Identity with Windows Server 2016: Exam 70-742
Install and Configure Active Directory Domain Services (AD DS) (20-25%)
Manage and Maintain AD DS (15-20%)
Create and Manage Group Policy (25-30%)
Implement Active Directory Certificate Services (AD CS) (10-15%)
Implement Identity Federation and Access Solutions (15-20%)
Certification: MCSA
Questions and answers(from pass4itsure)
QUESTION 1
Your network contains two Active Directory forests named fabrikam.com and contoso.com. Each forest contains a single
domain.
Contoso.com has a Group Policy object (GPO) named Cont_GPO1.
You need to apply the settings from Cont_GPO1 to the computers in fabrikam.com.
Which two actions should you perform? Each correct answer presents a complete solution.
NOTE: Each correct section is worth one point.
A. Back up Cont_GPO1. In fabrikam.com, create and link a new GPO by using the Group Policy Management Console
(GPMC), and then run the Import Setting Wizard.
B. Back up Cont_GPO1. In fabrikam.com, run the Restore-GPO cmdlet, and then run the New-GPLink cmdlet.
C. Back up Cont_GPO1. In fabrikam.com run the Import-GPO cmdlet, and then run the New-GPLink cmdlet.
D. Copy\\contoso.com\SysVol\contoso.com\Policies to \\fabrikam.com\SysVol\ fabrikam.com\Policies. In fabrikam.com,
run the New-GPLink cmdlet.
E. Back up Cont_GPO1. In fabrikam.com, create and link a new GPO by using the Group Policy Management Console
(GPMC), and then run the Restore Group Policy Object Wizard.
Correct Answer: AC
QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain.
You have a user account that is a member of the Domain Admins group.
You have 100 laptops that have a standard corporate image installed. The laptops are in workgroups and have random
names.
A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each
laptop must be in an organizational unit (OU) that is associated to the department of the user who will use the laptop.
The
laptop names must start with four characters indicating the department, followed by a four-digit number.
Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops.
You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and
the computer accounts of the laptops are in the correct OUs.
Solution: You instruct Tech1 to sign in to each laptop, to rename each laptop by using System in Control Panel, and
then to join each laptop to the domain by using the Netdom join command.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
QUESTION 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1
that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1.
You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.
You need to add a domain user named User1 to the local Administrators group on Server1.
Solution: From the Computer Configuration node of GPO1, you configure the Account Policies settings. Does this meet
the goal?
A. Yes
B. No
Correct Answer: B
Account Lockout Policy settings encapsulates Password Policy, Account Lockout Policy, and Kerberos Policy. It will not
allow you to add a domain user to a local Administrators group. References: https://technet.microsoft.com/ptpt/library/cc757692(v=ws.10).aspx
QUESTION 4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain named contoso.com.
The user account for a user named User1 is in an organizational unit (OU) named OU1.
You need to enable User1 to sign in as user1@adatum.com.
Solution: From Active Directory Users and Computers, you set the E-mail property of User1 to user1@adatum.com.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
QUESTION 5
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers
named DC1 and DC2.
DC1 holds the RID master operations role. DC1 fails and cannot be repaired. You need to move the RID role to DC2.
Solution: On DC2, you open the command prompt, run dsmgmt.exe, connect to DC2, and use the Seize RID master
opinion.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
QUESTION 6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain named contoso.com.
A user named User1 is in an organizational unit (OU) named OU1.
You need to enable User1 to sign in as user1@adatum.com.
You need a list of groups to which User1 is either a direct member or an indirect member.
Solution: From Windows PowerShell, you run Set -Aduser User1 -UserPricncipalName User1@Adatum.com.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
latest and Valid 70-742 PDF Dumps:(From Google Drive:）
Free sharing of video materials（MCSA 70-742）
You can easily pass 70-742 exam with the help of the 70-742 study guide provided by Pass4itsure experts.latest and valid 70-742 dumps https://www.pass4itsure.com/70-742.html！
No comments:
Post a Comment