70-417 Exam
Advanced Guide: ms exam 70-417
Proper study guides for Up to the immediate present Microsoft Upgrading Your Skills to MCSA Windows Server 2012 certified begins with Microsoft 70-417 preparation products which designed to deliver the Real 70-417 questions by making you pass the 70-417 test at your first time. Try the free 70-417 demo right now.
2021 Dec microsoft learning exam 70-417:
Q51. Your network contains a server named Server1 that runs Windows Server 2012. Server1
has the Hyper-V server role installed.
Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4.
Server1 is configured as shown in the following table.
VM2 sends and receives large amounts of data over the network.
You need to ensure that the network traffic of VM2 bypasses the virtual switches of the parent partition.
What should you configure?
A. NUMA topology
B. Resource control
C. Resource metering
D. Virtual Machine Chimney
E. The VLAN ID
F. Processor Compatibility
G. The startup order
H. Automatic Start Action
I. Integration Services
J. Port mirroring
K. Single-root I/O virtualization
Answer: K
Explanation:
Single-root I/O virtualization -capable network adapters can be assigned directly to a virtual machine to maximize network throughput while minimizing network latency and the CPU overhead required for processing network traffic.
References: http://technet.microsoft.com/en-us/library/cc766320(v=ws.10).aspx http://technet.microsoft.com/en-us/library/hh831410.aspx Exam Ref 70-410, Installing and Configuring Windows Server 2012, Chapter 3: Configure Hyper-V, Objective 3.1: Create and Configure virtual machine settings, p. 144 Training Guide: Installing and Configuring Windows Server 2012: Chapter 7: Hyper-V Virtualization, Lesson 2: Deploying and configuring virtual machines, p. 335
Q52. RAG DROP
You have a file server named Server1 that runs Windows Server 2012 R2. The folders on Server1 are configured as shown in the following table.
A new corporate policy states that backups must use Windows Azure Online Backup whenever possible.
You need to identify which technology you must use to back up Server1. The solution must use Windows Azure Online Backup whenever possible.
What should you identify?
To answer, drag the appropriate backup type to the correct location or locations. Each backup type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Q53. Your network contains an Active Directory domain named contoso.com. The domain
contains client computers that run Either Windows XP, Windows 7, or Windows 8.
Network Policy Server (NPS) is deployed to the domain.
You plan to create a system health validator (SHV).
You need to identify which policy settings can be applied to all of the computers.
Which three policy settings should you identify? (Each correct answer presents part of the
solution. Choose three.)
A. Automatic updating is enabled.
B. A firewall is enabled for all network connections.
C. An antispyware application is on.
D. Antispyware is up to date.
E. Antivirus is up to date.
Answer: A,B,E
Explanation: http://technet.microsoft.com/en-us/library/cc731260.aspx
*
System health agent (SHA) is a NAP component.
*
System health agent (SHA) A component that checks the state of the client computer to determine whether the settings monitored by the SHA are up-to-date and configured correctly. For example, the Windows Security Health Agent (WSHA) can monitor Windows Firewall, whether antivirus software is installed, enabled, and updated, whether antispyware software is installed, enabled, and updated, and whether Microsoft Update Services is enabled and the computer has the most recent security updates from Microsoft Update Services. There might also be SHAs (and corresponding system health validators) available from other companies that provide different functionality.
Q54. Is the following statement true or false?
When a printer is installed on a network, default printer permissions are assigned that allow all users to print and change the status of documents sent to it.
A. True
B. False
Answer: B
Explanation:
Initial answer = true => false the key is all users and change the status of documents. Change the status document refers to the "Manage Document" permission and it's not a default permission for "all users". By default, so far, a user can only modify status of the jobs that he initiated himself. but i tested to make sure. I installed 2 fake printers (one by the network, and one using LPT1) and here's the default permissions i have got:
If we consider that Everyone can be used to designate "all users", the above screenshot is enough. but just to be sure, i'll add the "Domain Users" and "Authenticated Users" groups to the permissions to check which permission are assigned by default: exactly the same: only the permission to print documents:
Now we can be sure the answer is "FALSE".
NB: by default, only Administrators (and administrator) and "All Application Packages" have
both permissions (print & manage documents) http://technet.microsoft.com/en-us/library/cc773372%28v=ws.10%29.aspx Assigning printer permissions When a printer is
installed on a network, default printer permissions are assigned that allow all users to print,
and allow select groups to manage the printer, the documents sent to it, or both.
Because the printer is available to all users on the network, you might want to limit access
for some users by assigning specific printer permissions. For example, you could give all
non administrative users in a department the Print permission and give all managers the
Print and Manage Documents permissions. In this way, all users and managers can print
documents, but managers can also change the print status of any document sent to the
printer.
Q55. You have a server named Server1 that runs a Server Core installation of Windows Server 2012 R2 Standard. You establish a Remote Desktop session to Server1.
You need to identify which task can be performed on Server1 from within the Remote Desktop session.
What should you identify?
A. Install a feature by using Server Manager.
B. Modify the network settings by using Sconfig.
C. Disable services by using Msconfig.
D. Join a domain by using the System Properties.
Answer: B
Explanation: In Windows Server 2012 R2, you can use the Server Configuration tool (Sconfig.cmd) to configure and manage several common aspects of Server Core installations. You must be a member of the Administrators group to use the tool. Sconfig.cmd is available in the Minimal Server Interface and in Server with a GUI mode.
http://technet.microsoft.com/en-us/library/jj647766.aspx Training Guide: Installing and Configuring Windows Server 2012 R2, Chapter 2: Deploying servers, p. 80
Updated second shot 70-417:
Q56. Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the IP Address Management (IPAM) Server feature installed. Server2 has the DHCP Server server role installed. A user named User1 is a member of the IPAM Users group on Server1. You need to ensure that User1 can use IPAM to modify the DHCP scopes on Server2. The solution must minimize the number of permissions assigned to User1.
To which group should you add User1?
A. IPAM ASM Administrators on Server1
B. IPAMUG in Active Directory
C. DHCP Administrators on Server2
D. IPAM MSM Administrators on Server1
Answer: C
Explanation:
Sever2 "DHCP Users" group membership is required to modify scopes on Server2 of course DHCP Administrators can proceed these tasks too. From the MSPress book "Upgrading your skills to MCSA Windows Server 2012 R2" IPAM Provisioning IPAM installation sets up various periodic data collection tasks to collect relevant data from managed DNS, DHCP, DC and NPS servers to enable address space management, multiserver management and monitoring and event catalog scenarios. All IPAM tasks launch under the Network Service account, which presents the local computer's credentials to remote servers. To accomplish this, administrators must enable read access and security permissions for the required resources over managed servers for the IPAM server's computer account. Further the relevant firewall ports need to be configured on these managed servers. IPAM Access Settings The following table provides a mapping of the IPAM functionality and managed server role type to access setting and FW rule required by IPAM periodic tasks
IPAM Access Monitoring IPAM access monitoring tracks the provisioning state of the following statuses on the server roles, which are displayed in the details pane of the IPAM server inventory view
Q57. Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.
An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8 Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1.
You make a change to GPO1.
You need to force all of the computers in OU1 to refresh their Group Policy settings immediately. The solution must minimize administrative effort.
Which tool should you use?
A. The Set-AdComputercmdlet
B. Group Policy Object Editor
C. Active Directory Users and Computers
D. Group Policy Management Console (GPMC)
Answer: D
Explanation:
In the previous versions of Windows, this was accomplished by having the user run
GPUpdate.exe on their computer. Starting with Windows Server? 2012 and Windows?8,
you can now remotely refresh Group Policy settings for all computers in an OU from one
central location through the Group Policy Management Console (GPMC). Or you can use
the Invoke-GPUpdate cmdlet to refresh Group Policy for a set of computers, not limited to
the OU structure, for example, if the computers are located in the default computers
container. Note: Group Policy Management Console (GPMC) is a scriptable Microsoft
Management Console (MMC) snap-in, providing a single administrative tool for managing
Group Policy across the enterprise. GPMC is the standard tool for managing Group Policy.
Incorrect:
Not B: Secedit configures and analyzes system security by comparing your current
configuration to at least one template.
Reference: Force a Remote Group Policy Refresh (GPUpdate)
Q58. Your network contains an Active Directory domain named adatum.com. The domain contains several thousand member servers that run Windows Server 2012 R2. All of the computer accounts for the member servers are in an organizational unit (OU) named ServersAccounts. Servers are restarted only occasionally.
You need to identify which servers were restarted during the last two days.
What should you do?
A. Run dsquery computer and specify the -sra /epwc parameter.
B. Run Get-ADComputer and specify the SearchScope parameter.
C. Run dsquery server and specify the -o parameter.
D. Run Get-ADComputer and specify the lastLogon property
Answer: D
Explanation:
http://technet.microsoft.com/en-us/library/ee617192.aspx
SearchScope Specifies the scope of an Active Directory search. Possible values for this
parameter are:
Base or 0
OneLevel or 1
Subtree or 2
A Base query searches only the current path or object.
A OneLevel query searches the immediate children of that path or object.
A Subtree query searches the current path or object and all children of that path or object.
http://technet.microsoft.com/en-us/library/cc732885%28v=ws.10%29.aspx
Dsquery server
-o {dn | rdn}
Specifies the format that dsquery uses to display the search results. A dn value displays
the distinguished name of each entry. An rdn value displays the relative distinguished
name of each entry. The default value is dn.
NB: epwc doesn't exist for Dsquery computer so even if i'm not sure it's the best way, the
only possible answer is using "Get-ADComputer and specify the lastLogon property"
Q59. Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. The domain contains two organizational units (OUs) named OU1 and OU2 in the root of the domain. Two Group Policy objects (GPOs) named GPO1 and GP02 are created. GPO1 is linked to OU1.
GPO2 is linked to OU2. OU1 contains a client computer named Computer1. OU2 contains a user named User1. You need to ensure that the GPOs Applied to Computer1areApplied to User1 when User1 logs on.
What should you configure?
A. The GPO Status
B. WMI Filtering
C. GPO links
D. Item-level targeting
Answer: C
Q60. OCSetup is available as part of the Windows Vista and Windows Server 2008 operating system. This tool replaces Sysocmgr.exe, which is included in the Windows XP and Windows Server 2003 operating systems.
This new tool can be used to perform which one of the following operations?
A. All of these
B. Microsoft System Installer (MSI) files that are passed to the Windows Installer service (MSIExec.exe)
C. Component-Based Servicing (CBS) components that are passed to Package Manager
D. CBS or MSI packages that have an associated custom installer .exe file
Answer: A
Explanation:
http://technet.microsoft.com/en-us/library/dd799247%28v=ws.10%29.aspx OCSetup Command-Line Options The Windows?Optional Component Setup (OCSetup.exe) tool is a command-line tool that can be used to add system components to an online Windows image. It installs or removes Component-Based Servicing (CBS) packages online by passing packages to the Deployment Image Servicing and Management (DISM) tool for installation or removal. OCSetup can also be used to install Microsoft System Installer (MSI) packages by calling the Windows Installer service (MSIExec.exe) and passing Windows Installer components to it for installation or removal. The MSI file must be signed by Microsoft to be able to be installed by using OCSetup. In addition, OCSetup can be used to install CBS or MSI system component packages that have associated custom installers (.exe files). The OCSetup tool is available as part of the Windows?7 and Windows Server?2008 R2 operating systems. You can use OCSetup.exe on a computer running Windows 7 or Windows Server 2008 R2.