Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 51:

  You work as a Network Administrator at ABC.com. The network contains a single Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1)

  and Windows Server 2012. All servers in the network have Windows Remote Management (WinRM) enabled. You use a Windows 7 Enterprise client computer named ABC-Admin1. You are currently logged in to ABC-Admin1. From your

  client computer, you want to obtain the IP address of a Windows Server 2012 member server named ABC-File1.

  Which command or commands should you use?

  A. Telnet ABC-File1 ipconfig.
  B. NSLookup > Server ABC-File1 > ipconfig
  C. WinRM -r:ABC-File1 ipconfig
  D. WinRS -r:ABC-File1 ipconfig
  D. WinRS -r:ABC-File1 ipconfig

• Question 52:

  Your network contains an Active Directory domain named adatum.com. The domain contains three domain controllers. The domain controllers are configured as shown in the following table.

  

  DC3 loses network connectivity due to a hardware failure.

  You plan to remove DC3 from the domain.

  You log on to DC3.

  You need to identify which service location (SRV) records are registered by DC3.

  What should you do?

  A. Open the %windir%\system32\dns\backup\adatum.com.dns file.
  B. Open the %windir%\system32\config\netlogon.dns file.
  C. Run ipconfig /displaydns.
  D. Run dcdiag /test:dns.
  B. Open the %windir%\system32\config\netlogon.dns file.

  ---

  The netlogon.dns file contains all registrations. http://support.microsoft.com/kb/816587/en-us How to verify that SRV DNS records have been created for a domain controller The SRV record is a Domain Name System (DNS) resource record that is used to identify computers that host specific services. SRV resource records are used to locate domain controllers for Active Directory. To verify SRV locator resource records for a domain controller, use one of the following methods. DNS Manager After you install Active Directory on a server running the Microsoft DNS service, you can use the DNS Management Console to verify that the appropriate zones and resource records are created for each DNS zone. Active Directory creates its SRV records in the following folders, where Domain_Name is the name of your domain: Forward Lookup Zones/Domain_Name/_msdcs/dc/_sites/Default-First-Site-Name/_tcp Forward Lookup Zones/Domain_Name/_msdcs/dc/_tcp In these locations, an SRV record should appear for the following services: _kerberos _ldap Netlogon.dns If you are using non-Microsoft DNS servers to support Active Directory, you can verify SRV locator resource records by viewing Netlogon.dns. Netlogon.dns is located in the %systemroot%\System32\Config folder. You can use a text editor, such as Microsoft Notepad, to view this file. The first record in the file is the domain controller's Lightweight Directory Access Protocol (LDAP) SRV record. This record should appear similar to the following: _ldap._tcp.Domain_Name Nslookup Nslookup is a command-line tool that displays information you can use to diagnose Domain Name System (DNS) infrastructure. To use Nslookup to verify the SRV records, follow these steps: On your DNS, click Start, and then click Run.

  In the Open box, type cmd.

  Type nslookup, and then press ENTER.

  Type set type=all, and then press ENTER.

  Type _ldap._tcp.dc._msdcs.Domain_Name, where Domain_Name is the name of your domain, and then press ENTER. Nslookup returns one or more SRV service location records

• Question 53:

  Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 and Server2 are part of a workgroup.

  On Server1 and Server2, you create a local user account named Admin1. You add the account to the local Administrators group. On both servers, Admin1 has the same password.

  You log on to Server1 as Admin1. You open Computer Management and you connect to Server2.

  When you attempt to create a scheduled task, view the event logs, and manage the shared folders, you receive Access Denied messages. You need to ensure that you can administer Server2 remotely from Server1 by using Computer

  Management. What should you configure on Server2?

  A. From Local Users and Groups, modify the membership of the Remote Management Users group.
  B. From Server Manager, modify the Remote Management setting.
  C. From Windows Firewall, modify the Windows Management Instrumentation (WMI) firewall rule.
  D. From Registry Editor, configure the LocalAccountTokenFilterPolicy resgistry value
  D. From Registry Editor, configure the LocalAccountTokenFilterPolicy resgistry value

• Question 54:

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. The domain contains a server named Server1.

  You install the Windows PowerShell Web Access gateway on Server1.

  You need to provide administrators with the ability to manage the servers in the domain by using the Windows PowerShell Web Access gateway.

  Which two cmdlets should you run on Server1? (Each correct answer presents part of the solution. Choose two.)

  A. Install PswaWebApplication
  B. Add PswaAuthorizationRule
  C. Set-WSManlnstance
  D. Set-WSManQuickConfig
  E. Set-BCAuthentication
  A. Install PswaWebApplication
  B. Add PswaAuthorizationRule

  ---

  Configure PowerShell Web Access Gateway using the following PowerShell Cmdlet.

  Install-PswaWebApplication 璘seTestCertificate

  Running the cmdlet installs the Windows PowerShell Web Access web application within the IIS Default Web Site container. The cmdlet creates the infrastructure required to run Windows PowerShell Web Access on the default website,

  https:///pswa.

  Add-PswaAuthorizationRule

  Adds a new authorization rule to the Windows PowerShell Web Access authorization rule set.

  Parameters:

  ComputerGroupName

  ComputerName

  ConfigurationName

  RuleName UserGroupName UserName Credential (Windows Server 2012 R2 and later)

  References: http://technet.microsoft.com/en-us/library/hh849867.aspx http://technet.microsoft.com/en-us/library/hh849875.aspx http://technet.microsoft.com/en-us/library/jj592890(v=wps.620).aspx http://technet.microsoft.com/en-us/library/hh848404(v=wps.620).aspx http://technet.microsoft.com/en-us/library/jj592894(v=wps.620).aspx

• Question 55:

  You have a cluster named Cluster1 that contains two nodes. Both nodes run Windows Server 2012 R2. Cluster1 hosts a virtual machine named VM1 that runs Windows Server 2012 R2.

  You notice that VM1 is marked as being in a critical state in the cluster. You verify that VM1 is functioning correctly. You need to ensure that VM1 is no longer marked as being in a critical state.

  Which cmdlet should you run?

  A. Remove-ClusterVmMonitoredItem
  B. Remove-ClusterResourceDependency
  C. Reset-ClusterVMMonitoredState
  D. Clear-ClusterNode
  C. Reset-ClusterVMMonitoredState

  ---

  C: Reset-ClusterVMMonitoredState -This cmdlet resets the Application Critical state of a virtual machine, so that the virtual machine is no longer marked as being in a critical state in the cluster Incorrect Answers:

  A: Remove-ClusterVmMonitoredItem actually removes the monitoring so nothing will happen B: Remove-ClusterResourceDependency -self-explanatory has to do with dependencies, not critical state

  D: Clear-ClusterNode -This cmdlet helps ensure that the failover cluster configuration has been completely removed from a node that was evicted.

  References: https://technet.microsoft.com/en-us/%5Clibrary/Hh847312(v=WPS.630).aspx

• Question 56:

  You can create a printing pool to automatically distribute print jobs to the next available printer. A printing pool is one logical printer connected to multiple printers through multiple ports of the print server.

  The printer that is idle receives the next document sent to the logical printer.

  All printers in a pool must use the same driver. Is the above statement true or false?

  A. True
  B. False
  A. True

  ---

  Printer Pool requires identical hardware and drivers.

• Question 57:

  You need to verify whether a DNS response from a DNS server is signed by DNSSEC. What should you run?

  A. Nslookup.exe
  B. Dnscmd.exe
  C. Get-NetIPAddress
  D. Resolve-DNSName
  D. Resolve-DNSName

  ---

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831411(v=ws.11)

• Question 58:

  Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named AHServers.OU.

  You create and link a Group Policy object (GPO) named GP01 to AllServer.OU. GPO1 is configured as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that GPO1 only applies to servers that have Remote Desktop Services (RDS) installed. What should you configure?

  A. Item-level targeting
  B. WMI Filtering
  C. Security Filtering
  D. Block Inheritance
  B. WMI Filtering

  ---

  Windows Management Instrumentation (WMI) filters allow you to dynamically determine the scope of Group Policy objects (GPOs) based on attributes of the target computer. When a GPO that is linked to a WMI filter is applied on the target computer, the filter is evaluated on the target computer. If the WMI filter evaluates to false, the GPO is not applied. If the WMI filter evaluates to true, the GPO is applied.

• Question 59:

  Complete the missing word from the sentence below that is describing one of the new roles in Server 2008:

  By using __________ , you can augment an organization's security strategy by protecting information through persistent usage policies, which remain with the information, no matter where it is moved.

  A. AD FS
  B. AD RMS
  C. RODC
  D. AD LDS
  B. AD RMS

  ---

  Active Directory Rights Management Services (AD RMS)

• Question 60:

  Your network has ipsec policy configured.

  You need to exempt icmp and router discovery traffic from ipsec policy rule in windows firewall.

  Which command will you use?

  A. disable-netadapterbinding
  B. update-netipsecrule
  C. remove-netfirewallrule
  D. set-netfirewallsetting
  D. set-netfirewallsetting

  ---

  References: https://docs.microsoft.com/en-us/powershell/module/netsecurity/set-netfirewallsetting?view=winserver2012r2-ps