Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 141:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016. The computer accounts of Server1 and Server2 are in the Computers container.

  A Group Policy object (GPO) named GPO1 is linked to the domain. GPO1 has multiple computer settings defined and has following configurations.

  

  An administrator discovers that GPO1 is not applied to Server1. GPO1 is applied to Server2.

  Which configuration possibly prevents GPO1 from being applied to Server1?

  A. The permissions on the domain object of contoso.com
  B. The WMI filter settings
  C. The Enforced setting of GPO1
  D. The GpoStatus property
  E. The loopback processing mode in GPO1
  F. The permissions on the domain object of contoso.com
  B. The WMI filter settings

  ---

  https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-wmi-filters-for-the-gpo

• Question 142:

  Your network contains an Active Directory forest. The forest contains two domains named litwarenc.com and contoso.com. The contoso.com domain contains two domains controllers named LON-DC01 and LON-DC02.

  The domain controllers are located in a site named London that is associated to a subnet of 192.168.10.0/24

  You discover that LON-DC02 is not a global catalog server. You need to configure LON-DC02 as a global catalog server.

  What should you do?

  A. From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the NTDS settings.
  B. From the Windows PowerShell, run the Enable-ADOptionalFeature cmdlet.
  C. From Active Directory Sites and Services, modify the NTDS Settings object of the London site.
  D. From the properties of the Domain Controllers organizational unit (OU) in Active Directory Users and Computers, modify the Security settings.
  A. From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the NTDS settings.

• Question 143:

  Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is

  exactly the same in each question in this series.

  Start of repeated scenario.

  You work for a company named Contoso, Ltd.

  The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an Active Directory forest named adatum.com.

  The contoso.com forest contains the objects configured as shown in the following table.

  

  Group1 and Group2 contain only user accounts.

  Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3 that runs Windows 10. Computer3 is currently in a workgroup.

  An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain.

  From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com domain, and then you create a contact named Contact1 in OU1.

  An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a user logon name of [email protected].

  End or repeated scenario.

  You need to ensure that Admin1 can add Group2 as a member of Group3.

  What should you modify?

  A. Modify the Security settings of Group3.
  B. Modify the group scope of Group3.
  C. Modify the group type of Group3.
  D. Set Admin1 as the manager of Group3.
  E. Add Admin1 to the Enterprise Admins group
  B. Modify the group scope of Group3.

  ---

  A domain local group (group2) can only be a member of another domain local group. Therefore, we need to change the scope of Group3 from Universal to Domain Local.

• Question 144:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains a read-only domain controller (RODC) named RODC1.

  The domain contains the users shown in the following table.

  

  Group1 is a member of the Backup Operators group.

  RODC1 has a Password Replication Policy configured as shown in the exhibit. (Click the Exhibit button.)

  Exhibit:

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 145:

  Your network contains an Active Directory forest. The forest contains a forest root domain named contoso.com and a child domain named eu.contoso.com. Each domain contains two domain controllers that run Windows Server 2012 R2.

  The forest functional level is Windows Server 2008 R2. The domain functional level of contoso.com is Windows Server 2012 R2. The domain functional level of eu.contoso.com is Windows Server 2008 R2.

  You need to raise the domain functional level of contoso.com to Windows Server 2016. The solution must minimize administrative effort.

  What should you do before you raise the domain functional level?

  A. Raise the forest functional level
  B. Upgrade all of the domain controllers in the forest
  C. Upgrade all of the domain controllers in contoso.com
  D. Raise the domain functional level of eu.contoso.com
  C. Upgrade all of the domain controllers in contoso.com

  ---

  References: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels

• Question 146:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory forest. The forest contains a domain named contoso.com. The domain contains three domain controllers.

  A domain controller named lon-dc1 fails. You are unable to repair lon-dc1.

  You need to prevent the other domain controllers from attempting to replicate to lon-dc1.

  Solution: From Active Directory Sites and Trusts, you transfer the operations master roles from lon-dc1.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 147:

  Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains a server named Server1.

  An administrator named Admin01 plans to configure Server1 as a standalone certification authority (CA).

  You need to identify to which group Admin01 must be a member to configure Server1 as a standalone CA. The solution must use the principle of least privilege.

  To which group should you add Admin01?

  A. Administrators on Server1.
  B. Domain Admins in contoso.com
  C. Cert Publishers on Server1
  D. Key Admins in contoso.com
  A. Administrators on Server1.

  ---

  When installing a Standalone CA, you must use an account that is a member of the local Administrators group. References: http://juventusitprofessional.blogspot.com/2015/06/active-directory-certificate-services.html

• Question 148:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.

  On Server1, you create a local user named User1. User1 is a member of the local Administrators group.

  Server1 has the following local Group Policies:

  Local Computer Policy Local Computer\User1 Policy Local Computer\Administrators Policy

  You need to force user1 to change his password every 14 days. Solution: You create a Password Settings object (PSO) in the domain. Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 149:

  Your network contains an Active Directory domain

  Users do not have administrative privileges to their client computer.

  You modify a computer setting in a Group Policy object (GPO).

  You need to ensure that the setting is applied to five client computers as soon as possible.

  What should you do?

  A. From each client computer, run the gpresult.exe command and specify the /r parameter.
  B. From a domain controller, run the gpudate.exe command and specify the Force parameter.
  C. From the domain controller, run the Invoke-GPUpdate cmdlet.
  D. From each client, run the Get-Gpo cmdlet and specify the -all parameter.
  C. From the domain controller, run the Invoke-GPUpdate cmdlet.

• Question 150:

  Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.

  Start of repeated scenario.

  You work for a company named Contoso, Ltd.

  The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an Active Directory forest named adatum.com.

  The contoso.com forest contains the objects configured as shown in the following table.

  

  Group1 and Group2 contain only user accounts.

  Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3 that runs Windows 10. Computer3 is currently in a workgroup.

  An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain.

  From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com domain, and then you create a contact named Contact1 in OU1.

  An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a user logon name of [email protected].

  End of repeated scenario.

  You need to ensure that User1 can back up the data stored on Computer1. The solution must prevent the user from restoring the data on Computer1.

  What should you do?

  A. Add User1 to the Backup Operators group of the domain
  B. Modify the Security Settings of the local Group Policy on Computer1
  C. Add User1 to the Power Users group on Computer1
  D. Add User1 to the Backup Operators group on Computer1
  B. Modify the Security Settings of the local Group Policy on Computer1

  ---

  References: https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/back-up-files-and-directories