Exact 70-417 Exam Questions 2021

NEW QUESTION 1
Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2.
You install the DHCP Server server role on Server1 and Server2. You install the IP Address Management (IPAM) Server feature on Server1.
You notice that you cannot discover Server1 or Server2 in IPAM.You need to ensure that you can use IPAM to discover the DHCP infrastructure.
Which two actions should you perform? (Each correct answer presents part of the
solution.(Choose two.)

• A. On Server2, create an IPv4 scope
• B. On Server1, run the Add-IpamServerInventory cmdlet
• C. On Server2, run the Add-DhcpServerInDc cmdlet
• D. On both Server1 and Server2, run the Add-DhcpServerv4Policy cmdlet
• E. On Server1, uninstall the DHCP Server server role.

Answer: CE

Explanation:  

NEW QUESTION 2
HOTSPOT
You have a server named Server1 that runs Windows Server 2012 R2. You configure Network Access Protection (NAP) on Server1.
Your company implements a new security policy stating that all client computers must have the latest updates installed. The company informs all employees that they have two weeks to update their computer accordingly.
You need to ensure that if the client computers have automatic updating disabled, they are provided with full access to the network until a specific date and time.
Which two nodes should you configure?
To answer, select the appropriate two nodes in the answer area.

Answer:

Explanation:
 

NEW QUESTION 3
You have a server named Server1 that runs Windows Server 2012 R2. You connect two new hard disks to Server1.
You need to create a storage space that contains the two disks.
The solution must meet the following requirements:
✑ Provide fault tolerance if a single disk fails.
✑ Maximize the amount of files that can be stored in the storage space.
What should you create?

• A. a parity space
• B. a simple space
• C. a spanned volume
• D. a mirrored space

Answer: D

Explanation: References: http://social.technet.microsoft.com/wiki/contents/articles/15198.storage-spaces-overview.aspx
http://technet.microsoft.com/en-us/library/cc772180.aspx
Training Guide: Installing and Configuring Windows Server 2012: Chapter 8: File Services and Storage, p. 367-8
 

NEW QUESTION 4
Server manager is a great tool for managing most of your server settings and configuration all in one central place. Which one of the following Server manager Features is used for management of Public Key Infrastructure?

• A. Dynamic Host Configuration Server
• B. WINS Server
• C. Domain Name Service
• D. Active Directory Certificate Services

Answer: D

Explanation:  

NEW QUESTION 5
Which one of the following groups has permission to shut down a domain controller?

• A. Backup Operators
• B. All of these
• C. Print Operators
• D. Server Operators

Answer: B

Explanation: Below is a screenshot of the default settings

 

NEW QUESTION 6
Which feature is described below?
You can use the to reduce the number of duplicate blocks of data in storage, you can store much more data in a given amount of storage capacity than was possible in previous releases that used Single Instance
Storage (SIS) or NTFS file system compression.

• A. iSCSI Target Server
• B. iSCSI Target Boot
• C. Multiterabyte Volumes
• D. Data Deduplication role service

Answer: D

Explanation: By using Data Deduplication, general purpose file servers can typically reduce storage capacity utilization by a 2:1 ratio (for example, files that previously used 1 TB would use 500 GB after deduplication). Servers that host virtualization data (such as VHD files) often reduce storage capacity utilization by a 20:1 ratio, which reduces 1 TB of data to 50 GB.

 

NEW QUESTION 7
Your network contains an Active Directory domain named adatum.com. The domain contains a member server named Server1 and a domain controller named DC2. All servers run Windows Server 2012 R2.
On DC2, you open Server Manager and you add Server1 as another server to manage. From Server Manager on DC2, you right-click Server1 as shown in the exhibit. (Click the
Exhibit button.)

You need to ensure that when you right-click Server1, you see the option to run the DHCP console.
What should you do?

• A. On DC2, install the Role Administration Tools.
• B. On DC2 and Server1, run winrmquickconfig.
• C. In the domain, add DC2 to the DHCP Administrators group.
• D. On Server1, install the Feature Administration Tools.

Answer: A

Explanation: You need to install the feature administrations tools for the dhcp . Need to install DHCP management tools on DC2 then you will have access to dhcp management.
 

NEW QUESTION 8
Your network contains an Active Directory forest named contoso.com. The forest contains four domains. All servers run Windows Server 2012 R2.
Each domain has a user named User1.
You have a file server named Server1 that is used to synchronize user folders by using the Work Folders role service.
Server1 has a work folder named Sync1.
You need to ensure that each user has a separate folder in Sync1. What should you do?

• A. From Windows Explorer, modify the Sharing properties of Sync1
• B. Run the Set-SyncServerSetting cmdlet
• C. From File and Storage Services in Server Manager, modify the properties of Sync1
• D. Run the Set-SyncShare cmdlet

Answer: D

Explanation:  

NEW QUESTION 9
Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role installed and is configured as a standalone certification authority (CA).
You install a second server named Server2. You install the Online Responder role service on Server2.
You need to ensure that Server1 can issue an Online Certificate Status Protocol (OCSP) Response Signing certificate to Server2.
What should you run on Server1?

• A. The certreq.exe command and specify the -policy parameter
• B. The certutil.exe command and specify the -getkey parameter
• C. The certutil.exe command and specify the -setreg parameter
• D. The certreq.exe command and specify the -retrieve parameter

Answer: C

Explanation:  

NEW QUESTION 10
You have a server named Server1 that runs a Server Core installation of Windows Server 2012 R2 Standard. You establish a Remote Desktop session to Server1.
You need to identify which task can be performed on Server1 from within the Remote Desktop session.
What should you identify?

• A. Install a feature by using Server Manager.
• B. Modify the network settings by using Sconfig.
• C. Disable services by using Msconfig.
• D. Join a domain by using the System Properties.

Answer: B

Explanation: In Windows Server 2012 R2, you can use the Server Configuration tool (Sconfig.cmd) to configure and manage several common aspects of Server Core installations. You must be a member of the Administrators group to use the tool. Sconfig.cmd is available in the Minimal Server Interface and in Server with a GUI mode.
http://technet.microsoft.com/en-us/library/jj647766.aspx
Training Guide: Installing and Configuring Windows Server 2012 R2, Chapter 2: Deploying servers, p. 80
 

NEW QUESTION 11
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed. The domain contains a virtual machine named VM1.
A developer wants to attach a debugger to VM1.
You need to ensure that the developer can connect to VM1 by using a named pipe. Which virtual machine setting should you configure?

• A. BIOS
• B. Network Adapter
• C. COM 1
• D. Processor

Answer: C

Explanation: Named pipes can be used to connect to a virtual machine by configuring COM 1.
References: http://support.microsoft.com/kb/819036 http://support.microsoft.com/kb/141709
 

NEW QUESTION 12
Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the Hyper-V server role installed.
Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4. Server1 is configured as shown in the following table.

You plan to schedule a complete backup of Server1 by using Windows Server Backup. You need to ensure that the state of VM1 is saved before the backup starts.
What should you configure?

• A. NUMA topology
• B. Resource control
• C. Resource metering
• D. Virtual Machine Chimney
• E. The VLAN ID
• F. Processor Compatibility
• G. The startup order
• H. Automatic Start Action
• I. Integration Services
• J. Port mirroring
• K. Single-root I/O virtualization

Answer: I

Explanation: http://www.altaro.com/hyper-v/vss-crash-consistent-vs-Application-consistent-vss- backupspost-2- of-2/ Backup
Operations in Hyper-V No
VSS Writer Available?
In some cases, you need an Application-consistent backup but there is no VSS writer available. One example of this is MySQL. Hyper-V backups of virtual machines containing MySQL will always result in either a crashconsistent or an image-level backup. For MySQL, the latter is probably acceptable as MySQL doesn't perpetually expand the log file. However, if you're using MySQL within a VSS-aware VM, then a Hyper-Vbased backup tool is going to take a crash-consistent backup. MySQL (like any other database system) isn't always recoverable from a crash-consistent backup; tool is going to take a crash- consistent backup. MySQL (like any
other database system) isn't always recoverable from a crash-consistent backup; even when recovery is possible, it may be painful. MySQL is just one example; any number of line-of-business Applications could tell a similar tale. In the case of MySQL, one solution is to find a guest-level backup Application that is MySQL- aware and can back it up properly. For Applications for which no backup Application has a plug-in, you may need to have pre- and post-backup scripts that stop services or close Applications. If brief downtime is acceptable, you can disable the Backup item in Hyper-V Integration Services, thereby forcing Hyper-V to save
the state of the VM during backup. This technique results in an image-level backup and can be used on any Application that doesn't have a VSS writer.
 

NEW QUESTION 13
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.
You pre-create a read- only domain controller (RODC) account named RODC1. You export the settings of RODC1 to a file named File1.txt.
You need to promote RODC1 by using File1.txt. Which tool should you use?

• A. The Install-WindowsFeaturecmdlet
• B. The Add-WindowsFeaturecmdlet
• C. TheDism command
• D. TheDcpromo command
• E. The Install-ADDSDomainControllercmdlet

Answer: D

Explanation: DCPromo is gone, HOWEVER, it is still used for unattend installations using unattended files. This allows administrators the chance to get used to using powershell commands instead of the unattended file.
http://technet.microsoft.com/en-us/library/hh472162.aspx
NB: http://technet.microsoft.com/en-us/library/jj205467.aspx Install-WindowsFeature Installs one or more Windows Server roles, role services, or features on either the local or a specified remote server that is running Windows Server 2012 R2. This cmdlet is equivalent to and replaces Add- WindowsFeature, the cmdlet that was used to install roles, role services, and features in Windows Server 2008 R2. So the 2 first answers are the same and we only have one choice here...
 

NEW QUESTION 14
Your company deploys a new Active Directory forest named contoso.com. The first domain controller in the forest runs Windows Server 2012 R2. The forest contains a domain controller named DC10.
On DC10, the disk that contains the SYSVOL folder fails.
You replace the failed disk. You stop the Distributed File System (DFS) Replication service. You restore the SYSVOL folder.
You need to perform a non-authoritative synchronization of SYSVOL on DC10. Which tool should you use before you start the DFS Replication service on DC10?

• A. Active Directory Sites and Services
• B. Ultrasound
• C. Adsiedit.msc
• D. Frsutil

Answer: C

Explanation: How to perform a non-authoritative synchronization of DFSR-replicated SYSVOL (like "D2" for FRS)
1. In theADSIEDIT.MSC tool modify the following distinguished name (DN) value and attribute on each of the domain controllers that you want to make non- authoritative:CN=SYSVOL Subscription,CN=Domain System Volume,CN=DFSR- LocalSettings,CN=<the server name>,OU=Domain Controllers,DC=<domain>msDFSR- Enabled=FALSE
2. Force Active Directory replication throughout the domain. Etc
 

NEW QUESTION 15
DRAG DROP
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012.
The domain contains an organizational unit (OU) named OU1. OU1 contains an OU named OU2. OU2 contains a user named User1.
User1 is the member of a group named Group1. Group1 is in the Users container.
You create five Group Policy objects (GPO). The GPOs are configured as shown in the following table.

The Authenticated Users group is assigned the default permissions to all of the GPOs. There are no site-level GPOs.
You need to identify which three GPOs will be applied to User1 and in which order the GPOs will be applied to User1.
Which three GPOs should you identify in sequence?
To answer, move the appropriate three GPOs from the list of GPOs to the answer area and arrange them in the correct order.

Answer:

Explanation: Box 1: GPO1
Box 2: GPO3
Box 3: GPO5
Note:
* Box 1: Domain GPOs are applied before OU GPOs.
 

NEW QUESTION 16
You have a server named Print1 that runs Windows Server 2012 R2.On Print1, you share a printer named Printer1.
You need to ensure that only the members of the Server Operators group, the Administrators group, and the Print Operators group can send print jobs to Printer1.
What should you do?

• A. Remove the permissions for the Creator Owner group
• B. Assign the Print permission to the Server Operators group
• C. Remove the permissions for the Everyone group
• D. Assign the Print permission to the Administrators group

Answer: C

Explanation: By default Everyone can print. This permissions need to be removed.
 

NEW QUESTION 17
You have virtual machine named VM1.
VM1 uses a fixed size virtual hard disk (VHD) named Disk1.vhD. Disk1.vhd is 200 GB. You shut down VM1.
You need to reduce the size of disk1.vhd.
Which action should you select from the Edit Virtual Hard Disk Wizard?

• A. Merge
• B. Compact
• C. Shrink
• D. Convert

Answer: C

Explanation:  

NEW QUESTION 18
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 contains a virtual machine named VM1 that runs Windows Server 2012 R2.
You need to ensure that a user named User1 can install Windows features on VM1. The solution must minimize the number of permissions assigned to User1.
To which group should you add User1?

• A. Server Operators on Server1
• B. Power Users on VM1
• C. Administrators on VM1
• D. Hyper-V Administrators on Server1

Answer: D

Explanation: * The Hyper-V role enables you to create and manage a virtualized computing environment by using virtualization technology that is built in to Windows Server 2012. Hyper-V virtualizes hardware to provide an environment in which you can run multiple operating systems at the same time on one physical computer, by running each operating system in its own virtual machine.
* Simplified authorization
The Hyper-V Administrators group is introduced in Windows Server 2012 and is implemented as a local security group.
What value does this change add?
This group can reduce the number of users that belong to the local Administrators group while providing users with access to Hyper-V.
What works differently?
The Hyper-V Administrators group is a new local security group. Add users to this group instead of the local Administrators group to provide them with access to Hyper-V. Members of the Hyper-V Administrators have complete and unrestricted access to all features of Hyper-V.
Reference: What's New in Hyper-V for Windows Server 2012