Microsoft 70-744 Online Practice Questions and Exam Preparation

Microsoft 70-744 Online Questions & Answers

• Question 1:

  You enable and configure PowerShell Script Block Logging.

  You need to view which script blocks were executed by using Windows PowerShell scripts.

  What should you do?

  A. View the Microsoft-Windows-PowerShell/Operational event log.
  B. Open the log files in %LocalAppData%\\Microsoft\\Windows\\PowerShell.
  C. View the Windows PowerShell event log.
  D. Open the log files in %SYSTEMROOT%\\Logs.
  A. View the Microsoft-Windows-PowerShell/Operational event log.

  ---

  https://docs.microsoft.com/en-us/powershell/wmf/5.0/audit_scriptAfter you enable detailed script tracing, Windows PowerShell logs all script blocks to the event log, MicrosoftWindows-PowerShell/Operational.

  

• Question 2:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1.

  You configure Just Enough Administration (JEA) on Server1. When will JEA limit the tasks that can be performed on Server1?

  A. when you run winrs.exe and specify Server1 as the remote endpoint
  B. when you run psexec.exe and specify \\Server1 as the remote system
  C. when you run Enter-PSSession and specify Server1 and the -ComputeName parameter
  D. when establishing a Remote Desktop connection to Server1
  D. when establishing a Remote Desktop connection to Server1

  ---

  References: https://www.red-gate.com/simple-talk/sysadmin/powershell/powershell-just-enough-administration/

• Question 3:

  HOTSPOT

  You have 10 Hyper-V hosts that run Windows Server 2016.

  Each Hyper-V host has eight virtual machines that run a distributed web application named App1.

  You plan to implement a Software Load Balancing (SLB) solution for client access to App1.

  You deploy two new virtual machines named SLB1 and SLB2.

  You need to install the required components on the Hyper-V hosts and the new servers for the planned implementation.

  Which components should you install? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  Component to install on SLB1 and SLB2: SLB Multiplexer (MUX)

  Component to install on each Hyper-V host:SLB Host Agent

  https://blogs.technet.microsoft.com/tip_of_the_day/2016/06/28/tip-of-the-day-demystifying-software-definednetworking-terms-the-components/ https://technet.microsoft.com/en-us/library/mt632286.aspxSLB

  Host Agent ?When you deploy SLB, you must use System Center, Windows PowerShell, or anothermanagement application to deploy the SLB Host Agent on every Hyper-V host computer.You can install the SLB Host Agent on all versions of Windows Server 2016 that provide Hyper-V support,including Nano Server.SLB MUX ?Part of the Software Load Balancer (SLB on Windows Server 2016, the SLB MUX processesinbound network traffic and maps VIPs (virtual IPs) toDIPs (datacenter IPs), then forwards the traffic to the correct DIP. Each MUX also uses BGP to publish VIProutes to edge routers. BGP Keep Alive notifies MUXeswhen a MUX fails, which allows active MUXes to redistribute the load in case of a MUX failure ? essentiallyproviding load balancing for the load balancers.

  

• Question 4:

  Your network contains an Active Directory domain named contoso.com. The domain contains 100 servers.

  You deploy the Local Administrator Password Solution (LAPS) to the network.

  You discover that the members of a group named FinanceAdministartors can view the password of the local Administrator accounts on the servers in an organizational unit (OU) named FinanceServers. You need to prevent the

  FinanceAdministartors members from viewing the local administrators `passwords on the servers in FinanceServers. Which permission should you remove from FinanceAdministartors?

  A. all extended rights
  B. read all properties
  C. read permissions
  D. list contents
  A. all extended rights

  ---

  https://4sysops.com/archives/set-up-microsoft-laps-local-administrator-password-solution-in-active-directory/

• Question 5:

  Read the following statement carefully and answer YES or NO.

  You create a rule "Allow Everyone to run Windows except Registry Editor" that allows everyone in the organization to run Windows but does not allow anyone to run Registry Editor.

  The effect of this rule would prevent users such as help desk personnel from running a program that is necessary for their support tasks.

  To resolve this problem, you create a second rule that applies to the Helpdesk user group: "Allow Helpdesk to run Registry Editor."

  However, if you created a deny rule that did not allow any users to run Registry Editor, would the deny rule override the second rule that allows the Helpdesk user group to run Registry Editor?

  A. NO
  B. YES
  B. YES

• Question 6:

  You have several servers that run Windows Server 2016. All the servers were recently configured to use a new Windows Server Update Services (WSUS) server named WSUS1. WSUS1 is configured to download updates as shown in the exhibit. (Click the Exhibit tab.)

  

  You discover that the servers have out-of-date Windows Defender definitions. The servers receive security updates from WSUS1.

  You need to ensure that the servers receive the latest Windows Defender definitions.

  What should you do?

  A. Create a new computer group in WSUS
  B. Create an auto-approval rule in WSUS
  C. Modify the products and classifications in WSUS
  D. Create a new Group Policy object (GPO) that contains the Automatic Updates settings
  D. Create a new Group Policy object (GPO) that contains the Automatic Updates settings

  ---

  References: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/manage-protection-update-schedule-windows-defender-antivirus

• Question 7:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains a VPN server named VPN1.

  You are deploying Advanced Threat Analytics (ATA) to the domain.

  You install ATA Lightweigtht Gateway on a server named Server1.

  You need to integrate VPN1 and ATA.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  https://docs.microsoft.com/en-us/advanced-threat-analytics/vpn-integration-install-step

• Question 8:

  Your network contains an Active Directory domain named contoso.com. The domain contains 100 servers.

  You deploy the Local Administrator Password Solution (LAPS) to the network

  You need to view the password of the local administrator of a server named Server5.

  Which tool should you use?

  A. Active Directory Users and Computers
  B. Computer Management
  C. Accounts from the Settings app
  D. Server Manager
  A. Active Directory Users and Computers

  ---

  Use "Active Directory Users and Computers" to view the attribute value of "ms-MCS-adminpwd" of the Server5computer account https://blogs.technet.microsoft.com/askpfeplat/2015/12/28/local-administrator-password-solution-lapsimplementation-hints-and-security-nerd-commentaryincludingmini-threat-model/

• Question 9:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a server named Server1 that runs Windows Server 2016.

  You need to prevent NTLM authentication on Server1.

  Solution: From Windows PowerShell, you run the New-ADAuthenticationPolicy cmdlet.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  ADDS Authentication Policy does not provide ability to prevent the use of NTLM authentication.

• Question 10:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2016. All client computers run Windows 10.

  The relevant objects in the domain are configured as shown in the following table.

  

  You need to assign User1 the right to restore files and folders on Server1 and Server2.

  Solution: You add User1 to the Backup Operators group in contoso.com.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  References:

  https://technet.microsoft.com/en-us/library/cc771990(v=ws.11).aspx

  users.The solution would let User1 to backup files and folders on domain controllers for contoso.com instead.