Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 21:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a domain controller named DC1 that runs Windows Server 2016.

  You need to create a snapshot of the Active Directory database on DC1.

  Which tool should you use?

  A. Dsadd quota
  B. Dsmod
  C. Active Directory Administrative Center
  D. Dsacls
  E. Dsmain
  F. Active Directory Users and Computers
  G. Ntdsutil
  H. Group Policy Management Console
  G. Ntdsutil

• Question 22:

  Your network contains an Active Directory domain named contoso.com. The domain contains the objects shown in the following table.

  

  The domain has the Group Policy objects (GPOs) shown in the following table.

  For each of the following statements, selects Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 23:

  Your network contains an Active Directory domain named contoso.com. The relevant objects in the domain are configured as shown in the following table.

  

  User1 is in OU1. GPO1 is linked to OU1.

  The settings in GPO1 are configured as shown in the exhibit. (Click the Exhibit tab.)

  Computer1 does not have any shortcuts on the desktop.

  How many shortcuts appear on the desktop after User1 signs in to Computer1?

  

  A. 1
  B. 2
  C. 3
  D. 4
  A. 1

• Question 24:

  Your network contains an Active Directory forest named contoso.com. All domain controllers run Windows Server 2012 R2.

  You deploy a new server named Server1 that runs Windows Server 2016.

  A server administrator named ServerAdmin01 is a member of the Doman users group. You add ServerAdmin01 to the Administrators group on Server1.

  ServerAdmin01 signs in to Server1 and successfully configures a new Active Directory Rights Management Services (AD RMS) cluster.

  You need to ensure that clients discover the AD RMS cluster by querying Active Directory.

  What should you do?

  A. Update the Active Directory schema.
  B. Register a Service Connection Point (SCP).
  C. Modify the Security settings of the computer account of Server1.
  D. Upgrade one domain controller to Windows Server 2016.
  B. Register a Service Connection Point (SCP).

• Question 25:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. You have an organizational unit (OU) named LondonUsers that contains 10,000 users. You need to modify the office attribute of all the users in the LondonUsers OU.

  Solution: You create an LDIF file. You run ldifde.exe and specify the -i and -f parameters.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References:

  https://webactivedirectory.com/2011/07/18/simple-powershell-script-to-bulk-update-or-modify-active- directory-user-attributes/

• Question 26:

  Your company has multiple offices.

  The network contains an Active Directory domain named contoso.com. An Active Directory site exists for each office. All of the sites connect to each other by using DEFAULTIPSITELINK.

  The company plans to open a new office. The new office will have a domain controller and 100 client computers.

  You install Windows Server 2016 on a member server in the new office. The new server will become a domain controller.

  You need to deploy the domain controller to the new office. The solution must ensure that the client computers in the new office will authenticate by using the local domain controller.

  Which three actions should you perform next in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 27:

  You network contains an Active Directory Domain named contoso.com.

  You modify a Group Policy object (GPO) as shown in the exhibit.

  

  You need to ensure that the Administrative Templates and their settings appear in Group Policy Management Editor. What should you do?

  A. On DC1, delete the PolicyDefinitions folder from the C:\Windows\SYSVOL\sysvol\Contoso.com\Policics folder.
  B. Configure the Group Policy filtering options.
  C. Grant the Domain Admins group Read permissions to the Adatum.com\System\Policies container.
  D. Modify the members of the Group Policy Creator Owners group.
  B. Configure the Group Policy filtering options.

• Question 28:

  Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is

  exactly the same in each question in this series.

  Start of repeated scenario.

  Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.

  The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)

  

  The relevant users and client computer in the domain are configured as shown in the following table.

  

  End of repeated scenario.

  You are evaluating what will occur when you remove the Authenticated Users group from the Security Filtering settings of A5.

  Which GPO or GPOs will apply to User1 when the user signs in to Computer1 after Security Filtering is configured?

  A. A1 and A7 only
  B. A3 and A1 only.
  C. A3, A1, A6 and A7
  D. A7 only
  A. A1 and A7 only

• Question 29:

  You have a server named Server1 that runs Windows Server 2016. Server1 has the Web Application Proxy role service installed.

  You plan to deploy Remote Desktop Gateway (RD Gateway) services. Clients will connect to the RD Gateway services by using various types of devices including Windows, iOS and Android devices.

  You need to publish the RD Gateway services through the Web Application Proxy.

  Which command should you run? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

• Question 30:

  You have a standalone root certification authority (CA).

  You have a new security policy requirements specifying that any changes to the CA configuration must be logged.

  You need to ensure that the CA meets the new security requirement.

  Which two actions should you perform? Each correct answer presents part of the solution.

  A. From the Certification Authority console, modify the Auditing settings for the CA.
  B. From the Certification Authority console, modify the Security settings for the CA.
  C. From Local Group Policy Editor, configure auditing for policy change.
  D. From the Certification Authority console, modify the Certificate Managers settings for the CA.
  E. From Local Group Policy Editor, configure auditing for object access.
  C. From Local Group Policy Editor, configure auditing for policy change.
  E. From Local Group Policy Editor, configure auditing for object access.

  ---

  Audit policy change defines whether every incident of a change to user rights assignment policies, audit policies, or trust policies is audited. Audit object access defines whether the event of a user accessing an object--for example, a file, folder, registry key, printer, and so forth--that has its own system access control list (SACL) specified is audited.

  References: https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/basic-audit-policy-change https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/basic-audit-object-access