Exambible offers probably the most reliable and high-quality Microsoft 70-417 practice dumps for Microsoft certification exam. The large amount of consumers have faith in your Microsoft Microsoft products. Many of us are confident with the quality associated with our Microsoft Microsoft goods and that will be why we offer the no hassle 30 days Income Back Assure. If you fail the actual Microsoft exam after purchasing our goods, we will certainly refund the total amount. Exambible has the utmost source associated with Microsoft 70-417 exam questions and answers. These types of understandable Microsoft 70-417 study supplies are obtainable in downloadable Pdf format which is basic to make use of.

2021 Dec 70-417 testing engine

Q231. Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2. 

An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8 Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1. 

You make a change to GPO1. 

You need to force all of the computers in OU1 to refresh their Group Policy settings immediately. The solution must minimize administrative effort. 

Which tool should you use? 

A. TheSecedit command 

B. The Invoke-GpUpdatecmdlet 

C. Group Policy Object Editor 

D. Server Manager 

Answer:


Q232. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. 

You log on to Server1 by using a user account named User2. 

From the Remote Access Management Console, you run the Getting Started Wizard and you receive a warning message as shown in the exhibit. (Click the Exhibit button.) 

You need to ensure that you can configure DirectAccess successfully. The solution must minimize the number of permissions assigned to User2. 

To which group should you add User2? 

A. Account Operators 

B. Enterprise Admins 

C. Domain Admins 

D. Server Operators 

Answer:

Explanation: 

http://technet.microsoft.com/en-us/library/hh918408.aspx#feedback 


Q233. Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2. 

Server1 and Server2 have the Failover Clustering feature installed. The servers are configured as nodes in a failover cluster named Cluster1. Cluster1 contains a Clustered Shared Volume (CSV). 

A developer creates an application named App1. App1 is NOT a cluster-aware application. App1 stores data in the file system. 

You need to ensure that App1 runs in Cluster1. The solution must minimize development effort. 

Which cmdlet should you run? 

A. Add-ClusterServerRole 

B. Add ClusterGenericApplicationRole 

C. Add-ClusterGenericServiceRole 

D. Add ClusterScaleOutFileServerRole 

Answer:


Q234. RAG DROP 

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2 that run Windows Server 2012 R2. 

You configure a new failover cluster named Cluster1. Server1 and Server2 are nodes in Cluster1. You need to configure the disk that will be used as a witness disk for Cluster1. 

How should you configure the witness disk? 

To answer, drag the appropriate configurations to the correct location or locations. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 

Answer: 


Q235. Your network contains two Hyper-V hosts named Host1 and Host2. Host1 contains a virtual machine named VM1. Host2 contains a virtual machine named VM2. VM1 and VM2 run Windows Server 2012 R2. 

You install the Network Load Balancing feature on VM1 and VM2. 

You need to ensure that the virtual machines are configured to support Network Load Balancing (NLB). 

Which virtual machine settings should you configure on VM1 and VM2? 

A. DHCP guard 

B. MAC address 

C. Router guard 

D. Port mirroring 

Answer:

Explanation: When MAC addresses are not assigned to virtual machines, it could cause network problems. 

References: Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 7: Hyper-V virtualization, Lesson 1: Deploying and configuring Hyper-V hosts, p. 313-319 http://blogs.msdn.com/b/clustering/archive/2010/07/01/10033544.aspx 


Regenerate 70-417 free practice exam:

Q236. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has the Remote Desktop Session Host role service installed. The computer account of Server1 resides in an organizational unit (OU) named OU1. 

You create and link a Group Policy object (GPO) named GPO1 to OU1. GPO1 is configured as shown in the exhibit. (Click the Exhibit button.) 

You need to prevent GPO1 from applying to your user account when you log on to Server1. GPO1 must apply to every other user who logs on to Server1. 

What should you configure? 

A. Item-level targeting 

B. Security Filtering 

C. Block Inheritance 

D. WMI Filtering 

Answer:

Explanation: Security filtering is a way of refining which users and computers will receive and apply the settings in a Group Policy object (GPO). Using security filtering, you can specify that only certain security principals within a container where the GPO is linked apply the GPO. Security group filtering determines whether the GPO as a whole applies to groups, users, or computers; it cannot be used selectively on different settings within a GPO. 


Q237. Your network contains an Active Directory domain named adatum.com. The domain contains a server named CA1 that runs Windows Server 2012 R2. CA1 has the Active Directory Certificate Services server role installed and is configured to support key archival and recovery. 

You need to ensure that a user named User1 can decrypt private keys archived in the Active Directory Certificate Services (AD CS) database. The solution must prevent User1 from retrieving the private keys from the AD CS database. 

What should you do? 

A. Assign User1 the Issue and Manage Certificates permission to CA1. 

B. Assign User1 the Read permission and the Write permission to all certificate templates. 

C. Provide User1 with access to a Key Recovery Agent certificate and a private key. 

D. Assign User1 the Manage CA permission to CA1. 

Answer:

Explanation: 

http://social.technet.microsoft.com/wiki/contents/articles/7573.active-directory-certificate-services-pki-keyarchival-and-management.aspx#Protecting_Key_Recovery_Agent_Keys 


Q238. RAG DROP 

Answer: 


Q239. RAG DROP 

You have a file server named Server1 that runs Windows Server 2012 R2. The folders on Server1 are configured as shown in the following table. 

A new corporate policy states that backups must use Microsoft Online Backup whenever possible. You need to identify which technology you must use to back up Server1. The solution must use Microsoft Online Backup whenever possible. What should you identify? To answer, drag the appropriate backup type to the correct location or locations. Each backup type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. 

Answer: 


Q240. Your company's security policy states that all of the servers deployed to a branch office must not have the graphical user interface (GUI) installed. In a branch office, a support technician installs a server with a GUI installation of Windows Server 2012 R2 on a new server, and then configures the server as a DHCP server. 

You need to ensure that the new server meets the security policy. You want to achieve this goal by using the minimum amount of administrative effort. 

What should you do? 

A. From Server Manager, uninstall the User Interfaces and Infrastructure feature. 

B. Reinstall Windows Server 2012 R2on the server. 

C. From Windows PowerShell, run Uninstall-WindowsFeature Desktop-Experience. 

D. From Windows PowerShell, run Uninstall-WindowsFeature PowerShell-ISE. 

Answer: