Actualtests.com presents your high-quality and trustworthy Microsoft Microsoft simulation tests. We are sure that you will get through the Microsoft 70-417 real exam with Actualtestss important preparation materials. As well as you will get full refund. Our own experts ensure that the Microsoft 70-417 exam questions are usually precise, accurate, along with logical which will make you succeed in your Microsoft exam.

2021 Jan 70-417 testing engine

Q11. Which of the following features is available when Windows Server 2012 R2 is installed using the GUI option but without the desktop experience feature installed? 

A. Metro-style Start screen 

B. Built-in help system 

C. All of these 

D. Windows Media Player 

Answer: A,B 

Explanation: 

Here is description of Desktop Experience: http://technet.microsoft.com/en-us/library/cc772567.aspx 


Q12. After setting up several Active Directory users for different OU's, you discover that the IT technician has miss spelt the Office property as Londn instead of London. 

Which tool should you use to correct the changes to all of the OU's at once? 

A. Use Dsget and Dsmod 

B. Use Dsquery and Dsmod 

C. Use MoveTo or MoveHere 

D. Multi select the users using the Ctrl key and opening Properties 

Answer: B 

Explanation: 

You can use Dsquery to query AD users by property values. So in this case we could query on the miss spelt word London. 


Q13. You have decided to install Windows Server 2012 R2 by choosing the Service Core Installation option. 

If you want to install, configure or uninstall server roles remotely, what tool would you use? 

A. Windows PowerShell 

B. Any of these 

C. Server Manager 

D. Remote Server Administration Tools (RSAT) 

Answer: B 

Explanation: 

Initial Answer: Windows PowerShell (Only PowerShell can be used to manage server roles remotely to a server core installation.) => FALSE Since 2012, remote installations of server roles to a Core installation are allowed i've just done it, screenshots as proof: 

Then, i just had to use Enable-NetFirewallRule to allow remote management using MMC And i can see my FSRM role was correctly remotely installed on my Core Installation (and is remotely managed using FSRM MMC): 


Q14. RAG DROP 

Your network contains a single Active Directory domain named contoso.com. The domain contains an Active Directory site named Site1 and an organizational unit (OU) named OU1. 

The domain contains a client computer named Client1 that is located in OU1 and Site1. 

You create five Group Policy objects (GPO). The GPOs are configured as shown in the following table. 

You need to identify in which order the GPOs will be applied to Client1. 

In which order should you arrange the listed GPOs? 

To answer, move all GPOs from the list of GPOs to the answer area and arrange them in 

the correct order. 

Answer: 


Q15. Your network contains an Active Directory domain named contoso.com. The domain contains six domain controllers named DO, DC2, DC3, DC4, DC5 and DC6. Each domain controller has the DNS Server server role installed and hosts an Active Directory-integrated zone for contoso.com. 

You plan to create a new Active Directory-integrated zone named litwareinc.com that will be used for testing. 

You need to ensure that the new zone will be available only on DC5 and DC6. 

What should you do first? 

A. Create an Active Directory connection object. 

B. Create an Active Directory site link. 

C. Create an application directory partition 

D. Change the zone replication scope. 

Answer: C 

Explanation: Zone replication scope: All domain controllers in a specified application directory partition Replicates zone data according to the replication scope of the specified application directory partition. For a zone to be stored in the specified application directory partition, the DNS server hosting the zone must be enlisted in the specified application directory partition. Use this scope when you want zone data to be replicated to domain controllers in multiple domains but you do not want the data to replicate to the entire forest. 

Reference: Understanding DNS Zone Replication in Active Directory Domain Services 


Avant-garde 70-417 rapidshare:

Q16. You create trusts in Windows Server 2008 with the New Trust Wizard. Which one of the following authentication types is being described below: 

An authentication setting that permits unrestricted access by any users in the specified forest to all available shared resources that are located in any of the domains in the local forest. 

A. Domain-wide authentication 

B. None of these 

C. Selective authentication 

D. Forest-wide authentication 

Answer: D 


Q17. Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2. Both servers have the Hyper-V server role installed. 

You plan to replicate virtual machines between Server1 and Server2. The replication will be encrypted by using Secure Sockets Layer (SSL). 

You need to request a certificate on Server1 to ensure that the virtual machine replication is encrypted. 

Which two intended purposes should the certificate for Server1 contain? (Each correct answer presents part of the solution. Choose two.) 

A. Client Authentication 

B. Kernel Mode Code Signing 

C. Server Authentication 

D. IP Security end system 

E. KDC Authentication 

Answer: A,C 

Explanation: 

http://blogs.technet.com/b/virtualization/archive/2012/03/13/hyper-v-replica-certificaterequirements.aspx 


Q18. Your network contains an Active Directory domain named contoso.com. The domain 

contains a server named Server1 that runs Windows Server 2012 R2. 

You enable and configure Routing and Remote Access (RRAS) on Server1. 

You create a user account named User1. 

You need to ensure that User1 can establish VPN connections to Server1. 

What should you do? 

A. Modify the members of the Remote Management Users group 

B. Add a RADIUS client 

C. Modify the Dial-in setting of User1 

D. Create a connection request policy 

Answer: C 


Q19. Your network contains an Active Directory domain named contoso.com. The network contains a file server named Server1 that runs Windows Server 2012 R2. 

You are configuring a central access policy for temporary employees. 

You enable the Department resource property and assign the property a suggested value of Temp. 

You need to configure a target resource condition for the central access rule that is scoped to resources assigned to Temp only. 

Which condition should you use? 

A. (Department.Value Equals "Temp") 

B. (Resource.Department Equals "Temp") 

C. (Temp.Resource Equals "Department") 

D. (Resource.Temp Equals "Department") 

Answer: B 

Explanation: 

Explanation http://technet.microsoft.com/fr-fr/library/hh846167.aspx 


Q20. Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8. 

Your company has users who work from home. Some of the home users have desktop computers. Other home users have laptop computers. All of the computers are joined to the domain. 

All of the computer accounts are members of a group named Group1. Currently, the home users access the corporate network by using a PPTP VPN. You implement DirectAccess by using the default configuration and you specify Group1 as the DirectAccess client group. 

The home users who have desktop computers report that they cannot use DirectAccess to access the corporate network. 

The home users who have laptop computers report that they can use DirectAccess to access the corporate network. 

You need to ensure that the home users who have desktop computers can access the network by using DirectAccess. 

What should you modify? 

A. The WMI filter for Direct Access Client Settings GPO 

B. The conditions of the Connections to Microsoft Routing and Remote Access server policy 

C. The membership of the RAS and IAS Servers group 

D. The security settings of the computer accounts for the desktop computers 

Answer: A 

Explanation: 

The default settings includes creating a GPO that has a WMI filter for laptops only.