Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 31:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy a new Active Directory forest.

  You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member servers.

  Solution: From Windows PowerShell on a domain controller, you run the Set-KdsConfiguration cmdlet.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 32:

  You have users that access web applications by using HTTPS. The web applications are located on the servers in your perimeter network. The servers use certificates obtained from an enterprise root certification authority (CA). The

  certificates are generated by using a custom template named WebApps. The certificate revocation list (CRL) is published to Active Directory.

  When users attempt to access the web applications from the Internet, the users report that they receive a revocation warning message in their web browser. The users do not receive the message when they access the web applications from

  the intranet.

  You need to ensure that the warning message is not generated when the users attempt to access the web applications from the Internet.

  What should you do?

  A. Install the Certificate Enrollment Web Service role service on a server in the perimeter network.
  B. Modify the WebApps certificate template, and then issue the certificates used by the web application servers.
  C. Install the Web Application Proxy role service on a server in the perimeter network. Create a publishing point for the CA.
  D. Modify the CRL distribution point, and then reissue the certificates used by the web application servers.
  D. Modify the CRL distribution point, and then reissue the certificates used by the web application servers.

• Question 33:

  Note: This question is part of a series of questions that use the same scenario. For you convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is

  exactly the same in each question in this series.

  Start of repeated scenario.

  You work for a company named Contoso, Ltd.

  The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an Active Directory forest named adatum.com.

  The contoso.com forest contains the objects configured as shown in the following table.

  

  Group1 and Group2 contain only user accounts.

  Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3 that runs Windows 10. Computer3 is currently in a workgroup.

  An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain.

  From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com domain, and then you create a contact named Contact1 in OU1.

  An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a user logon name of [email protected].

  End of repeated scenario.

  You need to ensure that User2 can add Group4 as a member of Group5.

  What should you modify?

  A. the group scope of Group5
  B. the Managed By settings of Group4
  C. the group scope of Group4
  D. the Managed By settings of Group5
  D. the Managed By settings of Group5

• Question 34:

  DRAG DROP

  Your company implements Active Directory Federation Services (AD FS).

  You confirm that the company meets all the prerequisites for using Microsoft Azure Multi- Factor Authentication (MFA) and AD FS.

  You need to ensure that you can select MFA as the primary authentication method for AD FS.

  Which three actions should you perform in sequence? To answer move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 35:

  Your network contains an Active Directory domain named contoso.com.

  You need to create a central store for Group Policy administrative templates.

  What should you use?

  A. File Explorer
  B. Server Manager
  C. Gpfixup.exe
  D. Copy-GPO
  A. File Explorer

• Question 36:

  Your network contains an Active Directory domain named contoso.com.

  The user account for a user named User1 is in an organizational unit (OU) named OU1.

  You need to enable User1 to sign in as [email protected].

  Solution: From Windows PowerShell, You run Set-ADuser User1 –UserPrincipalName [email protected].

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

• Question 37:

  DRAG DROP

  You are the network administrator for a company named Contoso, Ltd.

  Contoso has a partner company named Fabrikam, Inc.

  The networks of both companies contain Active Directory forests. The functional level of both forests is Windows 2008. Both forests has Active Directory Rights Management Services (AD RMS) and Microsoft Exchange Server 2016 installed.

  The users in both forests can access AD RMS and Exchange servers.

  You need to ensure that the Contoso users can access rights-protected content of the Fabrikam users. The solution must minimize changes to the AD RMS clients and must eliminate the need to exchange AD RMS private keys.

  Select and Place:

  

  

  ---

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc755110(v=ws.10)

• Question 38:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a server named Web1 that runs Windows Server 2016.

  You need to list all the SSL certificates on Web1 that will expire during the next 60 days.

  Solution: You run the following command.

  Get-ChildItem Cert:\LocalMachine\Trust |? { $_.NotAfter It (Get-Date).AddDays( 60 ) }

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 39:

  Your network contains an Active Directory domain named contoso.com. You need to create a central store for Group Policy administrator templates. What should you use?

  A. Dcgpofix.exe
  B. Copy-Item
  C. Copy-GPO
  D. Group Policy Management Console (GPMC)
  B. Copy-Item

• Question 40:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy a new Active Directory forest.

  You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member servers.

  Solution: From Windows PowerShell on a domain controller, you run the Add-KdsRootKey cmdlet.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  References: https://blogs.technet.microsoft.com/askpfeplat/2012/12/16/windows-server-2012-group-managed-service-accounts/