Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 221:

  You have a server named Server1 in a workgroup.

  You need to configure a Group Policy setting on Server1 that will apply to only non-administrative users.

  What should you do?

  A. Open Local Group Policy Editor. From the View menu, modify the Customize settings.
  B. Open Local Group Policy Editor. From the File menu, modify the Options settings.
  C. Open Local Users and Groups. Create a new group. Run New-GPO.
  D. Run mmc.exe. Add the Group Policy Object Editor snap-in and change the Group Policy object (GPO).
  D. Run mmc.exe. Add the Group Policy Object Editor snap-in and change the Group Policy object (GPO).

  ---

  References: https://www.windowscentral.com/how-apply-local-group-policy-settings-specific-users-windows-10

• Question 222:

  You have a server named Server1 that has the Active Directory Federation Services server role installed.

  You need to configure Server1 as the authorization server. Server1 will be used to authorize access to a web API from a web application. The web application will use OAuth 2.0 and OpenID Connect to access the web API as the

  authenticated user.

  The solution must minimize administrative effort.

  What should you do first?

  A. Run Add-AdfsServerApplication
  B. Run New-AdfsapplicationGroup
  C. Enable the OAuth endpoint
  D. Run Add-AdfsNativeClientApplication
  A. Run Add-AdfsServerApplication

  ---

  References: https://docs.microsoft.com/en-us/powershell/module/adfs/add-adfsserverapplication?view=win10-ps

• Question 223:

  Your network contains an Active Directory domain named contoso.com.

  You need to create a central store for Group Policy administrative templates.

  What should you use?

  A. Server Manager
  B. File Explorer
  C. Dcgpofix.exe
  D. Group Policy Management Console (GPMC)
  B. File Explorer

• Question 224:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com.

  You need to view a list of all the domain user accounts that are enabled. But whose users have not signed in during the last 30 days.

  Which command should you run? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 225:

  Your network contains an Active Directory domain named contoso.com.

  You need to create a central store for Group Policy administrative templates.

  What should you use?

  A. Server Manager
  B. File Explorer
  C. Copy-GPO
  D. Group Policy Management Console (GPMC)
  E. Group Policy Management Editor
  B. File Explorer

  ---

  References: http://www.redbass.net/create-central-store-group-policy-administrative-templates/

• Question 226:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.

  You install IP Address Management (IPAM) on Server1.

  You need to manually start discovery of servers that IPAM can manage in contoso.com.

  Which three cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order

  Select and Place:

  

  

  ---

  Step 1: Invoke-IpamServerProvisioning

  Choose a provisioning method The Invoke-IpamGpoProvisioning cmdlet creates and links three group policies specified in the Domain parameter for provisioningrequired access settingson the server roles managed by the computer running the IP Address Management (IPAM) server.

  Step 2: Add-IpamDiscoveryDomain Configure the scope of discovery The Add-IpamDiscoveryDomain cmdlet adds an Active Directory discovery domain for an IP AddressManagement (IPAM) server. A discovery domain is a domain that IPAM searches to find infrastructure servers. An IPAM server uses the list of discovery domains to determine what type of servers to add. By default, IPAM discovers all domain controllers, Dynamic Host Configuration Protocol (DHCP) servers, and Domain Name System (DNS) servers.

  Step 3: Start-ScheduledTask

  Start server discovery

  To begin discovering servers on the network, click Start server discovery to launch the IPAM ServerDiscovery task or use the Start-ScheduledTask command.

• Question 227:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a read-only domain controller (RODC) named RODC1.

  You need to retrieve a list of accounts that have their password cached on RODC1.

  Which command should you run?

  A. repadmin.exe
  B. ntdsutil.exe
  C. dcdiag.exe
  D. netdom.exe
  A. repadmin.exe

  ---

  To list the user and computer accounts for the passwords that are cached on the RODC, run the following command: repadmin /prp view reveal

  References https://support.microsoft.com/en-za/help/2028962/the-active-directory-users-and-computers-mmc-snap-in-does-not-list-all

• Question 228:

  Your network contains an Active Directory forest. The forest contains one domain named contoso.com. The domain contains two domain controllers named DC1 and DC2. DC1 holds all of the operations master roles.

  During normal network operations, you run the following commands on DC2:

  Move-ADDirectoryServerOperationMasterRole -Identity “DC2” -OperationMasterRole PDCEmulator

  Move- ADDirectoryServerOperationMasterRole –Identity “DC2” -OperationMasterRole RIDMaster DC1 fails.

  You remove DC1 from the network, and then you run the following command:

  Move-ADDirectoryServerOperationMasterRole –Identity “DC2” -OperationMasterRole SchemaMaster

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  

• Question 229:

  Your network contains the Active Directory forests and domains shown in the following table.

  

  A two-way forest trust exists between ForestA and ForestB. Each domain in forestB contains user accounts that are used to manage servers. You need to ensure that the user accounts used to manage the servers in forestB are members of

  the Server Operators groups in ForestA. Solution: In DomainBRoot, you add the users to the Operator groups. You modify te membership of the Server Operators in ForestA.

  Does this meet the goal?

  A. Yes B. No
  A. Yes B. No

• Question 230:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com.

  A user named User1 is in an organizational unit (OU) named OU1.

  You are troubleshooting a folder access issue for User1.

  You need a list of groups to which User1 is either a direct member or an indirect member.

  Solution: You instruct User 1 to sign in and run whoami.exe/groups.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  References: https://www.thewindowsclub.com/whoami-windows