Ensurepass

QUESTION 21

HOTSPOT

You have a Hyper-V host named Server1 that runs Windows Server 2008 R2.All of the virtual machines on Server1 use VHDs.

 

You install the Hyper-V server role on a server named Server2 that runs Windows Server 2012 R2.Server2 has the same hardware configurations as Server1.

 

You plan to migrate the Hyper-V host from Server1 to Server2 by using the Windows Server Migration Tools.

 

In the table below, identify what can be migrated by using the Windows Server Migration Tools. Make only one selection in each row. Each correct selection is worth one point.

 

clip_image002

 

Correct Answer:

clip_image004

 

QUESTION 22

Your network contains an Active Directory domain named contoso.com. The domain contains two member servers named Server1 and Server2. All servers run Windows Server 2012 R2.

 

Server1 and Server2 have the Failover Clustering feature installed.The servers are configured as nodes in a failover cluster named Cluster1.

 

You add two additional nodes in Cluster1.

 

You have a folder named Folder1 on Server1 that hosts application datA. Folder1 is a folder target in a Distributed File System (DFS) namespace.

 

You need to provide highly available access to Folder1. The solution must support DFS Replication to Folder1.

 

What should you configure?

 

A.

Affinity – None

B.

Affinity – Single

C.

The cluster quorum settings

D.

The failover settings

E.

A file server for general use

F.

The Handling priority

G.

The host priority

H.

Live migration

I.

The possible owner

J.

The preferred owner

K.

Quick migration

L.

The Scale-Out File Server

 

Correct Answer: E

 

 

QUESTION 23

Your network contains an Active Directory domain named adatum.com. The domain contains three domain controllers. The domain controllers are configured as shown in the following table.

 

clip_image006

 

DC3 loses network connectivity due to a hardware failure.

 

You plan to remove DC3 from the domain.

 

You log on to DC3.

 

You need to identify which service location (SRV) records are registered by DC3.

 

What should you do?

 

A.

Open the %windir%system32dnsbackupadatum.com.dns file.

B.

Open the %windir%system32confignetlogon.dns file.

C.

Run ipconfig /displaydns.

D.

Run dcdiag /test:dns.

 

Correct Answer: B

Explanation:

Netlogon service creates a log file that contains all the locator resource records and places the log file in the following location:

 

References:

http://technet.microsoft.com/en-us/library/cc959303.aspx

http://technet.microsoft.com/en-us/library/cc731968(v=ws.10).aspx

 

 

QUESTION 24

You have five servers that run Windows Server 2012 R2. The servers have the Failover Clustering feature installed.

 

You deploy a new cluster named Cluster1. Cluster1 is configured as shown in the following table.

 

clip_image008

 

Server1, Server2/ and Server3 are configured as the preferred owners of the cluster roles.

 

Dynamic quorum management is disabled.

 

You plan to perform hardware maintenance on Server3.

 

You need to ensure that if the WAN link between Site1 and Site2 fails while you are performing maintenance on Server3, the cluster resource will remain available in Site1.

 

What should you do?

 

A.

Remove the node vote for Server3.

B.

Enable DrainOnShutdown on Cluster1.

C.

Add a file share witness in Site1.

D.

Remove the node vote for Server4 and Server5.

 

Correct Answer: D

Explanation:

Exclude secondary site nodes.

In general, do not give votes to WSFC (Windows Server Failover Clustering) nodes that reside at a secondary disaster recovery site. You do not want nodes in the secondary site to contribute to a decision to take the cluster offline when there is nothing wrong with the primary site.

 

 

QUESTION 25

Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs).

 

Currently, there are no enforced GPOs. The domain contains a top-level organizational unit (OU) for each department. A group named Group1 contains members from each department.

 

You have a GPO named GPO1 that is linked to the domain.

 

You need to configure GPO1 to Apply settings to Group1 only.

 

What should you use?

 

A.

Dcgpofix

B.

Get-GPOReport

C.

Gpfixup

D.

Gpresult

E.

Gptedit.msc

F.

Import-GPO

G.

Restore-GPO

H.

Set-GPInheritance

I.

Set-GPLink

J.

Set-GPPermission

K.

Gpupdate

L.

Add-ADGroupMember

 

Correct Answer: J

Explanation:

http://technet.microsoft.com/en-us/library/ee461038.aspx

clip_image010

 

 

 

QUESTION 26

Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2012 R2.

 

You need to create a custom Active Directory application partition.

 

Which tool should you use?

 

A.

Eseutil

B.

Dsadd

C.

Dsmod

D.

Ntdsutil

 

Correct Answer: D

Explanation:

* To create or delete an application directory partition

Open Command Prompt.

Type:ntdsutil

At the ntdsutil command prompt, type:domain management

At the domain management command prompt, type:connection

At the server connections command prompt, type:connect to server ServerName

At the server connections command prompt, type:quit

At the domain management command prompt, do one of the following:

 

* partition management

Manages directory partitions for Active Directory Domain Services (AD DS) or Active Directory Lightweight Directory Services (AD LDS).

This is a subcommand of Ntdsutil and Dsmgmt. Ntdsutil and Dsmgmt are command-line tools that are built into Windows Server 2008 and Windows Server 2008 R2.

/ partition management create nc %s1 %s2

Creates the application directory partition with distinguished name %s1, on the Active Directory domain controller or AD LDS instance with full DNS name %s2. If you specify “NULL” for %s2, this command uses the currently connected Active Directory domain controller.

Use this command only with AD DS. For AD LDS, use createnc %s1 %s2 %s3.

 

Note:

* An application directory partition is a directory partition that is replicated only to specific domain controllers. A domain controller that participates in the replication of a particular application directory partition hosts a replica of that partition.

 

 

QUESTION 27

Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 is configured as a Network Policy Server (NPS) server and as a DHCP server.

 

The network contains two subnets named Subnet1 and Subnet2. Server1 has a DHCP scope for each subnet.

 

You need to ensure that noncompliant computers on Subnet1 receive different network policies than noncompliant computers on Subnet2.

 

Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)

 

A.

The NAS Port Type constraints

B.

The Health Policies conditions

C.

The Called Station ID constraints

D.

The NAP-Capable Computers conditions

E.

The MS-Service Class conditions

 

Correct Answer: DE

Explanation:

C: The NAP health policy server uses the NPS role service with configured health policies and system health validators (SHVs) to evaluate client health based on administrator- defined requirements. Based on results of this evaluation, NPS instructs the DHCP server to provide full access to compliant NAP client computers and to restrict access to client computers that are noncompliant with health requirements.

 

D: If policies are filtered by DHCP scope, then MS-Service Class is configured in policy conditions.

 

 

QUESTION 28

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012 R2.

 

The domain contains 200 Group Policy objects (GPOs) and 100 WMI filters.

 

An administrator named Admin1 must be able to create new WMI filters and edit all of the existing WMI filters from the Group Policy Management Console (GPMC).

 

You need to delegate the required permissions to Admin1. The solution must minimize the number of permissions assigned to Admin1.

 

What should you do?

 

A.

From Active Directory Users and Computers, add Admin1 to the WinRMRemoteWMIUsers__group.

B.

From Group Policy Management, assign Creator Owner to Admin1 for the WMI Filters container.

C.

From Active Directory Users and Computers, add Admin1 to the Domain Admins group.

D.

From Group Policy Management, assign Full control to Admin1 for the WMI Filters container.

 

Correct Answer: D

Explanation:

Users with Full control permissions can create and control all WMI filters in the domain, including WMI filters created by others.

Users with Creator owner permissions can create WMI filters, but can only control WMI filters that they create.

http://technet.microsoft.com/en-us/library/cc757429(v=ws.10).aspx

 

 

 

 

 

 

 

 

 

QUESTION 29

Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1 and a domain controller named DC1. All servers run Windows Server 2012 R2.

 

A Group Policy object (GPO) named GPO1 is linked to the domain.

 

Server1 contains a folder named Folder1. Folder1 is shared as Share1.

 

You need to ensure that authenticated users can request assistance when they are denied access to the resources on Server1.

 

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

 

A.

Enable the Enable access-denied assistance on client for all file types policy setting for GPO1.

B.

Configure the Customize message for Access Denied errors policy setting of GPO1.

C.

Install the File Server Resource Manager role service on DC1.

D.

Install the File Server Resource Manager role service on Server1.

E.

Assign the Read Attributes NTFS permission on Folder1 to the Authenticated Users group.

 

Correct Answer: AD

Explanation:

* To configure access-denied assistance by using Group Policy

Open Group Policy Management. In Server Manager, click Tools, and then click Group Policy Management.

Right-click the appropriate Group Policy, and then click Edit.

Click Computer Configuration, click Policies, click Administrative Templates, click System, and then click Access-Denied Assistance.

Right-click Customize message for Access Denied errors, and then click Edit.

Select the Enabled option.

Etc

*You can configure access-denied assistance within a domain by using Group Policy, or you can configure the assistance individually on each file server by using the File Server Resource Manager console.

Reference: Deploy Access-Denied Assistance

 

 

QUESTION 30

Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Server1 and Server2 are nodes in a failover cluster named Cluster1. The network contains two servers named Server3 and Server4 that run Windows Server 2012 R2. Server3 and Server4 are nodes in a failover cluster named Cluster2.

 

You need to move all of the applications and the services from Cluster1 to Cluster2.

 

What should you do first from Failover Cluster Manager?

 

A.

On a server in Cluster2, click Migrate Roles.

B.

On a server in Cluster2, click Move Core Cluster Resources, and then click Select Node…

C.

On a server in Cluster1, configure Cluster-Aware Updating.

D.

On a server in Cluster2, click Move Core Cluster Resources, and then click Best Possible Node.

 

Correct Answer: A

Explanation:

http://blogs.msdn.com/b/clustering/archive/2012/06/25/10323434.aspx

clip_image012

 

Free VCE & PDF File for Microsoft 70-417 Actual Tests

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…