Latest Pass4sure Microsoft 70-417 Exam Question Free Download with PDF & VCE (81-90)

QUESTION 81
Your network contains an Active Directory domain named contoso.com. Network Policy Server (NPS) is deployed to the domain. You plan to deploy Network Access Protection (NAP). You need to configure the requirements that are validated on the NPS client computers. What should you do?

A.    From a Group Policy object (GPO), configure the NAP Client Configuration security setting.
B.    From the Network Policy Server console, configure a health policy.
C.    From the Network Policy Server console, configure a network policy.
D.    From a Group Policy object (GPO), configure the Network Access Protection Administrative Templates setting.
E.    From the Network Policy Server console, configure a Windows Security Health Validator (WSHV) policy.

Answer: E

QUESTION 82
You are a network administrator of an Active Directory domain named contoso.com. You have a server named Server1 that runs Windows Server 2012. Server1 has the DHCP Server server role and the Network Policy Server role service installed. You enable Network Access Protection (NAP) on all of the DHCP scopes on Server1. You need to create a DHCP policy that willApply to all of the NAP non-compliant DHCP clients. Which criteria should you specify when you create the DHCP policy?

A.    The relay agent information
B.    The client identifier
C.    The vendor class
D.    The user class

Answer: D

QUESTION 83
Drag and Drop Question
Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 is configured as a Network Policy Server (NPS) server and as a DHCP server. You need to log all DHCP clients that have Windows Firewall disabled. Which three actions should you perform in sequence? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.
831
Answer:
832

QUESTION 84
Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012. You mount an Active Directory snapshot on DC1. You need to expose the snapshot as an LDAP server. Which tool should you use?

A.    Ldp
B.    Ntdsutil
C.    ADSI Edit
D.    Dsamain

Answer: D

QUESTION 85
Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain controllers run Windows Server 2012. The domain contains two domain controllers. The domain controllers are configured as shown in the following table.
851
Active Directory Recycle Bin is enabled. You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago. You need to restore the membership of Group1. What should you do?

A.    Perform an authoritative restore.
B.    Perform a non-authoritative restore.
C.    Recover the items by using Active Directory Recycle Bin.
D.    Apply a virtual machine snapshot to VM1.

Answer: A

QUESTION 86
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. In a remote site, a support technician installs a server named DC10 that runs Windows Server 2012. DC10 is currently a member of a workgroup. You plan to promote DC10 to a read-only domain controller (RODC). You need to ensure that a user named Contoso\User1 can promote DC10 to a RODC in the contoso.com domain. The solution must minimize the number of permissions assigned to User1. What should you do?

A.    From Active Directory Administrative Center, pre-create an RODC computer account.
B.    FromNtdsutil, run the local roles command.
C.    FromDsmgmt, run the local roles command.
D.    Join DC10 to the domain. Run dsmod and specify the /server switch.

Answer: A

QUESTION 87
Hotspot Question
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Print1. Your company implements DirectAccess. A user named User1 frequently works at a customer’s office. The customer’s office contains a print server named Print1. While working at the customer’s office, User1 attempts to connect to Print1. User1 connects to the Print1 server in contoso.com instead of the Print1 server at the customer’s office. You need to provide User1 with the ability to connect to the Print1 server in the customer’s office. Which Group Policy option should you configure?To answer, select the appropriate option in the answer area.
871
Answer:
872

QUESTION 88
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed. You log on to Server1 by using a user account named User2. From the Remote Access Management Console, you run the Getting Started wizard and you receive a warning message as shown in the exhibit. (Click the Exhibit button.)

881
You need to ensure that you can configure DirectAccess successfully. The solution must minimize the number of permissions assigned to User2. To which group should you add User2?

A.    Enterprise Admins
B.    Server Operators
C.    Domain Admins
D.    Account Operators

Answer: C

QUESTION 89
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that has the Remote Access server role installed. DirectAccess is implemented on Server1 by using the default configuration. You discover that DirectAccess clients do not use DirectAccess when accessing websites on the Internet. You need to ensure that DirectAccess clients access all Internet websites by using their DirectAccess connection. What should you do?

A.    Configure DirectAccess to enable force tunneling.
B.    Configure a DNS suffix search list on the DirectAccess clients.
C.    Disable the DirectAccess Passive Mode policy setting in the DirectAccess Client Settings Group Policy object (GPO).
D.    Enable the Route all traffic through the internal network policy setting in the DirectAccess Server Settings Group Policy object (GPO).

Answer: A

QUESTION 90
Hotspot Question
Your network contains an Active Directory domain named fabrikam.com. You implement DirectAccess. You need to view the properties of the DirectAccess connection. Which connection properties should you view?To answer, select the appropriate connection properties in the answer area.
901
Answer:
902

Latest Pass4sure Microsoft 70-417 Exam Question Free Download with PDF & VCE