Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 11:

  Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.

  Start of repeated scenario.

  Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.

  The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)

  

  The relevant users and client computer in the domain are configured as shown in the following table.

  

  End of repeated scenario.

  You are evaluating what will occur when you disable the Group Policy link for A6.

  Which GPOs will apply to User2 when the user signs in to Computer1 after the link for A6 is disabled?

  A. A1 and A5 only
  B. A3, A1, and A5 only
  C. A3, A1, A5, and A4 only
  D. A3, A1, A5, and A7
  C. A3, A1, A5, and A4 only

• Question 12:

  Your network contains an Active Directory forest.

  Some users report experiencing difficulties signing in to domain controllers. You suspect that the service location (SRV) records might be causing the issue.

  What are two possible commands that you can run to verify the SRV records? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. dnscmd /DirectoryPartitionInfo
  B. dcdiag.exe /test:DNS
  C. dcdiag.exe /test:connectivity
  D. dnscmd /IpValidate
  E. dcdiag.exe /test:DnsRecordRegistration
  F. dnscmd /info
  C. dcdiag.exe /test:connectivity
  E. dcdiag.exe /test:DnsRecordRegistration

• Question 13:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a server named Web1 that runs Windows Server 2016.

  You need to list all the SSL certificates on Web1 that will expire during the next 60 days.

  Solution: You run the following command.

  Get-ChildItem Cert:\CurrentUser\My |? { $_.NotAfter –It (Get-Date).AddDays( 60 ) }

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 14:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2.

  DC1 holds the RID master operations role. DC1 fails and cannot be repaired. You need to move the RID role to DC2.

  Solution: On DC2, you open Windows PowerShell and run

  Move-AddirectoryServerOperationMasterRole -OperationMasterRidMaster -Identity DC2.Adatum.com

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  You would need to use the -Force parameter because the server that held the role (DC1) if offline.

• Question 15:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains the Active Directory forests and domains shown in the following table:

  

  A two-way forest trust exists between ForestA and ForestB.

  Each domain in ForestB contains user accounts that are used to manage servers.

  You need to ensure that the user accounts used to manage the servers in ForestB are members of the Server Operators in ForestA.

  Solution: You create a universal group in DomainBRoot. You add users to the new group. You modify the membership of the Server Operators in ForestA.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References: https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#bkmk-serveroperators

• Question 16:

  HOTSPOT

  Your network is isolated from the Internet. The network contains computers that are members of a domain and computers that are members of a workgroup. All the computers are configured to use internal DNS servers and WINS servers for

  name resolution.

  The domain has a certification authority (CA). You run the Get-CACrlDistributionPoint cmdlet and receive the output as shown in the following exhibit.

  

  Hot Area:

  

  

• Question 17:

  HOTSPOT

  Your network contains an Active Directory domain named adatum.com. The domain uses Active Directory Federation Services (AD FS), AD FS has a relying party trust named RP1 to a claims-aware application named App1. The domain contains the users shown in the following table.

  

  The network contains the network segments shown in the following table. The following access control policy is assigned to RP1. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point. Hot Area:

  

  

  ---

  References: https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/access-control-policies-in-ad-fs

• Question 18:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

  Your network contains an Active Directory domain named contoso.com. You recently deleted 5,000 objects from the Active Directory database.

  You need to reduce the amount of disk space used to store the Active Directory database on a domain controller. Which tool should you use?

  A. Dsadd quota
  B. Dsmod
  C. Active Directory Administrative Center
  D. Dsacls
  E. Domain
  F. Active Directory Users and Computers
  G. Ntdsutil
  H. Group Policy Management Console
  G. Ntdsutil

• Question 19:

  Your network contains an Active Directory domain named contoso.com. The domain contains a username User1, a group named Group1, and an organizational unit (OU) named OU1.

  You need to enable User1 to link Group Policies to OU1.

  Solution: From Active Directory Administrative Center, you add User1 to Group1. From ADSI Edit, you grant Group1 Full Control permissions to the "CN=Policies, CN=System, DC=Contoso, DC=com" object.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 20:

  Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest and the domains is Windows Server 2008 R2.

  You have a global group named Group1 in the contoso.com domain. Group1 contains the user accounts in contoso.com.

  You need to ensure that you can add the user accounts in the fabrikam.com domain to Group1.

  What should you do?

  A. Raise the domain functional level of fabrikam.com to Windows Server 2016
  B. Modify the scope of Group1 to Domain local
  C. Assign the Domain Controllers group in fabrikam.com permissions to Group1
  D. Run the Set-LocalGroup cmdlet
  E. Change Group1 to a distribution group
  B. Modify the scope of Group1 to Domain local

  ---

  A domain local group can have a universal group as a member. A universal group can have users or global groups from any domain in the forest as a member. To adhere to Microsoft best practice, we should add the Fabrikam.com users to a global group in the Fabrikam.com domain. Add the global group to a universal group. Convert Group1 to a domain local group and add the universal group to Group1.