Online Access Free 70-417 Exam Questions

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1
that runs Windows Server 2012 R2. Server1 has the Hyper-V server role installed. The domain contains a virtual
machine named VM1.
A developer wants to attach a debugger to VM1.
You need to ensure that the developer can connect to VM1 by using a named pipe.
Which virtual machine setting should you configure?

• A.COM 1
• B.BIOS
• C.Network Adapter
• D.Processor

You have a server named Server1 that runs Windows Server 2012 R2. From Server Manager, you install the Active
Directory Certificate Services server role on Server1.
A domain administrator named Admin1 logs on to Server1. When Admin1 runs the Certification Authority console,
Admin1 receive the following error message.

You need to ensure that when Admin1 opens the Certification Authority console on Server1, the error message does
not appear.
What should you do?

• A.Install the Active Directory Certificate Services (AD CS) tools
• B.Run the regsvr32.exe command
• C.Modify the PATH system variable
• D.Configure the Active Directory Certificate Services server role from Server Manager

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller
named DC5. DC5 has a Server Core Installation of Windows Server 2012 R2.
You need to uninstall Active Directory from DC5 manually.
Which tool should you use?

• A.The Remove-WindowsFeaturecmdlet
• B.The dsamain.exe command
• C.The Remove-ADComputercmdlet
• D.The ntdsutil.exe command

Your network contains an Active Directory domain named contoso.com. The domain contains a read-only domain
controller (RODC) named RODC1.
You create a global group named RODC_Admins.
You need to provide the members of RODC_Admins with the ability to manage the hardware and the software on
RODC1. The solution must not provide RODC_Admins with the ability to manage Active Directory objects.
What should you do?

• A.From Windows PowerShell, run the Set-ADAccountControlcmdlet.
• B.From a command prompt, run the dsadd computer command.
• C.From Active Directory Users and Computers, configure the Managed By settings of the RODC1 account.
• D.From Active Directory Sites and Services, run the Delegation of Control Wizard.

DRAG DROP
Your network contains two Active Directory forests named contoso.com and adatum.com. All domain controllers run
Windows Server 2012 R2.
A federated trust exists between adatum.com and contoso.com. The trust provides adatum.com users with access to
contoso.com resources.
You need to configure Active Directory Federation Services (AD FS) claim rules for the federated trust.
The solution must meet the following requirements:
In contoso.com, replace an incoming claim type named Group with an outgoing claim type named Role.
In adatum.com, allow users to receive their tokens for the relying party by using their Active Directory group
membership as the claim type.
The AD FS claim rules must use predefined templates.
Which rule types should you configure on each side of the federated trust?
To answer, drag the appropriate rule types to the correct location or locations. Each rule type may be used once, more
than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Correct Answer:

Explanation:
* Acceptance transform rule set
A set of claim rules that you use on a particular claims provider trust to specify the incoming claims that will be
accepted from the claims provider organization and the outgoing claims that will be sent to the relying party trust.
Used on: Claims provider trusts
* Issuance Authorization Rule Set
A set of claim rules that you use on a relying party trust to specify the claims that will be issued to the relying party.
Used on: Relying party trusts
Reference: The Role of Claim Rules
http://technet.microsoft.com/zh-cn/library/ee913586(v=WS.10).aspx