Microsoft 70-417 learning programs are the most accepted certification in the present era and its entire module is extremely valued by many IT organizations and for 70-417 simulations experts there is a very huge chance of getting a job in Microsoft IT fields. Many candidates attempt for 70-417 answers guides whereas most of them face the problem of unavailability of quality in training matters. Luckily for all the Microsoft 70-417 experts, Lead2pass is now here to help you with your IT certification problems, as we are the best 70-417 actual tests exam questions training material providing vendor. We give latest exam questions for 70-417 lab certification and because of that, all of our candidates pass 70-417 certification without any problem. The biggest feature is the regular update of these latest exam questions, which keeps our candidates’ knowledge up to date and ensures their success.

QUESTION 11
Hotspot Question
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Federation Services (AD FS) server role installed.
Adatum.com is a partner organization.
You are helping the administrator of adatum.com set up a federated trust between adatum.com and contoso.com. The administrator of adatum.com asks you to provide a file containing the federation metadata ofcontoso.com.
You need to identify the location of the federation metadata file.
Which node in the AD FS console should you select?
To answer, select the appropriate node in the answer area.

 

Answer:

QUESTION 12
Hotspot Question
Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA). The domain contains a server named Server1 that runs Windows Server 2012 R2. You install the Active Directory Federation Services server role on Server1. You plan to configure Server1 as an Active Directory Federation Services (AD FS) server. The Federation Service name will be set to adfsl.contoso.com. You need to identify which type of certificate template you must use to request a certificate for AD FS. Which certificate template should you identify? To answer, select the appropriate template in the answer area.

 
 

Answer:

QUESTION 13
Your network contains an Active Directory domain named contoso.com. The domain contains four servers. The servers are configured as shown in the following table.

You plan to deploy an enterprise certification authority (CA) on a server named Servers. Server5 will be used to issue certificates to domain-joined computers and workgroup computers. You need to identify which server you must use as the certificate revocation list (CRL) distribution point for Server5. Which server should you identify?

A.    Server1
B.    Server3
C.    Server4
D.    Server2

Answer: B

QUESTION 14
Your network contains three Active Directory forests. Each forest contains an Active Directory Rights Management Services (AD RMS) root cluster. All of the users in all of the forests must be able to access protected content from any of the forests. You need to identify the minimum number of AD RMS trusts required. How many trusts should you identify?

A.    2
B.    3
C.    4
D.    6

Answer: D

QUESTION 15
Your network contains an Active Directory domain named contoso.com. The network contains a file server named Server1 that runs Windows Server 2012 R2. You create a folder named Folder1. You share Folder1 as Share1. The NTFS permissions on Folder1 are shown in the Folder1 exhibit. (Click the Exhibit button.)

 
 

The Everyone group has the Full control Share permission to Folder1. You configure a central access policy as shown in the Central Access Policy exhibit. (Click the Exhibit button.)

Members of the IT group report that they cannot modify the files in Folder1. You need to ensure that the IT group members can modify the files in Folder1. The solution must use central access
policies to control the permissions. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.    On the Security tab of Folder1, remove the permission entry for the IT group.
B.    On the Classification tab of Folder1, set the classification to “Information Technology”.
C.    On the Security tab of Folder1, assign the Modify permission to the Authenticated Users group.
D.    On Share1, assign the Change Share permission to the IT group.
E.    On the Security tab of Folder1, add a conditional expression to the existing permission entry for the IT group.

Answer: BC

QUESTION 16
Drag and Drop Question
Your network contains an Active Directory domain named contoso.com. All file servers in the domain run Windows Server 2012 R2. The computer accounts of the file servers are in an organizational unit (OU) named OU1. A Group Policy object (GPO) named GP01 is linked to OU1. You plan to modify the NTFS permissions for many folders on the file servers by using central access policies. You need to identify any users who will be denied access to resources that they can currently access once the new permissions are implemented. In which order should you perform the five actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

 

Answer:

QUESTION 17
Drag and Drop Question
You have a server named Server2 that runs Windows Server 2012 R2. You need to configure the storage so that it appears in Windows Explorer as a drive letter on Server1. Which three actions should you perform in sequence? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

 

Answer:

QUESTION 18
Drag and Drop Question
Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1. All servers run Windows Server 2012 R2. All domain user accounts have the Division attribute automatically populated as part of the user provisioning process. The Support for Dynamic Access Control and Kerberos armoring policy is enabled for the domain. You need to control access to the file shares on Server1 based on the values in the Division attribute and the Division resource property. Which three actions should you perform in sequence? To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

QUESTION 19
Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2. Both servers have the Hyper-V server role installed. Server1 and Server2 are located in different offices. The offices connect to each other by using a high-latency WAN link. Server2 hosts a virtual machine named VM1. You need to ensure that you can start VM1 on Server1 if Server2 fails. The solution must minimize hardware costs. What should you do?

A.    On Server2, install the Multipath I/O (MPIO) feature.
    Modify the storage location of the VHDs for VM1.
B.    From the Hyper-V Settings of Server1, modify the Replication Configuration settings.
    Enable replication for VM1.
C.    On Server1, install the Multipath I/O (MPIO) feature.
    Modify the storage location of the VHDs for VM1.
D.    From the Hyper-V Settings of Server2, modify the Replication Configuration settings.
    Enable replication for VM1.

Answer: B

QUESTION 20
You have a server named File1 that runs Windows Server 2012 R2. File1 has the File Server role service installed. You plan to back up all shared folders by using Microsoft Online Backup. You download and install the Microsoft Online Backup Service Agent on File1. You need to ensure that you use Windows Server Backup to back up data to Microsoft Online Backup. What should you do?

A.    From Computer Management, add the File1 computer account to the Backup Operators group.
B.    From the Services console, modify the Log On settings of the Microsoft Online Backup Service Agent.
C.    From Windows Server Backup, run the Register Server Wizard.
D.    From a command prompt, run wbadmin.exe enable backup.

Answer: C

Lead2Pass offers you all the 70-417 Questions And Answers which are the same as your real test with 100% correct and coverage rate. Our practice tests are unparalleled in quality and are 100% guaranteed to make you pass your exam.Here are some free share of Microsoft 70-417 exam dumps.

www.lead2pass.com/70-417.html