Ensurepass

QUESTION 31

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2.

 

You need to create 3-TB virtual hard disk (VHD) on Server1.

 

Which tool should you use?

 

A.

New-StorageSubsytemVirtualDisk

B.

New-VirtualDisk

C.

Server Manager

D.

Computer Management

 

Correct Answer: D

Explanation:

NOT A Share and Storage will only let you create a VHD on a storage pool

NOT B Is this powershell ? the command should be NEW-VHD

NOT C Server Manager, can’t find where to create this. (http://blogs.technet.com/b/heyscriptingguy/archive/2013/06/07/powertip-create-a- new- vhd-with-windows-powershell.aspx)

 

To create a VHD FILE you can use Computer Management.

Server Manager and New-VirtualDisk to create virtual disk, NOT virtual Hard disks.

 

Note:

From @L_Ranger, Computer Management is not an option anymore.

Back to New-VirtualDisk

Old explanation : D (Computer management)

 

For Server 2012:

http://technet.microsoft.com/en-us/library/dd851645.aspx

For Server 2008:

http://www.techrepublic.com/blog/the-enterprise-cloud/build-vhds-offline-with-server-manager/

With the Server Manager snap-in, you can create and attach a .VHD file directly. Figure A shows the drop-down box where a.VHD file can be created and attached. Figure A

 

clip_image002

 

 

 

 

 

 

 

 

 

 

QUESTION 32

You have a server named Server1.

 

You install the IP Address Management (IPAM) Server feature on Server1.

 

You need to provide a user named User1 with the ability to set the access scope of all the DHCP servers that are managed by IPAM. The solution must use the principle of least privilege.

 

Which user role should you assign to User1?

 

A.

IP Address Record Administrator Role

B.

IPAM Administrator Role

C.

IPAM MSM Administrator Role

D.

IPAM DHCP Scope Administrator Role

 

Correct Answer: A

Explanation:

IPAM ASM Administrators

IPAM ASM Administrators is a local security group on an IPAM server that is created when you install the IPAM feature. Members of this group have all the privileges of the IPAM Users security group, and can perform IP address space tasks in addition to IPAM common management tasks.

Note: When you install IPAM Server, the following local role-based IPAM security groups are created:

IPAM Users

IPAM MSM Administrators

IPAM ASM Administrators

IPAM IP Audit Administrators

IPAM Administrators

 

 

QUESTION 33

Your IT company has a large helpdesk department that deals with various types of calls from printer errors through to Application deployment. To give the help desk more responsibility you want to let them reset user passwords and unlock user accounts. This will speed up their response times for common support calls. Which of the following tools should you use to accomplish this?

 

A.

The Delegation of Control Wizard

B.

The Advanced Security Settings dialog box

C.

DSUTIL

D.

DSACLS

 

Correct Answer: A

Explanation:

http://technet.microsoft.com/en-us/library/dd145442.aspx

clip_image004

 

 

QUESTION 34

You have 30 servers that run Windows Server 2012 R2.

 

All of the servers are backed up daily by using Windows Azure Backup.

 

You need to perform an immediate backup of all the servers to Windows Azure Backup.

 

Which Windows PowerShell cmdlets should you run on each server?

 

A.

Get-OBPolicy | Start-OBBackup

B.

Get-WBPolicy | Start-WBBackup

C.

Start-OBRegistration | Start-OBBackup

D.

Get-WBBackupTarget | Start-WBBackup

 

Correct Answer: A

Explanation:

A.starts a backup job using a policy

B.Registers the current computer to Windows Azure Backup.

C.Not using Azure

D.Not using Azure

 

http://technet.microsoft.com/en-us/library/hh770406(v=wps.620).aspx

http://technet.microsoft.com/en-us/library/hh770426.aspx

http://technet.microsoft.com/en-us/library/hh770398.aspx

 

 

 

 

 

 

 

 

 

 

 

 

QUESTION 35

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 contains a virtual machine named VM1 that runs Windows Server 2012 R2.

 

You need to ensure that a user named User1 can install Windows features on VM1. The solution must minimize the number of permissions assigned to User1.

 

To which group should you add User1?

 

A.

Server Operators on Server1

B.

Power Users on VM1

C.

Administrators on VM1

D.

Hyper-V Administrators on Server1

 

Correct Answer: D

Explanation:

* The Hyper-V role enables you to create and manage a virtualized computing environment by using virtualization technology that is built in to Windows Server 2012. Hyper-V virtualizes hardware to provide an environment in which you can run multiple operating systems at the same time on one physical computer, by running each operating system in its own virtual machine.

 

* Simplified authorization

The Hyper-V Administrators group is introduced in Windows Server 2012 and is implemented as a local security group.

What value does this change add?

This group can reduce the number of users that belong to the local Administrators group while providing users with access to Hyper-V.

What works differently?

The Hyper-V Administrators group is a new local security group. Add users to this group instead of the local Administrators group to provide them with access to Hyper-V. Members of the Hyper-V Administrators have complete and unrestricted access to all features of Hyper-V.

Reference: What’s New in Hyper-V for Windows Server 2012

 

 

QUESTION 36

Your network contains two Web servers named Server1 and Server2. Both servers run Windows Server 2012 R2.

 

Server1 and Server2 are nodes in a Network Load Balancing (NLB) cluster. The NLB cluster contains an application named App1 that is accessed by using the URL http://app1.contoso.com.

 

You plan to perform maintenance on Server1. You need to ensure that all new connections to App1 are directed to Server2.

 

The solution must not disconnect the existing connections to Server1.

 

What should you run?

 

A.

The Set-NlbCluster cmdlet

B.

The Set-NlbClusterNode cmdlet

C.

The Stop-NlbCluster cmdlet

D.

The Stop-NlbClusterNode cmdlet

 

Correct Answer: D

QUESTION 37

Complete the missing word from the sentence below that is describing one of the new roles in Server 2008:

 

By using__________ , you can augment an organization’s security strategy by protecting information through persistent usage policies, which remain with the information, no matter where it is moved.

 

A.

AD FS

B.

AD RMS

C.

RODC

D.

AD LDS

 

Correct Answer: B

Explanation:

Active Directory Rights Management Services (AD RMS)

 

 

QUESTION 38

You have 20 servers that run Windows Server 2012 R2.

 

You need to create a Windows PowerShell script that registers each server in Microsoft Azure Backup and sets an encryption passphrase.

 

Which two PowerShell cmdlets should you run in the script? (Each correct answer presents part of the solution. Choose two.)

 

A.

Set-OBMachineSetting

B.

Add-OBFileSpec

C.

Start-OBRegistration

D.

New OBPolicy

E.

New-OBRetentionPolicy

 

Correct Answer: AC

Explanation:

Registers the current computer with Windows Azure Online Backup using the credentials (username and password) created during enrollment.

E: The Set-OBMachineSettingcmdlet sets aOBMachineSetting object for the server that includes proxy server settings for accessing the internet, network bandwidth throttling settings, and the encryption passphrase that is required to decrypt the files during recovery to another server.

 

http://technet.microsoft.com/en-us/library/hh770416(v=wps.620).aspx

http://technet.microsoft.com/en-us/library/hh770425(v=wps.620).aspx

http://technet.microsoft.com/en-us/library/hh770424.aspx

http://technet.microsoft.com/en-us/library/hh770398.aspx

http://technet.microsoft.com/en-us/library/hh770409.aspx

 

 

 

 

 

 

 

 

QUESTION 39

Your network contain an active directory domain named Contoso.com. The domain contains two servers named server1 and server2 that run Windows Server 2012 R2. You create a security template named template1 by using the security template snap-in. You need to apply template1 to server2. Which tool should you use?

 

A.

Security Configuration and Analysis

B.

Server Manager

C.

Security Template

D.

Computer management

 

Correct Answer: A

 

 

QUESTION 40

In an isolated test environment, you deploy a server named Server1 that runs a Server Core Installation of Windows Server 2012 R2. The test environment does not have Active Directory Domain Services (AD DS) installed.

 

You install the Active Directory Domain Services server role on Server1.

 

You need to configure Server1 as a domain controller.

 

Which cmdlet should you run?

 

A.

Install-ADDSDomain

B.

Install-ADDSForest

C.

Install-ADDSDomainController

D.

Install-WindowsFeature

 

Correct Answer: B

Explanation:

Install-ADDSDomainController Installs a domain controller in Active Directory. Install-ADDSDomain Installs a new Active Directory domain configuration. Install-ADDSForest Installs a new Active Directory forest configuration. Install-WindowsFeature Installs one or more Windows Server roles, role services, or features on either thelocal or a specified remote server that is running Windows Server 2012 R2. This cmdlet is equivalent to andreplaces Add-WindowsFeature, the cmdlet that was used to install roles, role services, and features.

 

C:PS>Install-ADDSForest -DomainName corp.contoso.com -CreateDNSDelegation DomainMode Win2008 -ForestMode Win2008R2 -DatabasePath “d:NTDS” -SysvolPath

“d:SYSVOL” -LogPath “e:Logs”Installs a new forest named corp.contoso.com, creates a DNS delegation in the contoso.com domain, setsdomain functional level to Windows Server 2008 R2 and sets forest functional level to Windows Server 2008,installs the Active Directory database and SYSVOL on the D: drive, installs the log files on the E: drive andhas the server automatically restart after AD DS installation is complete and prompts the user to provide andconfirm the Directory Services Restore Mode (DSRM) password.

http://technet.microsoft.com/en-us/library/hh974720%28v=wps.620%29.aspx

 

Free VCE & PDF File for Microsoft 70-417 Actual Tests

Instant Access to Free VCE Files: MCSE|MCSA|MCITP…
Instant Access to Free PDF Files: MCSE|MCSA|MCITP…