Microsoft 70-417 Exam Dumps 2021

NEW QUESTION 1
DRAG DROP
You have a file server named Server1 that runs Windows Server 2012 R2. The folders on Server1 are configured as shown in the following table.

A new corporate policy states that backups must use Microsoft Online Backup whenever possible. You need to identify which technology you must use to back up Server1. The solution must use Microsoft Online Backup whenever possible. What should you identify? To answer, drag the appropriate backup type to the correct location or locations. Each backup type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation:
 

NEW QUESTION 2
Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1 has the DHCP Server server role installed.
DHCP is configured as shown in the exhibit. (Click the Exhibit button.)

You discover that client computers cannot obtain IPv4 addresses from DC1.
You need to ensure that the client computers can obtain IPv4 addresses from DC1. What should you do?

• A. Disable the Deny filters.
• B. Authorize DC1.
• C. Activate the scope.
• D. Disable the Allow filters.

Answer: B

Explanation:  

NEW QUESTION 3
Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012 R2.
The domain contains two domain controllers. The domain controllers are configured as shown in the following table.

Active Directory Recycle Bin is enabled.
You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago.
You need to restore the membership of Group1. What should you do?

• A. Perform tombstone reanimation.
• B. Export and import data by using Dsamain.
• C. Perform a non-authoritative restore.
• D. Recover the items by using Active Directory Recycle Bin.

Answer: B

Explanation: As far as the benefits of the Windows 2012 Recycle Bin, they are the same as the Windows 2008 R2 recycle bin with the exception of the new user interface which makes it more user-friendly. These additional benefits include:
· All deleted AD object information including attributes, passwords and group membership can be selected in mass then undeleted from the user interface instantly or via Powershell
· User-friendly and intuitive interface to filter on AD objects and a time period · Can undelete containers with all child objects
https://www.simple-talk.com/sysadmin/exchange/the-active-directory-recycle-bin-in-windows-server-2008-r2/
http://communities.quest.com/community/quest-itexpert/blog/2012/09/24/the-windows-server-2012-recycle-binand-recovery-manager-for-active-directory
 

NEW QUESTION 4
Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1 that runs Windows Server 2012 R2. You create a user account named User1 in the domain.
You need to ensure that User1 can use Windows Server Backup to back up Server1. The solution must minimize the number of administrative rights assigned to User1. What should you do?

• A. Assign User1 the Back up files and directories user right.
• B. Add User1 to the Backup Operators group.
• C. Add User1 to the Power Users group.
• D. Assign User1 the Back up files and directories user right and the Restore files and directories user right.

Answer: A

Explanation: Backup Operators have these permissions by default:
However the question explicitly says we need to minimize administrative rights. Since the requirement is for backing up the data onlyno requirement to restore or shutdownthen assigning the "Back up files and directories user right" would be the correct.

 

NEW QUESTION 5
DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.
You plan to install the Active Directory Federation Services server role on Server1 to allow for Workplace Join.
You run nslookupenterpriseregistration and you receive the following results:

You need to create a certificate request for Server1 to support the Active Directory Federation Services (AD FS) installation.
How should you configure the certificate request? To answer, drag the appropriate names to the correct locations. Each name may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: Example:
Install a server SSL certificate
You must install a server Secure Socket Layer (SSL) certificate on the ADFS1 server in the local computer store. The certificate MUST have the following attributes:
Subject Name (CN): adfs1.contoso.com
Subject Alternative Name (DNS): adfs1.contoso.com
Subject Alternative Name (DNS): enterpriseregistration.contoso.com
 

NEW QUESTION 6
HOTSPOT
Your network contains an Active Directory domain named contoso.com.
Technicians use Windows Deployment Services {WDS) to deploy Windows Server 2012 R2.
The network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed.
You need to ensure that you can use WDS to deploy Windows Server 2012 R2 to a virtual machine named VM1.
Which settings should you configure?
To answer, select the appropriate settings in the answer area.

Answer:

Explanation: WDS Allows network-based installation of Windows operating systems, which reduces the complexity and cost when compared to manual installations. Thus you should configure the appropriate network settings.
References:
http://technet.microsoft.com/en-us/library/hh831764.aspx
 

NEW QUESTION 7
HOTSPOT
You have a server named Server1 that runs Windows Server 2012 R2. The volumes on Server1 are configured as shown in the following table.

A new corporate policy states that backups must use Windows Azure Backup whenever possible.
You need to identify which backup methods you must use to back up Server1. The solution must use Windows Azure Backup whenever possible.
Which backup type should you identify for each volume?
To answer, select the appropriate backup type for each volume in the answer area.

Answer:

Explanation: http://technet.microsoft.com/en-us/library/jj614621.aspx http://technet.microsoft.com/zh-cn/library/hh831419.aspx
 

NEW QUESTION 8
Your network contains an Active Directory domain named contoso.com. All user accounts reside in an organizational unit (OU) named OU1.
You create a Group Policy object (GPO) named GPO1. You link GPO1 to OU1.
You configure the Group Policy preference of GPO1 to add a shortcut named Link1 to the desktop of each user.
You discover that when a user deletes Link1, the shortcut is removed permanently from the desktop.
You need to ensure that if a user deletes Link1, the shortcut is added to the desktop again. What should you do?

• A. Modify the Link1 shortcut preference of GPO1
• B. Enable loopback processing in GPO1
• C. Enforce GPO1
• D. Modify the Security Filtering settings of GPO1

Answer: A

Explanation:  

NEW QUESTION 9
Your network contains an Active Directory domain named contoso.com. Domain controllers run either Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 R2. You have a Password Settings object (PSOs) named PSO1. You need to view the settings of PSO1. Which tool should you use?

• A. Get-ADDomainControllerPasswordReplicationPolicy
• B. Get-ADDefaultDomainPasswordPolicy
• C. Active Directory Administrator Centre
• D. Local Security Policies

Answer: C

Explanation: http://technet.microsoft.com/en-us/library/ee617231.aspx
To get a list of all the properties of an ADFineGrainedPasswordPolicy object, use the following command:
Get-ADFineGrainedPasswordPolicy<fine grained password policy> -Properties * | Get- Member [...]
EXAMPLE 2
Command Prompt: C:PS>
Get-ADFineGrainedPasswordPolicyAdminsPSO Name: AdminsPSO ComplexityEnabled: True
LockoutThreshold: 0 ReversibleEncryptionEnabled : True LockoutDuration: 00:30:00
LockoutObservationWindow: 00:30:00
MinPasswordLength: 10
Precedence: 200
ObjectGUID: ba1061f0-c947-4018-a399-6ad8897d26e3
ObjectClass: msDS-PasswordSettings PasswordHistoryCount: 24
MinPasswordAge: 1.00:00:00
MaxPasswordAge: 15.00:00:00 AppliesTo: {}
DistinguishedName: CN=AdminsPSO,CN=Password Settings Container,CN=System,DC=FABRIKAM,
DC=COM
Description: Get the Fine Grained Password Policy named `AdminsPSO'.
 

NEW QUESTION 10
Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed. Server1 hosts 10 virtual machines that run Windows Server 2012 R2. You add a new server named Server2.
Server2 has faster hard disk drives, more RAM, and a different processor manufacturer than Server1.
You need to move all of the virtual machines from Server1 to Server2. The solution must minimize downtime.
What should you do for each virtual machine?

• A. Perform a quick migration.
• B. Perform a storage migration.
• C. Export the virtual machines from Server1 and import the virtual machines to Server2.
• D. Perform a live migration.

Answer: C

Explanation: The different processor manufacturer is the key here. Storage, Live, and Quick all require same manufacturer.
 

NEW QUESTION 11
You have a virtual machine named VM1 that runs on a host named Host1.
You configure VM1 to replicate to another host named Host2. Host2 is located in the same physical location as Host1.
You need to add an additional replica of VM1. The replica will be located in a different physical site.
What should you do?

• A. From VM1 on Host2, click Extend Replication.
• B. On Host1, configure the Hyper-V settings.
• C. From VM1 on Host1, click Extend Replication.
• D. On Host2, configure the Hyper-V settings.

Answer: A

Explanation: http://blogs.technet.com/b/virtualization/archive/2013/12/10/hyper-v-replica-extend- replication.aspx
Once that is done, go to replica site and from Hyper-V UI manager select the VM for which you want to extend the replication. Right click on VM and select “Replication->Extend Replication …”. This will open Extend Replication Wizard which is similar to Enable Replication Wizard.
http://technet.microsoft.com/en-us/library/dn551365.aspx http://technet.microsoft.com/en-us/library/jj134240.aspx
NOTE: You configure a server to receive replication with Hyper-V Manager, in this situation the replica site is assumed to be the Replica Server. Therefore you extend replication from VM1 on Host2.
 

NEW QUESTION 12
You have a server named Server1.
You install the IP Address Management (IPAM) Server feature on Server1.
You need to provide a user named User1 with the ability to set the access scope of all the DHCP servers that are managed by IPAM. The solution must use the principle of least
privilege.
Which user role should you assign to User1?

• A. IP Address Record Administrator Role
• B. IPAM Administrator Role
• C. IPAM MSM Administrator Role
• D. IPAM DHCP Scope Administrator Role

Answer: A

Explanation: Explanation
IPAM ASM Administrators
IPAM ASM Administrators is a local security group on an IPAM server that is created when you install the IPAM feature. Members of this group have all the privileges of the IPAM Users security group, and can perform IP address space tasks in addition to IPAM common management tasks.
Note: When you install IPAM Server, the following local role-based IPAM security groups are created:
IPAM Users
IPAM MSM Administrators IPAM ASM Administrators IPAM IP Audit Administrators IPAM Administrators Incorrect:
not B: Too much privileges. IPAM Administrators
IPAM Administrators is a local security group on an IPAM server that is created when you install the IPAM feature. Members of this group have privileges to view all IPAM data and perform all IPAM tasks.
 

NEW QUESTION 13
HOTSPOT
Your network contains an Active Directory domain named contoso.com.
You install the IP Address Management (IPAM) Server feature on a server named Server1 and select Manual as the provisioning method.
The IPAM database is located on a server named SQL1.
You need to configure IPAM to use Group Policy Based provisioning. What command should you run first?
To answer, select the appropriate options in the answer area.

Answer:

Explanation:
 

NEW QUESTION 14
Your network contains an Active Directory domain named contoso.com. The domain contains four servers. The servers are configured as shown in the following table.

You plan to deploy an enterprise certification authority (CA) on a server named Servers. Server5 will be used to issue certificates to domain-joined computers and workgroup computers.
You need to identify which server you must use as the certificate revocation list (CRL) distribution point for Server5.
Which server should you identify?

• A. Server1
• B. Server3
• C. Server4
• D. Server2

Answer: B

Explanation: CDP (and AD CS) always uses a Web Server
NB: this CDP must be accessible from outside the AD, but here we don't have to wonder about that as there's only one web server.
http://technet.microsoft.com/fr-fr/library/cc782183%28v=ws.10%29.aspx Selecting a CRL Distribution Point
Because CRLs are valid only for a limited time, PKI clients need to retrieve a new CRL
periodically. Windows
Server 2003 PKI Applications look in the CRL distribution point extension for a URL that points to a network location from which the CRL object can be retrieved. Because CRLs for enterprise CAs are stored in Active Directory, they can be accessed by means of LDAP. In comparison, because CRLs for stand-alone CAs are stored in a directory on the server, they can be accessed by means of HTTP, FTP, and so on as long as the CA is online. Therefore, you should set the CRL distribution point after the CA has been installed.
The system account writes the CRL to its distribution point, whether the CRL is published manually or is published according to an established schedule. Therefore you must ensure that the system accounts for CAs have permission to write to the CRL distribution point. Because the CRL path is also included in every certificate, you must define the CRL location and its access path before deploying certificates. If an Application performs revocation checking and a valid CRL is not available on the local computer, it rejects the certificate.
You can modify the CRL distribution point by using the Certification Authority MMC snap-in. In this way, you can change the location where the CRL is published to meet the needs of users in your organization. You must move the CRL distribution point from the CA configuration folder to a Web server to change the location of the CRL, and you must move each new CRL to the new distribution point, or else the chain will break when the previous CRL expires.
Note
On root CAs, you must also modify the CRL distribution point in the CAPolicy.inf file so that the root CA certificate references the correct CDP and AIA paths, if specified. If you are using certificates on the Internet, you must have at least one HTTPs-accessible location for all certificates that are not limited to internal use.
http://technet.microsoft.com/en-us/library/cc771079.aspx Configuring Certificate Revocation
It is not always possible to contact a CA or other trusted server for information about the validity of a certificate. To effectively support certificate status checking, a client must be able to access revocation data to determine whether the certificate is valid or has been revoked. To support a variety of scenarios, Active Directory Certificate Services (AD CS) supports industry-standard methods of certificate revocation. These include publication of certificate revocation lists (CRLs) and delta CRLs, which can be made available to clients from a variety of locations, including Active Directory Domain Services (AD DS), Web servers, and network file shares.
 

NEW QUESTION 15
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.
Server1 has the IP Address Management (IPAM) Server feature installed. IPAM is configured currently for Group Policy-based provisioning.
You need to change the IPAM provisioning method on Server1. What should you do?

• A. Run the ipamgc.exe command.
• B. Run the ipamgc.exe command.
• C. Run the Set-IPAMConfigurationcmdlet.
• D. Reinstall the IP Address Management (IPAM) Server feature.
• E. Delete IPAM Group Policy objects (GPOs) from the domain.

Answer: D

Explanation: You cannot change the provisioning method after completing the initial setup. When you install IPAM and configure either manual OR GPO, you receive the same message about not being able to change the provisioning method. As a matter of fact, I set it up in my lab and configured it as GPO. Here is a copy/paste of the message that is presently on the IPAM home page in server manager:
"The access configuration mode cannot be modified after completing the IPAM provisioning wizard" Also, the help console in IPAM displays this when searching about provisioning methods: "The managed server provisioning method cannot be changed after you complete the IPAM provisioning wizard."

 

NEW QUESTION 16
Server manager is a great tool for managing most of your server settings and configuration all in one central place. Which one of the following Server manager Features is used for Storage management, replication and searching?

• A. Dynamic Host Configuration Server
• B. Terminal Services
• C. Domain Name Service
• D. File Services

Answer: D

Explanation:  

NEW QUESTION 17
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.
An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8
Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1. You make a change to GPO1.
You need to force all of the computers in OU1 to refresh their Group Policy settings immediately. The solution must minimize administrative effort.
Which tool should you use?

• A. The Set-AdComputercmdlet
• B. Group Policy Object Editor
• C. Active Directory Users and Computers
• D. Group Policy Management Console (GPMC)

Answer: D

Explanation: In the previous versions of Windows, this was accomplished by having the user run GPUpdate.exe on their computer. Starting with Windows Server? 2012 and Windows?8, you can now remotely refresh Group Policy settings for all computers in an OU from one central location through the Group Policy Management Console (GPMC). Or you can use the Invoke-GPUpdate cmdlet to refresh Group Policy for a set of computers, not limited to the OU structure, for example, if the computers are located in the default computers container. Note: Group Policy Management Console (GPMC) is a scriptable Microsoft Management Console (MMC) snap-in, providing a single administrative tool for managing Group Policy across the enterprise. GPMC is the standard tool for managing Group Policy.
Incorrect:
Not B: Secedit configures and analyzes system security by comparing your current configuration to at least one template.
Reference: Force a Remote Group Policy Refresh (GPUpdate)
 

NEW QUESTION 18
Is the following statement about Hyper-V true or false? Hyper-V does not support wireless networks.

• A. True
• B. False

Answer: B

Explanation: Hyper-V 2012 supports wireless (one of my VM is currently connected to internet using the wifi card of my laptop...) True that in 2008R2 it was not supported (unless many customizations, i know it as i did it)