Free Microsoft 070-417 Exam Dumps Questions & Answers

Your company deploys a new Active Directory forest named contoso.com. The first domain controller in the forest
runs Windows Server 2012 R2. The forest contains a domain controller named DC10.
On DC10, the disk that contains the SYSVOL folder fails.
You replace the failed disk. You stop the Distributed File System (DFS) Replication service. You restore the SYSVOL
folder.
You need to perform a non-authoritative synchronization of SYSVOL on DC10.
Which tool should you use before you start the DFS Replication service on DC10?

• A.  Ldp
• B.  Dfsmgmt.msc
• C.  Active Directory Sites and Services
• D.  Frsutil

You have a server named Server1 that runs Windows Server 2012 R2. Server1 is located in the perimeter network and
has the DNS Server server role installed.
Server1 has a zone named contoso.com.
You apply a security template to Server1.
After you apply the template, users report that they can no longer resolve names from contoso.com.
On Server1, you open DNS Manager as shown in the DNS exhibit. (Click the Exhibit button.)

On Server1, you open Windows Firewall with Advanced Security as shown in the Firewall exhibit. (Click the Exhibit
button.)

You need to ensure that users can resolve contoso.com names.
What should you do?

• A.  From DNS Manager, modify the Start of Authority (SOA) of the contoso.com zone.
• B.  From DNS Manager, modify the Zone Transfers settings of the contoso.com zone.
• C.  From DNS Manager, unsign the contoso.com zone.
• D.  From Windows Firewall with Advanced Security, disable the DNS (TCP, Incoming) rule and the DNS (UDP, Incoming)
  rule.
• E.  From Windows Firewall with Advanced Security, modify the profiles of the DNS (TCP, Incoming) rule and the DNS
  (UDP, Incoming) rule.

Your network contains an Active Directory domain named contoso.com.All user accounts in the marketing
department reside in an organizational unit (OU) named OU1.
You have a Group Policy object (GPO) named GPO1. GPO1 contains Folder Redirection settings. GPO1 has default
permissions.
You discover that the Folder Redirection settings are not applied to the users in the marketing department.
You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that the Folder Redirection settings in GPO1 apply to the marketing users.
What should you do?

• A.  Modify the Delegation settings of GPO1
• B.  Modify the link order of GPO1
• C.  Enforce GPO1
• D.  Enable the link of GPO1

Your network contains an Active Directory forest named contoso.com.
The forest contains two domains named contoso.com and childl.contoso.com.
The domains contain three domain controllers.
The domain controllers are configured as shown in the following table.
You need to ensure that the KDC support for claims, compound authentication, and Kerberos armoring setting is
enforced in both domains.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

• A.  Upgrade DC11 to Windows Server 2012 R2
• B.  Upgrade DC1 to Windows Server 2012 R2
• C.  Raise the domain functional level of contoso.com.
• D.  Raise the forest functional level of contoso.com
• E.  Raise the domain functional level ofchildl.contoso.com

You create trusts in Windows Server 2008 with the New Trust Wizard. Which one of the following authentication types
is being described below:
An authentication setting that permits unrestricted access by any users in the specified forest to all available shared
resources that are located in any of the domains in the local forest.

• A.  Selective authentication
• B.  None of these
• C.  Domain-wide authentication
• D.  Forest-wide authentication