Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 471:

  Your network contains an Active Directory domain named adatum.com.

  You have a standard primary zone named adatum.com.

  You need to provide a user named User1 the ability to modify records in the zone.

  Other users must be prevented from modifying records in the zone.

  What should you do first?

  A. Run the Zone Signing Wizard for the zone
  B. From the properties of the zone, change the zone type
  C. Run the new Delegation Wizard for the zone
  D. From the properties of the zone, modify the Start Of Authority (SOA) record
  B. From the properties of the zone, change the zone type

  ---

  To assign or deny permissions, the security tab is required. The security tab becomes available when the current zone is reconfigured as an Active Directory-integrated zone.

  References: http://technet.microsoft.com/en-us/library/cc755193.aspx http://www.windowsnetworking.com/articles-tutorials/netgeneral/windows-server-2012-dns-part2.html

• Question 472:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and

  Windows Server 2012. A server named ABC-DHCP1 runs the DHCP Server role. Client computers on the network receive their IP configurations from ABC-DHCP1.

  A server named ABC-IPAM1 is configured as an IP Address Management (IPAM) Server. You use ABC-IPAM1 to manage ABC-DHCP1.

  You need to enable a user named Mia to use ABC-IPAM1 to modify the DHCP scope options on ABC-DHCP1.

  You add Mia to the IPAM Users group on ABC-IPAM1.

  Mia reports that she is unable to make changes to ABC-DHCP1.

  How can you enable Mia to make changes on ABC-DHCP1 while minimizing the permissions assigned to her?

  A. By adding Mia to the local Administrators group on ABC-DHCP1.
  B. By adding Mia to the IPAM MSM Administrators group on ABC-IPAM1.
  C. By adding Mia to the IPAM ASM Administrators group on ABC-IPAM1.
  D. By adding Mia to the DHCP Administrators group on ABC-DHCP1.
  B. By adding Mia to the IPAM MSM Administrators group on ABC-IPAM1.

• Question 473:

  You have a server named Server1 that runs Windows Server 2012 R2.

  Server1 has three physical network adapters named NIC1, NIC2, and NIC3.

  On Server1, you create a NIC team named Team1 by using NIC1 and NIC2. You configure Team1 to accept network traffic on VLAN 10.

  You need to ensure that Server1 can accept network traffic on VLAN 10 and VLAN 11. The solution must ensure that the network traffic can be received on both VLANs if a network adapter fails.

  What should you do?

  A. From Server Manager, change the load balancing mode of Team1.
  B. Run the New-NetLbfoTeam cmdlet.
  C. From Server Manager, add an interface to Team1.
  D. Run the Add-NetLbfoTeamMember cmdlet.
  C. From Server Manager, add an interface to Team1.

• Question 474:

  Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs.

  You need to provide an Administrator named Admin1 with the ability to create GPOs in the domain. The solution must not provide Sarah with the ability to link GPOs.

  What should you use?

  A. dcgpofix
  B. Get-GPOReport
  C. Gpfixup
  D. Gpresult
  E. Gptedit.msc
  F. Import-GPO
  G. Restore-GPO
  H. Set-GPInheritance
  I. Set-GPLink
  J. Set-GPPermission
  L

  ---

  We can run the add-ADGroupMember use and Sarah in the Default Domain Group Policy Creator Owners record. Members of this group can create and modify GPOs, but do not link. References: https://technet.microsoft.com/en-us/library/ee617210.aspx

• Question 475:

  DRAG DROP

  Your network contains an Active Directory domain named adatum.com. The domain contains a server named DC1 that runs Windows Server 2012 R2.

  You plan to install the Active Directory Federation Services server role on DC1 to allow for Workplace Join.

  You run nslookup enterpriseregistration and you receive the following results:

  

  You need to create a certificate request for DC1 to support the Active Directory Federation Services (AD FS) installation.

  How should you configure the certificate request?

  To answer, drag the appropriate names to the correct locations. Each name may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

• Question 476:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server 1. Server1 runs Windows Server 2012 R2. You need to create a 3-TB virtual hard disk (VHD) on Server1.

  Which tool should you use?

  A. Computer Management
  B. File Server Resource Manager (FSRM)
  C. New-StorageSubsytemVirtualDisk
  D. Server Manager
  A. Computer Management

  ---

  To create a virtual hard disk with VHDX format

  1.

  In Server Manager, choose Tools ?Computer Management.

  2.

  Choose Disk Management in the left side of Computer Management.

  3.

  Right-click Disk Management and choose "Create VHD". Or select "Create VHD" in the Action menu.

• Question 477:

  HOTSPOT

  Your network contains one Active Directory forest named adatum.com. The forest contains a single domain. The site topology for the forest is shown in the exhibit.

  Each site contains s one domain controller. You need to ensure that replication between site2 and site4 occurs in 15 minutes or less.

  What command should you run? To answer select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  References: https://technet.microsoft.com/en-us/library/hh852320(v=wps.630).aspx

• Question 478:

  You have two servers, Server 1 and server 2. You create a custom data collector set DCS1 on Server 1. You need to export DCS1 from Server 1 to Server2.

  What should you do?

  A. Right click on DCS1 and click on Export list
  B. Right click on DCS1 and click on Save template
  C. Right click on DCS1 and click on Data Manager
  D. Right click on DCS1 and click on Export manager
  B. Right click on DCS1 and click on Save template

  ---

  The function Save Template ... lets you export the definition of a data collector set in an XML file. Subsequently, the Data Collector Set can be imported on Server2.

  

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc766318(v=ws.11)

• Question 479:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  The domain contains 200 Group Policy objects (GPOs) and 100 WMI filters.

  An administrator named Admin1 must be able to create new WMI filters and edit all of the existing WMI filters from the Group Policy Management Console (GPMC).

  You need to delegate the required permissions to Admin1. The solution must minimize the number of permissions assigned to Admin1.

  What should you do?

  A. From Active Directory Users and Computers, add Admin1 to the WinRMRemoteWMIUsers__group.
  B. From Group Policy Management, assign Creator Owner to Admin1 for the WMI Filters container.
  C. From Active Directory Users and Computers, add Admin1 to the Domain Admins group.
  D. From Group Policy Management, assign Full control to Admin1 for the WMI Filters container.
  D. From Group Policy Management, assign Full control to Admin1 for the WMI Filters container.

  ---

  Users with Full control permissions can create and control all WMI filters in the domain, including WMI filters created by others. Users with Creator owner permissions can create WMI filters, but can only control WMI filters that they create.

  References: http://technet.microsoft.com/en-us/library/cc757429(v=ws.10).aspx

• Question 480:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 and a server named Server1. Both servers run Windows Server 2012 R2.

  You configure the classification of a share on Server1 as shown in the Share1 Properties exhibit. (Click the Exhibit button.)

  

  You configure the resource properties in Active Directory as shown in the Resource Properties exhibit. (Click the Exhibit button.)

  

  You need to ensure that the Impact classification can be assigned to Share1 immediately.

  Which cmdlet should you run on each server?

  To answer, select the appropriate cmdlet for each server in the answer area.

  Hot Area: