Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 581:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server2 that runs Windows Server 2012 R2.

  You are a member of the local Administrators group on Server2. You install an Active Directory Rights

  Management Services (AD RMS) root cluster on Server2.

  You need to ensure that the AD RMS cluster is discoverable automatically by the AD RMS client computers and the users in contoso.com.

  Which additional configuration settings should you configure? To answer, select the appropriate tab in the answer area.

  Hot Area:

  

  

  ---

  http://technet.microsoft.com/en-us/library/cc753538(v=ws.10).aspx http://technet.microsoft.com/en-us/library/cc755112.aspx

• Question 582:

  Your network contains two servers named Server1 and Server2. Both servers run Windows Server 2012 R2 and have the DNS Server server role installed. On Server1, you create a standard primary zone named contoso.com. You need to ensure that Server2 can host a secondary zone for contoso.com.

  What should you do from Server1?

  A. Create a zone delegation that points to Server2.
  B. Create a trust anchor named Server2.
  C. Convert contoso.com to an Active Directory-integrated zone.
  D. Add Server2 as a name server.
  D. Add Server2 as a name server.

  ---

  

• Question 583:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed. On Server1, you create and start a virtual machine named VM1. VM1 is configured as shown in the following table.

  

  You plan to create a checkpoint of VM1.

  You need to recommend a solution to minimize the amount of disk space used for the checkpoint of VM1.

  What should you do before you create the checkpoint?

  A. Decrease the Maximum RAM.
  B. Convert Disk1.vhd to a dynamically expanding disk.
  C. Run the Stop-VM cmdlet.
  D. Run the Resize-VHD cmdlet.
  E. Configure VM1 to have a smaller virtual disk.
  C. Run the Stop-VM cmdlet.

  ---

  For checkpoints created when the virtual machine is stopped

  The checkpoint contains the state of the hard disks only.

  For checkpoints created when the virtual machine is running

  The checkpoint contains the state of the hard disks and the data in memory.

  Note: A checkpoint saves the state of each virtual hard disk that is attached to a virtual machine and all of the hard disk's contents, including application data files. For virtual machines on Hyper-V and VMware ESX Server hosts, a checkpoint

  also saves the hardware configuration information. By creating checkpoints for a virtual machine, you can restore the virtual machine to a previous state.

• Question 584:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You install the File and Storage Services server role on Server1.

  From Windows Explorer, you view the properties of a folder named Folder1 and you discover that the Classification tab is missing.

  You need to ensure that you can assign classifications to Folder1 from Windows Explorer manually.

  What should you do?

  A. Install the File Server Resource Manager role service.
  B. From Folder Options, clear Hide protected operating system files (Recommended).
  C. Install the Share and Storage Management Tools.
  D. From Folder Options, select the Always show menus.
  A. Install the File Server Resource Manager role service.

  ---

  Classification Management is a feature of FSRM

  References: http://technet.microsoft.com/en-us/library/dd759252.aspx http://technet.microsoft.com/en-us/library/dd758759(v=WS.10).aspx

• Question 585:

  Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 that has the Active Directory Federation Services server role installed. All servers run Windows Server 2012.

  You complete the Active Directory Federation Services Configuration Wizard on Server1.

  You need to ensure that client devices on the internal network can use Workplace Join.

  Which two actions should you perform on Server1? (Each correct answer presents part of the solution. Choose two.)

  A. Run Enable AdfsDeviceRegistration -PrepareActiveDirectory.
  B. Edit the multi-factor authentication global authentication policy settings.
  C. Edit the primary authentication global authentication policy settings.
  D. Run Set-AdfsProxyPropertiesHttpPort 80.
  E. Run Enable-AdfsDeviceRegistration.
  C. Edit the primary authentication global authentication policy settings.
  E. Run Enable-AdfsDeviceRegistration.

  ---

  * To enable Device Registration Service

  On your federation server, open a Windows PowerShell command window and type:

  Enable-AdfsDeviceRegistration

  Repeat this step on each federation farm node in your AD FS farm..

  Enable seamless second factor authentication

  Seamless second factor authentication is an enhancement in AD FS that provides an added level of access protection to corporate resources and applications from external devices that are trying to access them. When a personal device is

  Workplace Joined, it becomes a `known' device and administrators can use this information to drive conditional access and gate access to resources. To enable seamless second factor authentication, persistent single sign-on (SSO) and

  conditional access for Workplace Joined devices In the AD FS Management console, navigate to Authentication Policies. Select Edit Global Primary Authentication. Select the check box next to Enable Device Authentication, and then click

  OK.

• Question 586:

  Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  DirectAccess is deployed to the network.

  Remote users connect to the DirectAccess server by using a variety of network speeds.

  The remote users report that sometimes their connection is very slow.

  You need to minimize Group Policy processing across all wireless wide area network (WWAN) connections.

  Which Group Policy setting should you configure?

  A. Configure Direct Access connections as a fast network connection.
  B. Change Group Policy processing to run asynchronously when a slow network connection is detected.
  C. Configure Group Policy slow link detection.
  D. Configure wireless policy processing.
  C. Configure Group Policy slow link detection.

• Question 587:

  You have a DNS server named Server1 that runs Windows Server 2012 R2. Server1 has the zones shown in the following output:

  

  You need to delegate permissions to modify the records in the adatum.com zone to a group named Group1. What should you do first?

  A. Enable the distribution of the trust anchors for adatum.com.
  B. Unsign adatum.com.
  C. Store adatum.com in Active Directory.
  D. Update the server data file for adatum.com.
  B. Unsign adatum.com.

  ---

  When a zone is signed with DNSSEC, the DNS server will explicitly block attempts to change the zone replication scope or zone type. This is primarily to avoid complexities related to key storage when DNSSEC signing keys are stored in Active Directory. To change the zone replication scope, you must first using the zone.

  References: https://technet.microsoft.com/en-us/library/dn593637.aspx#poc

• Question 588:

  You have a file server named Server1 that runs a Server Core Installation of Windows Server 2012 R2.

  Server1 has a volume named D that contains user data. Server1 has a volume named E that is empty.

  Server1 is configured to create a shadow copy of volume D every hour.

  You need to configure the shadow copies of volume D to be stored on volume E.

  What should you run?

  A. The Set-Volume cmdlet with the -driveletter parameter
  B. The Set-Volume cmdlet with the -path parameter
  C. The vssadmin.exe add shadowstorage command
  D. The vssadmin.exe create shadow command
  C. The vssadmin.exe add shadowstorage command

  ---

  http://technet.microsoft.com/en-us/library/cc754968(v=ws.10).aspx http://technet.microsoft.com/en-us/library/hh848673(v=wps.620).aspx

• Question 589:

  You have a server named Server1 that runs Windows Server 2012 R2.

  You connect two new hard disks to Server1.

  You need to create a storage space that contains the two disks.

  The solution must meet the following requirements:

  Provide fault tolerance if a single disk fails.

  Maximize the amount of files that can be stored in the storage space.

  What should you create?

  A. a parity space
  B. a simple space
  C. a spanned volume
  D. a mirrored space
  D. a mirrored space

  ---

  There's no mention about a 3rd disk except the OS disk.

  This can only be a mirror space.

  And, "Simple space"... resilient, really ? No.

  "Simple spaces are designed for increased performance when resiliency isn't very important.

  They are best suited for temporary data, such as video rendering files, image editor scratch files, and intermediary compiler object files."

  References:

  http://social.technet.microsoft.com/wiki/contents/articles/15198.storage-spaces-overview.aspx

  http://technet.microsoft.com/en-us/library/cc772180.aspx

  Training Guide: Installing and Configuring Windows Server 2012: Chapter 8: File Services and Storage, p. 367-8

• Question 590:

  Your network contains an Active Directory domain named contoso.com. The domain contains three servers named Server1, Server2, and Server3.

  You create a server group named ServerGroup1.

  You discover the error message shown in the following exhibit. (Click the Exhibit button.)

  

  You need to ensure that Server2 can be managed remotely by using Server Manager.

  What should you do?

  A. On Server2, run the netdom.exe command.
  B. On Server2, run the net stop netlogon command, and then run the net start netlogon command.
  C. On DC1, run the Enable-PSSessionConfigurationcmdlet.
  D. On Server2, modify the membership of the Remote Management Users group.
  E. On DC1, run the New-ADComputercmdlet.
  F. On Server2, run the Add-Computer cmdlet.
  G. From Active Directory Users and Computers, add a computer account named Server2, and then restart Server2.
  D. On Server2, modify the membership of the Remote Management Users group.

  ---

  This is a security issue. To be able to access Server2 remotely through Server Manager the user need to be a member of the Remote Management Users group.

  References:

  Training Guide: Installing and Configuring Windows Server 2012, Chapter 3 Server Remote Management, Lesson 1: Server Manager, p. 90-92