Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 61:

  HOTSPOT

  Your network contains an Active Directory forest named contoso.com. They connect to the forest by using ldp.exe and receive the output as shown in the following exhibit.

  

  Use drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 62:

  Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016. The computer accounts of Server1 and Server2 are in the Computers

  container.

  A Group Policy object (GPO) named GPO1 is linked to the domain. GPO1 has multiple computer settings defined and has following the configurations.

  

  An administrator discovers that GPO1 is not applied to Served. GPO1 is applied to Server2. Which configuration possibly prevents GPO1 from being applied to Server1?

  A. the permissions on the computer object of Server1
  B. the permissions on GPO1
  C. the loopback processing mode in GPO1
  D. the permissions on the Computers container
  B. the permissions on GPO1

• Question 63:

  You are configuring AD FS. Which server should you deploy on your organization's perimeter network?

  A. Web application proxy
  B. Relying-party server
  C. Federation server
  D. Claims-provider server
  A. Web application proxy

• Question 64:

  Your network contains an Active Directory domain named contoso.com. All the accounts of the users in the sales department are in an organizational unit (OU) named SalesOU.

  An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object (GPO) named Sales GPO.

  You need to set the registry value of \HKEY_CURRENT_USER\Software\App1\Collaboration to 0.

  Solution: You add a user preference that has an Update action.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

• Question 65:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a server named Server1 that runs Windows Server 2016.

  Server1 has IP Address Management (IPAM) installed. IPAM is configured to use the Group Policy based provisioning method.

  The prefix for the IPAM Group Policy objects (GPOs) is IP.

  From Group Policy Management, you manually rename the IPAM GPOs to have a prefix of IPAM.

  You need to modify the GPO prefix used by IPAM.

  What should you do?

  A. Click Configure server discovery in Server Manager.
  B. Run the Set-IpamConfiguration cmdlet.
  C. Run the Invoke-IpamGpoProvisioning cmdlet.
  D. Click Provision the IPAM server in Server Manager.
  B. Run the Set-IpamConfiguration cmdlet.

  ---

  The Set-IpamConfiguration cmdlet modifies the configuration for the computer that runs the IPAM server.

  The -GpoPrefix parameter specifies the unique Group Policy object (GPO) prefix name that IPAM uses to create the group policy objects. Use this parameter only when the value of the ProvisioningMethod parameter is set to

  Automatic.

  References: https://docs.microsoft.com/en-us/powershell/module/ipamserver/set-ipamconfiguration?view=win10-ps

• Question 66:

  You have an internal web server that hosts websites. The websites use HTTP and HTTPS.

  You deploy a Web Application Proxy to your perimeter network.

  You need to ensure that users from the Internet can access the websites by using HTTPS only. Internet access to the websites must use the Web Application Proxy.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. From the web server, enable HTTP Redirect on the Web Application Proxy server.
  B. Configure the Web Application Proxy to perform preauthentication by using Oauth2.
  C. From the Remote Access Management Console, publish the websites. Configure pass-through authentication and select Enable HTTP to HTTPS redirection.
  D. On external DNS name servers, create DNS entries that point to the private IP address of the web server.
  E. On external DNS name servers, create DNS entries that point to the public IP address of the Web Application Proxy.
  C. From the Remote Access Management Console, publish the websites. Configure pass-through authentication and select Enable HTTP to HTTPS redirection.
  E. On external DNS name servers, create DNS entries that point to the public IP address of the Web Application Proxy.

• Question 67:

  Your company has an office in Montreal. The network contains an Active Directory domain named contoso.com.

  You have an organizational unit (OU) named Montreal that contains all of the users accounts for the users in the Montreal office. An office manager in the Montreal office knows each user personally.

  You need to ensure that the office manager can provide the users with a new password if the users forget their password.

  What should you do?

  A. Create a Group Policy object (GPO) and link the GPO to the Montreal OU. Assign the office manager the Apply Group Policy permission on the GPO. Configure the Password Policy settings of the GPO.
  B. From the Security settings of each user account in the Montreal OU, assign the office manager the Change Password permission.
  C. From the Security settings of the Montreal OU, assign the office manager the Reset Password permission.
  D. Create a Group Policy object (GPO) and link the GPO to the OU of the domain. Filter the GPO to the Montreal users. Assign the office manager the Apply Group Policy permission on the GPO. Configure the Password Policy settings of the GPO.
  C. From the Security settings of the Montreal OU, assign the office manager the Reset Password permission.

• Question 68:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.

  Contoso.com has the following configuration.

  PS C:\> (Get-ADForest).ForestMode

  Windows2008R2Forest PS C:\> (Get-ADDomain).DomainMode Windows2008R2Domain PS C:\>

  You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.

  You need to configure Active Directory to support the planned deployment.

  Solution: You upgrade a domain controller to Windows Server 2016.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Device Registration requires Windows Server 2012 R2 forest schema. Upgrading a domain controller will run adprep.exe to upgrade the schema as part of the upgrade process.

  References: https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/configure-a-federation-server-with-device-registration-service https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers-towindows-server-2012-r2-and-windows-server-2012

• Question 69:

  You have a server named Server1 that has the Active Directory Federation Services server role installed.

  You need to configure Server1 as the authorization server. Server1 will be used to authorize access to a web API from a web application. The web application will use OAuth 2.0 and OpenID Connect to access the web API as the

  authenticated user. The solution must minimize administrative effort.

  What should you do first?

  A. Run New-AdfsApplicationGroup
  B. Add a web API application
  C. Run Add-AdfsNativeClientApplication
  D. Run Add-AdfsWebApiApplication
  D. Run Add-AdfsWebApiApplication

  ---

  References: https://docs.microsoft.com/en-us/powershell/module/adfs/add-adfswebapiapplication?view=win10-ps

• Question 70:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. You have an organizational unit (OU) named LondonUsers that contains 10,000 users. You need to modify the office attribute of all the users in the LondonUsers OU.

  Solution: From PowerShell, you run the Get-ADUser cmdlet and specify the -SearchBase parameter. You pipe the results to the Set-Aduser cmdlet.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  References:

  https://webactivedirectory.com/2011/07/18/simple-powershell-script-to-bulk-update-or-modify-active- directory-user-attributes/