Microsoft 70-744 Online Practice Questions and Exam Preparation

Microsoft 70-744 Online Questions & Answers

• Question 131:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. The domain contains several Hyper-V hosts.

  You deploy a server named Server22 to a workgroup. Server22 runs Windows Server 2016.

  You need to configure Server22 as the primary Host Guardian Service server.

  Which three cmdlets should you run in sequence? To answer move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References: https://docs.microsoft.com/en-us/windows-server/virtualization/guarded-fabric-shielded-vm/guarded-fabric-setting-up-the-host-guardian-service-hgs

• Question 132:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question Is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  Your network contains an Active Directory domain named contoso.com The domain contains a file server named Server1 that runs Windows Server 2016.

  You need to create Work Folders on Server1.

  Which tool should you use?

  A. File Explorer
  B. Shared Folders
  C. Server Manager
  D. Disk Management
  E. Storage Explorer
  F. Computer Management
  G. System Configuration
  H. File Server Resource Manager (FSRM)
  C. Server Manager

• Question 133:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a server named Server1 that runs Windows Server 2016.

  The local administrator credentials of Server1 are managed by using the Local Administrator Password Solution (LAPS).

  You need to retrieve the password of the Administrator account on Server1.

  What should you do?

  A. From Windows PowerShell on Server1, run the Get-ADFineGrainedPasswordPolicy cmdlet and specify the -Credential parameter
  B. From Active Directory Users and Computers, open the properties of Server1 and view the value of the ms-Mcs-AdmPwd attribute
  C. From Active Directory Users and Computers, open the properties of Administrator and view the value of the userPassword attribute
  D. From Windows PowerShell on Server1, run the Get-ADUser cmdlet and specify the -Credential parameter
  B. From Active Directory Users and Computers, open the properties of Server1 and view the value of the ms-Mcs-AdmPwd attribute

  ---

  The "ms-Mcs-AdmPwd" attribute of a computer account in Active Directory Users and Computers stores the local Administrator password of a computer, which is configured by LAPS.

  

• Question 134:

  HOTSPOT

  You plan to deploy three encrypted virtual machines that use Secure Boot. The virtual machines will be configured as shown in the following table.

  

  How should you protect each virtual machine? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  https://cloudbase.it/hyperv-shielded-vms-part-1/ http://windowsitpro.com/hyper-v/difference-between-shielded-vm-and-encryption-supported-vm

• Question 135:

  You have two computers configured as shown in the following table.

  

  You need to ensure that the credentials that you use to establish Remote Desktop sessions from Client1 to Server1 are protected by using Remote CredentialGuard.

  A. Join Client1 to the domain.
  B. Remove Server1 from the domain.
  C. Upgrade Server1 to Windows Server 2016 Datacenter.
  D. Upgrade Client1 to Windows 10 Enterprise.
  A. Join Client1 to the domain.

  ---

  https://docs.microsoft.com/en-us/windows/access-protection/remote-credential-guard

  

• Question 136:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question In this section, you will NOT be able to return to It. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named contoso.com. The domain contains a

  computer named Computer1 that runs Windows 10. Computer1 connects to a home network and a corporate network.

  The corporate network uses the 172.16.0.0/24 address space internally.

  Computer1 runs an application named App1 that listens to port 8080.

  You need to prevent connections to App1 when Computer1 is connected to the home network.

  Solution: From Windows Firewall in the Control Panel, you add an application and allow the application to communicate through the firewall on a Private network.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References: http://www.online-tech-tips.com/windows-10/adjust-windows-10-firewall-settings/

• Question 137:

  Note: This question is part of a series of questions that present the same scenario. Each question In the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to It. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2016. The forest contains 2#W client computers that run Windows 10. All client computers are deployed (rom a customized Windows

  image.

  You need to deploy 10 Privileged Access Workstations (PAWs). The solution must ensure that administrators can access several client applications used by all users.

  Solution: You deploy 10 physical computers and configure each will as a virtualization host. You deploy the operating system on each host by using the customized Windows image. On each host you create a guest virtual machine and

  configure the virtual machine as a PAW.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References: https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/privileged-access-workstations

• Question 138:

  You have a Host Guardian Service (HGS) and a guarded host.

  You have a VHDX file that contains an image of Windows Server 2016.

  You need to provision a virtual machine by using a shielded template.

  Which three files should you create? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. a TPM baseline policy file
  B. a TPM identifier file
  C. a shielding data .pdk file
  D. a signature for the .vhdx file
  E. an unattended.xml file
  C. a shielding data .pdk file
  D. a signature for the .vhdx file
  E. an unattended.xml file

  ---

  https://docs.microsoft.com/en-us/windows-server/security/guarded-fabric-shielded-vm/guarded-fabric-create-a-shielded-vm-template https://docs.microsoft.com/en-us/windows-server/security/guarded-fabric-shielded-vm/guarded-fabrictenant- creates-shielding-data

• Question 139:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.

  The hardware configuration on Server1 meets the requirements for Credential Guard.

  You need to enable Credential Guard on Server1.

  What should you do? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-requirements The Virtualization-based security requires:-64-bit CPU-CPU virtualization extensions plus extended page tables-Windows hypervisor https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-manage#hardware-readiness-tool

  

  References:

  https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-requirements https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-manage#hardware-readiness-tool

• Question 140:

  Your network contains an Active Directory domain named contoso.com. The domain contains five servers. All servers run Windows Server 2016. A new security policy states that you must modify the infrastructure to meet the following requirements:

  1.

  Limit the rights of administrators.

  2.

  Minimize the attack surface of the forest.

  3.

  Support Multi-Factor authentication for administrators.

  You need to recommend a solution that meets the new security policy requirements.

  What should you recommend deploying?

  A. an administrative forest
  B. domain isolation
  C. an administrative domain in contoso.com
  D. the Local Administrator Password Solution (LAPS)
  A. an administrative forest

  ---

  https://docs.microsoft.com/en-us/windows-server/identity/securing-privileged-access/securing-privileged-access-reference-material#ESAE_BM