Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 181:

  Your network contains an Active Directory domain named contso.com. Each department at your company has an organizational unit (OU) in Active Directory and a global that contains the users in that department. You need to implement the

  following security requirements:

  User in the research department must use complex passwords that are at least 14 characters. User in the following department must use complex passwords that are at least 10 characters. All other users must use an eight-character, non-

  complex password.

  What should you do?

  A. From the Default Domain Controller Policy. Modify the Password Policy settings. Create Password settings objects (PSOs) for finance and research.
  B. From the Default Domain Policy, modify the password policy settings. Create password Settings objects PSOs) for finance and research
  C. Create group Policy object (GPOs) linked to the finance and research OUs. Modify the Password Policy settings in the Default Domain Policy, the finance GPO and the research GPO.
  D. Create Group Policy objects (GPOs) linked to the finance and research OUs. Modify the Password Policy settings in the finance GPO and the research GPO.
  A. From the Default Domain Controller Policy. Modify the Password Policy settings. Create Password settings objects (PSOs) for finance and research.

• Question 182:

  Your network contains an Active Directory domain named adatum.com. The domain contains the servers configured as shown in the following table:

  

  You have a server named Server6 in the perimeter network.

  Each server has the local users show in the following table.

  

  The domain contains the users shown in the following table.

  

  You install a Web Application Proxy on Server6.

  You need to configure the Web Application proxy on Server6. The solution must use the principle of least privilege.

  Which account should you specify in the Web Application Proxy Configuration Wizard? To answer, select the appropriate options in the answer are.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  The user account used to configure the web application proxy must have local Administrator permission on the WAP server(s), and have access to an account that have local Administrator permissions on the AD FS servers.

  References: http://www.mistercloudtech.com/2015/11/25/how-to-install-and-configure-web-application-proxy-for-adfs/

• Question 183:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1.

  You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.

  You need to add a domain user named User1 to the local Administrators group on Server1.

  Solution: From the Computer Configuration node of GPO1, you configure the Account Policies settings. Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Account Lockout Policy settings encapsulates Password Policy, Account Lockout Policy, and Kerberos Policy. It will not allow you to add a domain user to a local Administrators group. References: https://technet.microsoft.com/pt-pt/library/cc757692(v=ws.10).aspx

• Question 184:

  Your network contains two Active Directory forests named fabrikam.com and contoso.com. Each forest contains two sites. Each site contains two domain controllers.

  You need to configure all the domain controllers in both the forests as global catalog servers.

  Which snap-in should you use?

  A. Active Directory Users and Computers
  B. Active Directory Sites and Services
  C. Active Directory Domains and Trusts
  D. Active Directory Federation Services
  B. Active Directory Sites and Services

• Question 185:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You network contains an Active Directory forest named contoso.com. The forest contains an Active Directory Rights Management Services (AD RMS) deployment.

  Your company establishes a partnership with another company named Fabrikam, Inc. The network of Fabrikam contains an Active Directory forest named fabrikam.com and an AD RMS deployment.

  You need to ensure that the users in contoso.com can access rights protected documents sent by the users in fabrikam.com.

  Solution: From AD RMS in fabrikam.com, you configure contoso.com as a trusted publisher domain.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Contoso needs to trust Fabrikam.

  References: https://books.google.co.za/books?id=gjR-BAAAQBAJandpg=PA397andlpg=PA397anddq=configure+a+partners+forest+as+a+trusted+publishing+domain+-+AD+RMSandsource=blandots=mohQXTyW9sandsig=NJ7oFHuLYOs72o9EMyQiIscUW8andhl=enandsa=Xandved=0ahUKEwjuivW24sPbAhWGRMAKHQcEB6EQ6AEIOzAD#v=onepageandq=configure%20a%20partners%20forest%20as%20a%20trusted%20publishing%20domain%20-%20AD%20RMSandf=false

• Question 186:

  Your network contains an Active Directory domain named contoso.com.

  You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)

  

  You discover that some of the settings configured in the A1 Group Policy object (GPO) fail to apply to the users in the OU1 organizational unit (OU).

  You need to ensure that all of the settings in A1 apply to the users in OU1.

  What should you do?

  A. Enable loopback policy processing in A1.
  B. Block inheritance on OU1.
  C. Modify the policy processing order for OU1.
  D. Modify the GPO Status of A1.
  E. Modify Security Settings for A1
  C. Modify the policy processing order for OU1.

  ---

  Reference: https://blogs.technet.microsoft.com/musings_of_a_technical_tam/2012/02/15/group-policy-basics-part-2-understanding-which-gpos-to-apply/

• Question 187:

  Your network contains an Active Directory domain. The domain contains an organizational unit (OU) named FileServersOU. A Group Policy object (GPO) named GPO1 is linked to FileServersOU. FileServersOU contains all the file servers in

  the domain.

  You make an urgent security edit to GPO1.

  You need to ensure that all the file servers receive the updated setting as soon as possible.

  What should you do?

  A. Right-click FileServersOU and click Group Policy Update...
  B. Right-click the GPO link for GPO1 and click Enforced.
  C. Right-click Group Policy Results and click Group Policy Results Wizard...
  D. Right-click FileServersOU and click Refresh.
  A. Right-click FileServersOU and click Group Policy Update...

• Question 188:

  Your network contains an Active Directory domain named contoso.com.

  You have a Group Policy object (GPO) named GPO1. GPO1 is linked to an organizational unit (OU) named OU1.

  GPO1 contains several corporate desktop restrictions that apply to all computers.

  You plan to deploy a printer to the computers in OU1.

  You need to ensure that any user who signs in to a computer that runs Windows 10 in OU1 receives the new printer. All of the computers in OU1 must continue to apply the corporate desktop restrictions from GPO1.

  What should you configure?

  A. a user preference and a WMI filter on GPO1.
  B. a computer preference that uses item-level targeting
  C. a computer preference and WMI filter on GPO1
  D. a user preference that uses item-level targeting
  B. a computer preference that uses item-level targeting

• Question 189:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com.

  A user named User1 is in an organizational unit (OU) named OU1.

  You are troubleshooting a folder access issue for User1.

  You need a list of groups to which User1 is either a direct member or an indirect member.

  Solution: You run Get-ADUser –Identity User1 –Property MemberOf.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  The Get-ADUser cmdlet does not include the MemberOf property. The command above is, therefore, not valid. References: https://docs.microsoft.com/en-us/powershell/module/addsadministration/get-aduser?view=win10-ps

• Question 190:

  HOTSPOT

  Your company has a main office and a branch office. The two offices connect to each other by using a WAN link.

  Your network contains an Active Directory forest named contoso.com. The forest contains a domain controller named DC1. All of the domain controllers are located in the main office.

  You install a read-only domain controller (RODC) named RODC1 in the branch office.

  You create a user account for a new user named User1. You add User1 to the Allowed RODC Password Replication Group. User1 starts work on Monday.

  You are notified that the WAN link will be down for maintenance on Monday.

  You need to ensure that User1 can log on in the branch office site on Monday.

  Which command should you run? To answer, select the appropriate options in the answer are

  Hot Area:

  

  

  ---

  The following example triggers replication of the passwords for the user account named JaneOh from the source domain controller named source-dc01 to all RODCs that have the name prefix dest-rodc: repadmin /rodcpwdrepl dest-rodc*

  source-dc01 cn=JaneOh,ou=execs,dc=contoso,dc=com

  References:

  https://technet.microsoft.com/en-us/library/cc742095(v=ws.11).aspx