Microsoft 70-744 Online Practice Questions and Exam Preparation

Microsoft 70-744 Online Questions & Answers

• Question 121:

  Note: The question is part of a series of questions th?present the same scenario. Each question In the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to It. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2016. The forest contains 2,000 client computers that run Windows 10. All client computers are deployed from a customized Windows

  image.

  You need to deploy 10 Privileged Access Workstations (PAWs). The solution must ensure that administrators can access several client applications used by all users.

  Solution: You deploy 10 physical computers and configure them as PAWs. You deploy 10 additional computers and configure them by using the customized Windows image. Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/privileged-access-workstations

• Question 122:

  Note: This question Is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is Independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.

  Server1 has a shared folder named Share1.

  You need to encrypt the contents of Share1.

  Which tool should you use?

  A. File Explorer
  B. Shared Folders
  C. Server Manager
  D. Disk Management
  E. Storage Explorer
  F. Computer Management
  G. System Configuration
  H. File Server Resource Manager (FSRM)
  A. File Explorer

• Question 123:

  Your network contains an Active Directory domain named contoso.com The domain contains five file servers that run Windows Server 2016.

  You have an organizational unit (OU) named Finance that contains all of the servers.

  You create a Group Policy object (GPO) and link the GPO to the Finance OU.

  You need to ensure that when a user in the finance department deletes a file from a file server, the event is logged. The solution must log only users who have a manager attribute of Ben Smith.

  Which audit policy setting should you configure in the GPO?

  A. File system in Global Object Access Auditing
  B. Audit Detailed File Share
  C. Audit Other Account Logon Events
  D. Audit File System in Object Access
  D. Audit File System in Object Access

• Question 124:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy Windows Server 2016 to a server named Server1.

  You need to ensure that you can run Windows Containers on Server1.

  Solution: On Server1, you enable the Containers feature, and then you install the Hyper-V server role. You restart the server.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References: https://docs.microsoft.com/en-us/virtualization/windowscontainers/deploy-containers/deploy-containers-on-server

• Question 125:

  You implement Just Enough Administration (JEA) on several file servers that run Windows Server 2016. The Role Capability file from a server named Server5 contains the following code.

  

  Which action can be performed by a user who connects to Server5?

  A. Create a new file share.
  B. Modify the properties of any share.
  C. Stop any process.
  D. View the NTFS permissions of any folder.
  B. Modify the properties of any share.

  ---

  https://docs.microsoft.com/en-us/powershell/jea/role-capabilitiesFocus on the 3rd Visible Cmdlets in this question `SmbShare\\Set-*'The PowerShell "SmbShare" module has the following "Set-*" cmdlets, as reported by "Get-Command -ModuleSmbShare" command:

  

  The "Set-SmbShare" cmdlet is then visible on Server5's JEA endpoint, and allows JEA users to modify the properties of any file share. https://technet.microsoft.com/en-us/itpro/powershell/windows/smbshare/set-smbshare

• Question 126:

  Note: This question Is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.

  Server1 has a volume named Volume1.

  A central access policy named Policy1 is deployed to the domain.

  You need to apply Policy1 to Volume1.

  Which tool should you use?

  A. File Explorer
  B. Shared Folders
  C. Server Manager
  D. Disk Management
  E. Storage Explorer
  F. Computer Management
  G. System Configuration
  H. File Server Resource Manager (FSRM)
  A. File Explorer

  ---

  "File Explorer" = "Windows Explorer". https://docs.microsoft.com/en-us/windows-server/identity/solution-guides/deploy-a-central-access-policy?demonstration-steps-#BKMK_1.4

• Question 127:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2016. The forest contains 2,000 client computers that run Windows 10. All client computers are deployed from a customized Windows

  image.

  You need to deploy 10 Privileged Access Workstations (PAWs). The solution must ensure that administrators can access several client applications used by all users.

  Solution: You deploy one physical computer and configure it as Hyper-V host that runs Windows Server 2016. You create 10 virtual machines and configure each one as a PAW.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References: https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/privileged-access-workstations

• Question 128:

  Your network contains an Active Directory domain named contoso.com. The domain contains several Hyper-V hosts.

  You deploy a server named Server22 to a workgroup. Server22 runs Windows Server 2016.

  You need to configure Server22 as the primary Host Guardian Service server.

  Which three cmdlets should you run in sequence?

  A. Install-HgsServer
  B. Install-Module
  C. Install-Package
  D. Enable-WindowsOptionalFeature
  E. Install-ADDSDomainController
  F. Initialize-HgsServer
  A. Install-HgsServer
  E. Install-ADDSDomainController
  F. Initialize-HgsServer

  ---

  Correct order of actions:

  1.

  Install-ADDSDomainController , as Server22 is a workgroup computer, create a new domain on it first.

  2.

  Install-HgsServer3. Initialize-HgsServer https://docs.microsoft.com/en-us/windows-server/virtualization/guarded-fabric-shielded-vm/guarded-fabricsetting-up-the-host-guardian-service-hgs https://docs.microsoft.com/en-us/windows-server/virtualization/guarded-fabric-shielded-vm/ guarded-fabricinstall-hgs-default Install-HgsServer https://docs.microsoft.com/en-us/windows-server/virtualization/guarded-fabric-shielded-vm/guarded-fabricinitialize-hgs-tpm-mode-default Initialize-HgsServer

• Question 129:

  The New-CIPolicy cmdlet creates a Code Integrity policy as an .xml file. If you do NOT supply either driver files or rules what will happen?

  A. The cmdlet performs a system scan
  B. An exception/warning is shown because either one is required
  C. Nothing
  D. The cmdlet searches the Code Integrity Audit log for drivers
  A. The cmdlet performs a system scan

  ---

  If you do not supply either driver files or rules, this cmdlet performs a system scan similar to the Get-SystemDriver cmdlet.The cmdlet generates rules based on Level. If you specify the Audit parameter, this cmdlet scans the Code Integrity Audit log instead.

• Question 130:

  Your network contains an Active Directory domain The domain contains the computers shown in the following table.

  

  server 1 is a file server that has two shared folders named Share1 and Share2. Share1 has encryption enabled. Share2 has encryption disabled. Domain users have read access to both shares.

  From PowerShell, you run set-smbServerConfiguration -EncryptData $true -Force.

  For each of the following statements select Yes if the statement is true. Otherwise, Select No.

  Hot Area: