Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 251:

  Your network contains an Active Directory domain. All client computers run Windows 10.

  A client computer named Computer1 was in storage for five months and was unused during that time.

  You attempt to sign in to the domain from Computer1 and receive an error message.

  You need to ensure that you can sign in to the domain from Computer1.

  What should you do?

  A. Unjoin Computer1 from the domain, and then join the computer to the domain.
  B. From Active Directory Administrative Center, reset the computer account of Computer1.
  C. From Active Directory Administrative Center, disable Computer1, and then enable the computer account of Computer1.
  D. From Active Directory Users and Computers, run the Delegation of Control Wizard.
  E. From Windows PowerShell on Computer1, run the Restore-Computer cmdlet
  F. From a command prompt, run the Systemreset.exe command
  A. Unjoin Computer1 from the domain, and then join the computer to the domain.

  ---

  Reference: https://mcpmag.com/articles/2015/03/05/rejoin-a-computer-from-a-domain.aspx

• Question 252:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains the Active Directory forests and domains shown in the following table:

  

  A two-way forest trust exists between ForestA and ForestB.

  Each domain in ForestB contains user accounts that are used to manage servers.

  You need to ensure that the user accounts used to manage the servers in ForestB are members of the Server Operators in ForestA. Solution: In DomainBRoot, you add the users to the Server Operators group. You modify the membership of the Server Operators in ForestA. Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References: https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#bkmk-serveroperators

• Question 253:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.

  Contoso.com has the following configuration.

  PS C:\> (Get-ADForest).ForestMode

  Windows2008R2Forest

  PS C:\> (Get-ADDomain).DomainMode Windows2008R2Domain PS C:\>

  You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.

  You need to configure Active Directory to support the planned deployment.

  Solution: You raise the domain functional level to Windows Server 2012 R2.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Device Registration requires Windows Server 2012 R2 forest schema (not just domain schema).

  References: https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/configure-a-federation-server-with-device-registration-service

• Question 254:

  Note: This question is part of a series of questions that use the same or similar answer choice. An answer choice may be correct for more than one question in the series. Each question is Independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2012 R2.

  Your company hires 3 new security administrators to manage sensitive user data.

  You create a user account named Secunty1 for the security administrator.

  You need to ensure that the password for Secunty1 has at least 12 characters and is modified every 10 days.

  The solution must apply to Security 1 only.

  Which tool should you use?

  A. Dsadd quota
  B. Dsmod
  C. Active Directory Administrative Center
  D. Dsacis
  E. Dsamain
  C. Active Directory Administrative Center

  ---

  Using Fine-Grained Password Policies you specify multiple password policies in a single domain and apply different restrictions for password and account lockout policies to different sets of users in a domain. You can apply stricter settings to privileged accounts and less strict settings to the accounts of other users.To enable Fine-Grained Password Policies (FGPP), you need to open the Active Directory Administrative Center (ADAC)https://blogs.technet.microsoft.com/ canitpro/2013/05/29/step-by-step-enabling-and-using-fine-grained-password

• Question 255:

  Which of the following CA types would you deploy if you wanted to deploy a CA at the top of a hierarchy that could issue signing certificates to other CAs and which would be taken offline if not issuing, renewing, or revoking signing certificates?

  A. Enterprise root
  B. Enterprise subordinate
  C. Standalone root
  D. Standalone subordinate
  C. Standalone root

• Question 256:

  Your network contains an Active Directory domain named contoso.com.

  A Group Policy object (GPO) named GPO1 is linked to contoso.com.

  GPO1 has computer configuration policies, user configuration policies, and user preferences configured.

  You need to ensure that the user preferences in GPO1 apply only to users who sign in to computers that runs Windows 10. All the other settings in GPO1 must be applied, regardless of the computer to which the users sign in.

  What should you configure?

  A. WMI Filtering
  B. Item-level targeting
  C. Security Settings
  D. Security Filtering
  B. Item-level targeting

• Question 257:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2.

  DC1 holds the RID master operations role. DC1 fails and cannot be repaired. You need to move the RID role to DC2.

  Solution: On DC2, you open Active Directory Users and Computers, click Operations Masters.., verify that dc2.contoso.com is listed on the RID tab, and click Change.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  This would work if DC1 was still online. In that case we would be "transferring" the role. However, as DC1 is offline, we need to "seize" the role which can only be done by using the ntdsutil command or the Move-AddirectoryServerOperationMasterRole PowerShell cmdlet with the -Force parameter.

• Question 258:

  Your network contains an Active Directory forest. The forest contains two domains named litwarenc.com and contoso.com. The contoso.com domain contains two domains controllers named LON-DC01 and LON-DC02. The domain

  controllers are located in a site named London that is associated to a subnet of 192.168.10.0/24

  You discover that LON-DC02 is not a global catalog server.

  You need to configure LON-DC02 as a global catalog server.

  What should you do?

  A. From Active Directory Sites and Services, modify the properties of the 192.168.10.0/24 IP subnet.
  B. From Windows PowerShell, run the Set-NetNatGlobal cmdlet.
  C. From Active Directory Sites and Services, modify the NTDS Settings object of LON-DC02.
  D. From Windows PowerShell, run the Enable-ADOptionalFeature cmdlet.
  E. From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the NTDS settings.
  F. From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the City attribute.
  G. From the properties of the Domain Controllers organizational unit (OU) in Active Directory Users and Computers, modify the Security settings.
  C. From Active Directory Sites and Services, modify the NTDS Settings object of LON-DC02.

• Question 259:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com.

  The user account for a user named User1 is in an organizational unit (OU) named OU1.

  You need to enable User1 to sign in as [email protected].

  Solution: From Active Directory Users and Computers, you set the E-mail property of User1 to [email protected].

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 260:

  Your network contains an Active Directory forest named contoso.com. Users frequently access the website of an external partner company.

  The URL of the website is http://partners.adatum.com.

  The partner company informs you that it will perform maintenance on its Web server and that the IP addresses of the Web server will change.

  After the change is complete, the users on your internal network report that they fail to access the website.

  However, some users who work from home report that they can access the website.

  You need to ensure that your DNS servers can resolve partners.adatum.com to the correct IP address immediately.

  What should you do?

  A. Run dnscmd and specify the CacheLockingPercent parameter.
  B. Run Set-DnsServerGlobalQueryBlockList.
  C. Run ipconfig and specify the Renew parameter.
  D. Run Set-DnsServerCache.
  D. Run Set-DnsServerCache.