Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 621:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed.

  You log on to Server1 by using a user account named User2.

  From the Remote Access Management Console, you run the Getting Started Wizard and you receive a warning message as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that you can configure DirectAccess successfully. The solution must minimize the number of permissions assigned to User2. To which group should you add User2?

  A. Account Operators
  B. Enterprise Admins
  C. Domain Admins
  D. Server Operators
  C. Domain Admins

• Question 622:

  Your network contains two Active Directory forests named contoso.com and corp.contoso.com

  

  User1 is a member of the DnsAdmins domain local group in contoso.com.

  User1 attempts to create a conditional forwarder to corp.contoso.com but receive an error message shown in the exhibit. (Click the Exhibit button.)

  

  You need to configure bi-directional name resolution between the two forests. What should you do first?

  A. Add User1 to the DnsUpdateProxy group.
  B. Configure the zone to be Active Directory-integrated
  C. Enable the Advanced view from DNS Manager
  D. Run the New Delegation Wizard
  D. Run the New Delegation Wizard

  ---

  References: https://serverfault.com/questions/571826/cannot-add-conditional-forwarder-in-active-directory https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc753500(v=ws.11)

• Question 623:

  HOTSPOT

  Your network contains a DNS server named Server1 that runs Windows Server 2012 R2. Server1 has a zone namedcontoso.com. The network contains a server named Server2 that runs Windows Server 2008 R2. Server1 and Server2 are members of an Active Directory domain named contoso.com.

  You change the IP address of Server2.

  Several hours later, some users report that they cannot connect to Server2.

  On the affected users' client computers, you flush the DNS client resolver cache, and the users successfully connect to Server2.

  You need to reduce the amount of time that the client computers cache DNS records from contoso.com.

  Which value should you modify in the Start of Authority (SOA) record?To answer, select the appropriate setting in the answer area.

  Hot Area:

  

  

  ---

  The Default TTL, is just that a default for newly created records. Once the records are created their TTL is independent of the Default TTL on the SOA. Microsoft DNS implementation copies the Default TTL setting to all newly created records their by giving them all independent TTL settings.

  SOA Minimum Field: The SOA minimum field has been overloaded in the past to have three different meanings, the minimum TTL value of all RRs in a zone, the default TTL of RRs which did not contain a TTL value and the TTL of negative responses. Despite being the original defined meaning, the first of these, the minimum TTL value of all RRs in a zone, has never in practice been used and is hereby deprecated. The second, the default TTL of RRs which contain no explicit TTL in the master zone file, is relevant only at the primary server. After a zone transfer all RRs have explicit TTLs and it is impossible to determine whether the TTL for a record was explicitly set or derived from the default after a zone transfer. Where a server does not require RRs to include the TTL value explicitly, it should provide a mechanism, not being the value of the MINIMUM field of the SOA record, from which the missing TTL values are obtained. How this is done is implementation dependent.

  TTLs also occur in the Domain Name System (DNS), where they are set by an authoritative name server for a particular resource record. When a caching (recursive) nameserver queries the authoritative nameserver for a resource record, it will cache that record for the time (in seconds) specified by the TTL. If a stub resolver queries the caching nameserver for the same record before the TTL has expired, the caching server will simply reply with the already cached resource record rather than retrieve it from the authoritative nameserver again.

  Shorter TTLs can cause heavier loads on an authoritative nameserver, but can be useful when changing the address of critical services like Web servers or MX records, and therefore are often lowered by the DNS administrator prior to a service being moved, in order to minimize disruptions.

  

  http://support.microsoft.com/kb/297510/en-us

  http://support.microsoft.com/kb/297510/en-us

  https://en.wikipedia.org/wiki/Time_to_live

  http://www.faqs.org/rfcs/rfc2308.html#ixzz0qVpTEitk

• Question 624:

  You have DHCP server named Server1 that runs Windows Server 2012 R2. Server1 has two scope production and development. Currently, all DHCP clients register their host name in a dns zone named contoso.com. You need to ensure that only the clients that obtain an ip address from the development scope, register their host name in a dns zone named dev.contoso.com.

  What should you do?

  A. Modify the advanced settings of the dhcp server.
  B. Run the set-dhcpserver4scope cmdlet.
  C. Modify the dns settings of the development scope.
  D. Run the add-dhcpserver4policy cmdlet.
  D. Run the add-dhcpserver4policy cmdlet.

  ---

  References: https://blogs.technet.microsoft.com/teamdhcp/2014/01/26/windows-server-2012-r2-enhancing-dhcp-policies-and-dns-registrations-in-dhcp-server/

• Question 625:

  Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Server1 and Server2 are nodes in a failover cluster named Cluster1. The network contains two servers named Server3 and Server4 that run Windows Server 2012 R2. Server3 and Server4 are nodes in a failover cluster named Cluster2.

  You need to move all of the applications and the services from Cluster1 to Cluster2.

  What should you do first from Failover Cluster Manager?

  A. On a server in Cluster2, click Migrate Roles.
  B. On a server in Cluster2, click Move Core Cluster Resources, and then click Select Node...
  C. On a server in Cluster1, configure Cluster-Aware Updating.
  D. On a server in Cluster2, click Move Core Cluster Resources, and then click Best Possible Node.
  A. On a server in Cluster2, click Migrate Roles.

  ---

  

  

  References: http://blogs.msdn.com/b/clustering/archive/2012/06/25/10323434.aspx

• Question 626:

  HOTSPOT

  Your network uses the 192.168.2.0/23 address space. You are configuring video conferencing infrastructure. You need to configure the dhcp server to lease ip address for multicast address for video conferencing.

  What command should you run on the dhcp server? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  https://technet.microsoft.com/en-us/library/cc758554(v=ws.10).aspx

• Question 627:

  You have an enterprise certification authority (CA) named CA1. You configure a recovery agent for CA1. On CA1, you create a new certificate template named CertTemplate1, and then you configure CA1 to allow certificates to be requested based on CertTemplate1. You need to ensure that new certificates issued based on CertTemplate1 can be recovered.

  What should you do?

  A. From the Certification Authority console, modify the enrollment agents of CA1.
  B. From the Certification Authority console, modify the enrollment managers of CA1.
  C. From the Certification Templated console, modify the Issuance Requirements setting of CertTemplate1.
  D. From the Certification Templated console, modify the Request Handling setting of CertTemplate1.
  D. From the Certification Templated console, modify the Request Handling setting of CertTemplate1.

  ---

  To configure certificate templates for key archival:

  1.

  Start the Certificate Templates snap-in.

  2.

  Right-click a certificate template, and then click Properties.

  3.

  On the Request Handling tab, click Archive subject's encryption private key, and then click OK.

  References: https://technet.microsoft.com/en-us/library/ee449464(v=ws.10).aspx#BKMK_ConfigTemplatesForArchiva

• Question 628:

  Your network contains two Web servers named Server1 and Server2. Both servers run Windows Server 2012 R2.

  Server1 and Server2 are nodes in a Network Load Balancing (NLB) cluster. The NLB cluster contains an application named App1 that is accessed by using the URL http://app1.contoso.com.

  You plan to perform maintenance on Server1. You need to ensure that all new connections to App1 are directed to Server2.

  The solution must not disconnect the existing connections to Server1

  What should you run?

  A. The Set-NlbCluster cmdlet
  B. The nlb.exe suspend command
  C. The nlb.exe.stop command
  D. The Suspend-NlbClusterNode cmdlet
  D. The Suspend-NlbClusterNode cmdlet

  ---

  References: http://blogs.msdn.com/b/clustering/archive/2012/04/03/10290554.aspx

• Question 629:

  DRAG DROP

  Your network contains an Active Directory domain named adatum.com. The domain contains three servers. The servers are configured as shown in the following table.

  

  Server1 is configured as shown in the exhibit. (Click the Exhibit button.)

  

  Template1 contains custom cryptography settings that are required by the corporate security team.

  On Server2, an administrator successfully installs a certificate based on Template1.

  The administrator reports that Template1 is not listed in the Certificate Enrollment wizard on Server3, even after selecting the Show all templates check box.

  You need to ensure that you can install a server authentication certificate on Server3. The certificate must comply with the cryptography requirements.

  Which three actions should you perform in sequence?

  To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 630:

  You perform a Server Core Installation of Windows Server 2012 R2 on a server named Server1. You need to add a graphical user interface (GUI) to Server1.

  Which tool should you use?

  A. the Add-WindowsPackage cmdlet
  B. the Install-WindowsFeature cmdlet
  C. the Install-Module cmdlet
  D. the Install-RoleService cmdlet
  E. the setup.exe command
  F. the imagex.exe command
  B. the Install-WindowsFeature cmdlet

  ---

  From the MSPress book "Upgrading your skills to MCSA Windows Server 2012 R2" Converting a server with aGUI to or from Server Core You can switch between a Server Core installation and full installation in Windows Server 2012 R2

  because the difference between these installation options is contained in two specific Windows features that can be added or removed. The first feature, Graphical Management Tools and Infrastructure (Server- Gui-Mgmt-Infra), provides a

  minimal server interface and server management tools such as Server Manager and the Microsoft Management Console (MMC). The second feature, Server Graphical Shell (Server-Gui-Shell), is dependent on the first feature and provides

  the rest of the GUI experience, including Windows Explorer. In Figure 1-9, you can see these two features in the Add Roles And Features Wizard, on the Select Features page, beneath User Interfaces And Infrastructure. To convert a full

  installation to a Server Core installation, just remove these two features in Server Manager. Note that removing the first feature will automatically remove the second, dependent feature.

  [...]

  You can also remove these graphical interface features in Windows PowerShell. If you have deployed a full installation of Windows Server 2012 R2 and want to convert it to a Server Core installation, run the following Windows PowerShell

  command:

  Uninstall-WindowsFeature Server-GUI-MgmtiInfra -restart Remember that you only need to specify Server-Gui-Mgmt-Infra for removal to remove both this feature and Server-Gui-Shell. Once the graphical management tools and graphical

  shell have been removed, the server restarts. When you log back on, you are presented with the Server Core user interface.

  The process can be reversed by replacing both features. You can do this from a remote server by using the Add Roles And Features Wizard in Server Manager. You can also do itlocally by running the following Windows PowerShell

  command:

  Install-WindowsFeature Server-Gui-Shell estart

  Note that when you install these two features from Windows PowerShell, you must specify them both.

  

  To configure Minimal Server Interface, youcan either start with a Server Core installation and add Graphical Management Tools and Infrastructure or start with a Server with a GUI and remove Server Graphical Shell.

  The Graphical Management Tools and Infrastructure feature includes Server Manager and some other basic administrative tools, but it does not include (i.e among to hers) Windows Explorer.

  NB:

  https://docs.microsoft.com/en-us/powershell/module/servermanager/install-windowsfeature?view=winserver2012r2-ps

  Install-WindowsFeature Installs one or more Windows Server roles, role services, or features on either the local or a specified remote server that is running Windows Server 2012 R2.

  This cmdlet is equivalent to and replaces Add-WindowsFeature, the cmdlet that was used to install roles, role services, and features in Windows Server 2008 R2.http://blogs.technet.com/b/yungchou/archive/2012/07/18/windows-server-2012installationoptions.aspx

  

  Minimal Server Interface This is new. In Windows Server 2012 R2, with a Server with GUI installation one can remove the Server Graphical Shell (which provides full GUI for server) to set a full server installation with the so-called Minimal Server Interface option with the following PowerShell comlet. Unstall-WindowsFeature Server-Gui-Shell estart. This basically provides a Server with GUI, but withoutinstalling Internet Explorer 10, Windows Explorer, the desktop, and the Start screen. Additionally, Microsoft Management Console (MMC), Server Manager, and a subset of Control Panel are still in place. Minimal Server Interface requires 4 GB more disk space than Server Core alone