Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 261:

  Your network contains an Active Directory forest. The forest functional level is Windows Server 2016.

  You have a failover cluster named Cluster1. Cluster1 has two nodes named Server1 and Server2. All the optional features in Active Directory are enabled.

  A junior administrator accidentally deletes the computer object named Cluster1.

  You discover that Cluster1 is offline.

  You need to restore the operation of Cluster1 in the least amount of time possible.

  What should you do?

  A. Run the Enable-ADAccount cmdlet from Windows PowerShell.
  B. Perform an authoritative restore by running ntdutil.exe.
  C. Perform a tombstone reanimation by running ldp.exe.
  D. Recover a deleted object from the Active Directory Recycle Bin.
  D. Recover a deleted object from the Active Directory Recycle Bin.

• Question 262:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory forest named contoso.com.

  You need to identify which server is the schema master.

  Solution: You open Active Directory Domains and Trusts, right-click Active Directory Domains and Trust in the console tree, and then click Operations Master.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  You need to use the Schema snap-in to find the schema master. The Schema snap-in is not installed by default but can be installed by using Schmmgmt.dll.

  References: https://www.petri.com/determining_fsmo_role_holders

• Question 263:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts.

  You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU).

  You need to configure the Documents folder of every user to be stored on a server named FileServer1.

  What should you do?

  A. From the Computer Configuration node of DCPolicy, modify Security Settings.
  B. From the Computer Configuration node of DomainPolicy, modify Security Settings.
  C. From the Computer Configuration node of DomainPolicy, modify Administrative Templates.
  D. From the User Configuration node of DCPolicy, modify Security Settings.
  E. From the User Configuration node of DomainPolicy, modify Folder Redirection.
  F. From user Configuration node of DomainPolicy, modify Administrative Templates.
  G. From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings.
  H. From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings.
  E. From the User Configuration node of DomainPolicy, modify Folder Redirection.

• Question 264:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016. The computer accounts of Server1 and Server2 are in the Computers container.

  A Group Policy object (GPO) named GPO1 is linked to the domain. GPO1 has multiple computer settings defined and has following configurations.

  

  An administrator discovers that GPO1 is not applied to Server1. GPO1 is applied to Server2. Which configuration possibly prevents GPO1 from being applied to Server1?

  A. The permissions on the domain object of contoso.com
  B. The WMI filter settings
  C. The Enforced setting of GPO1
  D. The GpoStatus property
  E. The loopback processing mode in GPO1
  F. The permissions on the domain object of contoso.com
  B. The WMI filter settings

  ---

  References: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-wmi-filters-for-the-gpo

• Question 265:

  Your network contains an Active Directory domain named contoso.com.

  You have an organizational unit (OU) named OU1 that contains the computer accounts of two servers and the user account of a user named User1. A Group Policy object (GPO) named GPO1 is linked to OU1.

  You have an application named App1 that installs by using an application installer named App1.exe.

  You need to publish App1 to OU1 by using Group Policy.

  What should you do?

  A. Create a Config.zap file and add a file to the File System node to the Computer Configuration node of GPO1.
  B. Create a Config.xml file and add a software installation package to the User Configuration node of GPO1.
  C. Create a Config.zap file and add a software installation package to the User Configuration node of GPO1.
  D. Create a Config.xml file and add a software installation package to the Computer Configuration node of GPO1.
  C. Create a Config.zap file and add a software installation package to the User Configuration node of GPO1.

• Question 266:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory forest named contoso.com.

  You need to identify which server is the schema master.

  Solution: From a command prompt, you run netdom query fsmo.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  References: https://blogs.technet.microsoft.com/canitpro/2017/05/24/step-by-step-migrating-active-directory-fsmo-roles-from-windows-server-2012-r2-to-2016/

• Question 267:

  A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each laptop must be in an organizational unit (OU) that is associated to the department of the user who will use that laptop. The

  laptop names must start with four characters indicating the department followed by a four-digit number.

  Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops.

  You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and that the computer accounts of the laptops are in the correct OUs.

  Solution: You script the creation of files for an offline domain join, and then you give the files to Tech1.

  You instruct Tech1 to sign in to each laptop, and then to run djoin.exe.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 268:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a server named Server1 that runs Windows Server 2016.

  The Computer account for Server1 is in organizational unit (OU) named OU1.

  You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.

  You need to add a domain user named user1 to the local Administrators group on Server1.

  Solution: From the Computer Configuration node of GPO1, you configure the Restricted Groups settings.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

• Question 269:

  You have an Active Directory Rights Management Services (AD RMS) server named RMS1.

  Multiple documents are protected by using RMS1.

  RMS1 fails and cannot be recovered.

  You install the AD RMS server role on a new server named RMS2.

  You restore the AD RMS database from RMS1 to RMS2.

  Users report that they fail to open the protected documents and to protect new documents.

  You need to ensure that the users can access the protected content.

  What should you do?

  A. From Active Directory Rights Management, update the Service Connection Point (SCP) for RMS1.
  B. From DNS, create an alias (CNAME) record for RMS2.
  C. From DNS, modify the service location (SRV) record for RMS1.
  D. From RMS2, register a service principal name (SPN) in Active Directory.
  D. From RMS2, register a service principal name (SPN) in Active Directory.

• Question 270:

  Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2016. The domain contains the servers shown in the following table.

  

  The domain has several Managed Service Accounts.

  Server 1 hosts a service named Service 1 that runs in the security context of the LocalSystem account.

  You need to implement a group Managed Service Account to run Service 1.

  Which two actions should you perform? Each correct answer presents part of the solution.

  A. On DO. run New-ADServieeAceount.
  B. OnDCl.runAdd-KDSRootickey.
  C. On DC1. njn Add-AOCo«puterS«rviceAccount.
  D. On Server1, modify the properties of Service1.
  B. OnDCl.runAdd-KDSRootickey.