Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 231:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a web application that uses Kerberos authentication.

  You change the domain name of the web application.

  You need to ensure that the service principal name (SPN) for the application is registered.

  Which tool should you use?

  A. Internet Information Services (IIS) Manager
  B. Rdspnf
  C. Repladmin
  D. Setspn
  D. Setspn

• Question 232:

  Your network contains an Active Directory domain named contoso.com. The domain contains servers that run Windows Server 2016. The servers are configured as shown in the following table:

  

  You have a research department. The computers in the research department are not domain-joined.

  You need to ensure that the research department computers can use automatic certificate enrollment to receive and renew certificates from the CA.

  Which two role services should you install and configure on CA? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Certificate Enrollment Policy Web Service
  B. Certificate Authority Web Enrollment
  C. Online Responder
  D. Certificate Enrollment Web Service
  E. Network Device Enrollment Service
  A. Certificate Enrollment Policy Web Service
  B. Certificate Authority Web Enrollment

  ---

  References: https://www.ejbca.org/docs/Part_2__Microsoft_Certification_Authority_and_Group_Policies.html

• Question 233:

  You network contains an active Directory domain. The domain contains 20 domain controllers.

  You discover that some Group Policy objects (PROs) are not being applied by all the domain controllers.

  You need to verify whether GPOs replicate successfully to all the domain controllers.

  What should you do?

  A. Set BurFlags in the registry, and then restart the File Replication Service (FRS). Run dcdiag.exe for each domain controller.
  B. Set BurFlags in the registry, and then restart the File Replication Service (FRS). View the Directory Service event log.
  C. From Group Policy Management, view the Status tab for the domain.
  D. Run repadmin.exe for each GPO.
  C. From Group Policy Management, view the Status tab for the domain.

• Question 234:

  Your network contains an Active Directory domain named contoso.com. The domain contains a certification authority (CA).

  The CA certificate was valid for five years and is about to expire.

  You need to ensure that when you renew the CA certificate, the maximum Validity period for the certificate is 10 years.

  What should you do before you renew the certificate?

  A. From Microsoft XML Notepad, create a file named CAPolicy.xml in the C:\Window\System32\ADC folder.
  B. From Windows System Image Manager, create a file named Unattend.xml. Store Unattend.xml in the C:\Windows\System32\Config folder.
  C. From Windows Imaging and Configuration Designer, create a file named Unattend.ini. Store Unattend.ini in the C:\Windows\Panther folder.
  D. From Microsoft Notepad, create a file named CAPolicy.inf. Store CAPolicy.inf in the C:\Windows folder.
  D. From Microsoft Notepad, create a file named CAPolicy.inf. Store CAPolicy.inf in the C:\Windows folder.

  ---

  References: https://www.sysadmins.lv/blog-en/how-to-change-ca-certificate-validity-period.aspx

• Question 235:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com.

  You open Group Policy Management as shown in the Group Policy Management exhibit.

  (Click the Exhibit button.)

  

  A user named User1 is in OU1. A computer named Computer2 is in OU2.

  The settings of GPO1 are configured as shown in the GPO1 exhibit. (Click the Exhibit button.)

  

  The settings of GPO2 are configured as shown in the GPO2 exhibit. (Click the Exhibit button.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 236:

  Your company has a marketing department.

  The network contains an Active Directory domain named contoso.com. The main office contains three domain controllers. Each branch office contains one domain controller. You discover that new settings in the Default Domain Policy are not

  applied on one of the branch offices, but all other Group Policy objects (GPOs) are applied. You need to check the replication of the Default Domain Policy for the branch Office. What should you do from a domain controller in the main office?

  A. From Windows Power Shell, run the Get-GPO Report cmdlet.
  B. From a command prompt, run repadmin.exe.
  C. From a command prompt, run dcdlage.exe.
  D. From Group Policy Management, click Default Domain Policy under Contoso.com
  A. From Windows Power Shell, run the Get-GPO Report cmdlet.

• Question 237:

  Your company has a marketing department.

  The network contains an Active Directory domain named contoso.com.

  The domain contains two top-level organizational units (OUs) named MKT_Comps and MKT_Users. MKT_Comps contains the computer accounts for the computers in the marketing department. MKT_Users contains the user accounts for

  the users in the marketing department.

  You link a new Group Policy object (GPO) named GPO1 to MKT_Comps.

  You need to deploy a VPN connection to all of the users who sign in to the marketing department computers. The users must be able to modify the VPN connection settings.

  Where in GPO1 should you create the settings for the VPN connection?

  A. Computer Configuration/Policies/Administrative Templates/Network/network Connections
  B. User Configuration/Policies/Administrative Templates/Network/Network Connections
  C. User Configuration/Preferences/Control Panel Settings/Network Options
  D. Computer Configuration/Preferences/Control Panel Settings/Network Options
  D. Computer Configuration/Preferences/Control Panel Settings/Network Options

• Question 238:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a web application that uses Kerberos authentication.

  You change the domain name of the web application.

  You need to ensure that the service principal name (SPN) for the application is registered.

  Which tool should you use?

  A. Rdspnf
  B. Active Directory Users and Computers
  C. Dnscmd
  D. Ldifde
  E. Netsh
  D. Ldifde

  ---

  Reference: https://blogs.technet.microsoft.com/tristank/2006/05/08/3-simple-rules-to-kerberos-authenticationdelegation-spns/

• Question 239:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2.

  DC1 holds the RID master operations role. DC1 fails and cannot be repaired. You need to move the RID role to DC2.

  Solution: On DC2, you open the command prompt, run dsmgmt.exe, connect to DC2, and use the Seize RID master opinion.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 240:

  Your network contains an Active Directory domain named contoso.com. The domain contains servers that run Windows Server 2016. The servers are configured as shown in the following table.

  

  You have a research department. The computers in the research department are not domain-joined.

  You need to ensure that the research department computers can use automatic certificate enrollment to receive and renew certificates from the CA.

  Which two role services should you install and configure on CA1? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Online Responder
  B. Network Device Enrollment Service
  C. Certificate Enrollment Web Service
  D. Certificate Authority Web Enrollment
  E. Certificate Enrollment Policy Web Service
  D. Certificate Authority Web Enrollment
  E. Certificate Enrollment Policy Web Service