Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 91:

  Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is

  exactly the same in each question in this series.

  Start of repeated scenario.

  Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.

  The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)

  

  The relevant users and client computer in the domain are configured as shown in the following table.

  

  End of repeated scenario.

  You are evaluating what will occur when you block inheritance on OU4.

  Which GPO or GPOs will apply to User1 when the user signs in to Computer1 after block inheritance is configured?

  A. A1, A5, and A6
  B. A3, A1, A5, and A7
  C. A3 and A7 only
  D. A7 only
  D. A7 only

• Question 92:

  Your network contains an Active Directory domain named contoso.com.

  You deploy a standalone root certification authority (CA) named CA1.

  You need to auto enroll domain computers for certificates by using a custom certificate template.

  What should you do first?

  A. Modify the Policy Module for CA1.
  B. Modify the Exit Module for CA1.
  C. Install a standalone subordinate CA.
  D. Install an enterprise subordinate CA.
  D. Install an enterprise subordinate CA.

  ---

  You can't create templates or configure auto-enrollment on a standalone CA.

• Question 93:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a server named Web1 that runs Windows Server 2016.

  You need to list all the SSL certificates on Web1 that will expire during the next 60 days.

  Solution: You run the following command.

  Get-ChildItem Cert:\CurrentUser\Trust |? { $_.NotAfter –It (Get-Date).AddDays( 60 ) }

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 94:

  Your company has two offices. The offices are located in Montreal and Seattle. The network contains an Active Directory forest named contoso.com.

  The forest contains three domain controllers configured as shown in the following table.

  

  The company physically relocates Server2 from the Montreal office to the Seattle office.

  You discover that both Server1 and Server2 authenticate users who sign in to the client computers in the Montreal office. Only Server3 authenticates users who sign in to the computers in the Seattle office.

  You need to ensure that Server2 authenticates the users in the Seattle office during normal network operations.

  What should you do?

  A. From Windows PowerShell, run the Set-ADReplicationSite cmdlet.
  B. From Active Directory Users and Computers, modify the Location Property of Server2.
  C. From Network Connections on Server2, modify the Internet Protocol Version 4 (TCP/IPv4) configuration.
  D. From Windows PowerShell, run the Move-ADDirectoryServer cmdlet.
  D. From Windows PowerShell, run the Move-ADDirectoryServer cmdlet.

• Question 95:

  Your network contains an enterprise root certification authority (CA) named CA1.

  Multiple computers on the network successfully enroll for certificates that will expire in one year. The certificates are based on a template named Secure_Computer. The template uses schema version 2.

  You need to ensure that new certificates based on Secure_Computer are valid for three years.

  What should you do?

  A. Modify the Validity period for the certificate template.
  B. Instruct users to request certificates by running the certreq.exe command.
  C. Instruct users to request certificates by using the Certificates console.
  D. Modify the Validity period for the root CA certificate.
  A. Modify the Validity period for the certificate template.

• Question 96:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You network contains an Active Directory forest named contoso.com. The forest contains an Active Directory Rights Management Services (AD RMS) deployment.

  Your company establishes a partnership with another company named Fabrikam, Inc. The network of Fabrikam contains an Active Directory forest named fabrikam.com and an AD RMS deployment.

  You need to ensure that the users in contoso.com can access rights protected documents sent by the users in fabrikam.com.

  Solution: From AD RMS in contoso.com, you configure fabrikam.com as a trusted publisher domain.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  By default, an AD RMS Licensing Server can issue use licenses for only content where it originally issued the publishing license. In some situations, this may not be acceptable. In order to specify a cluster that is allowed to issue use licenses for content protected by a different cluster, the first cluster must be defined as a trusted publishing domain. If content was published by another certification cluster either in your organization, for example, a subsidiary organization in another forest, or in a separate organization, your AD RMS cluster can grant use licenses to users for this content by configuring a Trusted Publishing Domain on your AD RMS cluster. By adding a Trusted Publishing Domain, you set up a trust relationship between your AD RMS cluster and the other certification cluster by importing the Trusted Publishing Certificate of the other cluster.

  References: https://books.google.co.za/books?id=gjR-BAAAQBAJandpg=PA397andlpg=PA397anddq=configure+a+partners+forest+as+a+trusted+publishing+domain+-+AD+RMSandsource=blandots=mohQXTyW9sandsig=NJ7oFHuLYOs72o9EMyQiIscUW8andhl=enandsa=Xandved=0ahUKEwjuivW24sPbAhWGRMAKHQcEB6EQ6AEIOzAD#v=onepageandq=configure%20a%20partners%20forest%20as%20a%20trusted%20publishing%20domain%20-%20AD%20RMSandf=false

• Question 97:

  Your network contains an Active Directory domain named adatum.com. The domain contains a security group named G_Research and an organizational unit (OU) named OU_Research.

  All the users in the research department are members of G_Research and their user accounts are in OU_Research.

  You need to ensure that all the research department users change their password every 28 days and enforce a complex password that is 12 characters long.

  What should you do?

  A. From a Group Policy Management, create and link a Group Policy object (GPO) to OU_Research. Modify the password policy in the GPO.
  B. From a Group Policy Management, create and link a Group Policy object (GPO) to the domain. Modify the password policy in the GPO. Filter the GPO to apply to G_Research only.
  C. From Active Directory Users and Computers, modify the properties of the Password Settings Container.
  D. From Active Directory Administrative Center, create a new Password Settings object (PSO).
  D. From Active Directory Administrative Center, create a new Password Settings object (PSO).

• Question 98:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts.

  You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU).

  You need to force users to change their account password at least every 30 days.

  What should you do?

  A. From the Computer Configuration node of DCPolicy, modify Security Settings.
  B. From the Computer Configuration node of DomainPolicy, modify Security Settings.
  C. From the Computer Configuration node of DomainPolicy, modify Administrative Templates.
  D. From the User Configuration node of DCPolicy, modify Security Settings.
  E. From the User Configuration node of DomainPolicy, modify Folder Redirection.
  F. From user Configuration node of DomainPolicy, modify Administrative Templates.
  G. From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings.
  H. From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings.
  B. From the Computer Configuration node of DomainPolicy, modify Security Settings.

• Question 99:

  You network contains an Active Directory domain named contoso.com.

  The domain contains an Active Directory Federation Services (AD FS) server named ADFS1, a Web Application Proxy server named WAP1, and a web server named Web1.

  You need to publish a website on Web1 by using the Web Application Proxy.

  Users will authenticate by using OAuth2 preauthentication.

  What should you do first?

  A. On Web1, add site bindings.
  B. On Web1, add handler mappings.
  C. On ADFS1, enable an endpoint.
  D. On ADFS1, add a claims provider trust.
  C. On ADFS1, enable an endpoint.

• Question 100:

  You have a server named Server1 that runs Windows Server 2016. Server1 has the Web Application Proxy role service installed.

  You publish an application named App1 by using the Web Application Proxy.

  You need to change the URL that users use to connect to App1 when they work remotely.

  Which command should you run? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  The Set-WebApplicationProxyApplication cmdlet modifies settings of a web application published through Web Application Proxy. Specify the web application to modify by using its ID. Note that the method of preauthentication cannot be changed. The cmdlet ensures that no other applications are already configured to use any specified ExternalURL or BackendServerURL.

  References: https://technet.microsoft.com/itpro/powershell/windows/wap/setwebapplicationproxyapplication