Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 501:

  Your network contains 25 Web servers that run Windows Server 2012 R2.

  You need to configure auditing policies that meet the following requirements:

  Generate an event each time a new process is created.

  Generate an event each time a user attempts to access a file share.

  Which two auditing policies should you configure? To answer, select the appropriate two auditing policies in the answer area.

  A. Audit access management (Not Defined)
  B. Audit directory service access (Not Defined)
  C. Audit logon events (Not Defined)
  D. Audit object access(Not Defined)
  E. Audit policy change(Not Defined)
  F. Audit privilege use (Not Defined)
  G. Audit process tracking (Not Defined)
  H. Audit system events(Not Defined)
  D. Audit object access(Not Defined)
  G. Audit process tracking (Not Defined)

  ---

  Audit Object Access

  Determines whether to audit the event of a user accessing an object (for example, file, folder, registry key, printer, and so forth) which has its own system access control list (SACL) specified.

  Audit Process Tracking

  Determines whether to audit detailed tracking information for events such as program activation, process exit, handle duplication, and indirect object access.

  References:

  https://technet.microsoft.com/en-us/library/cc976403.aspx

  https://technet.microsoft.com/en-us/library/cc976411.aspx

• Question 502:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012. The client computers run Windows 7 Professional or Windows 8 Pro. A Windows Server 2012 server named ABC-WSUS1 runs Windows Server Updates Services. All client computers in the network download updates from ABC-WSUS1. You need to configure ABCWSUS1 to download express installation files from Microsoft to provide faster download and installation on the client computers.

  How should you configure ABC-WSUS1?

  A. In the WSUS console, modify the Update Files settings under Update Files and Languages options.
  B. In the WSUS console, modify the Update Languages settings under Update Files and Languages options.
  C. In the WSUS console, modify the Classifications settings under Products and Classifications options.
  D. In the WSUS console, modify the Products settings under Products and Classifications options.
  A. In the WSUS console, modify the Update Files settings under Update Files and Languages options.

• Question 503:

  You work for a company named ABC.com. Your role of Network Administrator includes the management of the company's physical and virtual infrastructure. The network includes servers running Windows Server 2008 R2 Service Pack 1

  (SP1) and Windows Server 2012.

  Virtual machines (VMs) are hosted on Windows Server 2012 servers running the Hyper-V role. One Windows Server 2012 Hyper-V host server is named ABC-HVDev1. ABC-HVDev1 has four quad-core processors, 48GB RAM and six

  physical network adapters configured as three network adapter teams. ABC-HVDev1 also has two Host Bus Adapters (HBAs) and connects to a Fiber Channel SAN.

  You have installed five VMs named DevVM1 through DevVM5 on ABC-HVDev1. Company developers use the VMs to test applications during the development of the applications. The developers regularly take snapshots of the VMs and

  often restore the VMs back to earlier snapshots.

  You need to ensure successful time synchronization in the event that significant time has passed since a VM last synched time.

  What should you do?

  A. You should configure Automatic Start Action.
  B. You should configure Startup Order.
  C. You should configure NUMA topology.
  D. You should configure Resource Control
  E. You should configure SR-IOV.
  F. You should configure Integration Services.
  F. You should configure Integration Services.

• Question 504:

  You have a server named Server1 that runs Windows Server 2012 R2. On Server1, you configure a custom Data Collector Set (DCS) named DCS1. You need to ensure that all performance log data that is older than 30 days is deleted automatically.

  What should you configure?

  A. A File Server Resource Manager (FSRM) file screen on the %Systemdrive%\PerfLogs folder
  B. The Data Manager settings of DCS1
  C. A schedule for DCS1
  D. A File Server Resource Manager (FSRM) quota on the %Systemdrive%\PerfLogs folder
  B. The Data Manager settings of DCS1

  ---

  

• Question 505:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.

  A server named ABC-SRV10 runs Windows Server 2012 and is configured as a file server, DHCP server and DNS server.

  The company has recently opened a branch office. You plan to move ABC-SRV10 to the branch office.

  To improve security, you want to remove the graphical user interface (GUI) from ABC-SRV10. What is the easiest way to remove the GUI from ABC-SRV10?

  A. Run the Remove-WindowsFeature Desktop-Experience cmdlet.
  B. Run the Disable-ServerManagerStandardUserRemoting cmdlet.
  C. Reinstall Windows Server 2012.
  D. Uninstall the User Interfaces and Infrastructure feature.
  D. Uninstall the User Interfaces and Infrastructure feature.

• Question 506:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that has the Remote Access server role installed.

  DirectAccess is implemented on Server1 by using the default configuration.

  You discover that DirectAccess clients do not use DirectAccess when accessing websites on the Internet.

  You need to ensure that DirectAccess clients access all Internet websites by using their DirectAccess connection.

  What should you do?

  A. Configure a DNS suffix search list on the DirectAccess clients.
  B. Enable the Route all traffic through the internal network policy setting in the DirectAccess Server Settings Group Policy object (GPO).
  C. Configure DirectAccess to enable force tunneling.
  D. Disable the DirectAccess Passive Mode policy setting in the DirectAccess Client Settings Group Policy object (GPO).
  C. Configure DirectAccess to enable force tunneling.

• Question 507:

  Your network contains an Active Directory domain named contoso.com. The domain contains 30 organizational units (OUs). You need to ensure that a user named User1 can link Group Policy Objects (GPOs) in the domain.

  What should you do?

  A. From the Active Directory Users and Computers, add User1 to the Network Configuration Operators group.
  B. From the Group Policies Management, click the contoso.com node and modify the Delegation settings.
  C. From the Group Policies Management, click the Group Policy Objects node and modify the Delegation settings.
  D. From the Active Directory Users and Computers, add User1 to the Group Policy Creator Owners group.
  B. From the Group Policies Management, click the contoso.com node and modify the Delegation settings.

  ---

  

  In addition to the administrators of a domain by default, members of the Group Policy Creator Owners group the right to create group policies. If you want to enable users or groups to itself to create GPOs, then there is a path on their

  inclusion in the Group Policy Creator Owners group.

  However, since the introduction of the Group Policy Management, there are other and more granular ways to delegate rights to manage GPOs. Thus, other groups or even individual users can now be equipped with these privileges. For this

  purpose, you open the Group Policy Objects folder below the respective domain. Under the tab delegation is a list of all the groups and users who have the right to create GPOs. The button can add additional users are granted this privilege.

  No matter how a user gets the right to create GPOs to, he may subsequently only edit or delete, which he himself has created those. Denied him thus remains the possibility to change already existing group policies or generally to link GPOs

  to an OU. For these tasks, users must be authorized separately.

  The right to link GPOs can a user, as described in answer B, be granted.

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc755086(v=ws.11)

• Question 508:

  Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2012 R2.

  You need to create a custom Active Directory application partition.

  Which tool should you use?

  A. Eseutil
  B. Dsadd
  C. Dsmod
  D. Ntdsutil
  D. Ntdsutil

  ---

  To create or delete an application directory partition

  -

  partition management

  Manages directory partitions for Active Directory Domain Services (AD DS) or Active Directory Lightweight Directory Services (AD LDS). This is a sub command of Ntdsutil and Dsmgmt. Ntdsutil and Dsmgmt are command-line tools that are

  built into Windows Server 2008 and Windows Server 2008 R2.

  -

  partition management create nc %s1 %s2

  Creates the application directory partition with distinguished name %s1, on theActive Directory domain controller or AD LDS instance with full DNS name %s2. If you specify "NULL" for %s2, this command uses the currently connected Active

  Directory domain controller.

  Use this command only with AD DS. For AD LDS, use createnc %s1 %s2 %s3.

  Note:

  An application directory partition is a directory partition that is replicated only to specific domain controllers. A domain controller that participates in the replication of a particular application directory partition hosts a replica of that partition.

• Question 509:

  Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the Hyper-V server role installed.

  Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4.

  Server1 is configured as shown in the following table.

  

  You plan to schedule a complete backup of Server1 by using Windows Server Backup.

  You need to ensure that the state of VM1 is saved before the backup starts.

  What should you configure?

  A. NUMA topology
  B. Resource control
  C. Resource metering
  D. Virtual Machine Chimney
  E. The VLAN ID
  F. Processor Compatibility
  G. The startup order
  H. Automatic Start Action
  I. Integration Services
  J. Port mirroring
  I. Integration Services

  ---

  Backup Operations in Hyper-V No VSS Writer Available? In some cases, you need an Application-consistent backup but there is no VSS writer available. One example of this is MySQL. Hyper-V backups of virtual machines containing MySQL will always result in either a crash consistent or an image-level backup. For MySQL, the latter is probably acceptable as MySQL doesn't perpetually expand the log file. However, if you're using MySQL within a VSS-aware VM, then a Hyper-Vbased backup tool is going to take a crash-consistent backup. MySQL (like any other database system) isn't always recoverable from a crash-consistent backup; tool is going to take a crash-consistent backup. MySQL (like any other database system) isn't always recoverable from a crash-consistent backup; even when recovery is possible, it may be painful. MySQL is just one example; any number of line-of-business Applications could tell a similar tale. In the case of MySQL, one solution is to find a guest-level backup Application that is MySQL- aware and can back it up properly. For Applications for which no backup Application has a plug-in, you may need to have pre- and post-backup scripts that stop services or close Applications. If brief downtime is acceptable, you can disable the Backup item in Hyper-V Integration Services, thereby forcing Hyper-V to save the state of the VM during backup. This technique results in an image-level backup and can be used on any Application that doesn't have a VSS writer.

  

  References: https://www.altaro.com/hyper-v/vss-crash-consistent-vs-application-consistent-vss-backups-post-2-of-2/

• Question 510:

  Your network contains two servers named HV1 and HV2. Both servers run Windows Server 2012 R2 and have the Hyper-V server role installed.

  HV1 hosts 25 virtual machines. The virtual machine configuration files and the virtual hard disks are stored in D:\VM.

  You shut down all of the virtual machines on HV1.

  You copy D:\VM to D:\VM on HV2.

  You need to start all of the virtual machines on HV2. You want to achieve this goal by using the minimum amount of administrative effort.

  What should you do?

  A. From HV1, export all virtual machines to D:\VM. Copy D:\VM to D:\VM on HV2 and overwrite the existing files. On HV2, run the New Virtual Machine wizard.
  B. From HV1, export all virtual machines to D:\VM. Copy D:\VM to D:\VM on HV2 and overwrite the existing files. On HV2, run the Import Virtual Machine wizard.
  C. Run the Import-VM InitialReplication cmdlet.
  D. Run the Import-VM cmdlet.
  D. Run the Import-VM cmdlet.

  ---

  The Import-VM cmdlet imports a virtual machine from a file.