Free Microsoft 70-742 Exam Dumps Questions & Answers

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016.
Server1 has Microsoft System Center 2016 Virtual Machine Manager (VMM) installed. Server2 has IP Address Management (IPAM) installed.
You create a domain user named User1.
You need to integrate IPAM and VMM. VMM must use the account of User1 to manage IPAM. The solution must use the principle of least privilege.
What should you do on each server? To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation

References:
https://technet.microsoft.com/en-us/library/dn783349(v=ws.11).aspx

Your network contains an Active Directory domain named contoso.com. The relevant objects in the domain are configured as shown in the following table.

You have the following configurations:
* User1 is in OU1 and is a member of Group1 and Group2
* User2 is in OU2 and is a member of Group1 and Group3
* GPO1 is linked to OU1.
Server1 has three shares named Share1, Share2, and Share3. The Domain Users group permissions to all three shares.
GPO1 is configured as shown in the exhibit. (Click the Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named TestOU that contains test computers.
You need to enable a technician named Tech1 to create Group Policy objects (GPOs) and to link the GPOs to TestOU. The solution must use the principle of least privilege.
Which two actions should you perform? Each correct answer presents part of the solution.

• A.  From Group Policy Management, modify the Delegation settings of the TestOU OU.
• B.  Add Tech1 to the Group Policy Creator Owners group.
• C.  Add Tech1 to the Protected Users group.
• D.  Create a new universal security group and add Tech1 to the group.
• E.  From Group Policy Management, modify the Delegation settings of the contoso.com container.

Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2012 R2.
You need to secure several high-privilege user accounts to meet the following requirements:
What should you do?

• A.  Create a universal security group for the user accounts and modify the Security settings of the group.
• B.  Add the user to the Protected Users group.
• C.  Add the users to the Windows Authorization Access Group group.
• D.  Create a separate organizational unit (OU) for the user accounts and modify the Security settings of the OU.

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts.
You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU).
You need to force users to change their account password at least every 30 days.
What should you do?

• A.  From the Computer Configuration node of DCPolicy, modify Security Settings.
• B.  From the User Configuration node of DCPolicy, modify Security Settings.
• C.  From the User Configuration node of DomainPolicy, modify Folder Redirection.
• D.  From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings.
• E.  From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings.
• F.  From the Computer Configuration node of DomainPolicy, modify Security Settings.
• G.  From user Configuration node of DomainPolicy, modify Administrative Templates.
• H.  From the Computer Configuration node of DomainPolicy, modify Administrative Templates.