Microsoft 70-744 Online Practice Questions and Exam Preparation

Microsoft 70-744 Online Questions & Answers

• Question 21:

  HOTSPOT

  You have a file server named Server1 that runs Windows Server 2016.

  You plan to configure Server1 for Just Enough Administration (JEA).

  You need to log all the Windows PowerShell activities that relate to creating and managing storage on Server1.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

  ---

  References: https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_eventlogs?view=powershell-5.1

• Question 22:

  HOTSPOT

  Your data center contains 10 Hyper-V hosts that host 100 virtual machines.

  You plan to secure access to the virtual machines by using the Datacenter Firewall service.

  You have four servers available for the Datacenter Firewall service. The servers are configured as shown in the following table.

  

  You need to install the required server roles for the planned deployment.

  Which server role should you deploy? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  https://docs.microsoft.com/en-us/windows-server/networking/sdn/plan/installation-and-preparation-requirements-for-deploying-network-controller https://docs.microsoft.com/en-us/windows-server/networking/sdn/technologies/network-controller/install-the-network-controller-server-role-using-server-manager

• Question 23:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 is configured as shown in the following table.

  

  You plan to create a pilot deployment of Microsoft Advanced Threat Analytics (ATA).

  You need to install the ATA Center on Server1.

  What should you do first?

  A. Install Microsoft Security Compliance Manager (SCM).
  B. Obtain an SSL certificate.
  C. Assign an additional IPv4 address.
  D. Remove Server1 from the domain.
  B. Obtain an SSL certificate.

  ---

  https://docs.microsoft.com/en-us/advanced-threat-analytics/ata-prerequisites

  ATA Center which is the first component to be deployed on Server1, requires the use of SSL protocol tocommunicate with ATA GatewayTo ease the installation of ATA, you can install self-signed certificates during installation.Post deployment you should replace the self-signed with a certificate from an internal Certification Authority tobe used by the ATA Center.Make sure the ATA Center and ATA Gateways have access to your CRL distribution point.If the they don't have Internet access, follow the procedure to manually import a CRL, taking care to install theall the CRL distribution points for the whole chain.

• Question 24:

  Your network contains an Active Directory domain named contoso.com. The domain contains a certification authority (CA).

  You need to implement code integrity policies and sign them by using certificates issued by the CA.

  You plan to use the same certificate to sign policies on multiple computers.

  You duplicate the Code Signing certificate template and name the new template CodeIntegrity.

  How should you configure the CodeIntegrity template?

  A. Enable the Allow private key to be exported setting and modify the Key Usage extension.
  B. Disable the Allow private key to be exported setting and modify the Application Policies extension.
  C. Disable the Allow private key to be exported setting and disable the Basic Constraints extension.
  D. Enable the Allow private key to be exported setting and enable the Basic Constraints extension
  D. Enable the Allow private key to be exported setting and enable the Basic Constraints extension

• Question 25:

  Note: This question is port of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question In the series. Each question is Independent of the other questions In this series.

  Information and details provided in a question apply only to that question.

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016 and a Nano Server named Nano1.

  Nano1 has two volumes named C and D.

  You are signed in to Server1.

  You need to configure Data Deduplication on Nano1.

  Which tool should you use?

  A. File Explorer
  B. Shared Folders
  C. Server Manager
  D. Disk Management
  E. Storage Explorer
  F. Computer Management
  G. System Configuration
  H. File Server Resource Manager (FSRM)
  C. Server Manager

  ---

  Either use PowerShell Remoting to Nano1 and use "Enable-DedupVolume" cmdlet, however ,there is no such choice for this question; orFrom Server1, connect it's server manager to remotely manage Nano1 and enable Data Deduplication forvolumes on Nano1

  https://channel9.msdn.com/Series/Nano-Server-Team/Server-Manager-managing-Nano-Server

  

• Question 26:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a computer named Computer1 that runs Windows 10.

  The network uses the 172.16.0.0/16 address space.

  Computer1 has an application named App1.exe that is located in D:\\Apps\\.

  App1.exe is configured to accept connections on TCP port 8080.

  You need to ensure that App1.exe can accept connections only when Computer1 is connected to the corporate network.

  Solution: You configure an inbound rule that allows the TCP protocol on port 8080, uses a scope of 172.16.0.0/16 for local IP addresses, and applies to a private profile.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  "You need to ensure that App1.exe can accept connections only when Computer1 is connected to thecorporate network.", you should create the firewall rule for"Domain" profile instead, not the "Private" profile. https://technet.microsoft.com/en-us/library/getting-started-wfas-firewall-profiles-ipsec(v=ws.10).aspx

  

• Question 27:

  You plan to use the Security and Audit solution in Microsoft Operations Management Suite (OMS) to monitor servers that run Windows Server 2016. The servers are prevented from accessing the Internet.

  You create an OMS workspace and add the Security and Audit solution.

  You need to ensure that you can monitor the servers.

  What should you do first?

  A. From Accounts, modify the Azure Subscription and Data Plan setting
  B. From Accounts, add an Automation Account
  C. From Connected Sources, click Download Windows Agent (32 bit)
  D. From Connected Sources, click Download OMS Gateway
  C. From Connected Sources, click Download Windows Agent (32 bit)

  ---

  You must download and install the Windows Agent on the target computer.

  References: https://docs.microsoft.com/en-us/azure/security-center/quick-onboard-windows-computer

• Question 28:

  The "Network Security: Restrict NTLM: NTLM authentication in this domain" policy setting allows you to deny or allow NTLM authentication within a domain from this domain controller.

  Which value would you choose so that the domain controller will deny all NTLM authentication logon attempts using accounts from this domain to all servers in the domain.

  The NTLM authentication attempts will be blocked and will return an NTLM blocked error unless the server name is on the exception list in the Network security: Restrict NTLM: Add server exceptions in this domain policy setting.

  A. Deny for domain accounts
  B. Deny for domain accounts to domain servers
  C. Deny all
  D. Deny for domain servers
  B. Deny for domain accounts to domain servers

• Question 29:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2016. The forest contains 2,000 client computers that run Windows 10. All client computers are deployed from a customized Windows

  image.

  You need to deploy 10 Privileged Access Workstations (PAWs). The solution must ensure that administrators can access several client applications used by all users.

  Solution: You deploy 10 physical computers and configure each one as a virtualization host. You deploy the operating system on each host by using the customized Windows image. On each host, you create a guest virtual machine and

  configure the virtual machine as a PAW.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  References: https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/privileged-access-workstations

• Question 30:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named

  Server1 that runs Windows Server 2016.

  You have an organizational unit (OU) named Administration that contains the computer account of Server1.

  You import the Active Directory module to Server1.

  You create a Group Policy object (GPO) named GPO1. You link GPO1 to the Administration OU. You need to log an event each time an Active Directory cmdlet executed successfully from Server1.

  What should you do?

  A. From Advanced Audit Policy in GPO1. configure auditing for other privilege use events.
  B. Run the Add-NetEventProvider -Name "Microsoft-Active-Directory" -MatchAnyKeyword PowerShell command.
  C. From Advanced Audit Policy in GPO1, configure auditing for directory service changes.
  D. From Administrative Templates in GPO1, configure a Windows PowerShell policy.
  D. From Administrative Templates in GPO1, configure a Windows PowerShell policy.

  ---

  In the following GPO location, you can enable the setting "Turn on Module Logging" to record an event each time the PowerShell executes a cmdlet of a specificPowerShell module, for example "ActiveDirectory". "Computer Configuration\ \Administrative Templates\\Windows Components\\Windows PowerShell"