Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 161:

  You Active Directory domain has the Group Policy objects (GPOs) shown in the following exhibit. [Missing the exhibit, it looks like this exhibit]

  

  -Default Domain Plicy-GPOA -Domain Controllers -OU1 -OU2

  -GPOB

  -OU3 -GPOC -OU4

  Use the drop- down menus to select choice that complete each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 162:

  Your network contains an Active Directory domain. The domain contains a server named Server1 that runs Windows Server 2016- Server1 runs a service named Service! in the security context of the Network Service account The domain contains an enterprise certification authority (CA). You plan to create a certificate template that will be used to issue certificates for Service1. Server1 will enroll for the certificates on behalf of Service1. Which template settings you must configure to allow Service1 to access the private keys of the certificates installed on Server1?

  A. Extensions
  B. Issuance Requirements
  C. Request Handling
  D. Security
  B. Issuance Requirements

• Question 163:

  Your network contains an Active Directory domain named adatum.com. The domain has a password policy that requires at least seven characters.

  You create an organizational unit (OU) named 0U1. and then run the following commands.

  redirusr OU=OU1.DC-Adatum,DC=com

  New-ADUser User1

  You need to identity the state of User1.

  What should you identify?

  A. User1 is created in OUT, is enabled, and is a member of Domain Guests.
  B. User1 is created in the Users container, is enabled, and is a member of Domain Guests.
  C. User1 is created in the Users container, is disabled, and is a member of Domain Users.
  D. User1 is created in 0U1. is disabled, and is a member of Domain Users.
  D. User1 is created in 0U1. is disabled, and is a member of Domain Users.

• Question 164:

  Your company has a main office and three branch offices. The network contains an Active Directory domain named contoso.com.

  The main office contains three domain controllers. Each branch office contains one domain controller.

  You discover the new settings in the Default Domain Policy are not applied in one of the branch offices, but all other Group Policy objects (GPOs) are applied.

  You need to check the replication of the Default Domain Policy for the branch office.

  What should you do from a domain controller in the main office?

  A. From Group Policy Management, click Default Domain Policy under Contoso.com, and then open the Scope tab.
  B. From a command prompt, run dcdiag.exe.
  C. From Group Policy Management, click Default Domain Policy under the Group Policy Objects container, and then open the Status tab.
  D. From Windows PowerShell, run the Get-ADReplicationConnection cmdlet.
  C. From Group Policy Management, click Default Domain Policy under the Group Policy Objects container, and then open the Status tab.

• Question 165:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains an enterprise certification authority (CA) named CA1.

  You duplicate the Computer certificate template, and you name the template Cont_Computers.

  You need to ensure that all of the certificates issued based on Cont_Computers have a key size of 4,096 bits.

  What should you do?

  A. From the properties of CA1, modify the Security settings.
  B. From the properties of CA1, modify the Request Handling settings.
  C. From the properties of the Computer template, modify the Key Attestation settings.
  D. From the properties of Cont_Computers, modify the Cryptography settings.
  D. From the properties of Cont_Computers, modify the Cryptography settings.

• Question 166:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a DNS server named Server1. All client computers run Windows 10.

  On Server1, you have the following zone configuration.

  

  You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.

  Solution: From a Group Policy object (GPO) in the domain, you add a rule to the Name Resolution Policy Table (NRPT).

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  The NRPT stores configurations and settings that are used to deploy DNS Security Extensions (DNSSEC), and also stores information related to DirectAccess, a remote access technology. Note: The Name Resolution Policy Table (NRPT) is a new feature available in Windows Server 2008 R2. The NRPT is a table that contains rules you can configure to specify DNS settings or special behavior for names or namespaces. When performing DNS name resolution, the DNS Client service checks the NRPT before sending a DNS query. If a DNS query or response matches an entry in the NRPT, it is handled according to settings in the policy. Queries and responses that do not match an NRPT entry are processed normally.

  References: https://technet.microsoft.com/en-us/library/ee649207(v=ws.10).aspx

• Question 167:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory forest named contoso.com.

  You need to identify which server is the schema master.

  Solution: From Windows PowerShell, you run Get-ADDomainController –Discover –Service 2.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  This command gets a global catalog in the current forest using Discovery.

  References: https://docs.microsoft.com/en-us/powershell/module/addsadministration/get-addomaincontroller?view=win10-ps

• Question 168:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain.

  You have a user account that is a member of the Domain Admins group.

  You have 100 laptops that have a standard corporate image installed. The laptops are in workgroups and have random names.

  A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each laptop must be in an organizational unit (OU) that is associated to the department of the user who will use the laptop. The

  laptop names must start with four characters indicating the department, followed by a four-digit number.

  Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops.

  You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and the computer accounts of the laptops are in the correct OUs.

  Solution: You instruct Tech1 to sign in to each laptop, to rename each laptop by using System in Control Panel, and then to join each laptop to the domain by using the Netdom join command.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

• Question 169:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016.

  Server1 has IP Address Management (IPAM) installed. Server2 has the DHCP Server role installed. The IPAM server retrieves data from Server2.

  You create a domain user account named User1.

  You need to ensure that User1 can use IPAM to manage DHCP.

  Which command should you run on Server1? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

• Question 170:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1.

  You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.

  You need to add a domain user named User1 to the local Administrators group on Server1.

  Solution: From a domain controller, you run the Set-AdComputer cmdlet.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  The Set-AdComputer cmdlet modifies an Active Directory computer object. It will not allow you to add a domain user to a local Administrators group. References: https://technet.microsoft.com/es-es/library/hh852268(v=wps.620).aspx