Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 41:

  

  Your IT company has a large helpdesk department that deals with various types of calls from printer errors through to Application deployment. To give the help desk more responsibility you want to let them reset user passwords and unlock user accounts. This will speed up their response times for common support calls. Which of the following tools should you use to accomplish this?

  A. The Delegation of Control Wizard
  B. The Advanced Security Settings dialog box
  C. DSUTIL
  D. DSACLS
  A. The Delegation of Control Wizard

  ---

  

  References: http://technet.microsoft.com/en-us/library/dd145442.aspx

• Question 42:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.

  The network includes a Windows Server 2012 server named ABC-AppSrv1. ABC-AppSrv1 runs a custom line-of-business (LOB) application used by all company users. You need to record the value of a registry key related to the LOB application on ABC-AppSrv1 at specific times throughout the day.

  You create a custom Data Collector Set (DCS).

  How should you configure the DCS?

  A. You should configure the DCS to monitor Performance Counters.
  B. You should configure the DCS to monitor Event Trace Data.
  C. You should configure the DCS to monitor WDAC Diagnostics.
  D. You should configure the DCS to monitor System Configuration Information.
  D. You should configure the DCS to monitor System Configuration Information.

• Question 43:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. A server named ABC-File1 runs Windows Server 2012 Server Core edition with the File Services server role installed. ABC-File1 hosts shared folders on the D: drive. Users access the shared folders from their Windows 7 client computers.

  A user attempts to recover a previous version of a file in a shared folder on ABC-File1 but discovers that there is no previous versions option.

  Which tool would you use to ensure that users can recover files using the Previous Versions function?

  A. DISM
  B. Vssadmin
  C. Disk Management
  D. Wbadmin
  E. Windows ServerBackup
  B. Vssadmin

• Question 44:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com.

  You have a failover cluster named Cluster1 that contains two nodes named Server1 and Server2. Both servers run Windows Server 2012 R2 and have the Hyper-V server role installed.

  You plan to create two virtual machines that will run an application named App1. App1 will store data on a virtual hard drive named App1data.vhdx. App1data.vhdx will be shared by both virtual machines.

  The network contains the following shared folders:

  

  An SMB file share named Share1 that is hosted on a Scale-Out File Server.

  

  An SMB file share named Share2 that is hosted on a standalone file server.

  

  An NFS share named Share3 that is hosted on a standalone file server.

  You need to ensure that both virtual machines can use App1data.vhdx simultaneously.

  What should you do?

  To answer, select the appropriate configurations in the answer area.

  Hot Area:

  

  

• Question 45:

  Your network contains an Active Directory forest named contoso.com. The forest contains four domains. All servers run Windows Server 2012 R2.

  Each domain has a user named User1.

  You have a file server named Server1 that is used to synchronize user folders by using the Work Folders role service.

  Server1 has a work folder named Sync1.

  You need to ensure that each user has a separate folder in Sync1.

  What should you do?

  A. From Windows Explorer, modify the Sharing properties of Sync1
  B. Run the Set-SyncServerSetting cmdlet
  C. From File and Storage Services in Server Manager, modify the properties of Sync1
  D. Run the Set-SyncShare cmdlet
  D. Run the Set-SyncShare cmdlet

• Question 46:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DHCP Server server role installed.

  An administrator installs the IP Address Management (IPAM) Server feature on a server named Server2. The administrator configures IPAM by using Group Policy based provisioning and starts server discovery.

  You plan to create Group Policies for IPAM provisioning.

  You need to identify which Group Policy object (GPO) name prefix must be used for IPAM Group Policies.

  What should you do on Server2?

  A. From Server Manager, review the IPAM overview.
  B. Run the Get-IpamConfiguration cmdlet.
  C. From Task Scheduler, review the IPAM tasks.
  D. Run the ipamgc.exe tool.
  A. From Server Manager, review the IPAM overview.

• Question 47:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com.

  You install the IP Address Management (IPAM) Server feature on a server named Server1 and select Manual as the provisioning method.

  The IPAM database is located on a server named SQL1.

  You need to configure IPAM to use Group Policy Based provisioning.

  What command should you run first?

  To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

• Question 48:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. A server named ABC-File1 runs the File and Storage Services server role. ABC-File1 hosts shared folders on the D: drive. You want to use an online backup service to back up the shared folders on ABC-File1. You install the Windows Server Backup feature on ABC-File1 and configure the server to use Microsoft Online Backup.

  Which of the following folders cannot be backed up using Microsoft Online Backup?

  A. System State
  B. A folder that uses NTFS encryption.
  C. A folder that uses NTFS compression.
  D. A shared folder.
  A. System State

• Question 49:

  DRAG DROP

  You are planning to set up a proof-of-concept network virtualization environment.

  The environment will contain three servers. The servers will be configured as shown in the following table.

  

  VMM will be used to manage the virtualization environment. Server2 runs three virtual machines. All of the virtual machines are configured to use network virtualization.

  You need to enable network connectivity between the virtual machines and Server3.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References: https://technet.microsoft.com/en-us/library/dn249417.aspx

• Question 50:

  HOTSPOT

  You have a server named Server1 that has the Web Server (IIS) server role installed. You obtain a Web Server certificate.

  You need to configure a website on Server1 to use Secure Sockets Layer (SSL). To which store should you import the certificate?

  To answer, select the appropriate store in the answer area.

  Hot Area:

  

  

  ---

  When organizations deploy their own public key infrastructure (PKI) and install a private trusted root CA, their CA automatically sends its certificate to all domain member computers in the organization. The domain member client and server computers store the CA certificate in the Trusted Root Certification Authorities certificate store. After this occurs, the domain member computers trust certificates that are issued by the organization trusted root CA.

  For example, if you install AD CS, the CA sends its certificate to the domain member computers in your organization and they store the CA certificate in the Trusted Root Certification Authorities certificate store on the local computer.If you also configure and autoenroll a server certificate for your NPS servers and then deploy PEAP-MS-CHAP v2 for wireless connections, all domain member wireless client computers can successfully authenticate your NPS servers using the NPS server certificate because they trust the CA that issued the NPS server certificate.

  On computers that are running the Windows operating system, certificates that are installed on the computer are kept in a storage area called the certificate store. The certificate store is accessible using the Certificates Microsoft Management Console (MMC) snap-in.

  This store contains multiple folders, where certificates of different types are stored. For example, the certificate store contains a Trusted Root Certification Authorities folder where the certificates from all trusted root CAs are kept.

  When your organization deploys a PKI and installs a private trusted root CA using AD CS, the CA automatically sends its certificate to all domain member computers in the organization. The domain member client and server computers store the CA certificate in the Trusted Root Certification Authorities folder in the Current User and the Local Computer certificate stores. After this occurs, the domain member computers trust certificates that are issued by the trusted root CA.

  Similarly, when you autoenroll computer certificates to domain member client computers, the certificate is kept in the Personal certificate store for the Local Computer. When you autoenroll certificates to users, the user certificate is kept in the Personal certificate store for the Current User.

  References: http://technet.microsoft.com/en-us/library/cc730811.aspx http://technet.microsoft.com/en-us/library/cc730811.aspx http://technet.microsoft.com/en-us/library/cc772401%28v=ws.10%29.aspx http://technet.microsoft.com/en-us/library/ee407543%28v=ws.10%29.aspx