hyper-V Settings of Server1, modify the Replication Configuration settings. Enable replication for Vml.
  A. From the Hyper-V Settings of Server2, modify the Replication Configuration settings. Enable replication for VM1.

• Question 446:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. All file servers in the domain run Windows Server 2012 R2.

  The computer accounts of the file servers are in an organizational unit (OU) named OU1. A Group Policy object (GPO) named GPO1 is linked to OU1.

  You plan to modify the NTFS permissions for many folders on the file servers by using central access policies.

  You need to identify any users who will be denied access to resources that they can currently access once the new permissions are implemented.

  In which order should you Perform the five actions?

  Select and Place:

  

  

  ---

  * Configure a central access rule

  * Configure a central access policy (CAP) (with help of central access rules)

  * Deploy the central access policy (through GPO)

  * Modify security settings

  * Check the result

• Question 447:

  Note: This question is a part of series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains one Active Directory forest named contoso.com. The forest contains two child domains and six domain controllers.

  The domain controllers are configured as shown in the following table.

  

  You create a trust between contoso.com and a domain in another forest at a partner company.

  You need to prevent the sales.contoso.com and the manufacturing.contoso.com names from being used in authentication requests across the forest trust.

  What should you use?

  A. Set-ADSite
  B. Set-ADReplicationSite
  C. Set-ADDomain
  D. Set-ADReplicationSiteLink
  E. Set-ADGroup
  F. Set-ADForest
  G. Netdom
  G. Netdom

  ---

  You can use this procedure to prevent authentication requests for specific name suffixes from being routed to a forest, or you can use this procedure to allow authentication requests for specific name suffixes to be routed to a forest. You can enable or disable an existing name suffix for routing by using the New Trust Wizard in Active Directory Domains and Trusts or by using the Netdom command-line tool.

  References: https://technet.microsoft.com/en-us/library/cc772217.aspx

• Question 448:

  You are a network administrator of an Active Directory domain named contoso.com.

  You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the DHCP Server server role and the Network Policy Server role service installed.

  You enable Network Access Protection (NAP) on all of the DHCP scopes on Server1.

  You need to create a DHCP policy that will apply to all of the NAP non-compliant DHCP clients.

  Which criteria should you specify when you create the DHCP policy?

  A. The user class
  B. The vendor class
  C. The client identifier
  D. The relay agent information
  A. The user class

• Question 449:

  You manage a Hyper-V 2012 cluster by using System Center Virtual Machine Manager 2012 SP1. You need to ensure high availability for business-critical virtual machines (VMs) that host business-critical SQL Server databases.

  Solution: You set the memory-weight threshold value to High for each business-critical VM,

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References: https://technet.microsoft.com/en-us/library/jj628160.aspx

• Question 450:

  HOTSPOT

  You have a Hyper-V named Server1 that runs Windows Server 2012 R2. Server1 hosts 50 virtual machines.

  You need to create a script to list all of the virtual machines that have checkpoints and support Secure Boot.

  What should you do?

  To answer, select the appropriate options in the answer area.

  Hot Area: