Microsoft 70-742 Online Practice Questions and Exam Preparation

Microsoft 70-742 Online Questions & Answers

• Question 71:

  You plan to deploy a Software Defined Networking (SDN) infrastructure.

  Which service provides name resolution for the virtual machines on a tenant network?

  A. iSNS
  B. Network Controller
  C. a smart host
  D. iDNS
  D. iDNS

• Question 72:

  Your network contains an Active Directory domain named contoso.com.

  Domain users use smart cards to sign in to their client computer.

  Some users report that it takes a long time to sign in to their computer and that the logon attempt times out, so they must restart the sign in process.

  You discover that the issues to checking the certificate revocation list (CRL) of the smart card certificates.

  You need to resolve the issue without diminishing the security of the smart card logons.

  What should you do?

  A. From the properties of the smart card's certificate template, modify the Request Handling settings.
  B. From the properties of the smart card's certificate template, modify the Issuance Requirements settings.
  C. Deactivate certificate revocation checks on the computers.
  D. Implement an Online Certification Status Protocol (OCSP) responder.
  D. Implement an Online Certification Status Protocol (OCSP) responder.

• Question 73:

  Your network contains an Active Directory domain named contoso.com. The domain contains a user named User1, a group named Group1, and an organizational unit (OU) named OU1.

  You need to enable User1 to link Group Policies to OU1.

  Solution: From Active Directory Administrative Center, you add User1 to Group1 and grant Group1 Full Control permission to OU1.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

• Question 74:

  Your network contains an Active Directory forest. The forest contains two domains named litwarenc.com and contoso.com. The contoso.com domain contains two domains controllers named LON-DC01 and LON-DC02.

  The domain controllers are located in a site named London that is associated to a subnet of 192.168.10.0/24

  You discover that LON-DC02 is not a global catalog server. You need to configure LON-DC02 as a global catalog server.

  What should you do?

  A. From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the NTDS settings.
  B. From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the City attribute.
  C. From Active Directory Sites and Services, modify the properties of the 192.168.10.0/24 IP subnet.
  D. From the properties of the Domain Controllers organizational unit (OU) in Active Directory Users and Computers, modify the Security settings.
  A. From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the NTDS settings.

• Question 75:

  Your network contains an Active Directory domain named contoso.com.

  You create a domain security group named Group1 and add several users to it.

  You need to force all of the users in Group1 to change their password every 35 days. The solution must affect the Group1 users only.

  What should you do?

  A. Create a forms authentication provider, and then set the forms authentication credentials.
  B. From Active Directory Administrative Center, create a Password Setting object (PSO).
  C. Modify the Password Policy settings in a Group Policy object (GPO) that is linked to the domain, and then filter the GPO to Group1 only.
  D. From Windows PowerShell, run the Set-ADDomain cmdlet, and then run the Set-ADAccountPassword cmdlet.
  B. From Active Directory Administrative Center, create a Password Setting object (PSO).

• Question 76:

  DRAG DROP

  Your network contains an Active Directory domain. The domain contains a domain controller named DC1 that runs Windows Server 2016.

  You start DC1 in Directory Services Restore Mode (DSRM).

  You need to compact the Active Directory database on DC1.

  Which three action should you perform in sequence?

  Select and Place:

  

  

  ---

  https://technet.microsoft.com/en-us/library/cc794920(v=ws.10).aspx

• Question 77:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory forest. The forest contains a domain named contoso.com. The domain contains three domain controllers.

  A domain controller named lon-dc1 fails. You are unable to repair lon-dc1.

  You need to prevent the other domain controllers from attempting to replicate to lon-dc1.

  Solution: From ntdsutil.exe, you perform a metadata cleanup.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

• Question 78:

  Your network contains an Active Directory forest named contoso.com.

  You have an Active Directory Federation Services (AD FS) farm. The farm contains a server named Server1 that runs Windows Server 2012 R2.

  You add a server named Server2 to the farm. Server2 runs Windows Server 2016.

  You remove Server1 from the farm.

  You need to ensure that you can use role separation to manage the farm.

  Which cmdlet should you run?

  A. Set-AdfsFarmInformation
  B. Update-AdfsRelyingPartyTrust
  C. Set-AdfsProperties
  D. Invoke-AdfsFarmBehaviorLevelRaise
  D. Invoke-AdfsFarmBehaviorLevelRaise

• Question 79:

  Your company has a testing environment that contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. Server1 has IP Address Management (IPAM) installed.

  IPAM has the following configuration.

  

  The IPAM Overview page from Server Manager is shown in the IPAM Overview exhibit. (Click the Exhibit button.)

  The group policy configurations are shown in the GPO exhibit. (Click the Exhibit button.)

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  

  ---

  No domains have been selected in the “Configure Server Discovery” option. Therefore, no automatic discovery will take place. Manual addition of a server will also fail because IPAM needs a domain configured for server verification.

• Question 80:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com.

  A user named User1 is in an organizational unit (OU) named OU1.

  You are troubleshooting a folder access issue for User1.

  You need a list of groups to which User1 is either a direct member or an indirect member.

  Solution: You run Get-ADGroup –Identity User1 –Property MemberOf.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  The Get-ADGroup cmdlet does not include the MemberOf property. The command above is, therefore, not valid. References: https://docs.microsoft.com/en-us/powershell/module/addsadministration/get-adgroup?view=win10-ps