Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 171:

  You have a server named Server1 that runs Windows Server 2016. Server1 has the Windows Application Proxy role service installed.

  You need to publish Microsoft Exchange ActiveSync services by using the Publish New Application Wizard. The ActiveSync services must use preauthentication.

  How should you configure Server1? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

• Question 172:

  HOTSPOT

  Your network contains an Active Directory forest. The forest contains two domain controllers named DC1 and DC2 that run Windows Server 2016. DC1 holds all of the operations master roles.

  DC1 experiences a hardware failure.

  You plan to use an automated process that will create 1,000 user accounts.

  You need to ensure that the automated process can complete successfully.

  Which command should you run? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

• Question 173:

  Your network contains an Active Directory domain named contoso.com. All the accounts of the users in the sales department are in an organizational unit (OU) named SalesOU.

  An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object (GPO) named Sales GPO.

  You need to set the registry value of \HKEY_CURRENT_USER\Software\App1\Collaboration to 0.

  Solution: You add a computer preference that has a Replace action.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

• Question 174:

  Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2012 R2. You need to secure several high-privilege user accounts to meet the following requirements:

  1.

  Prevent authentication by using NTLM.

  2.

  Use Kerberos to verify authentication request to any resources.

  3.

  Prevent the users from signing in to a client computer if the computer is disconnected from the domain. What should you do?

  A. Create a universal security group for the user accounts and modify the Security settings of the group.
  B. Add the users to the Windows Authorization Access Group group.
  C. Add the user to the Protected Users group.
  D. Create a separate organizational unit (OU) for the user accounts and modify the Security settings of the OU.
  C. Add the user to the Protected Users group.

• Question 175:

  HOTSPOT

  You deploy a Remote Desktop server named RDP1. RDP1 has two volumes named C and D.

  You plan to allow users to connect to RDP1 to run multiple applications.

  You need to ensure that when the users establish a Remote Desktop connection to RDP1, volume D is hidden.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 176:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com.

  A user named User1 is in an organizational unit (OU) named OU1.

  You are troubleshooting a folder access issue for User1.

  You need a list of groups to which User1 is either a direct member or ab indirect member.

  Solution: You run dsget user cn=User1, ou=OU1, dc=contoso, dc=com –memberof –expand.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  DSGET displays the properties of a user in the directory. There are two variations of this command. The first variation displays the properties of multiple users. The second variation displays the group membership information of a single user.

  To show the list of groups, recursively expanded, to which the user Mike Danseglio belongs, type:

  dsget user "CN=Mike Danseglio,CN=users,dc=ms,dc=tld" -memberof 璭xpand

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc732535%28v%3dws.10%29

• Question 177:

  Your network contains an Active Directory domain named contoso.com.

  You discover that users can use passwords that contain only numbers.

  You need to ensure that all the user passwords in the domain contain at least three of the following types of characters: Numbers Uppercase letters Lowercase letters Special characters

  What should you edit?

  A. The Default Domain Controllers Policy
  B. The local policy on each client computer
  C. The Default Domain Policy
  D. The local policy on each domain controller
  C. The Default Domain Policy

• Question 178:

  HOTSPOT

  You have a Nano Server named Nano1 that runs Windows Server 2016. Nano1 is deployed to a virtual machine and is a member of a workgroup. You need to join Nano1 to a domain named contoso.com.

  Which two commands should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  https://charbelnemnom.com/2016/11/how-to-add-nano-server-to-a-domain-nanoserver- ws2016/

• Question 179:

  Your network contains an Active Directory domain named conIoso.com. The domain contains a server named

  Server1 that runs Windows Server 2016. All domain joined computers have Fast logon Optimization enabled You need to ensure that the next time a user signs in to Server1, the user-targeted Group Policy objects [GPOs) are processed fully

  before the user gains access to the desktop.

  What should you run on Server1?

  A. secedit with the/configure switch
  B. gpupdate with the /Sync switch
  C. Invoke-GPupdate with the -Boot switch
  D. gpupddte with the /wait switch
  D. gpupddte with the /wait switch

• Question 180:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016.

  Server1 has IP Address Management (IPAM) installed. Server2 has Microsoft System Center 2016 Virtual Machine Manager (VMM) installed.

  You need to integrate IPAM and VMM.

  Which types of objects should you create on each server? To answer, drag the appropriate object types to the correct servers. Each object type may be used once, more than once, or not at all. You may need to drag the split bar between

  panes or scroll to view content.

  Select and Place:

  

  

  ---

  Server 1 (IPAM): Access Policy

  VMM must be granted permission to view and modify IP address space in IPAM, and to perform remote management of the IPAM server. VMM uses a “Run As” account to provide these permissions to the IPAM network service plugin. The

  “Run As” account must be configured with appropriate permission on the IPAM server.

  To assign permissions to the VMM user account

  In the IPAM server console, in the upper navigation pane, click ACCESS CONTROL, rightclick

  Access Policies in the lower navigation pane, and then click Add AccessPolicy.

  Etc.

  Server 2 (VMM) #1: Network Service

  Server 2 (VMM) #2: Run As Account

  Perform the following procedure using the System Center VMM console.

  To configure VMM (see step 1-3, step 6-7)

  Etc.

  References: https://technet.microsoft.com/en-us/library/dn783349(v=ws.11).aspx