Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 491:

  You have a server named Served that runs Windows Server 2012 R2. You connect three new hard disks to Server 1.

  You need to create a storage space that contains the three disks.

  The solution must meet the following requirements:

  Provide fault tolerance if a single disk fails.

  Maximize the amount of useable storage space.

  What should you create?

  A. A spanned volume
  B. A simple space
  C. A parity space
  D. A mirrored space
  C. A parity space

  ---

  Simple space does not provide fault tolerance, neither does spanned volumes, whereas parity and mirrored spaces do. So the question is parity space or mirrored space to maximize the amount of useable storage space? http://

  en.wikipedia.org/wiki/Spanned_volume

  Unlike RAID, spanned volumes have no fault- tolerance, so if any disk fails, the data on the whole volume could be lost. http://arstechnica.com/information-technology/2012/10/storage-spaces-explained-a-greatfeaturewhen-itworks/ Storage

  Spaces explained: a great feature, when it works Three-way mirroring gives you less usable space than two-way mirroring, but can tolerate the failure of up to two disks at once.

  Parity mirroring gives more usable space than either mirroring mode (a 20GB storage space configured with two-way mirroring will require about 40GB of physical disk space, but a 20GB parity storage space requires only about 30GB) but

  comes with the aforementioned performance hit.

  References:

  http://technet.microsoft.com/en-us/library/jj822938.aspx

  

• Question 492:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2.

  Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. Cluster1 contains a cluster disk resource.

  A developer creates an application named App1. App1 is NOT a cluster-aware application. App1 runs as a service. App1 stores date on the cluster disk resource.

  You need to ensure that App1 runs in Cluster1. The solution must minimize development effort.

  Which cmdlet should you run?

  A. Add-ClusterGenericServiceRole
  B. Add ClusterGenericApplicationRole
  C. Add ClusterScaleOutFileServerRole
  D. Add-ClusterServerRole
  A. Add-ClusterGenericServiceRole

  ---

  The questions says "...App1 runs as a service"

  "Configure high availability for a service that was not originally designed to run in a failover cluster."

  If you run an application as a Generic Application, the cluster software will start the application, then periodically query the operating system to see whether the application appears to be running. If so, it is presumed to be online, and will not

  be restarted or failed over

  References: http://technet.microsoft.com/en-us/library/ee460966.aspx

• Question 493:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012. A Windows Server 2012 server named ABC-SAN1 has a locally attached disk storage array. You are configuring a Windows Server 2012 named ABC-File1 server as a file server. You need to configure ABC-File1 to store files on the disk storage array attached to ABC-SAN1. The disk storage must be available as a drive letter in Windows Explorer on ABC-File1. You log in to ABCSAN1 and create an iSCSI target named TG1.

  Which two of the following steps should you perform before you can create the volume on ABCMicrosoft 70-417 Exam File1? (Choose two)

  A. Assign an iSCSI initiator ID to TG1 on ABC-SAN1.
  B. Assign an iSCSI initiator ID toTG1 on ABC-File1.
  C. On ABC-SAN1, open the iSCSI initiator and configure it to connect to TG1.
  D. On ABC-File1, open the iSCSI initiator and configure it to connect to TG1.
  A. Assign an iSCSI initiator ID to TG1 on ABC-SAN1.
  C. On ABC-SAN1, open the iSCSI initiator and configure it to connect to TG1.

• Question 494:

  Your network contains an Active Directory domain named contoso.com. The domain contains Server 2012 R2 and has the Hyper-V server role installed.

  You need to log the amount of system resources used by each virtual machine.

  What should you do?

  A. From Windows PowerShell, run the Enable-VMResourceMeteringcmdlet.
  B. From Windows System Resource Manager, enable Accounting.
  C. From Windows System Resource Manager, add a resource allocation policy.
  D. From Windows PowerShell, run the Measure-VM cmdlet.
  A. From Windows PowerShell, run the Enable-VMResourceMeteringcmdlet.

  ---

  The Enable-VMResourceMeteringcmdlet collects resource utilization data for a virtual machine or resource pool.

• Question 495:

  Your network contains one Active Directory domain named contoso.com. The domain contains three users named User1, User2, and User3. You need to ensure that the users can log on to the domain by using the user principal names (UPNs) shown in the following table.

  

  What should you use?

  A. the Set-ADDomain cmdlet
  B. the Add-DNSServerSecondaryZone cmdlet
  C. the Setspn command
  D. the Set-ADUser cmdlet
  D. the Set-ADUser cmdlet

  ---

  References: https://technet.microsoft.com/en-us/library/ee617215.aspx

• Question 496:

  Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers. The domain controllers are configured as shown in the following table.

  

  In the perimeter network, you install a new server named Server1 that runs Windows Server 2012 R2. Server1 is in a workgroup.

  You need to perform an offline domain join of Server1 to the contoso.com domain.

  What should you do first?

  A. Run the djoin.exe command.
  B. Run the dsadd.exe command.
  C. Transfer the PDC emulator role to DC1.
  D. Transfer the infrastructure master role to DC1.
  A. Run the djoin.exe command.

  ---

  There do not appear to be any requirements on operations master roles for this specific requirement.

  

  Moreover, ODJ is available on both 2008R2 and 2012 and if there was to deal with a FSMO, RID would be concerned as it's needed to create an AD object (in this case, creating the computer account)

• Question 497:

  Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers. The domain controllers are configured as shown in the following table.

  

  Active Directory Recycle Bin is enabled.

  You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago.

  You need to restore the membership of Group1.

  What should you do?

  A. Perform tombstone reanimation.
  B. Export and import data by using Dsamain.
  C. Perform a non-authoritative restore.
  D. Recover the items by using Active Directory Recycle Bin.
  B. Export and import data by using Dsamain.

  ---

  As far as the benefits of the Windows 2012 Recycle Bin, they are the same as the Windows 2008 R2 recycle bin with the exception of the new user interface which makes it more user-friendly. These additional benefits include: All deleted AD object information including attributes, passwords and group membership can be selected in mass then undeleted from the user interface instantly or via Powershell

  User-friendly and intuitive interface to filter on AD objects and a time period Can undelete containers with all child objects

  https://www.simple-talk.com/sysadmin/exchange/the-active-directory-recycle-bin-in-windows-server-2008-r2/ http://communities.quest.com/community/quest-itexpert/blog/2012/09/24/the-windows-server-2012-recycle-binand-recovery-manager-for-active-directory

• Question 498:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. All servers on the network run Windows Server 2012.

  Several Sales users spend most of their time away from the office. You implement DirectAccess to enable the Sales users to connect to the network when they are away from the office. All computers used by the Sales users are joined to the domain. You create a DirectAccess client group named SalesDirectAccess and add all the computer accounts for the Sales users' computers to the SalesDirectAccess group. Some Sales users report that they are unable to access the network using DirectAccess. Other Sales report that they can connect successfully.

  You discover that only users using laptop computers can connect using DirectAccess. Sales users are unable to connect when they use desktop computers. How can you enable all Sales users to access the network using DirectAccess?

  A. By adding the computer accounts for the Sales user computers to the RAS and IAS Servers group.
  B. By adding the user accounts for the Sales users to the SalesDirectAccess group.
  C. By modifying the group that the Direct Access Client Settings GPO applies to.
  D. By modifying the WMI filter that the Direct Access Client Settings GPO is linked to.
  D. By modifying the WMI filter that the Direct Access Client Settings GPO is linked to.

• Question 499:

  Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2012 R2. The domain contains four servers. The servers are configured as shown in the following table.

  

  You need to deploy IP Address Management (IPAM) to manage DNS and DHCP. On which server should you install IPAM?

  A. DC1
  B. DC2
  C. DC3
  D. Server1
  D. Server1

  ---

  IPAM cannot be installed on DomainControllers. All other servers have the DC role

  

  References: http://technet.microsoft.com/en-us/library/hh831353.aspx

• Question 500:

  You work as a Network Administrator at ABC.com. The network contains a single Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. The network includes a Windows Server 2012 server named ABC-CA1. ABC-CA1 runs the Certificate Services role and is configured as an Enterprise Certification Authority for the domain. You need to configure an Active Directory Federation Services (AD FS) server. You install a Windows Server 2012 domain member server named ABC-ADFS1 and install the Active Directory Federation Services (AD FS) role on the server.

  You plan to use ABCadfs.ABC.com as the Federation Service Name. You need to request a certificate from ABC-CA1 for the AD FS configuration.

  Which certificate template should you select in the Certificate Enrollment wizard?

  A. You should select the Kerberos Authentication certificate template.
  B. You should select the CEP Encryption certificate template.
  C. You should select the Web Server certificate template.
  D. You should select the Authenticated Session certificate template.
  E. You should select the IPSEC certificate template.
  C. You should select the Web Server certificate template.