Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 611:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012. All client computers run

  Windows 7 Professional.The network includes a server named ABC-NPS1. ABC-NPS1 is configured as a Network Policy Server (NPS) and a Health Registration Authority (HRA). A server named ABC-CA1 runs Certificate Services and is

  configured as an Enterprise Certification Authority (CA) for the ABC.com domain. The CA has been associated with the HRA on ABC-NPS1. The HRA has been configured with an SSL certificate and the appropriate DNS Service Locator

  (SRV) records have been configured.

  You want to configure HRA automatic discovery on the client computers. You configure a Group Policy Object (GPO) to clear all trusted group configurations from the client computers.

  What should you do next?

  A. You should configure the EnableDiscovery registry key on ABC-CA1.
  B. You should configure the EnableDiscovery registry key on ABC-NPS1.
  C. You should configure the EnableDiscovery registry key on the client computers.
  D. You should configure the EnableDiscovery registry key on a domain controller.
  C. You should configure the EnableDiscovery registry key on the client computers.

• Question 612:

  After setting up several Active Directory users for different OU's, you discover that the IT technician has miss spelt the Office property as Londn instead of London. Which tool should you use to correct the changes to all of the OU's at once?

  A. Use Dsget and Dsmod
  B. Use Dsquery and Dsmod
  C. Use MoveTo or MoveHere
  D. Multi select the users using the Ctrl key and opening Properties
  B. Use Dsquery and Dsmod

  ---

  You can use Dsquery to query AD users by property values. So in this case we could query on the miss spelt word London.

• Question 613:

  You have a Hyper-V host named Server1 that runs Windows Server 2012 R2. Server1 hosts 50 virtual machines that run Windows Server 2012 R2. Your company uses smart cards for authentication.

  You need to ensure that you can use smart card authentication when you connect to the virtual machine by using Virtual Machine Connection. What should you configure?

  A. The NUMA Spanning settings
  B. The remoteFX settings
  C. The Enhanced Session Mode Policy
  D. The Integration Services settings
  C. The Enhanced Session Mode Policy

• Question 614:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server3 that runs Windows Server 2012 R2 and has the DHCP Server server role installed. DHCP is configured as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that only Scope1, Scope3, and Scope5 assign the same DNS servers to DHCP clients. The solution must minimize administrative effort. What should you do?

  A. Create a superscope and a filter.
  B. Create a superscope and scope-level policies.
  C. Configure the Server Options.
  D. Configure the Scope Options.
  D. Configure the Scope Options.

  ---

  DHCP scope options configured for assignment to DHCP clients include:

  Domain Name System (DNS) server.

  Router IP address.

  Windows Internet Name Service (WINS) server address.

  References:

  http://technet.microsoft.com/en-us/library/dd759218.aspx

  http://technet.microsoft.com/en-us/library/cc757682(v=WS.10).aspx

• Question 615:

  You have a server that runs Windows Server 2012 R2. You have an offline image named Windows2012.vhd that contains an installation of Windows Server 2012 R2. You plan to apply several updates to Windows2012.vhd. You need to mount Wmdows2012.vhd to D:\Mount.

  Which tool should you use?

  A. Server Manager
  B. Device Manager
  C. Mountvol
  D. Dism
  D. Dism

  ---

  You can use the Deployment Image Servicing and Management (DISM) tool to mount a Windows image from a WIM or VHD file. Mounting an image maps the contents of the image to a directory so that you can service the image using DISM

  without booting into the image.

  You can also perform common file operations, such as copying, pasting, and editing on a mounted image. To apply packages and updates to a Windows Embedded Standard 7 image, we recommend creating a configuration set and then

  using Deployment Imaging Servicing and Management (DISM) to install that configuration set. Although DISM can be used to install individual updates to an image, this method carries some additional risks and is not recommended.

  References:

  http://technet.microsoft.com/en-us/library/cc749447(v=ws.10).aspx

  http://technet.microsoft.com/en-us/library/dd744382(v=ws.10).aspx

• Question 616:

  You have a server named Server1 that Runs Windows Server 2012 R2.

  You configure IPSec rules for connections to Server1.

  On Server1, you plan to create an inbound firewall rule that contains the following settings: Allows inbound connections to an application named App1.exe Applies to the domain profile Overrides any block rules

  You need to identify the minimum information required to create the rule.

  Which two pieces of information should you identify? Each correct answer presents part of the solution.

  A. The list of Active Directory users who are authorized to use the application.
  B. The list of computers that are authorized to use the application.
  C. The hash of the application.
  D. The local path of the application.
  E. The name at the IPSec policies that apply to Server1
  B. The list of computers that are authorized to use the application.
  D. The local path of the application.

  ---

  B: To overwrite deny rule, you need to specify the list of computers.

  D: For NAMED application you need local path to the app, in other case you will specify all programs, in answer must be a match. References: https://technet.microsoft.com/en-us/library/cc753558.aspx

• Question 617:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DHCP Server server role installed.

  You need to create an IPv6 scope on Server1. The scope must use an address space that is reserved for private networks. The addresses must be routable.

  Which IPV6 scope prefix should you use?

  A. 2001:123:4567:890A::
  B. FE80:123:4567::
  C. FF00:123:4567:890A::
  D. FD00:123:4567::
  D. FD00:123:4567::

• Question 618:

  Your network contains a single Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

  The domain contains 400 desktop computers that run Windows 8 and 200 desktop computers that run Windows XP Service Pack 3 (SP3). All new desktop computers that are added to the domain run Windows 8. All of the desktop computers

  are located in an organizational unit (OU) named OU1.

  You create a Group Policy object (GPO) named GPO1. GPO1 contains startup script settings. You link GPO1to OU1. You need to ensure that GPO1 is Applied only to computers that run Windows XP SP3.

  What should you do?

  A. Modify the Security settings of OU1.
  B. Run the Set-GPInheritancecmdlet and specify the -target parameter.
  C. Create and link a WMI filter to GPO1.
  D. Run the Set-GPLinkcmdlet and specify the -target parameter.
  C. Create and link a WMI filter to GPO1.

  ---

  WMI Filtering is used to get information of the system and apply the GPO on it with the condition is met.Security filtering: apply a GPO to a specific group (members of the group)

• Question 619:

  DRAG DROP

  You have a print server named Server1. Server1 runs Windows Server 2008 R2 Service pack 1 (SP1). You have a file server named Server2. Server 2 runs Window Server 2012 R2.

  You need to migrate all of the printers on Server1 to Server2.

  Which actions should you perform on the servers?

  To answer, drag the appropriate action to the correct servers in the answer area. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

  ---

  Server 1:

  Printbrm.exe-p all:orgpublishes all printers in the directory, or publishes printers that were published originally.

  Server 2:

  Print and Document Services is a server role in Windows Server 2008 R2 that enables you to share printers and scanners on a network, set up print servers and scan servers, and centralize network printer and scanner management tasks.

  From Print Management you can select to import the printers.

• Question 620:

  Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All servers runs Windows Server 2012 R2.The domain contains two domain controllers named DC1 and DC2. Both domain

  controllers are virtual machines on a Hyper-V host.

  You plan to create a cloned domain controller named DC3 from an image of DC1.

  You need to ensure that you can clone DC1.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Add the computer account of DC1 to the Cloneable Domain Controllers group.
  B. Create a DCCIoneConfig.xml file on DC1.
  C. Add the computer account of DC3 to the Cloneable Domain Controllers group.
  D. Run the Enable-AdOptionalFeaturecmdlet.
  E. Modify the contents of the DefaultDCCIoneAllowList.xml file on DC1.
  A. Add the computer account of DC1 to the Cloneable Domain Controllers group.
  B. Create a DCCIoneConfig.xml file on DC1.

  ---

  *

  Cloneable Domain Controllers Group (located in the Users container). Membership in this group dictates whether a DC can or cannot be cloned. This group has some permissions set on the domain head that should not be removed. Removing these permissions will cause cloning to fail. Also, as a best practice, DCs shouldn't be added to the group until you plan to clone and DCs should be removed from the group once cloning is complete. Cloned DCs will also end up in the Cloneable Domain Controllers group.

  *

  DCCloneConfig.xml is an XML configuration file that contains all of the settings the cloned DC will take when it boots. This includes network settings, DNS, WINS, AD site name, new DC name and more.