Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 191:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. You plan to automate user account management.

  You need to find user accounts that meet specific criteria by using the find command in Active Directory Users and Computers. The solution must minimize administrative effort.

  Which Find option should you use for each section? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 192:

  Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 and a domain controller named DC1. Both servers run Windows Server 2016. Server1 is used to perform administrative tasks, including managing Group Polices.

  After maintenance is performed on DC1, you open a Group Policy object (GPO) from Server1 as shown in the exhibit.

  

  You need to be able to view all of the Administrative Templates settings in GPO1. What should you do?

  A. From File Explorer, copy the administrative templates from \\contoso.com\SYSVOL\contoso.com\Policies to the PolicyDefinitions folder on Server1.
  B. From File Explorer, copy the administrative templates from Server1 to \\DC1\SYSVOL\contoso.com\Policies\PolicyDefinitions
  C. From Group Policy Management Editor, configure item-level targeting in GPO1.
  D. From Group Policy Management, configure WMI Filtering for GPO1.
  B. From File Explorer, copy the administrative templates from Server1 to \\DC1\SYSVOL\contoso.com\Policies\PolicyDefinitions

  ---

  References: https://serverfault.com/questions/458144/where-did-my-group-policy-templates-go

• Question 193:

  Your network contains an Active Directory domain named adatum.com. The domain contains the objects shown in the following table.

  

  GroupA has Full Control permissions to a folder named Folderl. GroupB has Full Control permissions to a folder named Folder2. You run the following Powershell script.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 194:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You network contains an Active Directory forest named contoso.com. The forest contains an Active Directory Rights Management Services (AD RMS) deployment.

  Your company establishes a partnership with another company named Fabrikam, Inc. The network of Fabrikam contains an Active Directory forest named fabrikam.com and an AD RMS deployment.

  You need to ensure that the users in contoso.com can access rights protected documents sent by the users in fabrikam.com.

  Solution: From AD RMS in contoso.com, you configure fabrikam.com as a trusted user domain.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Contoso would need to be the Trusted User Domain.

  References: https://books.google.co.za/books?id=gjR-BAAAQBAJandpg=PA397andlpg=PA397anddq=configure+a+partners+forest+as+a+trusted+publishing+domain+-+AD+RMSandsource=blandots=mohQXTyW9sandsig=NJ7oFHuLYOs72o9EMyQiIscUW8andhl=enandsa=Xandved=0ahUKEwjuivW24sPbAhWGRMAKHQcEB6EQ6AEIOzAD#v=onepageandq=configure%20a%20partners%20forest%20as%20a%20trusted%20publishing%20domain%20-%20AD%20RMSandf=false

• Question 195:

  Your network contains an Active Directory forest named contoso.com. The forest contains 10 domains. The root domain contains a global catalog server named DC1.

  You remove the global catalog server role from DC1.

  You need to decrease the size of the Active Directory database on DC1.

  Solution: You stop the NTDS service on DC1. You run defrag.exe, and then start the NTDS service.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  You need to run ntdsutil.exe with the `compact to' option.

  References: https://theitbros.com/active-directory-database-compact-defrag/

• Question 196:

  HOTSPOT

  Your network contains an Active Directory forest named contoso.com. They connect to the forest by using ldp.exe and receive the output as shown in the following exhibit.

  

  Use drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 197:

  DRAG DROP

  Your network contains an Active Directory domain. The domain contains two domain controllers named DC1 and DC2. DC2 is a virtual machine that is hosted on a Hyper-V host named HyperV1. DC1 holds the PDC emulator operations

  master role.

  You need to create a new domain controller named DC3 by using domain controller cloning.

  Which five actions should you perform in sequence before you can import the cloned virtual machine? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

  Select and Place:

  

  

  ---

  References: https://blogs.technet.microsoft.com/askpfeplat/2012/10/01/virtual-domain-controller-cloning-in-windows-server-2012/

• Question 198:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com.

  A user named User1 is in an organizational unit (OU) named OU1.

  You need to enable User1 to sign in as [email protected].

  Solution: From Windows PowerShell, you run Set -ADuser User1 -UserPrincipalName [email protected].

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 199:

  You need to ensure that clients will check at least every 30 minutes as to whether a certificate has been revoked. Which of the following should you configure to accomplish this goal?

  A. Key recovery agent
  B. CRL publication interval
  C. Delta CRL publication interval
  D. Certificate templates.
  C. Delta CRL publication interval

• Question 200:

  DRAG DROP

  You network contains an Active Directory forest. The forest contains an Active Directory Federation Services (AD FS) deployment.

  The AD FS deployment contains the following:

  * An AD FS server named server1.contoso.com that runs Windows Server 2016

  * A Web Application Proxy used to publish AD FS

  * A LIPN that uses the contoso.com suffix

  * A namespace named adfs.contoso.com

  You create a Microsoft Office 365 tenant named contoso.onmicrosoft.com. You use Microsoft Azure Active Directory Connect (AD Connect) to synchronize all of the users and the UPNs from the contoso.com forest to Office 365.

  You need to configure federation between Office 365 and the on-premises deployment of Active Directory.

  Which three commands should you run in sequence from Server1? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.

  Select and Place: