Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 561:

  Your network contains an Active Directory domain named adatum.com. The domain contains a member server named Host1. Host1 runs Windows Server 2012 R2 and has the Hyper-V server role installed.

  Host1 hosts two virtual machines named VM5 and VM6. Both virtual machines connect to a virtual switch named Virtual1.

  On VM5, you install a network monitoring application named Monitor1.

  You need to capture all of the inbound and outbound traffic to VM6 by using Monitor1.

  Which two commands should you run from Windows PowerShell? (Each correct answer presents part of the solution. Choose two.)

  A. Get-VM "VM6" | Set-VMNetworkAdapter-IovWeight 1
  B. Get-VM "VM5" | Set-VMNetworkAdapter -IovWeight 0
  C. Get-VM "VM6" | Set-VMNetworkAdapter -PortMirroring Source
  D. Get-VM "VM6" | Set-VMNetworkAdapter -AllowTeaming On
  E. Get-VM "VM5" | Set-VMNetworkAdapter -PortMirroring Destination
  F. Get-VM "VM5" | Set-VMNetworkAdapter -AllowTeaming On
  C. Get-VM "VM6" | Set-VMNetworkAdapter -PortMirroring Source
  E. Get-VM "VM5" | Set-VMNetworkAdapter -PortMirroring Destination

  ---

  PortMirroring specifies the port mirroring mode for the network adapter. This can be set to None, Source, and Destination.

  If set to Source, a copy of every network packet it sends or receives is forwarded to a virtual network adapter configured to receive the packets.

  If set to Destination, it receives copied packets from the source virtual network adapter.

  In this scenario, VM5 is the destination which must receive a copy of the network packets from VM6, which is the source.

  References:

  http://technet.microsoft.com/en-us/library/hh848457.aspx

• Question 562:

  Your network contains one Active Directory domain named contoso.com.

  You deploy a new virtual machine in Microsoft Azure, and then you run the Active Directory Domain Configuration Wizard as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that all of the users in contoso.com are replicated to the new domain controller in Azure. What should you do?

  A. Set up directory integration.
  B. Select the Domain Name System (DNS) server check box.
  C. Modify the Deployment Configuration option.
  D. Configure Azure Active Directory Connect.
  D. Configure Azure Active Directory Connect.

  ---

  Azure AD Connect is the tool to integrate your on-premises identity system such as Windows Server Active Directory with Azure Active Directory and connect your users to Office 365, Azure and 1000's of SaaS applications. References: https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect/#how-azure-ad-connect-works

• Question 563:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.

  The network includes a Windows Server 2012 server named ABC-AppSrv1. ABC-AppSrv1 runs a custom line-of-business (LOB) application used by all company users. You create a Data Collector Set (DCS) to monitor performance counters

  for ABC-AppSrv1.

  You need to ensure that when the size of the folder containing the performance log data reaches 500MB, previous data is deleted.

  How can you meet this requirement?

  A. By configuring a quota on the folder in File Server Resource Manager (FSRM).
  B. By configuring a file screen on the folder in File Server Resource Manager (FSRM).
  C. By configuring the Maximum root path size setting in the Data Manager settings of the Data Collector Set.
  D. By configuring the Maximum folders size setting in the Data Manager settings of the Data Collector Set.
  C. By configuring the Maximum root path size setting in the Data Manager settings of the Data Collector Set.

• Question 564:

  Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2.

  You create an Active Directory snapshot of DC1 each day.

  You need to view the contents of an Active Directory snapshot from two days ago. What should you do first?

  A. Start the Volume Shadow Copy Service (VSS).
  B. Run the dsamain.exe command.
  C. Run the ntdsutil.exe command.
  D. Stop the Active Directory Domain Services (AD DS) service.
  C. Run the ntdsutil.exe command.

  ---

  Mounting an Active Directory snapshot

  Before connecting to the snapshot we need to mount it. By looking at the results of the List All command in step #8 above, identify the snapshot that you wish to mount, and note the number next to it.

  In order to mount an Active Directory snapshot follow these steps:

  Log on as a member of the Domain Admins group to one of your Windows Server 2008 Domain Controllers.

  Open a Command Prompt window by clicking on the CMD shortcut in the Start menu, or by typing CMD and pressing Enter in the Run or Quick Search parts of the Start menu. Note: You must run NTDSUTIL from an elevated command

  prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator.

  In the CMD window, type the following command:

  ntdsutil

  In the CMD window, type the following command:

  snapshot

  To view all available snapshots, in the CMD window, type the following command:

  list all The result should look like this:

  snapshot: List All

  1: 2008/10/25:03:14 {ec53ad62-8312-426f-8ad4-d47768351c9a}

  2: C: {15c6f880-cc5c-483b-86cf-8dc2d3449348}

  In this example we only have one snapshot available, one from 2008/10/25 at 03:14AM (yes, I write articles at this time...). We'll mount this one.

  In the CMD window, type the following command:

  mount 2

  The result should look like this:

  snapshot: mount 2

  Snapshot {15c6f880-cc5c-483b-86cf-8dc2d3449348} mounted as

  C:'$SNAP_200810250314_VOLUMEC$'

  Next, you can leave the NTDSUTIL running, or you can quit by typing quit 2 times.

  Note: Like the above command, the mounting process can also be run in one line. However, note that

  NTDSUTIL requires that the "list all" command be run in the same session that you mount the snapshot. So in order to mount the snapshot with a one-liner, you will need to run "list all" first.

  ntdsutil snapshot "list all" "mount 2" quit quit

  Note: You do not need to quit from the NTDSUTIL command, you can keep it open assuming that you'll probably want to unmount the snapshot right after working with it.

• Question 565:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. The Organizational Unit (OU) structure includes top-level OUs for each office location. Each toplevel OU contains OUs for each company department. Each departmental OU contains the user accounts of the users working in that department in the relevant location. Many Group Policy Objects (GPOs) are applied at the site level, domain level and OU level. A group named ABC-Managers contains the user accounts of company managers from each department.

  You configure a Group Policy Object (GPO) named ManagersGPO and link it to the domain. You need to apply the ManagersGPO to the ABC-Managers group.

  How can you ensure that the ManagersGPO applies only to the ABC-Managers group?

  A. By running the Gpupdate command.
  B. By running the Set-GPLink cmdlet.
  C. By running GPEdit.msc.
  D. By running the Set-GPPermission cmdlet.
  E. By running the Set-GPInheritance cmdlet.
  D. By running the Set-GPPermission cmdlet.

• Question 566:

  You have a Hyper-V host named Server1 that runs Windows Server 2012 R2. Server1 host 50 virtual machines that run Windows Server 2012 R2.

  You enable and configure enhanced session mode on Server1. You need to identify a new functionality available for the virtual machines hosted on Server1.

  What should you identify?

  A. Smart card authentication using virtual machine connections
  B. Redirection of RemoteFX USB drivers by using remote desktop connections
  C. Redirection of RemoteFX USB drivers using virtual machine connections
  D. Smart card authentication using the remote desktop client
  A. Smart card authentication using virtual machine connections

  ---

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn282274(v=ws.11)

• Question 567:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2.

  You create a group Managed Service Account named gservice1.

  You need to configure a service named Service1 to run as the gservice1 account.

  How should you configure Service1?

  A. From a command prompt, run sc.exe and specify the config parameter.
  B. From a command prompt, run sc.exe and specify the sdset parameter.
  C. From the Services console, configure the General settings.
  D. From Windows PowerShell, run Set-Service and specify the -PassThrough parameter.
  A. From a command prompt, run sc.exe and specify the config parameter.

  ---

  Executing the sc.exe command with the config parameter will modify service configuration. To specify a binary path for the NEWSERVICE service, type: sc config NewService binpath= "ntsd -d c:\windows\system32\NewServ.exe"

  References: https://technet.microsoft.com/en-us/library/cc990290.aspx http://technet.microsoft.com/en-us/library/cc738230(v=ws.10).aspx

• Question 568:

  HOTSPOT

  You have a server named LON-SRV1 that runs Windows Server 2012 R2. LON-SVR1 has the Remote server role installed. LON-SVR1 is located in the perimeter network.

  The IPv4 routing table on LON-SVR1 is configured as shown in the following exhibit. (Click the Exhibit Button)

  

  Your company purchases an additional router named router named Router1. Router1 has an interface that connects to perimeter network and an interface that connects to the Internet. The IP address of interface that connects to the

  perimeter network is 172.16.0.2.

  You need to ensure that LON-SRV1 will route traffic to the internet by using Router1 if the current detail gateway is unavailable.

  How should you configure the static route on LON-SRV1?

  To answer, select the appropriate static route in the answer area.

  Hot Area:

  

  

  ---

  Perimeter network: 172.16.0.0 Perimeter gateway: 172.16.0.2

• Question 569:

  Your network contains an Active Directory forest named contoso.com.

  Users frequently access the website of an external partner company.

  The URL of the website is http://partners.adatum.com.

  The partner company informs you that it will perform maintenance on its Web server and that the IP addresses of the Web server will change.

  After the change is complete, the users on your internal network report that they fail to access the website.

  However, some users who work from home report that they can access the website.

  You need to ensure that your DNS servers can resolve partners.adatum.com to the correct IP address immediately.

  What should you do?

  A. Run dnscmd and specify the CacheLockingPercent parameter
  B. Run Set-DnsServerGlobalQueryBlockList
  C. Run ipconfig and specify the Renew parameter
  D. Run Set-DnsServerCache
  D. Run Set-DnsServerCache

  ---

  Run Set-DnsServerCache with the -LockingPercent switch. dnscmd technically works also.

  References: https://docs.microsoft.com/en-us/powershell/module/dnsserver/set-dnsservercache?view=win10-ps

• Question 570:

  DRAG DROP

  Your network contains an Active Directory forest named contoso.com.

  Recently, all of the domain controllers that ran Windows Server 2003 were replaced by domain controllers that run Windows Server 2012 R2.

  From Event Viewer, you discover SYSVOL journal wrap errors on a domain controller named dc10.contoso.com.

  You need to perform a non-authoritative synchronization of SYSVOL on DC10.

  Which three actions should you perform on DC10?

  To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place: