Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 691:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com.

  You need to ensure that third-party devices can use Workplace Join to access domain resources on the Internet.

  Which four actions should you perform in sequence?

  To answer, move the appropriate four actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  Checklist: Deploying a Federation Server Farm include:

  (Box 1) Enroll a Secure Socket Layer (SSL) certificate for AD FS.

  (Box 2) Install the AD FS role service.

  (Box 3, box 4) Optional step: Configure a federation server with Device Registration Service (DRS).

  Box 3: To enable Device Registration Service.

  On your federation server, open a Windows PowerShell command window and type:

  Enable-AdfsDeviceRegistration

  Repeat this step on each federation farm node in your AD FS farm.

  Box 4: Update the Web Application Proxy configuration

  The Device Registration Service will be available through the Web Application Proxy once it is enabled on a federation server. You may need to complete this procedure to update the Web Application Proxy configuration if it was deployed

  prior to enabling the Device Registration Service.

  * Workplace Join is made possible by the Device Registration Service (DRS) that is included with the Active Directory Federation Role in Windows Server 2012 R2. When a device is Workplace Joined, the DRS provisions a device object in Active Directory and sets a certificate on the consumer device that is used to represent the device identity. The DRS is meant to be both internal and external facing. Companies that deploy both DRS and the Web Application Proxy will be able to Workplace Join devices from any internet connected location.

  References: https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/deploying-a-federation-server-farm

• Question 692:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2.

  Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1.

  You configure File Services and DHCP as clustered resources for Cluster1. Server1 is the active node for both clustered resources.

  You need to ensure that if two consecutive heartbeat messages are missed between Server1 and Server2, Server2 will begin responding to DHCP requests. The solution must ensure that Server1 remains the active node for the File Services

  clustered resource for up to five missed heartbeat messages.

  What should you configure?

  A. Affinity - None
  B. Affinity - Single
  C. The cluster quorum settings
  D. The failover settings
  E. A file server for general use
  F. The Handling priority
  G. The host priority
  H. Live migration
  I. The possible owner
  J. The preferred owner
  D. The failover settings

  ---

  http://social.technet.microsoft.com/Forums/en/operationsmanagergeneral/thread/6b6acdf3e921-4c9f-b496-cd81f556d246

• Question 693:

  Your network contains an Active Directory forest. The forest contains a single domain named contoso.com. The domain contains four domain controllers. The domain controllers are configured as shown in the following table.

  

  All domain controllers are DNS servers.

  You plan to deploy a new domain controller named DC5 in the contoso.com domain.

  You need to identify which domain controller must be online to ensure that DC5 can be promoted successfully to a domain controller.

  Which domain controller should you identify?

  A. DC1
  B. DC2
  C. DC3
  D. DC4
  D. DC4

  ---

  Relative ID (RID) Master:

  Allocates active and standby RID pools to replica domain controllers in the same domain (corp.contoso.com) Must be online for newly promoted domain controllers to obtain a local RID pool that is required to advertise or when existing

  domain controllers have to update their current or standby RID pool allocation.

  The RID master is responsible for processing RID pool requests from all domain controllers in a particular domain. When a DC creates a security principal object such as a user or group, it attaches a unique Security ID (SID) to the object.

  This SID consists of a domain SID (the same for all SIDs created in a domain), and a relative ID (RID) that is unique for each security principal SID created in a domain. Each DC in a domain is allocated a pool of RIDs that it is allowed to

  assign to the security principals it creates. When a DC's allocated RID pool falls below a threshold, that DC issues a request for additional RIDs to the domain's RID master. The domain RID master responds to the request by retrieving RIDs

  from the domain's unallocated RID pool and assigns them to the pool of the requesting DC.

  At any one time, there can be only one domain controller acting as the RID master in the domain.

  

  The Infrastructure Master -The purpose of this role is to ensure that cross-domain object references are correctly handled. For example, if you add a user from one domain to a security group from a different domain, the Infrastructure Master makes sure this is done properly. As you can guess however, if your Active Directory deployment has only a single domain, then the Infrastructure Master role does no work at all, and even in a multi-domain environment it is rarely used except when complex user administration tasks are performed, so the machine holding this role doesn't need to have much horsepower at all.

  References: http://support.microsoft.com/kb/223346 http://en.wikipedia.org/wiki/Flexible_single_master_operation

• Question 694:

  

  HOTSPOT

  You have a server that runs Windows Server 2012 R2 and has the iSCSI Target Server role service installed.

  You run the New-IscsiVirtualDisk cmdlet as shown in the New-IscsiVirtualDisk exhibit. (Click the Exhibit button.)

  

  To answer, complete each statement according to the information presented in the exhibits. Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  According to the exhibit, a virtual disk of 10 GB has been created on the C drive.

  After the iSCSI VHDX object has been created, the virtual disk can be assigned to an iSCSI target. Once a virtual disk has been assigned to a target, and an initiator connects to that target, the iSCSI initiator can then access the virtual disk after the initiator connects to the target.

  References: https://docs.microsoft.com/en-us/powershell/module/iscsitarget/new-iscsivirtualdisk?view=win10-ps

• Question 695:

  Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. All of the DNS servers in both of the domains run Windows Server 2012 R2.

  The network contains two servers named Server1 and Server2. Server1 hosts an Active Directory-integrated zone for contoso.com. Server2 hosts an Active Directory-integrated zone for fabrikam.com.

  Server1 and Server2 connect to each other by using a WAN link. Client computers that connect to Server1 for name resolution cannot resolve names in fabrikam.com.

  You need to configure Server1 to support the resolution of names in fabrikam.com. The solution must ensure that users in contoso.com can resolve names in fabrikam.com if the WAN link fails.

  What should you do on Server1?

  A. Create a stub zone.
  B. Create a secondary zone.
  C. Add a forwarder.
  D. Create a conditional forwarder.
  B. Create a secondary zone.

  ---

  Stub zone doesn't host the records themselves

  Forwarder and conditional forwarders simply give instructions on where to forward DNS requests to.

  References:

  http://technet.microsoft.com/en-us/library/cc771898(v=ws.10).aspx

• Question 696:

  Your network contains three servers named HV1, HV2, and Server1 that run Windows Server 2012 R2. HV1 and HV2 have the Hyper-V server role installed. Server1 is a file server that contains 3 TB of free disk space.

  HV1 hosts a virtual machine named VM1. The virtual machine configuration file for VM1 is stored in D:\VM and the virtual hard disk file is stored in E:\VHD.

  You plan to replace drive E with a larger volume.

  You need to ensure that VM1 remains available from HV1 while drive E is being replaced. You want to achieve this goal by using the minimum amount of administrative effort.

  What should you do?

  A. Perform a live migration to HV2.
  B. Add HV1 and HV2 as nodes in a failover cluster. Perform a storage migration to HV2.
  C. Add HV1 and HV2 as nodes in a failover cluster. Perform a live migration to HV2.
  D. Perform a storage migration to Server1.
  D. Perform a storage migration to Server1.

• Question 697:

  Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2012 R2. You need to create a custom Active Directory Application partition.

  Which tool should you use?

  A. Netdom
  B. Ntdsutil
  C. Dsmod
  D. Dsamain
  B. Ntdsutil

  ---

  To create or delete an application directory partition Open command Prompt.

  Type: ntdsutil

  At the ntdsutil command prompt, type:domain management

  At the domain management command prompt, type:connection

  At the server connections command prompt, type:connect to server ServerName

  At the server connections command prompt, type:quit

  At the domain management command prompt, do one of the following:

  partition management

  Manages directory partitions for Active Directory Domain Services(AD DS) or Active Directory Lightweight Directory Services (AD LDS). This is a sub command of Ntdsutil and Dsmgmt. Ntdsutil and Dsmgmt are command-line tools that are

  built into Windows Server 2008 and Windows Server 2008 R2.

  / partition management createnc %s1 %s2

  Creates the application directory partition with distinguished name %s1, on the Active Directory domain controller or AD LDS instance with full DNS name %s2. If you specify "NULL" for %s2, this command uses the currently connected Active

  Directory domain controller. Use this command only with AD DS. For AD LDS, use create nc %s1 %s2 %s3.

  Note:

  An application directory partition is a directory partition that is replicated only to specific domain controllers. A domain controller that participates in the replication of a particular application directory partition hosts a replica of that partition.

• Question 698:

  Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 has Microsoft SQL Server 2012 installed. You install the Active Directory Federation Services server role on Server2. You need to configure Server2 as the first Active Directory Federation Services (AD FS) server in the domain. The solution must ensure that the AD FS database is stored in a SQL Server database on Server1. What should you do on Server2?

  A. From Windows PowerShell, run Install-ADFSFarm.
  B. From Windows PowerShell, run Install-ADFSStandAlone.
  C. From the AD FS console, run the AD FS Federation Server Configuration Wizard and select the Stand-alone federation server option.
  D. From Server Manager, install the AD FS Web Agents.
  A. From Windows PowerShell, run Install-ADFSFarm.

  ---

  Install-ADFSFarm with the parameter -SQLConnectionString

  This is the only valid option.

  Not: Powershell Install-ADFSStandAlone

  We're not going for StandAlone which is no more for 2012 R2 btw.

  Not: Stand Alone federation.

  Not: ADFS Web Agents

  The Active Directory Federation Services (ADFS) Web Agent is a component of ADFS. It is used to consume security tokens and either allow or deny a user access to a Web application. To accomplish this, the Web server requires a

  relationship with a resource Federation Service so that it can direct the user to the Federation Service as needed.

  References: http://technet.microsoft.com/en-us/library/ee913579.aspx

• Question 699:

  Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1) and Windows Server 2012. The network consists of a corporate LAN (local area network) and a perimeter network. A firewall separates the LAN from the perimeter network.

  All domain controllers are located in the corporate LAN and run Windows Server 2012. You plan to deploy three new Windows Server 2012 servers to the perimeter network. You need to join the three new servers to the domain using the offline domain join function.

  Which of the following you perform first?

  A. You should run the DSAdd command with the /computer option.
  B. You should run the DSAdd command with the /OU option.
  C. You should run the DSJoin command with the /provision option.
  D. You should run the DSJoin command with the /requestodj option.
  C. You should run the DSJoin command with the /provision option.

  ---

  https://technet.microsoft.com/en-us/library/offline-domain-join-djoin-step-by-step(v=ws.10).aspx

• Question 700:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. You have a domain controller named DC5 that has the Server

  Graphical Shell disabled.

  You create an organizational unit (OU) named OU1. From DC5, you need to create 50 new users accounts in OU1. What tool should you use?

  A. the ntdsutil command.
  B. the Set-ADDomain cmdlet.
  C. the Install-ADDSDornain cmdlet.
  D. the dsadd command.
  E. the dsamain command.
  F. the dsmgmt command.
  G. the net user command.
  H. the Set-ADForest cmdlet.
  D. the dsadd command.

  ---

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc731279(v=ws.11)