Microsoft 70-417 Online Practice Questions and Exam Preparation

Microsoft 70-417 Online Questions & Answers

• Question 701:

  Your company deploys a new Active Directory forest named contoso.com. The first domain controller in the forest runs Windows Server 2012 R2. The forest contains a domain controller named DC10.

  On DC10, the disk that contains the SYSVOL folder fails.

  You replace the failed disk. You stop the Distributed File System (DFS) Replication service. You restore the SYSVOL folder.

  You need to perform a non-authoritative synchronization of SYSVOL on DC10.

  Which tool should you use before you start the DFS Replication service on DC10?

  A. Dfsgui.msc
  B. Ultrasound
  C. Ldp
  D. Replmon
  B. Ultrasound

  ---

  Verify that replication is working as designed. Download the Ultrasound Monitoring and Troubleshooting Tool for File Replication Services from the Microsoft Download Center to verify the health of the current FRS environment. References: https://technet.microsoft.com/en-us/library/cc180820.aspx

• Question 702:

  You create an OU named tempusers. Uou add several test users to that OU.

  You want to delete the OU and receive an error.

  remove-adorganizationunit -identity "ou=tempusrs, dc=contoso,dc=com" -recursive.

  A. Remove all the users from ou
  B. Modify the rights to your user account
  C. Set the confirm parameters to $true
  D. Set the protectfromaccidential deletion to $false
  D. Set the protectfromaccidential deletion to $false

  ---

  References: https://blogs.technet.microsoft.com/mconeill/2015/04/12/protect-ous-from-accidental-deletion/

• Question 703:

  Your network contains an Active Directory forest. The forest contains two domains named contoso.com and corp.contoso.com. All domain controllers run Windows Server 2012 R2 and are configured as global catalog servers.

  The corp.contoso.com domain contains a domain controller named DC1.

  You need to disable the global catalog on DC1.

  What should you do?

  A. From Active Directory Users and Computers, modify the properties of the DC1 computer account.
  B. From Active Directory Administrative Center, modify the properties of the DC1 computer account.
  C. From Active Directory Domains and Trusts, modify the properties of the corp.contoso.com domain.
  D. From Active Directory Sites and Services, modify the NTDS Settings of the DC1 server object.
  D. From Active Directory Sites and Services, modify the NTDS Settings of the DC1 server object.

  ---

  When you navigate your way to the Active Directory Sites and Services\Sites\SiteName\Servers then in the details pane, right-click NTDS Settings of the selected server object, and then click Properties. There will you get access to the Global

  Catalog check box to add the global catalog, or clear the check box to remove the global catalog.

  References:

  http://technet.microsoft.com/en-us/library/cc755257.aspx

• Question 704:

  Your network contains an Active Directory domain named contoso.com.

  A previous administrator implemented a Proof of Concept installation of Active Directory Rights Management Services (AD RMS).

  After the proof of concept was complete, the Active Directory Rights Management Services server role was removed.

  You attempt to deploy AD RMS.

  During the configuration of AD RMS, you receive an error message indicating that an existing AD RMS Service

  Connection Point (SCP) was found.

  You need to remove the existing AD RMS SCP.

  Which tool should you use?

  A. Active Directory Users and Computers
  B. Active Directory Sites and Services
  C. Authorization Manager
  D. Active Directory Domains and Trusts
  B. Active Directory Sites and Services

• Question 705:

  Your network contains two Active Directory forests named contoso.com and dev.contoso.com. The contoso.com forest contains a domain controller named DO. The dev.contoso.com forest contains a domain controller named DC2. Each domain contains an organizational unit (OU) named OU1.

  Dev.contoso.com has a Group Policy object (GPO) named GP01. GP01 contains 200 settings, including several settings that have network paths. GP01 is linked to OU1.

  You need to copy GP01 from dev.contoso.com to contoso.com.

  What should you do first on DC2?

  A. From the Group Policy Management console, right-click GPO1 and select Copy.
  B. Run the mtedit.exe command and specify the /Domaintcontoso.com /DC: DC 1 parameter.
  C. Run the Save-NetGpo cmdlet.
  D. Run the Backup-Gpo cmdlet.
  A. From the Group Policy Management console, right-click GPO1 and select Copy.

  ---

  To copy a Group Policy object:

  In the GPMC console tree, right-click the GPO that you want to copy, and then click Copy.

  To create a copy of the GPO in the same domain as the sourceGPO, right-click Group Policy objects, click Paste, specify permissions for the new GPO in the Copy GPO box, and then click OK.

  For copy operations to another domain, you may need to specify a migration table.

  The Migration Table Editor (MTE) is provided with Group Policy Management Console (GPMC) to facilitate the editing of migration tables. Migration tables are used for copying or importing Group Policy objects (GPOs) from one domain to

  another, in cases where the GPOs include domain-specific information that must be updated during copy or import.

  Source WS2008R2: Backup the existing GPOs from the GPMC, you need to ensure that the "Group Policy Objects" container is selected for the "Backup Up All" option to be available.

  Copy a Group Policy Object with the Group Policy Management Console (GPMC)

  You can copy a Group Policy object (GPO) either by using the drag-and-drop method or right-click method.

  Applies To: Windows 8, Windows Server 2008 R2, Windows Server 2012

  References:

  http://technet.microsoft.com/en-us/library/cc785343(v=WS.10).aspx

  http://technet.microsoft.com/en-us/library/cc733107.aspx

• Question 706:

  Your network contains one Active Directory domain named contoso.com. The domain contains 10 domain controllers that run Windows Server 2012 R2. Eight domain controllers are writable domain controllers.

  You need to deploy several read-only domain controllers (RODCs) in contoso.com by using pre-staged computer accounts. Which two tasks should you perform? Each correct answer presents part of the solution.

  A. Join the servers to contoso.com.
  B. Run the Install-AddsDomainController cmdlet.
  C. Run the Add-AddsReadOnlyDomainControllerAccount cmdlet.
  D. Create an authentication policy silo.
  E. Create an authentication policy.
  F. Run the adprep /rodcprep command.
  B. Run the Install-AddsDomainController cmdlet.
  C. Run the Add-AddsReadOnlyDomainControllerAccount cmdlet.

  ---

  The Add-ADDSReadOnlyDomainControllerAccount cmdlet creates a read-only domain controller (RODC) account that can be used to install an RODC in Active Directory.

  Once you have added the RODC account, you can add an RODC to a server computer by using the Install-ADDSDomainController cmdlet with the -ReadOnlyReplica switch parameter.

• Question 707:

  Which terminology is being described below?

  This trust is a manually created trust that shortens the trust path to improve the speed at which authentications, which occur between domain trees, are processed

  A. Shortcut Trust
  B. Quick Trust
  C. Easy Trust
  D. Simple Trust
  A. Shortcut Trust

• Question 708:

  You plan to allow users to run internal applications from outside the company's network. You have a Windows Server 2012 R2 that has the Active Directory Federation Services (AD FS) role installed. You must secure on-premises resources

  by using multi-factor authentication (MFA).

  You need to design a solution to enforce different access levels for users with personal Windows 8.1 or iOS 8 devices.

  Solution: You install a local instance of the MFA Server. You connect the instance to the Microsoft Azure MFA provider and then you use Microsoft Intune to manage personal devices.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  References: https://docs.microsoft.com/en-us/intune/multi-factor-authentication

• Question 709:

  Your network contains a domain controller named DC1 that runs Windows Server 2012 R2. You create a custom Data Collector Set (DCS) named DCS1.

  You need to configure DCS1 to collect the following information: The amount of Active Directory data replicated between DC1 and the other domain controllers The current values of several registry settings

  Which two should you configure in DCS1? (Each correct answer presents part of the solution. Choose two.)

  A. Event trace data
  B. A Performance Counter Alert
  C. System configuration information
  D. A performance counter
  C. System configuration information
  D. A performance counter

  ---

  

  

• Question 710:

  Your network contains an Active Directory domain named contoso.com. All user accounts reside in an organizational unit (OU) named OU1. All of the users in the marketing department are members of a group named Marketing. All of the

  users in the human resources department are members of a group named HR.

  You create a Group Policy object (GPO) named GPO1. You link GPO1 to OU1.

  You configure the Group Policy preferences of GPO1 to add two shortcuts named Link1 and Link2 to the desktop of each user.

  You need to ensure that Link1 only appears on the desktop of client computers that have more than 80 GB of free disk space and Link2 only appears on the desktop of client computers that have less than 80 GB of free disk space.

  What should you configure?

  A. Group Policy Inheritance
  B. WMI Filtering
  C. Security Filtering
  D. Item-level targeting
  B. WMI Filtering

  ---

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc733022(v%3dws.11)