Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 1:

  Your network contains an Active Directory forest named contoso.com. The forest contains several domains.

  An administrator named Admin01 installs Windows Server 2016 on a server named Server1 and then joins Server1 to the contoso.com domain.

  Admin01 plans to configure Server1 as an enterprise root certification authority (CA).

  You need to ensure that Admin01 can configure Server1 as an enterprise CA. The solution must use the principle of least privilege.

  To which group should you add Admin01?

  A. Server Operators in the contoso.com domain
  B. Cert Publishers on Server1
  C. Enterprise Key Admins in the contoso.com domain
  D. Enterprise Admins in the contoso.com domain.
  D. Enterprise Admins in the contoso.com domain.

  ---

  To install Active Directory Certificate Services, log on as a member of both the Enterprise Admins group and the root domain's Domain Admins group. References: https://docs.microsoft.com/en-us/windows-server/networking/core-network-guide/cncg/server-certs/install-the-certification-authority

• Question 2:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains five domain controllers.

  You have a branch office that has a local support technician named Tech1.

  Tech1 installs Windows Server 2016 on a server named RODC1 in a workgroup.

  You need Tech1 to deploy RODC1 as a read-only domain controller (RODC) in the contoso.com domain.

  Which three actions should you perform? Each correct answer presents part of the solution.

  A. Instruct Tech1 to run the Active Directory Domain Services Configuration Wizard.
  B. Create an RODC computer account by using Active Administrative Center.
  C. Instruct Tech1 to run dcpromo.exe on RODC1.
  D. Instruct Tech1 to install the Active Directory Domain Services server role on RODC1.
  E. Modify the permissions of the Domain Controllers organizational unit (OU).
  A. Instruct Tech1 to run the Active Directory Domain Services Configuration Wizard.
  B. Create an RODC computer account by using Active Administrative Center.
  D. Instruct Tech1 to install the Active Directory Domain Services server role on RODC1.

• Question 3:

  Your network contains an Active Directory domain. The domain contains the servers shown in the following table.

  

  You have a server named WebServer2 in a workgroup. WebServer2 has the Web Server (IIS) server role installed. You plan to deploy a Web Application Proxy to provide preauthentication for HTTP Basic application publishing to allow users

  to connect to mailboxes by using Exchange ActiveSync.

  You need to install the Web Application Proxy role service. The solution must minimize the attack surface.

  On which server should you install the role service?

  A. WebServer2
  B. WebServer1
  C. ADFS1
  D. ADFS2
  A. WebServer2

  ---

  References: https://www.techsupportpk.com/2016/12/deploy-web-application-proxy-windows-server-2016.html https://docs.microsoft.com/en-us/sharepoint/hybrid/configure-web-application-proxy-for-a-hybrid-environment https://docs.microsoft.com/en-us/windows-server/storage/work-folders/deploy-work-folders-adfs-step4

• Question 4:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains an administrative workstation named WKS1 that runs Windows 10.

  You have a Group Policy object (GPO) named GPO1.

  You download a custom administrative template that contains the following files:

  App1.admx App1.adml You need to ensure that you can configure GPO1 by using the settings in the new administrative template.

  To where should you copy each file? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 5:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains the Active Directory forests and domains shown in the following table:

  

  A two-way forest trust exists between ForestA and ForestB.

  Each domain in ForestB contains user accounts that are used to manage servers.

  You need to ensure that the user accounts used to manage the servers in ForestB are members of the Server Operators in ForestA.

  Solution: In each domain in ForestB, you create a global group that contains the user accounts of the respective domain. You create a universal group in DomainBRoot. You add the new global groups to the new universal group. You modify

  the membership of the Server Operators in ForestA.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  References: https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#bkmk-serveroperators

• Question 6:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012 R2.

  You need to ensure that a domain administrator can recover a deleted Active Directory object quickly.

  Which tool should you use?

  A. Dsadd quota
  B. Dsmod
  C. Active Directory Administrative Center
  D. Dsacls
  E. Dsamain
  F. Active Directory Users and Computers
  G. Ntdsutil
  H. Group Policy Management Console
  C. Active Directory Administrative Center

  ---

  You can restore objects from the Active Directory Recycle Bin by using Active Directory Administrative Center.

  References: https://blogs.technet.microsoft.com/canitpro/2014/07/28/step-by-step-restoring-a-deleted-object-via-active-directory-recycle-bin/

• Question 7:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest. The forest contains a domain named

  contoso.com. The domain contains three domain controllers.

  A domain controller named lon-dc1 fails. You are unable to repair lon-dc1.

  You need to prevent the other domain controllers from attempting to replicate to lon-dc1.

  Solution: From Active Directory Users and Computers, you remove the computer account of lon-dc1.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  To remove the failed server object from the domain controllers container, access Active Directory Users and Computers, expand the domain controllers container, and delete the computer object associated with the failed domain controller References: https://www.petri.com/delete_failed_dcs_from_ad

• Question 8:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com.

  The user account for a user named User1 is in an organizational unit (OU) named OU1.

  You need to enable User1 to sign in as [email protected].

  Solution: From Windows PowerShell, you run

  Set-ADObject 'CN=User1,OU=OU1,DC=Contoso,DC=com'

  –Add @{UserPrincipalName='[email protected]'}

  –Remove @ {UserPrincipalName='[email protected]'}.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 9:

  Your network contains an Active Directory domain named contoso.com.

  You plan to deploy a new Active Directory Rights Management Services (AD RMS) cluster on a server named Server1.

  You need to create the AD RMS service account. The solution must use the principle of least privilege.

  What should you do?

  A. Create a local user account on Server1 and add the account to the Administrators group on Server1.
  B. Create a domain user account and add the account to the Administrators group on Server1.
  C. Create domain user account and add the account to the Domain Users group in the domain.
  D. Create a domain user account and add the account to the Account Operators group in the domain.
  C. Create domain user account and add the account to the Domain Users group in the domain.

• Question 10:

  Your company has multiple branch offices.

  The network contains an Active Directory domain named contoso.com.

  In one of the branch offices, a new technician is hired to add computers to the domain.

  After successfully joining multiple computers to the domain, the technician fails to join any more computers to the domain.

  You need to ensure that the technician can join an unlimited number of computers to the domain.

  What should you do?

  A. Configure the technician's user account as a manager service account.
  B. Run the Set-ADComputer cmdlet.
  C. Modify the Security settings of the Computers container.
  D. Add the technician to the Domain Computers group.
  C. Modify the Security settings of the Computers container.

  ---

  Users who have the Create Account Objects privilege for the Computers container can create an unlimited number of computer accounts in the domain. You can grant this privilege by accessing the Advanced Security settings on the Security Tab of the Computer container via Active Directory Users And Computers or the Active Directory Administrative Center.

  References: https://books.google.co.za/books?id=LvNODQAAQBAJandpg=PT268andlpg=PT268anddq=Modify+the+Security+settings+of+the+Computers+container+2016andsource=blandots=1lRBQ21cL0andsig=1AUSon_6cjIqyN_927iOB7z3Egandhl=enandsa=Xandved=0ahUKEwjBi4OS-rnbAhXKD8AKHerKDcgQ6AEISjAC#v=onepageandq=Modify%20the%20Security%20settings%20of%20the%20Computers%20container%202016andf=false