Thursday 31 December 2015

70-417 Exam Question No 35

Question No 35:

Your network contains an Active Directory domain named contoso.com. Network Policy Server (NPS) is deployed to the domain. You plan to deploy Network Access Protection (NAP). You need to configure the requirements that are validated on the NPS client computers. What should you do?

A.
From the Network Policy Server console, configure a health policy.
B.
From the Network Policy Server console, configure a network policy.
C.
From a Group Policy object (GPO), configure the NAP Client Configuration security setting.
D.
From a Group Policy object (GPO), configure the Network Access Protection Administrative Templates setting.
E.
From the Network Policy Server console, configure a Windows Security Health Validator (WSHV) policy.

Answer: E

Thursday 17 December 2015

70-417 Exam Question No 34

Question No 34:

You have a server named Server1 that runs Windows Server 2012 R2. You create a Data Collector Set (DCS) named DCS1. You need to configure DCS1 to log data to D:\logs. What should you do?

A.
Right-click DCS1 and click Properties.
B.
Right-click DCS1 and click Save template...
C.
Right-click DCS1 and click Export list...
D.
Right-click DCS1 and click Data Manager...

Answer: B

Thursday 10 December 2015

70-417 Exam Question No 33

Question No 33:

Your network contains an Active Directory domain named adatum.com. The domain contains a member server named Server1 and 10 web servers. All of the web servers are in an organizational unit (OU) named WebServers_OU. All of the servers run Windows Server 2012 R2. On Server1, you need to collect the error events from all of the web servers. The solution must ensure that when new web servers are added to WebServers_OU, their error events are collected automatically on Server1. What should you do?

A.
On Server1, create a collector initiated subscription. From a Group Policy object (GPO), configure the Configure target Subscription Manager setting.
B.
On Server1, create a collector initiated subscription. From a Group Policy object (GPO), configure the Configure forwarder resource usage setting.
C.
On Server1, create a source computer initiated subscription. From a Group Policy object (GPO), configure the Configure forwarder resource usage setting.
D.
On Server1, create a source computer initiated subscription. From a Group Policy object (GPO), configure the Configure target Subscription Manager setting.

Answer: D

Friday 20 November 2015

70-417 Exam Question No 32

Question No 32:

You have a server named Server1 that runs Windows Server 2012 R2.
You create a custom Data Collector Set (DCS) named DCS1.
You need to configure Server1 to start DCS1 automatically when the network usage exceeds 70 percent.
Which type of data collector should you create?

A.
A performance counter alert
B.
A performance counter data collector
C.
An event trace data collector
D.
A configuration data collector

Answer: A

Thursday 12 November 2015

70-417 Exam Question No 31

Question No 31:

 Your network contains a Hyper-V host named Hyperv1. Hyperv1 runs Windows Server 2012 R2.
Hyperv1 hosts four virtual machines named VM1, VM2, VM3, and VM4. All of the virtual machines run
Windows Server 2008 R2.

You need to view the amount of memory resources and processor resources that VM4 currently uses.
Which tool should you use on Hyperv1?

A.
Task Manager
B.
Windows System Resource Manager (WSRM)
C.
Hyper-V Manager
D.
Resource Monitor

Answer: C

Thursday 5 November 2015

70-417 Exam Question No 30

Question No 30:

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. You log on to Server1 by using a user account named User2.

From the Remote Access Management Console, you run the Getting Started Wizard and you receive a warning message as shown in the exhibit. (Click the Exhibit button.)




You need to ensure that you can configure DirectAccess successfully. The solution must minimize the number of permissions assigned to User2. To which group should you add User2?

A.
Account Operators
B.
Enterprise Admins
C.
Domain Admins
D.
Server Operators

Answer: C

Thursday 29 October 2015

70-417 Exam Question No 29

Question No 29:

Your network contains two servers named HV1 and HV2. Both servers run Windows Server 2012 R2 and
have the Hyper-V server role installed.
HV1 hosts 25 virtual machines. The virtual machine configuration files and the virtual hard disks are stored
in D:\VM.
You shut down all of the virtual machines on HV1.
You copy D:\VM to D:\VM on HV2.
You need to start all of the virtual machines on HV2. You want to achieve this goal by using the minimum
amount of administrative effort.
What should you do?

A.
From HV1, export all virtual machines to D:\VM. Copy D:\VM to D:\VM on HV2 and overwrite the
existing files. On HV2, run the New Virtual Machine wizard.
B.
From HV1, export all virtual machines to D:\VM. Copy D:\VM to D:\VM on HV2 and overwrite the
existing files. On HV2, run the Import Virtual Machine wizard.
C.
Run the Import-VM InitialReplicationcmdlet.
D.
Run the Import-VM cmdlet.

Answer: D

Wednesday 21 October 2015

70-417 Exam Question No 28

Question No 28:

Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Server1
and Server2 are nodes in a failover cluster named Cluster1. The network contains two servers named
Server3 and Server4 that run Windows Server 2012 R2. Server3 and Server4 are nodes in a failover cluster
named Cluster2.
You need to move all of the applications and the services from Cluster1 to Cluster2.
What should you do first from Failover Cluster Manager?

A.
On a server in Cluster2, click Migrate Roles.
B.
On a server in Cluster2, click Move Core Cluster Resources, and then click Select Node...
C.
On a server in Cluster1, configure Cluster-Aware Updating.
D.
On a server in Cluster2, click Move Core Cluster Resources, and then click Best Possible Node.

Answer: A

Thursday 15 October 2015

70-417 Exam Question No 27

Question No 27:

Your network contains an Active Directory domain named contoso.com. The domain contains servers
named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the Active Directory
Federation Services server role installed.Server2 is a file server. Your company introduces a Bring Your
Own Device (BYOD) policy.
You need to ensure that users can use a personal device to access domain resources by using Single
Sign-On (SSO) while they are connected to the internal network.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

A.
Enable the Device Registration Service in Active Directory.
B.
Publish the Device Registration Service by using a Web Application Proxy.
C.
Configure Active Directory Federation Services (AD FS) for the Device Registration Service.
D.
Install the Work Folders role service on Server2.
E.
Create and configure a sync share on Server2.

Answer: A, C

Thursday 8 October 2015

70-417 Exam Question No 26

Question No 26:

Your network contains a perimeter network and an internal network. The internal network contains an
Active Directory Federation Services (AD FS) 2.1 infrastructure. The infrastructure uses Active Directory as
the attribute store.
You plan to deploy a federation server proxy to a server named Server2 in the perimeter network.

You need to identify which value must be included in the certificate that is deployed to Server2.
What should you identify?

A.
The name of the Federation Service
B.
The name of the Active Directory domain
C.
The FQDN of the AD FS server
D.
The public IP address of Server2

Answer: C

Thursday 1 October 2015

70-417 Exam Question No 25

Question No 25:

You deploy an Active Directory Federation Services (AD FS) 2.1 infrastructure. The infrastructure uses
Active Directory as the attribute store.
Some users report that they fail to authenticate to the AD FS infrastructure.
You discover that only users who run third-party web browsers experience issues.
You need to ensure that all of the users can authenticate to the AD FS infrastructure successfully.
Which Windows PowerShell command should you run?

A.
Set-ADFSProperties -SSOLifetime 1:00:00
B.
Set-ADFSProperties -AddProxyAuthenticationRules None
C.
Set-ADFSProperties -ExtendedProtectionTokenCheck None
D.
Set-ADFSProperties -ProxyTrustTokenLifetime 1:00:00

Answer: C

Wednesday 23 September 2015

70-417 Exam Question No 24

Question No 24:

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server
2012 R2.
You are creating a central access rule named Test Finance that will be used to audit members of the
Authenticated users group for access failure to shared folders in the finance department.
You need to ensure that access requests are unaffected when the rule is published.
What should you do?

A.
Set the Permissions to Use the following permissions as proposed permissions.
B.
Add a Resource condition to the current permissions entry for the Authenticated Users principal.
C.
Set the Permissions to Use following permissions as current permissions.
D.
Add a User condition to the current permissions entry for the Authenticated Users principal.

Answer: A

Thursday 17 September 2015

70-417 Exam Question No 23

Question No 23:

Your network contains an Active Directory domain named contoso.com. The domain contains a file server
named Server1 and a domain controller named DC1. All servers run Windows Server 2012 R2.
A Group Policy object (GPO) named GPO1 is linked to the domain.
Server1 contains a folder named Folder1. Folder1 is shared as Share1.
You need to ensure that authenticated users can request assistance when they are denied access to the resources on Server1. Which two actions should you perform? (Each correct answer presents part of the solution. (Choose two.)

A.
Enable the Enable access-denied assistance on client for all file types policy setting for GPO1.
B.
Configure the Customize message for Access Denied errors policy setting of GPO1.
C.
Install the File Server Resource Manager role service on DC1.
D.
Install the File Server Resource Manager role service on Server1.
E.
Assign the Read Attributes NTFS permission on Folder1 to the Authenticated Users group.

Answer: A, D

Thursday 10 September 2015

70-417 Exam Question No 22

Question No 22:

You have a server named Server1 that runs Windows Server 2012 R2. You install the File and Storage
Services server role on Server1.
From Windows Explorer, you view the properties of a folder named Folder1 and you discover that the
Classification tab is missing.
You need to ensure that you can assign classifications to Folder1 from Windows Explorer manually.
What should you do?

A.
Install the File Server Resource Manager role service.
B.
From Folder Options, clear Hide protected operating system files (Recommended).
C.
Install the Share and Storage Management Tools.
D.
From Folder Options, select the Always show menus.

Answer: A

Thursday 27 August 2015

70-417 Exam Question No 21

Question No 21:

You have 30 servers that run Windows Server 2012 R2. All of the servers are backed up daily by using
Windows Azure Backup.
You need to perform an immediate backup of all the servers to Windows Azure Backup.
Which Windows PowerShell cmdlets should you run on each server?

A.
Get-OBPolicy | Start-OBBackup
B.
Get-WBPolicy | Start-WBBackup
C.
Start-OBRegistration | Start-OBBackup
D.
Get-WBBackupTarget | Start-WBBackup

Answer: A

Friday 21 August 2015

70-417 Exam Question No 20

Question No 20:

 You have 20 servers that run Windows Server 2012 R2.
You need to create a Windows PowerShell script that registers each server in Microsoft Azure Backup and
sets an encryption passphrase.
Which two PowerShell cmdlets should you run in the script? (Each correct answer presents part of the
solution. Choose two.)

A.
Set-OBMachineSetting
B.
Add-OBFileSpec
C. S
tart-OBRegistration
D.
New OBPolicy
E.
New-OBRetentionPolicy

Answer: A,C

Wednesday 12 August 2015

70-417 Exam Question No 19

Question No 19:

Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Both
servers have the Hyper-V server role installed.Server1 and Server2 are located in different offices. The
offices connect to each other by using a high-latency WAN link.
Server2 hosts a virtual machine named VM1.
You need to ensure that you can start VM1 on Server1 if Server2 fails. The solution must minimize
hardware costs.
What should you do?

A.
From the Hyper-V Settings of Server2, modify the Replication Configuration settings. Enable replication for VM1.
B.
On Server1, install the Multipath I/O (MPIO) feature. Modify the storage location of the VHDs for VM1.
C.
On Server2, install the Multipath I/O (MPIO) feature. Modify the storage location of the VHDs for VM1.
D.
From the Hyper-V Settings of Server1, modify the Replication Configuration settings. Enable replication for VM1.

Answer: D

Thursday 6 August 2015

70-417 Exam Question No 18

Question No 18:

Your network contains an Active Directory domain named contoso.com. The domain contains two member
servers named Server1 and Server2. All servers run Windows Server 2012 R2.
Server1 and Server2 have the Fail over Clustering feature installed. The servers are configured as nodes in
a fail over cluster named Cluster1.
You configure File Services and DHCP as clustered resources for Cluster1. Server1 is the active node for
both clustered resources.
You need to ensure that if two consecutive heartbeat messages are missed between Server1 and Server2,
Server2 will begin responding to DHCP requests. The solution must ensure that Server1 remains the active
node for the File Services clustered resource for up to five missed heartbeat messages.
What should you configure?

A.
Affinity - None
B.
Affinity - Single
C.
The cluster quorum settings
D.
The fail over settings
E.
A file server for general use
F.
The Handling priority
G.
The host priority
H.
Live migration
I.
The possible owner
J.
The preferred owner
K.
Quick migration
L.
The Scale-Out File Server

Answer: D

Thursday 30 July 2015

70-417 Exam Question No 17

Question No 17:

Your network contains an Active Directory domain named contoso.com. The domain contains two member
servers named Server1 and Server2. All servers run Windows Server 2012 R2. Server1 and Server2 have
the Failover Clustering feature installed.The servers are configured as nodes in a failover cluster named
Cluster1.
You add two additional nodes in Cluster1.
You have a folder named Folder1 on Server1 that hosts application datA. Folder1 is a folder target in a
Distributed File System (DFS) namespace.
You need to provide highly available access to Folder1. The solution must support DFS Replication to
Folder1.
What should you configure?

A.
Affinity - None
B.
Affinity - Single
C.
The cluster quorum settings
D.
The fail over settings
E.
A file server for general use
F.
The Handling priority
G.
The host priority
H.
Live migration
I.
The possible owner
J.
The preferred owner
K.
Quick migration
L.
The Scale-Out File Server

Answer: E

Wednesday 22 July 2015

70-417 Exam Question No 16

Question No 16:

Your network contains an Active Directory domain named contoso.com. The domain contains two servers
named Server1 and Server2. Both servers have the IP Address Management (IPAM) Server feature
installed.
You have a support technician named Tech1. Tech1 is a member of the IPAM Administrators group on
Server1 and Server2.
You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2.
To which group on Server2 should you add Tech1?

A.
WinRMRemoteWMIUsers_
B. IPAM MSM Administrators
C.
Remote Management Users
D.
IPAM Administrators

Answer: A

Sunday 12 July 2015

70-417 Exam Question No 15

Question No 15:

You have a server named Server1.
You install the IP Address Management (IPAM) Server feature on Server1.


You need to provide a user named User1 with the ability to set the access scope of all the DHCP servers
that are managed by IPAM. The solution must use the principle of least privilege.
Which user role should you assign to User1?


A. IP Address Record Administrator Role
B.
IPAM Administrator Role
C.
IPAM MSM Administrator Role
D.
IPAM DHCP Scope Administrator Role

Answer: A

Sunday 5 July 2015

70-417 Exam Question No 14

Question No 14:

Your network contains an Active Directory forest named adatum.com. All servers run Windows Server 2012
R2. The domain contains four servers.
The servers are configured as shown in the following table.





You need to deploy IP Address Management (IPAM) to manage DNS and DHCP.
On which server should you install IPAM?

A. Server1
B. Server2
C. Server3
D. Server4

Answer: D