Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 531:

  Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2. You have a Password Settings object (PSOs) named PSO1. You need to view the settings of PSO1. Which tool should you use?

  A. Get-ADDomainControllerPasswordReplicationPolicy
  B. Get-ADDefaultDomainPasswordPolicy
  C. Server Manager
  D. Get-ADFineGrainedPasswordPolicy
  D. Get-ADFineGrainedPasswordPolicy

• Question 532:

  Your network contains a server named Server1 that has the Network Policy and Access Services server role installed.

  AH of the network access servers forward connection requests to Server1.

  You create a new network policy on Server1.

  You need to ensure that the new policy applies only to connection requests from the 192.168.0.0/24 subnet.

  What should you do?

  A. Set the Client IP4 Address condition to 192.168.0.0/24.
  B. Set the Client IP4 Address condition to 192.168.0.
  C. Set the Called Station ID constraint to 192.168.0_0/24.
  D. Set the Called Station ID constraint to 192_168.0
  A. Set the Client IP4 Address condition to 192.168.0.0/24.

  ---

  After creating a network policy with the New Network Policy Wizard or by creating a custom policy, you can specify the conditions that connection requests must have in order to match the network policy; if the conditions configured in the policy match the connection request, Network Policy Server (NPS) applies the settings designated in the network policy to the connection.

• Question 533:

  HOTSPOT

  You run Get-ISCSIServerTarget and you receive the following output.

  

  Use the drop-down menus to select the answer choice that completes each statement.

  Hot Area:

  

  

  ---

  ign.1991-05.com.microsoft.server3-target1-targetInitlatorIds

  References: http://techgenix.com/configuring-iscsi-storage-part3/

• Question 534:

  Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Both servers have the Hyper-V server role installed.Server1 and Server2 are located in different offices. The offices connect to each other by

  using a high-latency WAN link.

  Server2 hosts a virtual machine named VM1.

  You need to ensure that you can start VM1 on Server1 if Server2 fails. The solution must minimize hardware costs.

  What should you do?

  A. From the Hyper-V Settings of Server2, modify the Replication Configuration settings. Enable replication for VM1.
  B. On Server1, install the Multipath I/O (MPIO) feature. Modify the storage location of the VHDs for VM1.
  C. On Server2, install the Multipath I/O (MPIO) feature. Modify the storage location of the VHDs for VM1.
  D. From the Hyper-V Settings of Server1, modify the Replication Configuration settings. Enable replication for VM1.
  D. From the Hyper-V Settings of Server1, modify the Replication Configuration settings. Enable replication for VM1.

  ---

  You first have to enable replication on the Replica server--Server1--by going to the server and modifying the "Replication Configuration" settings under Hyper-V settings. You then go to VM1--which presides on Server2-- and run the "Enable Replication" wizard on VM1.

  

• Question 535:

  Your network contains an Active Directory domain named contoso.com. The domain contains 2 WSUS servers, ServerA and ServerB. ServerB is a replica server of ServerA. You need to configure WSUS to report data from ServerB to ServerA.

  What should you configure?

  A. Update Reports
  B. Synchronization
  C. Computer Groups
  D. Reporting Rollup
  D. Reporting Rollup

  ---

  

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc708506(v=ws.10)

• Question 536:

  Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8 Pro. You have a Group Policy object (GPO) named GP1. GP1 is linked to the domain. GP1 contains the Windows Internet Explorer 10 and 11 Internet Settings.

  The settings are shown in the exhibit.

  

  Users report that when they open Windows Internet Explorer, the home page is NOT set to http:// www.contoso.com. You need to ensure that the home page is set to http://www.contoso.com the next time users log on to the domain. What should you do?

  A. On each client computer, run gpupdate.exe.
  B. Open the Internet Explorer 10 and 11 Internet Settings, and then press F5.
  C. Open the Internet Explorer 10 and 11 Internet Settings, and then modify the Tabs settings.
  D. On each client computer, run Invoke-GPupdate.
  B. Open the Internet Explorer 10 and 11 Internet Settings, and then press F5.

  ---

  The Section Home on the tab General is marked with a red dashed line.

  This indicates that the setting has the status of "not configured".

  If you press while the dialog box is open, the F5 key is changing the red dotted line in a solid green line, which "activates" corresponds to the policy status.

  Configure the following key combinations the status of the settings of the current tab:

  F5-All settings activated (green)

  F6-A setting is enabled (green)

  F7-A setting is not configured (red)

  F8 -All settings are not activated (red)

  References: https://4sysops.com/archives/internet-explorer-10-administration-part-3-group-policy-preferences/

• Question 537:

  HOTSPOT

  Your network contains one Active Directory forest named contoso.com.

  The forest contains the domain controllers configured as shown in the following table.

  

  You perform the following actions:

  

  Create a file named File1.txt in the SYSVOL folder on DC1.

  

  Create a user named User1 on DC4.

  You need to identify on which domain controller or controllers a copy of each object is stored.

  What should you identify? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  

  SYSVOL is simply a folder which resides on each and every domain controller within the domain. It contains the domains public files that need to be accessed by clients and kept synchronised between domain controllers.

  Here File1.text will be stored on both domain controllers in contoso.com (DC1, DC2 and DC3).

  

  User1 is stored on DC4 and on the global catalog servers DC1 and DC2, but not on DC5 and DC6 as they are on another site.

  References: https://technet.microsoft.com/en-us/library/cc755994(v=ws.10).aspx

• Question 538:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1.

  You run ntdsutil as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that you can access the contents of the mounted snapshot. What should you do?

  A. From a command prompt, run dsamain.exe -dbpath c:\$snap_201204131056_volumec$\windows\ntds\ntds.dit -Idapport 33389.
  B. From the snapshot context of ntdsutil, run mount {79f94f82-5926-4f44-8af0-2f56d827a57d>.
  C. From the snapshot context of ntdsutil, run activate instance "NTDS".
  D. From a command prompt, run dsamain.exe -dbpath c:\$snap_201204131056_volumec$\windows\ntds\ntds.dit -Idapport 389.
  A. From a command prompt, run dsamain.exe -dbpath c:\$snap_201204131056_volumec$\windows\ntds\ntds.dit -Idapport 33389.

  ---

  This is a live DC, so 389 is already in use; 33389 would not be so is a valid port.

  

  References: http://technet.microsoft.com/en-us/library/cc753609(v=ws.10).aspx

• Question 539:

  You have a RODC named Server1 running Server 2012. You need to add a RODC Administrator.

  How do you complete the task?

  A. dsmgmt.exe
  B. ntdsutil
  C. Add user to Local Administrator Group on Server1
  D. Use Security Group and modify RODC Delegated Administrator
  D. Use Security Group and modify RODC Delegated Administrator

  ---

  A read-only domain controller (RODC) offers the possibility of dividing the Administrator role. This means that each domain user or security group can be used as a local administrator of an RODC without the user or group must be granted rights to the domain or other domain controllers. A delegated administrator can log on to an RODC to maintenance work on the Server execute to update z. B. to a driver. The delegated administrator is not, however, be able to log on to another domain controller, or perform other administrative tasks in the domain. In this way, the effective management of RODCs a branch office to a security group from branch office users, instead of individual members of the Domain Admins group are delegated, without jeopardizing the safety of the rest of the domain. Before you install a read-only domain controller can in the wizard for making a account for a read-only domain controller, a user or a group Wreden defined as delegated RODC Administrator. To grant a user or a group after you install a read-only domain controller local administrator rights for a read-only domain controller (RODC), the settings on the tab can Maintained by be configured in the properties of the computer account of RODC1 can open the Utilities dsmgmt and Ntdsutil for adding a delegated RODC administrator be used. Microsoft recommends expressly that utilities dsmgmt and Ntdsutil not to be used for this purpose and instead specify a group which the Administrator Role Separation can be controlled. The background is that the user, the password have been set with the help of dsmgmt or Ntdsutil as delegated RODC administrator cannot be easily determined in retrospect.

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc755310(v=ws.10)

• Question 540:

  Your network contains an Active Directory domain named contoso.com. The domain contains four servers named Server1, Server2, Server3, and Server4 that run Windows Server 2012 R2.

  All servers have the Hyper-V server role and the Failover Clustering feature installed.

  The servers are configured as shown in the following table.

  

  You need to replicate virtual machines from Cluster1 to Cluster2.

  Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

  A. From Hyper-V Manager on a node in Cluster2, create three virtual machines.
  B. From Cluster2, add and configure the Hyper-V Replica Broker role.
  C. From Failover Cluster Manager on Cluster1, configure each virtual machine for replication.
  D. From Cluster1, add and configure the Hyper-V Replica Broker role.
  E. From Hyper-V Manager on a node in Cluster2/ modify the Hyper-V settings.
  B. From Cluster2, add and configure the Hyper-V Replica Broker role.
  C. From Failover Cluster Manager on Cluster1, configure each virtual machine for replication.
  D. From Cluster1, add and configure the Hyper-V Replica Broker role.

  ---

  These are two clusters, to replicate any VM to a cluster you need to configure the Replica Broker role on each cluster the last step should be enabling replication on the VMs.