Microsoft 70-744 Online Practice Questions and Exam Preparation

Microsoft 70-744 Online Questions & Answers

• Question 251:

  DRAG DROP

  Your network contains an Active Directory domain. The domain contains a server named Server1.

  You install Advanced Threat Analytics (ATA) on Server1.

  You need to configure ATA to detect suspicious activities in the domain.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References: https://docs.microsoft.com/en-us/advanced-threat-analytics/install-ata-step1

• Question 252:

  Your network contains an Active Directory domain named contoso.com.

  You deploy a server named Server1 that runs Windows Server 2016. Server1 is in a workgroup.

  You need to collect the logs from Server1 by using Log Analytics in Microsoft Operations Management Suite (OMS).

  What should you do first?

  A. Join Server1 to the domain.
  B. Create a Data Collector Set.
  C. Install Microsoft Monitoring Agent on Server1.
  D. Create an event subscription.
  C. Install Microsoft Monitoring Agent on Server1.

  ---

  https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-windows-agentsYou need to install and connect Microsoft Monitoring Agent for all of the computers that you

  

  You can install the OMS MMA on stand-alone computers, servers, and virtual machines.

• Question 253:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. All client computers run Windows 10.

  You plan to deploy a Remote Desktop connection solution for the client computers.

  You have four available servers in the domain that can be configured as Remote Desktop servers. The servers are configured as shown in the following table.

  

  You need to ensure that alt Remote Desktop connections can be protected by using Remote Credential Guard. Solution: You deploy the Remote Desktop connection solution by using Server1. Does that meet the goal?

  A. Yes
  B. No
  B. No

  ---

  https://docs.microsoft.com/en-us/windows/security/identity-protection/remote-credential-guard

• Question 254:

  HOTSPOT

  You plan to implement Windows Defender Device Guard in your datacenter.

  You build a model server that contains all the drivers and the software that you want to deploy and secure.

  You need to create a new policy to ensure that only whitelisted files can be loaded to the servers. The policy must be in enforcement mode.

  How should you complete the commands? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 255:

  DRAG DROP

  Your network contains an Active Directory domain named contoso.com. The domain contains a user named User1 and a computer named Computer1. Remote Server Administration Tools (RSAT) is installed on Computer1.

  You need to add User1 as a data recovery agent in the domain.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References: https://msdn.microsoft.com/library/cc875821.aspx#EJAA https://www.serverbrain.org/managing-security-2003/using-the-cipher-command-to-add-data-recovery-agent.html

• Question 256:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Serve1, that runs Windows Server 2016.

  A technician is testing the deployment of Credential Guard on Server1.

  You need to verify whether Credential Guard is enabled on Server1.

  What should you do?

  A. From a command prompt fun the credwiz.exe command.
  B. From Task Manager, review the processes listed on the Details tab.
  C. From Server Manager, click Local Server, and review the properties of Server!
  D. From Windows PowerShell, run the Get-WsManCredSSP cmdlet.
  B. From Task Manager, review the processes listed on the Details tab.

  ---

  https://yungchou.wordpress.com/2016/10/10/credential-guard-made-easy-in-windows-10-version-1607/The same as before, once Credential Guard is properly configured, up and running.You should find in Task Manager the `Credential Guard' process and `lsaiso.exe' listed in the Detailspage as below.

  

• Question 257:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that has Microsoft Security Compliance Manager (SCM) 4.0 installed. The domain contains domain controllers that run

  Windows Server 2016.

  A Group Policy object (GPO) named GPO1 is applied to all of the domain controllers.

  GPO1 has a Globally Unique Identifier (GUID) of 7ABCDEFG-1234-5678-90AB-005056123456.

  You need to create a new baseline that contains the settings from GPO1. What should you do first?

  A. Copy the \\\\contoso.com\\sysvol\\contoso.com\\Policies\\{7ABCDEFG-1234-5678-90AB-005056123456} folder to Server1.
  B. From Group Policy Management, create a backup of GPO1.
  C. From Windows PowerShell, run the Copy-GPO cmdlet
  D. Modify the permissions of the \\\\contoso.com\\sysvol\\contoso.com\\Policies\\{7ABCDEFG-1234-5678-90AB-005056123456}
  B. From Group Policy Management, create a backup of GPO1.

  ---

  https://technet.microsoft.com/en-us/library/hh489604.aspxImport Your GPOsYou can import current settings from your GPOs and compare these to the Microsoft recommended bestpractices.Start with a GPO backup that you would commonly create in the Group Policy Management Console(GPMC).Take note of the folder to which the backup is saved. In SCM, select GPO Backup, browse to the GPOfolder's Globally Unique Identifier (GUID) and select aname for the GPO when it's imported.SCM will preserve any ADM files and GP Preference files (those with non-security settings that SCM doesn'tparse) you're storing with your GPO backups.It saves them in a subfolder within the user's public folder. When you export the baseline as a GPO again, italso restores all the associated files.

• Question 258:

  Your network contains an Active Directory domain.

  You plan to run shielded virtual machines.

  You are implementing TPM attestation mode for a guarded fabric.

  You create a Code Integrity policy named Integrity1.xml.

  You need to ensure that you can apply the Code Integrity policy to Hyper-V hosts.

  Which cmdlet should you run?

  A. Add-SignerRule
  B. Add-HgsAttestationTpmHost
  C. Set-HVCIOptions
  D. ConvertFrom-CIPolicy
  B. Add-HgsAttestationTpmHost

  ---

  References: https://docs.microsoft.com/en-us/windows-server/security/guarded-fabric-shielded-vm/guarded-fabric-tpm-trusted-attestation-capturing-hardware#create-and-apply-a-code-integrity-policy