Latest Microsoft MCSA 70-417 exam dumps, 70-417 Exam Practice Tests | 100% Free

Easily pass the Microsoft MCSA 70-417 exam: “Upgrading Your Skills to MCSA Windows Server 2012” – https://www.pass4itsure.com/70-417.html (Q&As: 708) Free share the latest 70-417 dumps questions and answers!
Practice the test online! Improve your skills and exam experience!

Download Microsoft MCSA 70-417 PDF Online

[PDF] Free Microsoft 70-417 pdf dumps download from Google Drive: https://drive.google.com/open?id=1Yt70SHE0JT1V4qXMQsxSYhHL9qxi_oGW

[PDF] Free Full Microsoft pdf dumps download from Google Drive: https://drive.google.com/open?id=1gdQrKIsiLyDEsZ24FxsyukNPYmpSUDDO

Valid information provided by Microsoft officials

Exam 70-417: Upgrading Your Skills to MCSA Windows Server 2012: https://www.microsoft.com/en-us/learning/exam-70-417.aspx

This exam is intended for IT professionals who want to validate the skills and knowledge necessary to implement the Windows Server 2012 core infrastructure services.

pass4itsure 70-417 Skills measured

This exam measures your ability to accomplish the technical tasks listed below.

Exam 70-410

  • Install and configure servers
  • Configure server roles and features
  • Configure Hyper-V
  • Install and administer Active Directory

Exam 70-411

  • Deploy, manage, and maintain servers
  • Configure network services and access
  • Configure a network policy server infrastructure
  • Configure and manage Active Directory
  • Configure and manage Group Policy

Exam 70-412

  • Configure and manage high availability
  • Configure file and storage solutions
  • Implement business continuity and disaster recovery
  • Configure network services
  • Configure access and information protection solutions

Latest effective Microsoft MCSA 70-417 Exam Practice Tests

QUESTION 1
You have a server named Server1 that runs Windows Server 2012 R2.
You add a 4-TB disk named Disk 5 to Server1.
You need to ensure that you can create a 3-TB volume on Disk 5.
What should you do?
A. Create a storage pool.
B. Convert the disk to a GPT disk.
C. Convert the disk to a dynamic disk.
D. Create a VHD, and then attach the VHD.
Correct Answer: Bpass4itsure 70-417 exam question q1

The disk must be GPT since GPT disks allow for partitioning.
References: http://msdn.microsoft.com/en-us/library/windows/hardware/gg463525.aspx

 

QUESTION 2
You work for a company named ABC.com. Your role of Network Administrator includes the management of the
company\\’s physical and virtual infrastructure. The network includes servers running Windows Server 2008 R2 Service
Pack 1
(SP1) and Windows Server 2012.
Virtual machines (VMs) are hosted on Windows Server 2012 servers running the Hyper-V role. One Windows Server
2012 Hyper-V host server is named ABC-HVDev1. ABC-HVDev1 has four quad-core processors, 48GB RAM and six physical network adapters configured as three network adapter teams. ABC-HVDev1 also has two Host Bus Adapters
(HBAs) and connects to a Fiber Channel SAN.
You have installed five VMs named DevVM1 through DevVM5 on ABC-HVDev1. Company developers use the VM to
test applications during the development of the applications. The developers regularly take snapshots of the VMs and
often
restore the VMs back to earlier snapshots.
You need to ensure successful time synchronization in the event that significant time has passed since a VM last
synched time.
What should you do?
A. You should configure Automatic Start Action.
B. You should configure the Startup Order.
C. You should configure NUMA topology.
D. You should configure Resource Control
E. You should configure SR-IOV.
F. You should configure Integration Services.
Correct Answer: F

 

QUESTION 3
Your network contains an Active Directory domain named contoso.com. The domain contains four servers named
Server1, Server2, Server3, and Server4 that run Windows Server 2012 R2.
All servers have the Hyper-V server role and the Failover Clustering feature installed.
The servers are configured as shown in the following table.pass4itsure 70-417 exam question q3

You need to replicate virtual machines from Cluster1 to Cluster2.
Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)
A. From Hyper-V Manager on a node in Cluster2, create three virtual machines.
B. From Cluster2, add and configure the Hyper-V Replica Broker role.
C. From Failover Cluster Manager on Cluster1, configure each virtual machine for replication.
D. From Cluster1, add and configure the Hyper-V Replica Broker role.
E. From Hyper-V Manager on a node in Cluster2/ modify the Hyper-V settings.
Correct Answer: BCD
These are two clusters, to replicate any VM to a cluster you need to configure the Replica Broker role on each cluster
the last step should be enabling replication on the VMs.

 

QUESTION 4
DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains two DHCP servers named
DHCP1 and DHCP2 that run Windows Server 2012.
You install the IP Address Management (IPAM) Server feature on a member server named Server1 and you run the
Run Invoke-IpamGpoProvisioningcmdlet.
You need to manage the DHCP servers by using IPAM on Server1.
Which three actions should you perform?
To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the
correct order.
Select and Place:pass4itsure 70-417 exam question q4

Correct Answer:

pass4itsure 70-417 exam question q4-1

 

QUESTION 5
Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain Services (AD
DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2 Service Pack 1 (SP1)
and Windows Server 2012. You need to commission a new file server in the domain. You install a Windows Server 2012
a server named ABC-W12File1 and install the File Server role. You want to use online backup service in Windows
Server Backup to back up the shared folders on ABC-W12File1. You install the Windows Server Backup feature on ABC-
W12File1.
You then register for Windows Azure Online Backup.
Which two of the following actions should you perform next? (Choose two).
A. Install the Windows Server Migration Tools feature.
B. Download and install the Microsoft Online Backup Service Agent.
C. Run the wbadmin.exe utility.
D. Register the server in Windows Server Backup.
E. Register the server in the Windows Azure Online Backup dashboard.
Correct Answer: BD

 

QUESTION 6
Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller
named DC1 and a member server named Server1. Server1 has the IP Address Management (IPAM) Server feature
installed.
On DC1, you configure Windows Firewall to allow all of the necessary inbound ports for IPAM.
On Server1, you open Server Manager as shown in the exhibit. (Click the Exhibit button.)pass4itsure 70-417 exam question q6

You need to ensure that you can use IPAM on Server1 to manage DNS on DC1. What should you do?
A. Add Server1 to the Remote Management Users group.
B. Modify the outbound firewall rules on Server1.
C. Add Server1 to the Event Log Readers group.
D. Modify the inbound firewall rules on Server1.
Correct Answer: C

pass4itsure 70-417 exam question q6-1

The exhibit shows (in the details tab) that firewall rules are OK for DNS management (DNS RPC Access Status
Unblocked) But it shows too that Event log Access Status is blocked (which by the way blocks the IPAM Access Status)
=> We should solve this by adding the Server1 computer account to the Event Log Readers group Understand and
Troubleshoot IP Address Management (IPAM) in Windows Server 8 Beta (download.microsoft.com) IPAM Access
Monitoringpass4itsure 70-417 exam question q6-2

IPAM Access Settings Manual provisioning For manual provisioning, ensure that the required access settings are
appropriately configured on the target server manually. Verify Access Verify that IPAM access status is listed as
unblocked indicating that manual or GPO based provisioning is successfully complete. For the IPAM access status
value to be allowed, all of the access sub-states shown in the details pane should be marked as allowed. These access
states are: DNS RPC access status DHCP RPC access status Event log access status DHCP audit share access status
[…] Troubleshooting Access Issues If any of the access sub-states for managed server roles is showing in the Blocked
state, check that the corresponding setting is enabled on the target server. For details of access setting to sub-state
mapping refers to the IPAM Access Monitoring section in this guide. For GPO based provisioning, the GPResult
command line tool can be used to troubleshoot group policy update issues. The provisioning task set up by IPAM DHCP
and DNS GPOs creates a troubleshooting log in the location%windir%\temp named IpamDhcpLog.txt and
IpamDnsLog.txt respectively. http://social.technet.microsoft.com/Forums/en-US/winserver8gen/thread/c882c077
-61bd45f6-ab47-735bd728d3bc/ IPAM -Unblock access to a DC? The process to manually (not GPO based) unblock a
DNS/DC server is:

pass4itsure 70-417 exam question q6-3

1.
Enable DNS RPC access by enabling the following inbound Firewall rules:
a) DNS Service (RPC)
b) DNS Service (RPC Endpoint Mapper)
2.
Enable remote management access by enabling the following inbound Firewall rules:
a) Remote
b) Service Management (RPC)
b) Remote Service Management (RPC-EPMAP)
3.
Enable Remote Event Log Management RPC access by enabling the following inbound
Firewall rules:
a) Remote Event Log Management (RPC)
b) Remote Event Log Management (RPC-EPMAP)
4.
Add the IPAM machine acct to the Event Log Readers domain security group. See the example below.
This view is from Active Directory Users and Computers \contoso.com \Builtin \Event Log Readers:

pass4itsure 70-417 exam question q6-4 pass4itsure 70-417 exam question q6-5

Also, there should be a Details tab at the bottom that summarizes whether or not the correct firewall ports and the Event
Log Access status is unblocked
References: http://technet.microsoft.com/en-us/library/jj878313.aspx

 

QUESTION 7
DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller
named DC1.
You need to create an Active Directory snapshot on DC1.
Which four commands should you run?
To answer, move the four appropriate commands from the list of commands to the answer area and arrange them in the
correct order.
Select and Place:pass4itsure 70-417 exam question q7

Correct Answer:

pass4itsure 70-417 exam question q7-1

Box 1: ntdsutil
Box 2: snapshot
Box 3: activate instance ntds
Box 4: create
Note:
Create a snapshot of AD DS in Windows Server 2012 R2 by using NTDSUTIL
1 – On the domain server, open command prompt and type ntdsutil and press enter…
2 – Next, type snapshot and press enter…
3 – Next, type activates instance ntds and press Enter…
4 – Next, type creates (this create command is to generate a snapshot of my AD) and press Enter…
Reference:
http://technet.microsoft.com/nl-nl/library/cc753609%28v=ws.10%29.aspx
http://mizitechinfo.wordpress.com/2013/08/13/simple-step-create-a-snapshot-of-ad-ds-in-windows-server-2012-r2-by-using-ntdsutil/

 

QUESTION 8
Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server
2008. All domain controllers run Windows Server 2008 R2.
The domain contains a file server named Server1 that runs Windows Server 2012.
Server1 has a BitLocker Drive Encryption (BitLocker)-encrypted drive.
Server1 uses a Trusted Platform Module (TPM) chip.
You enable the Turn on TPM backup to Active Directory Domain Services policy setting by using a Group Policy object
(GPO). You need to ensure that you can back up the BitLocker recovery information to Active Directory.
What should you do?
A. Raise the forest functional level to Windows Server 2008 R2.
B. Enable the Configure the level of TPM owner authorization information available to the operating system policy
setting and set the Operating system managed TPM authentication level to None.
C. Add a BitLocker data recovery agent.
D. Import the TpmSchemaExtension.ldf and TpmSchemaExtensionACLChanges.ldf schema extensions to the Active
Directory schema.
Correct Answer: D
References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj635854(v=ws.11)

 

QUESTION 9
Your network contains an Active Directory domain named contoso.com. The domain contains four servers. The servers
are configured as shown in the following table.pass4itsure 70-417 exam question q9

You plan to deploy an enterprise certification authority (CA) on a server named Servers. Server5 will be used to issue
certificates to domain-joined computers and workgroup computers.
You need to identify which server you must use as the certificate revocation list (CRL) distribution point for Server5.
Which server should you identify?
A. Server1
B. Server3
C. Server4
D. Server2
Correct Answer: B
CDP (and AD CS) always use a Web Server
NB: this CDP must be accessible from outside the AD, but here we don\\’t have to wonder about that as their \\’s only
one web server.
http://technet.microsoft.com/fr-fr/library/cc782183%28v=ws.10%29.aspx
Selecting a CRL Distribution Point
Because CRLs are valid only for a limited time, PKI clients need to retrieve a new CRL periodically. Windows
Server 2003 PKI Applications look in the CRL distribution point extension for a URL that points to a network location
from which the CRL object can be retrieved. Because CRLs for enterprise CAs are stored in Active Directory, they can
be
accessed by means of LDAP. In comparison, because CRLs for stand-alone CAs are stored in a directory on the server,
they can be accessed by means of HTTP, FTP, and so on as long as the CA is online. Therefore, you should set the
CRL distribution point after the CA has been installed.
The system account writes the CRL to its distribution point, whether the CRL is published manually or is published
according to an established schedule. Therefore you must ensure that the system accounts for CAs have permission to
write to
the CRL distribution point. Because the CRL path is also included in every certificate, you must define the CRL location
and its access path before deploying certificates. If an Application performs revocation checking and a valid CRL is not available on the local computer, it rejects the certificate.
You can modify the CRL distribution point by using the Certification Authority MMC snap-in. In this way, you can change
the location where the CRL is published to meet the needs of users in your organization. You must move the CRL
distribution point from the CA configuration folder to a Web server to change the location of the CRL, and you must
move each new CRL to the new distribution point, or else the chain will break when the previous CRL expires.
Note
On root CAs, you must also modify the CRL distribution point in the CAPolicy.inf file so that the root CA certificate
references the correct CDP and AIA paths if specified. If you are using certificates on the Internet, you must have at
least one
HTTPs-accessible location for all certificates that are not limited to internal use.
http://technet.microsoft.com/en-us/library/cc771079.aspx
Configuring Certificate Revocation
It is not always possible to contact a CA or other trusted server for information about the validity of a certificate. To
effectively support certificate status checking, a client must be able to access revocation data to determine whether the certificate is valid or has been revoked. To support a variety of scenarios, Active Directory Certificate Services (AD CS)
supports industry-standard methods of certificate revocation. These include the publication of certificate revocation lists
(CRLs) and delta CRLs, which can be made available to clients from a variety of locations, including Active Directory
Domain Services (AD DS), Web servers, and network file shares.

 

QUESTION 10
Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the Hyper-V server role
installed.
Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4.
Server1 is configured as shown in the following table.pass4itsure 70-417 exam question q10

You plan to schedule a complete backup of Server1 by using Windows Server Backup.
You need to ensure that the state of VM1 is saved before the backup starts.
What should you configure?
A. NUMA topology
B. Resource control
C. Resource metering
D. Virtual Machine Chimney
E. The VLAN ID
F. Processor Compatibility
G. The startup order
H. Automatic Start Action
I. Integration Services
J. Port mirroring
K. Single-root I/O virtualization
Correct Answer: I
Backup Operations in Hyper-V No VSS Writer Available? In some cases, you need an Application-consistent backup but
there is no VSS writer available. One example of this is MySQL. Hyper-V backups of virtual machines containing
MySQL will always result in either a crash consistent or an image-level backup. For MySQL, the latter is probably
acceptable as MySQL doesn\\’t perpetually expand the log file. However, if you\\’re using MySQL within a VSS-aware
VM, then a Hyper-V-based backup tool is going to take a crash-consistent backup. MySQL (like any other database
system) isn\\’t always recoverable from a crash-consistent backup; the tool is going to take a crash-consistent backup.
MySQL (like any other database system) isn\\’t always recoverable from a crash-consistent backup; even when
recovery is possible, it may be painful. MySQL is just one example; any number of line-of-business Applications could
tell a similar tale. In the case of MySQL, one solution is to find a guest-level backup Application that is MySQL- aware
and can back it up properly. For Applications for which no backup Application has a plug-in, you may need to have pre-
and post-backup scripts that stop services or close Applications. If brief downtime is acceptable, you can disable them
Backup item in Hyper-V Integration Services, thereby forcing Hyper-V to save the state of the VM during backup. This
technique results in an image-level backup and can be used on any Application that doesn\\’t have a VSS writer. pass4itsure 70-417 exam question q10-1

References: https://www.altaro.com/hyper-v/vss-crash-consistent-vs-application-consistent-vss-backups-post-2-of-2/

 

QUESTION 11
DRAG DROP You use the entire System Center suite. You integrate Service Manager with Operations Manager. Virtual
Machine Manager, Orchestrator, and Active Directory. You perform all remediation by using Orchestrator runbooks. An
application experiences performance problems on a periodic basis.
You have the following requirements:
A new incident must be opened when System Center Operations Manager (SCOM) detects a performance problem.
The incident must be closed when the performance problem is resolved.
The incident must be associated with the HR performance problem in Service
You need to configure the environment.
Select and Place:pass4itsure 70-417 exam question q11

Correct Answer:

pass4itsure 70-417 exam question q11-1

References: https://valentincristea.com/2013/11/25/automating-incident-problem-management-part-i-creating-a-scom-monitor-and-generating-fake-alerts/ https://valentincristea.com/2013/11/28/automating-incident-problem-management-part-ii-configuring-the-scomscsm-connector/

 

QUESTION 12
You have 10 domain controllers in a domain. You need to prevent several members of domain admin groups from
logging on to the domain controllers. Which two objects should you create and configure?
A. GPO to the domain
B. authentication policy
C. authentication policy silo
D. a central access policy
E. a user certificate
Correct Answer: AB
References: https://dirteam.com/sander/2014/12/23/new-features-in-active-directory-domain-services-in-windows-server-2012-r2-part-3-authentication-policies-and-authentication-policy-silos/

 

QUESTION 13
You have a server that runs the server core of windows 2012 r2 server. You need to ensure that windows updates are
installed only by using manual installation on server1. Which 3 steps will you perform?
A. scregedit.wsf /au 1
B. wuauclt /selfupdatemanaged
C. uninstall-windowsfeature
D. netstop wuauserv
E. wuauclt /selfupdateunmanaged
F. net start wuauserv
Correct Answer: ADF
1) netstop wuauserv 2) scregedit.wsf /au 1 3) net start wuauserv
References: https://technet.microsoft.com/en-us/library/jj574100.aspx https://msdn.microsoft.com/en-us/library/ff770047(v=winembedded.60).aspx https://support.microsoft.com/en-us/help/971058/how-do-i-reset-windows-update-components

The latest Microsoft MCSA 70-417 dumps help you get on the ladder of success! Get the latest updates from the 70-417 exam: https://www.pass4itsure.com/70-417.html (Q&As: 708) For more effective exam dumps, follow me!

Pass4itsure Promo Code 15% Off

pass4itsure 70-417 coupon

Why Choose Pass4itsure?

Pass4itsure is the best provider of IT learning materials and the right choice for you to prepare for the Microsoft 70-417 exam. Other brands started earlier, but the price is relatively expensive and the questions are not the newest. Pass4itsure provides the latest real questions and answers with the lowest prices, help you pass 70-417 exam easily at first try.

why pass4itsure 70-417 exam dumps

Maybe you might like the exam questions and answers