Microsoft 70-744 Online Practice Questions and Exam Preparation

Microsoft 70-744 Online Questions & Answers

• Question 61:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a computer named Computer1 that runs Windows 10.

  The network uses the 172.16.0.0/16 address space.

  Computer1 has an application named App1.exe that is located in D:\\Apps\\.

  App1.exe is configured to accept connections on TCP port 8080.

  You need to ensure that App1.exe can accept connections only when Computer1 is connected to the corporate network.

  Solution: You configure an inbound rule that allows the TCP protocol on port 8080 and applies to all profiles Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  You need to ensure that App1.exe can accept connections only when Computer1 is connected to the corporate network."Therefore, you should not create firewall rule for all three profiles.

• Question 62:

  You have a virtual machine named FS1 that runs Windows Server 2016. FS1 has the shared folders shown in the following table.

  

  You need to ensure that each user can store 10 GB of files in \\FS1\Users. What should you do?

  A. From File Explorer, open the properties of volume D, and then modify the Quota settings.
  B. Install the File Server Resource Manager role service, and then create a file screen.
  C. From File Explorer, open the properties of D:\Users, and then modify the Advanced sharing settings.
  D. Install the File Server Resource Manager role service, and then create a quota.
  D. Install the File Server Resource Manager role service, and then create a quota.

  ---

  References: https://docs.microsoft.com/en-us/windows-server/storage/fsrm/create-quota

• Question 63:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2016. All client computers run Windows 10.

  The relevant objects in the domain are configured as shown in the following table.

  

  You need to assign User1 the right to restore files and folders on Server1 and Server2. Solution: You add User1 to the Backup Operators group on Server1 and Server2. Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  https://technet.microsoft.com/en-us/library/cc771990(v=ws.11).aspx Backup OperatorsMembers of this group can back up and restore files on a computer, regardless of any permissions thatprotect those files.This is because the right to perform a backup takes precedence over all file permissions. Members of thisgroup cannot change security settings.

• Question 64:

  Your network contains an Active Directory domain named contoso.com.

  The domain contains two global groups named Group1 and Group2. A user named User1 is a member of Group1.

  You have an organizational unit (OU) named OU1 that contains the computer accounts of computers that contain sensitive data. A Group Policy object (GPO) named GPO1 is linked to OU1. OU1 contains a computer account named

  Computer1.

  GPO1 has the User Rights Assignment configured as shown in the following table.

  

  You need to prevent User1 from signing in to Computer1. What should you do?

  A. Remove User1 to Group2
  B. In GPO1, add Group1 as a restricted group
  C. On Computer1, modify the Allow log on locally user right
  D. In GPO1, add Group2 as a restricted group
  A. Remove User1 to Group2

  ---

  "Deny log on locally"

  Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\User Rights Assignment

  Determines which users are prevented from logging on at the computer.

  This policy setting supercedes the Allow Log on locally policy setting if an account is subject to both policies.

  Therefore, adding User1 to Group2 will let User1 to inherit both policy, and then prevent User1 to sign in to Computer1.

  References:

  https://technet.microsoft.com/en-us/library/cc957048.aspx

• Question 65:

  You have a server named Server1 that runs Windows Server 2016. Windows Defender on Server1 has the following configurations.

  

  Server1 has the following files:

  1.

  C:\Folder1\File1.exe

  2.

  C:\Folder2\File2.bat

  3.

  C:\Folder2\File3.com

  Which files will be scanned for malware?

  A. File1.exe and File3.com only
  B. File2.bat only
  C. File1.exe, File2.bat, and File3.com
  D. File1.exe only
  E. File2.bat and File3.com only
  F. File3.com only
  E. File2.bat and File3.com only

  ---

  https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/configure-extension-file-exclusions-windows-defender-antivirus

• Question 66:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy Windows Server 2016 to a server named Server1.

  You need to ensure that you can run Windows Containers on Server1.

  Solution: On Server1, you enable the Containers feature, and then you restart the server.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 67:

  You have a Hyper-V host named Server1 that runs Windows Server 2016. A new security policy states that all the virtual machines must be encrypted. Server1 hosts the virtual machines configured as shown in the following table.

  

  An administrator runs the following commands.

  Get-VM | Stop-VMGet-VM | Update-VMVersionGet-VM | Start-VM

  For each of the following statements, Select Yes, if the statement is true. Otherwise Select No.

  Hot Area:

  

  

  ---

  You can configure VM1 as an encryption-supported virtual machine: Yes You can configure VM2 as an encryption-supported virtual machine: Yes You can configure VM3 as an encryption-supported virtual machine: Yes

  After the "Update-VMVersion" is executed against all three virtual machines, they become:-VM1 Generation 2 Version 8VM2 Generation 1 Version 8VM3 Generation 2 Version 8Pay attention to VM2, and the question has not mention to use TPM protector. You can configure this VM asEncryption Supported by using a Key Storage Driveadded to the virtual machine setting.

  

  Within the guest, there is no Virtual TPM

  

  Then , start Encrypt the C system drive with the guest 2012R2 bitlocker feature

  

  After the encryption is completed:

  

• Question 68:

  Your network contains an Active Directory domain named contoso.com.

  You are deploying Microsoft Advanced Threat Analytics (ATA) to the domain. You install the ATA Gateway on a server named Server1.

  To assist in detecting Pass-the-Hash attacks, you plan to configure ATA Gateway to collect events.

  You need to configure the query filter for event subscriptions on Server1.

  How should you configure the query filter? To answer, select the appropriate options in the answer are.

  Hot Area:

  

  

  ---

  https://docs.microsoft.com/en-us/advanced-threat-analytics/configure-event-collectionTo enhance detection capabilities, ATA needs the following Windows events: 4776, 4732, 4733, 4728, 4729,4756, 4757.These can either be read automatically by the ATA Lightweight Gateway or in case the ATA LightweightGateway is not deployed,it can be forwarded to the ATA Gateway in one of two ways, by configuring the ATA Gateway to listen for SIEMevents or by configuring Windows Event Forwarding.

  Event ID: 4776 NTLM authentication is being used against domain controllerEvent ID: 4732 A User is Added to Security-Enabled DOMAIN LOCAL Group,Event ID: 4733 A User is removed from Security-Enabled DOMAIN LOCAL GroupEvent ID: 4728 A User is Added or Removed from Security-Enabled Global Group Event ID: 4729 A User is Removed from Security-Enabled GLOBAL GroupEvent ID: 4756 A User is Added or Removed From Security-Enabled Universal GroupEvent ID: 4757 A User is Removed From Security-Enabled Universal Group

• Question 69:

  You have a server named Server1 that runs Windows Server 2016.

  You need to identify the default action for the inbound traffic when Server1 connects to the domain.

  Which cmdlet should you use?

  A. Get-NetIPSecRule
  B. Get-NetFirewallRule
  C. Get-NetFirewallProfile
  D. Get-NetFirewallSetting
  E. Get-NetFirewallPortFilter
  F. Get-NetFirewallAddressFilter
  G. Get-NetFirewallApplicationFilter
  C. Get-NetFirewallProfile

• Question 70:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.

  You need to allow network administrators to use Just Enough Administration (JEA) to change the TCP/IP settings on Server1. The solution must use the principle of least privilege.

  How should you configure the session configuration file?

  A. Set RunAsVirtualAccount to $false and set RunAsVirtualAccountGroups to Contoso\Network Configuration Operators.
  B. Set RunAsVirtualAccount to $true and set RunAsVirtualAccountGroups to Contoso\Network Configuration Operators.
  C. Set RunAsVirtualAccount to $false and set RunAsVirtualAccountGroups to Network Configuration Operators.
  D. Set RunAsVirtualAccount to $true and set RunAsVirtualAccountGroups to Network Configuration Operators.
  D. Set RunAsVirtualAccount to $true and set RunAsVirtualAccountGroups to Network Configuration Operators.

  ---

  References: https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/new-pssessionconfigurationfile?view=powershell-6