Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 521:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that has the Network Policy Server server role installed. The domain contains a server named Server2 that is configured for RADIUS accounting.

  Server1 is configured as a VPN server and is configured to forward authentication requests to Server2.

  You need to ensure that only Server2 contains event information about authentication requests from connections to Server1.

  Which two nodes should you configure from the Network Policy Server console?

  To answer, select the appropriate two nodes in the answer area.

  Hot Area:

  

  

• Question 522:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.

  The company has a Production department and a Research department. Each department is a separate subnet.

  A Windows Server 2012 server named ABC-NPS1 and is configured as a Network Policy Server (NPS) server. ABC-NPS1 also runs the DHCP server role and has a DHCP scope for the Production subnet and the Research subnet.

  You need to configure NPS to ensure that computers on the Production subnet that do not comply with the NPS requirements receive a restrictive set of network policies. You also need to ensure that computers on the Research subnet that

  do not comply with the NPS requirements receive a more restrictive set of network policies than the non-compliant Production computers.

  You configure policies to apply to NAP-Capable Computers.

  How can you apply different restrictions to computer based on their subnet?

  A. By configuring Connection Properties conditions.
  B. By configuring NAS Port Type constraints.
  C. By configuring MS-Service Class conditions
  D. By configuring Authentication Methods constraints.
  C. By configuring MS-Service Class conditions

• Question 523:

  You have a server named Data1 that runs a Server Core Installation of Windows Server 2012 R2 Standard.

  You need to configure Data1 to run a Server Core Installation of Windows Server 2012 R2 Datacenter. You want to achieve this goal by using the minimum amount of administrative effort.

  What should you perform?

  A. An online servicing by using Dism
  B. An offline servicing by using Dism
  C. An upgrade installation of Windows Server 2012 R2
  D. A clean installation of Windows Server 2012 R2
  A. An online servicing by using Dism

  ---

  A. Not least effort

  B. Not least effort

  C. dism /online /set-edition

  D. offline would be less ideal and more work ex: DISM /online /Set-Edition:ServerEnterprise /ProductKey:489J6-VHDMP-X63PK-3K798-CPX3YWindows Server 2008 R2/2012 contains a command-line utility called DISM (Deployment Image Servicing and Management tool). This tool has many features, but one of those features is the ability to upgrade the edition of Windows in use. Note that this process is for upgrades only and is irreversible. You cannot set a Windows image to a lower edition. The lowest edition will not appear when you run the /Get-Target Editions option. If the server is running an evaluation version of Windows Server 2012 R2 Standard or Windows Server 2012 R2 Datacenter, you can convert it to a retail version as follows: If the server is a domain controller, you cannot convert it to a retail version. In this case, install an additional domain controller on a server that runs a retail version and remove AD DS from the domain controller that runs on the evaluation version. From an elevated command prompt, determine the current edition name with the command DISM /online /Get-CurrentEdition. Make note of the edition ID, an abbreviated form of the edition name. Then run DISM /online /SetEdition: /ProductKey:XXXXXXXXXX-XXXXX-XXXXXXXXXX /AcceptEula, providing the edition ID and a retail product key. The server will restart twice.

  There are a couple of ways to install the GUI from the command prompt, although both use the same tool -DISM (Deployment Image Service Manager).

  When you are doing it for a single (local) server, the command is:

  Dism /online /enable-feature /featurename:ServerCore-FullServer /featurename:...

  References:

  https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj574204(v=ws.11)

  https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-7/dd744380(v=ws.10)

  http://blogs.technet.com/b/server_core/archive/2009/10/14/upgrading-windows-server2008-r2-without-media.aspx

• Question 524:

  Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Print and Document Services server role installed. You connect a new print device to the network. The marketing department and the sales department will use the print device.

  You need to provide users from both departments with the ability to print to the network print device.

  The solution must ensure that if there are multiple documents queued to print, the documents from the sales users print before the documents from the marketing users.

  What should you do on Server1?

  A. Add one printer. Modify the printer priority and the security settings.
  B. Add two printers. Modify the priorities of each printer and the security settings of each printer.
  C. Add two printers and configure printer pooling.
  D. Add one printer and configure printer pooling.
  B. Add two printers. Modify the priorities of each printer and the security settings of each printer.

  ---

  http://wiki.answers.com/Q/How_do_you_set_different_print_priority_for_different_users

  How do you set different print priority for different users? To set different print priority to different groups Open Printers and Faxes. Right-click the printer you want to set, click Properties, and then click the Advanced tab. In Priority, click the up

  or down arrows, and then click OK. Or, type a priority level, where 1 is the lowest level and 99 is the highest, and then click OK.

  Click Add Printer to add a second logical printer for the same physical printer. For instructions.

  Click the Advanced tab.

  In Priority, set a priority higher than that of the first logical printer. Instruct the regular group of users to use the first logical printer name and the group with higher priority to use the second logical printer name. Set the appropriate permissions

  for the different groups.

  NB:

  http://technet.microsoft.com/en-us/library/cc757086%28v=ws.10%29.aspx

  Creating a printing pool

  You can create a printing pool to automatically distribute print jobs to the next available printer. A printing pool is one logical printer connected to multiple printers through multiple ports of the print server. The printer that is idle receives the

  next document sent to the logical printer. This is useful in a network with a high volume of printing because it decreases the time users wait for their documents. A printing pool also simplifies administration because multiple printers can be

  managed from the same logical printer on a server. With a printing pool created, the user prints a document without having to find out which printer is available. The logical printer checks for an available port and sends documents to ports in

  the order that they are added.

  Adding the port connected to the fastest printer first ensures that documents are sent to the printer that can print the fastest before they are routed to slower printers in the printing pool. Before setting a printing pool, consider the following:

  All printers in a pool must use the same driver.

  Because users will not know which printer in the pool prints a given document, make sure all printers in the pool are located in the same place.

• Question 525:

  You have 20 servers that run Windows Server 2012 R2.

  You need to create a Windows PowerShell script that registers each server in Microsoft Azure Backup and sets an encryption passphrase.

  Which two PowerShell cmdlets should you run in the script? (Each correct answer presents part of the solution. Choose two.)

  A. Set-OBMachineSetting
  B. Add-OBFileSpec
  C. Start-OBRegistration
  D. New OBPolicy
  E. New-OBRetentionPolicy
  A. Set-OBMachineSetting
  C. Start-OBRegistration

  ---

  C: Start-OBRegistration

  Registers the current computer with Windows Azure Online Backup using the credentials (username and password) created during enrollment.

  A: The Set-OBMachineSetting cmdlet sets a OBMachineSetting object for the server that includes proxy server settings for accessing the internet, network bandwidth throttling settings, and the encryption passphrase that is required to decrypt

  the files during recovery to another server.

  Incorrect Answers:

  B: The Add-OBFileSpec cmdlet adds the OBFileSpecobject, which specifies the items to include or exclude from a backup, to the backup policy (OBPolicyobject). The OBFileSpecobject can include or exclude multiple files, folders, or volumes.

  References: http://technet.microsoft.com/en-us/library/hh770416(v=wps.620).aspx http://technet.microsoft.com/en-us/library/hh770425(v=wps.620).aspx http://technet.microsoft.com/en-us/library/hh770424.aspx http://technet.microsoft.com/en-us/library/hh770398.aspx http://technet.microsoft.com/en-us/library/hh770409.aspx

• Question 526:

  Your network contains an Active Directory domain named contoso.com.

  All user accounts reside in an organizational unit (OU) named OU1.

  All of the users in the marketing department are members of a group named Marketing.

  All of the users in the human resources department are members of a group named HR.

  You create a Group Policy object (GPO) named GPO1.

  You link GPO1 to OU1.

  You configure the Group Policy preferences of GPO1 to add two shortcuts named Link1 and Link2 to the desktop of each user.

  You need to ensure that Link1 only appears on the desktop of the users in Marketing and that Link2 only appears on the desktop of the users in HR.

  What should you configure?

  A. Security Filtering
  B. WMI Filtering
  C. Group Policy Inheritance
  D. Item-level targeting
  D. Item-level targeting

• Question 527:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.

  The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.

  You need to identify which domain controllers are authorized to be cloned by using virtual domain controller cloning.

  Which cmdlet should you use?

  A. Get-AdGroupMember
  B. Get-ADDomainControllerPasswordReplicationPolicy
  C. Get-ADDomainControllerPasswordReplicationPolicyUsage
  D. Get-ADDomain
  E. Get-ADOptionalFeature
  F. Get-ADAccountAuthorizationGroup
  G. Get-ADAuthenticationPolicySilo
  H. Get-ADAuthenticationPolicy
  A. Get-AdGroupMember

  ---

  https://technet.microsoft.com/en-us/library/ee617193.aspx https://blogs.technet.microsoft.com/canitpro/2013/06/11/step-by-step-domain-controller-cloning/

• Question 528:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1.

  Cluster1 hosts an application named App1.

  You need to ensure that Server2 handles all of the client requests to the cluster for App1. The solution must ensure that if Server2 fails, Server1 becomes the active node for App1.

  What should you configure?

  A. Affinity - None
  B. Affinity - Single
  C. The cluster quorum settings
  D. The failover settings
  E. A file server for general u
  F. The Handling priority
  G. The host priority
  H. Live migration
  I. The possible owner
  J. The preferred owner
  J. The preferred owner

  ---

  The preferred owner in a 2 server cluster will always be the active node unless it is down. http:// www.sqlservercentral.com/Forums/Topic1174454-146-1.aspx#bm1174835 Difference between possible owners and preferred owners Possible owners are defined at the resource level and dictate which nodes in the Windows cluster are able to service this resource For instance, you have a 3 node cluster with Node A, Node B and Node C. You have a clustered disk resource "MyClusteredDisk", if you remove Node C from the possible owners of the clustered disk resource "MyClusteredDisk" then this disk will never be failed over to Node C. Preferred owners are defined at the resource group level and define the preferred node ownership within the Windows cluster For instance, you have a 3 node cluster with Node A, Node B and Node C. You have a cluster resource group "MyClusteredGroup" which contains various disk, IP, network name and service resources. Nodes A, B and C are all possible owners but Node B is set as the preferred owner and is currently the active node. The resource group fails over to Node C as Node B stops responding on the Public network due to a failed NIC. In the Resource group properties on the failback tab you have this set to immediate. You fix the NIC issue on Node B and bring it back up on the network. The resource group currently active on Node C will without warning immediately attempt to failback to Node B. Not a good idea if this is a Production SQL Server instance, so use caution when configuring preferred owners and failback http:// support.microsoft.com/kb/299631/en-us Failover behavior on clusters of three or more nodes This article documents the logic by which groups fail from one node to another when there are 3 or more cluster node members. The movement of a group can be caused by an administrator who manually moves a group or by a node or resource failure. Where the group moves depends on how the move is initiated and whether the Preferred Owner list is set.

• Question 529:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.

  The network contains a server named ABC-Fed1. ABC-Fed1 runs Active Directory Federation Services (AD FS).

  You need to configure a federated trust between ABC.com and a partner company named Weyland Industries.

  You need to provide the ABC.com federation metadata to a network administrator at Weyland Industries to enable him to configure their end.

  How can you locate a text file containing the required information?

  A. By opening the Service\Endpoints node in the AD FS console.
  B. By opening the Service\Certificates node in the AD FS console.
  C. By opening the Trust Relationships\Claims Provider Trusts node in the AD FS console.
  D. By opening the Trust Relationships\Attribute Stores node in the AD FS console.
  A. By opening the Service\Endpoints node in the AD FS console.

• Question 530:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.

  The domain controller that hosts the PDC emulator FSMO role suffers a complete hardware failure.

  You need to seize the PDC emulator role on another domain controller. You log in to the domain controller and open ntdsutil.exe.

  Which context should you use in ntdsutil to seize an FSMO role?

  A. Partition Management
  B. Roles
  C. DS Behaviour
  D. Local Roles
  E. Metadata Cleanup
  F. Configurable Settings
  B. Roles