Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 51:

  Your network contains an Active Directory domain named contoso.com.

  All the accounts of the users in the sales department are in an organizational unit (OU) named SalesOU.

  An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object (GPO) named SalesGPO. You need to set the registry value of \HKEY_CURRENT_USER\Software\App1\CoIlaboration to 0.

  Solution: You add a user preference that has an Replace action.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  https://technet.microsoft.com/en-us/library/cc753092(v=ws.11).aspx

• Question 52:

  Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. Server1 is located in the perimeter network. You install the Active Directory

  Federation Services server role on Server1. You create an Active Directory Federation Services (AD FS) farm by using a certificate that has a subject name of sts.contoso.com.

  You need to enable certificate authentication from the Internet on Server1.

  Which two inbound TCP ports should you open on the firewall? Each correct answer presents part of the solution.

  A. 389
  B. 443
  C. 3389
  D. 8531
  E. 49443
  B. 443
  E. 49443

• Question 53:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains the Active Directory forests and domains shown in the following table.

  

  A two-way forest trust exists between ForestA and ForestB. Each domain in ForestB contains user accounts that are used to manage servers. You need to ensure that the user accounts used to manage the servers in ForestB are members of

  the server Operators groups in ForestA.

  Solution: In each domain in ForestB, you add the users to the Server Operators group. You modify the membership of the Server Operations in ForestA.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References: https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#bkmk-serveroperators

• Question 54:

  Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.

  Start of repeated scenario.

  Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.

  The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit.

  (Click the Exhibit button.)

  End of repeated scenario.

  You plan to enforce the GPO link for A6.

  Which five GPOs will apply to User1 in sequence when the user signs in to Computer1 after the link is enforced? To answer, move the appropriate GPOs from the list of GPOs to the answer area and arrange them in the correct order.

  

  The relevant users and client computer in the domain are configured as shown in the following table.

  Select and Place:

  

  

• Question 55:

  HOTSPOT

  Your network contains an Active Directory domain named adatum.com.

  You have a Central Store for Group Policy. You have a custom administrative template that contains the settings for an application named App1.

  Administrators who use computers in French report that the App1 settings always appear in French for users who have French computers.

  What should you do? To answer, select the appropriate option in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 56:

  Your network contains an Active directory domain named contoso.com. The domain has an enterprise certification authority (CA).

  You duplicate the Basic EFS template, and you name the template Template1.You configure the CA to issue Template1.

  Users are configured to obtain a new certificate automatically when they sign in to a computer in the domain.

  You need to enable the users to automatically obtain a certificate based on Template1.

  What should you modify?

  A. The Publication Settings for the CA.
  B. The Security Settings for Template1.
  C. The Request Handling properties for Template1.
  D. The Request Handling properties for the CA.
  B. The Security Settings for Template1.

• Question 57:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. All domain-joined computers have Fast Logon Optimization enabled.

  You need to ensure that the next time a user signs in to Server1, the user-targeted Group Policy objects (GPOs) are processed fully before the user gains access to the desktop.

  What should you run on Server?

  A. Invoke-Gpupdate with the –Logoff switch
  B. Invoke-Gpupdate with the –Boot switch
  C. gpupdate with the /force switch
  D. Invoke-Gpupdate with the –Sync switch
  D. Invoke-Gpupdate with the –Sync switch

  ---

  References: https://docs.microsoft.com/en-us/powershell/module/grouppolicy/invoke-gpupdate?view=win10-ps

• Question 58:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts.

  You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU).

  You need to ensure that the members of the Backup Operators group can back up domain controllers.

  What should you do?

  A. From the Computer Configuration node of DCPolicy, modify Security Settings.
  B. From the Computer Configuration node of DomainPolicy, modify Security Settings.
  C. From the Computer Configuration node of DomainPolicy, modify Administrative Templates.
  D. From the User Configuration node of DCPolicy, modify Security Settings.
  E. From the User Configuration node of DomainPolicy, modify Folder Redirection.
  F. From user Configuration node of DomainPolicy, modify Administrative Templates.
  G. From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings.
  H. From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings.
  D. From the User Configuration node of DCPolicy, modify Security Settings.

• Question 59:

  Your network contains an Active Directory domain named contoso.com.

  You have three top-level organizational units (OUs) named OU1, OU2 and OU3. OU1 contains user accounts. OU2 contains the computer accounts for shared public computers. OU3 contains the computer accounts for laptops.

  You have two Group Policy objects (GPOs) named GPO1 and GPO2. GPO1 is linked to OU1. GPO2 is linked to OU2.

  You need to prevent the user settings in GPO1 from being applied when a user signs in to a shared public computer. If a user signs in to a laptop, the user settings in GPO1 must be applied.

  A. Loopback processing
  B. GPO link enforcement
  C. Security Filtering
  D. Inheritance blocking
  A. Loopback processing

• Question 60:

  Your network contains an Active Directory domain named contoso.com.

  You need to ensure that the Administrators group on each computer in the domain always contains Contoso\Domain Admins.

  What should you do?

  A. Modify the Default Domain Policy and enable the Accounts: Administrator Account status setting.
  B. Modify the Default Domain Policy and configure the Restricted Groups setting.
  C. Modify the Default Domain Controllers Policy and enable the Accounts: Administrator account status setting.
  D. Modify the Default Domain Controllers Policy and configure the Restricted Groups setting.
  B. Modify the Default Domain Policy and configure the Restricted Groups setting.

  ---

  References: https://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local-administrator-groups/