70-742 Real Exam Dumps Questions and answers 31-40

Get Full Version of the Exam
http://www.EnsurePass.com/70-742.html

Question No.31

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1.

You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.

You need to add a domain user named User1 to the local Administrators group on Server1.

Solution: From the Computer Configuration node of GPO1, you configure the Local Users and Groups preference.

Does this meet the goal?

  1. Yes

  2. No

Correct Answer: A

Question No.32

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1.

You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.

You need to add a domain user named User1 to the local Administrators group on Server1.

Solution: From the Computer Configuration node of GPO1, you configure the Account Policies settings.

Does this meet the goal?

  1. Yes

  2. No

Correct Answer: B

Question No.33

DRAG DROP

Your company has multiple offices.

The network contains an Active Directory domain named contoso.com. An Active Directory site exists for each office. All of the sites connect to each other by using DEFAULTIPSITELINK.

The company plans to open a new office. The new office will have a domain controller and 100 client computers.

You install Windows Server 2016 on a member server in the new office. The new server will become a domain controller.

You need to deploy the domain controller to the new office. The solution must ensure that the client computers in the new office will authenticate by using the local domain controller.

Which three actions should you perform next in sequence?

To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

image

Correct Answer:

image

Question No.34

HOTSPOT

Your network contains an Active Directory domain named contoso.com. Some user accounts in the domain have the P.O. Box attribute set.

You plan to remove the value of the P.O. Box attribute for all of the users by using Ldifde. You have a user named User1 who is located in the Users container.

How should you configure the LDIF file to remove the value of the P.O. Box attribute for User1? To answer, select the appropriate options in the answer area.

image

Correct Answer:

image

Question No.35

Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.

Start of repeated scenario.

Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.

The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)

image

The relevant users and client computer in the domain are configured as shown in the following table.

image

End of repeated scenario.

You are evaluating what will occur when you disable the Group Policy link for A6.

Which GPOs will apply to User2 when the user signs in to Computer1 after the link for A6 is disabled?

  1. A1 and A5 only

  2. A3, A1, and A5 only

  3. A3, A1, A5, and A4 only

  4. A3, A1, A5, and A7

Correct Answer: C

Question No.36

Your network contains an enterprise root certification authority (CA) named CA1.

Multiple computers on the network successfully enroll for certificates that will expire in one year. The certificates are based on a template named Secure_Computer. The template uses schema version 2.

You need to ensure that new certificates based on Secure_Computer are valid for three years. What should you do?

  1. Modify the Validity period for the certificate template.

  2. Instruct users to request certificates by running the certreq.exe command.

  3. Instruct users to request certificates by using the Certificates console.

  4. Modify the Validity period for the root CA certificate.

Correct Answer: A

Question No.37

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

Information and details provided in a question apply only to that question.

Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts.

You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU).

You need to force users to change their account password at least every 30 days. What should you do?

  1. From the Computer Configuration node of DCPolicy, modify Security Settings.

  2. From the Computer Configuration node of DomainPolicy, modify Security Settings.

  3. From the Computer Configuration node of DomainPolicy, modify Administrative Templates.

  4. From the User Configuration node of DCPolicy, modify Security Settings.

  5. From the User Configuration node of DomainPolicy, modify Folder Redirection.

  6. From user Configuration node of DomainPolicy, modify Administrative Templates.

  7. From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings.

  8. From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings.

Correct Answer: B

Question No.38

You have a server named Server1 that runs Windows Server 2016. You need to configure Server1 as a Web Application Proxy.

Which server role or role service should you install on Server1?

  1. Remote Access

  2. Active Directory Federation Services

  3. Web Server (IIS)

  4. DirectAccess and VPN (RAS)

  5. Network Policy and Access Services

Correct Answer: A

Question No.39

Your network contains an Active Directory domain named contoso.com. The domain contains a Group Policy object (GPO) named GPO1.

You configure the Internet Settings preference in GPO1 as shown in the exhibit. (Click the Exhibit button.)

image

A user reports that the homepage of Internet Explorer is not set to http://www.contoso.com. You confirm that the other settings in GPO1 are applied.

You need to configure GPO1 to set the Internet Explorer homepage. What should you do?

  1. Edit the GPO1 preference and press F5.

  2. Modify Security Settings for GPO1.

  3. Modify WMI Filtering for GPO1.

  4. Modify the GPO1 preference to use item-level targeting.

Correct Answer: A

Explanation:

The red dotted line under the homepage URL means that setting is disabled. Pressing F5 enables all settings.

Question No.40

Your company recently deployed a new child domain to an Active Directory forest.

You discover that a user modified the Default Domain Policy to configure several Windows components in the child domain.

A company policy states that the Default Domain Policy must be used only to configure domain- wide security settings.

You create a new Group Policy object (GPO) and configure the settings for the Windows components in the new GPO.

You need to restore the Default Domain Policy to the default settings from when the domain was first installed.

What should you do?

  1. From Group Policy Management, click Starter GPOs, and then click Manage Backups.

  2. From a command prompt, run the dcgpofix.exe command.

  3. From Windows PowerShell, run the Copy-GPO cmdlet.

  4. Run ntdsutil.exe to perform a metadata cleanup and a semantic database analysis.

Correct Answer: B

Get Full Version of 70-742 Dumps