1. Home
  2. Microsoft
  3. 70-742

Microsoft 70-742 Online Practice Questions and Exam Preparation

70-742 Exam Details

  • Exam Code
    :70-742
  • Exam Name
    :Identity with Windows Server 2016
  • Certification
    :Microsoft Certifications
  • Vendor
    :Microsoft
  • Total Questions
    :289 Q&As
  • Last Updated
    :Feb 07, 2022

Microsoft 70-742 Online Questions & Answers

  • Question 81:

    Your network contains an Active Directory forest named contoso.com

    Your company plans to hire 500 temporary employees for a project that will last 90 days.

    You create a new user account for each employee. An organizational unit (OU) named Temp contains the user accounts for the employees.

    You need to prevent the new users from accessing any of the resources in the domain after 90 days.

    What should you do?

    A. Run the Get-ADUser cmdlet and pipe the output to the Set-ADUser cmdlet.
    B. Create a group that contains all of the users in the Temp OU. Create a Password Setting object (PSO) for the new group.
    C. Create a Group Policy object (GPO) and link the GPO to the Temp OU. Modify the Password Policy settings of the GPO.
    D. Run the GET-ADOrganizationalUnit cmdlet and pipe the output to the Set-Date cmdlet.

  • Question 82:

    Your network contains an Active Directory forest named adatum.com.

    A partner organization has an Active Directory forest named contoso.com.

    Adatum.com contains an Active Directory Rights Management (AD RMS) cluster installed on a server named adat1.adatum.com.

    Contoso.com contains an Active Directory Rights Management Services (AD RMS) cluster installed on a server named cont1.contoso.com.

    You need to allow the AD RMS cluster in adatum.com to accept rights account certificates (RACs) from contoso.com.

    What should you do?

    A. In contoso.com, import the trusted user domain file from adat1.adatum.com
    B. In adatum.com, import the trusted publishing domain file from adat1.adatum.com
    C. In contoso.com, import the trusted publishing domain file from cont1.contoso.com
    D. In adatum.com, import the trusted user domain file from cont1.contoso.com

  • Question 83:

    Your network contains an Active Directory forest named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account of Server1 is an organizational unit (OU) named OU1. You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)

    An administrator reports that the settings from GPO1 are not applied to Server1.

    You need to ensure that the settings from GPO1 are applied to Server1.

    What should you do?

    A. Enable the link of GPO1
    B. Enforce GPO1
    C. Disable Block inheritance
    D. Remove the security filtering

  • Question 84:

    You network contains an Active Directory domain named contoso.com. The domain contains 1,000 desktop computers and 500 laptops. An organizational unit (OU) named OU1 contains the computer accounts for the desktop computers and

    the laptops.

    You create a Windows PowerShell script named Script1.ps1 that removes temporary files and cookies. You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.

    You need to run the script once weekly only on the laptops.

    What should you do?

    A. In GPO1, create a File preference that uses item-level targeting.
    B. In GPO1, create a Scheduled Tasks preference that uses item-level targeting.
    C. In GPO1, configure the File System security policy. Attach a WMI filter to GPO1.
    D. In GPO1, add Script1.ps1 as a startup script. Attach a WMI filter to GPO1.

  • Question 85:

    Your network contains an Active Directory forest named contoso.com The forest contains a member server named Server1.

    Server1 has several line-of-business applications. Each application runs as a service that uses the Network Service account.

    You need to configure the line-of-business applications to run by using a virtual account.

    What should you do?

    A. From Windows PowerShell, run the Install-ADServiceAccount cmdlet.
    B. From the Services console, modify the Log On properties of the services.
    C. From the Microsoft Application Compatibility Toolkit (ACT), create a shim.
    D. From Windows PowerShell, run the New-ADServiceAccount cmdlet.

  • Question 86:

    Your network contains an Active Directory domain named contoso.com. The domain contains a user named User1, a group named Group1, and an organizational unit (OU) named OU1.

    You need to enable user1 to link Group Policies to OU1.

    Solution: From Active Directory Users and Computers, you add User1 to the Group Policy Creator owners group.

    Does this meet the goal?

    A. Yes
    B. No

  • Question 87:

    Your network contains an Active Directory domain. The domain contains an Active Directory Rights Management Services (AD RMS) duster.

    All client computers run Windows 10 Enterprise.

    You need to control from which versions of Windows users can access rights-protected content

    What should you create?

    A. an exclusion policy
    B. a security policy
    C. a trust policy

  • Question 88:

    Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

    Information and details provided in a question apply only to that question.

    Your network contains an Active Directory domain named contoso.com.

    You need to limit the number of Active Directory Domain Services (AD DS) objects that a user can create in the domain.

    Which tool should you use?

    A. Dsadd quota
    B. Dsmod
    C. Active Directory Administrative Center
    D. Dsacls
    E. Dsamain
    F. Active Directory Users and Computers
    G. Ntdsutil
    H. Group Policy Management Console

  • Question 89:

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains the Active Directory forests and domains shown in the following table.

    A two-way forest (rust exists between ForestA and ForestB.

    Each domain in forestB contains user accounts that are used to manage servers.

    You need to ensure that the user accounts used to manage the servers in forestB are members of the Server Operators groups in ForestA.

    A. Yes
    B. No

  • Question 90:

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

    others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    Your network contains an Active Directory forest named contoso.com.

    You need to identify which server is the schema master.

    Solution: You open Active Directory Users and Computers, right-click contoso.com in the console tree, and then click Operations Master.

    Does this meet the goal?

    A. Yes
    B. No

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Microsoft exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 70-742 exam preparations and Microsoft certification application, do not hesitate to visit our Vcedump.com to find your solutions here.