Free Microsoft 70-744 Exam Dumps Questions & Answers

You have a Hyper-V host named Server1 that hosts the virtual machines shown in the following table.

You plan to encrypt the operating system drive on the virtual machines.
On which virtual machines can you use a TPM protector for BitLocker Drive Encryption (BitLocker)?

• A.  VM3 and VM4 only
• B.  VM1, VM2, VM3, and VM4
• C.  VM2 and VM4 only
• D.  VM4 only

Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario
Your network contains an Active Directory domain named contoso.com. The functional level of the forest and the domain is Windows Server 2008 R2.
The domain contains the servers configured as shown in the following table.

All servers run Windows Server 2016. All client computers run Windows 10.
You have an organizational unit (OU) named Marketing that contains the computers in the marketing department You have an OU named finance that contains the computers in the finance department You have an OU named AppServers that contains application servers. A Group Policy object (GPO) named GP1 is linked to the Marketing OU. A GPO named GP2 is linked to the AppServers OU.
You install Windows Defender on Nano1.
End of repeated scenario
You need to ensure that when a configuration change is made on Nano2, Nano2 will revert back to the original configuration automatically.
What should you do first?

• A.  Install the Microsoft-NanoServer-DSC-Package optional package
• B.  Enable File History for all volumes.
• C.  Enable System Protection on all volumes
• D.  Deploy Microsoft System Center 2016 - Data Protection Manager (DPM)
• E.  Install the Microsoft-NanoServer-DCB-Package optional package

You plan to enable Credential Guard on four servers. Credential Guard secrets will be bound to the TPM.
The servers run Windows Server 2016 and are configured as shown in the following table.

Which of the above server you could enable Credential Guard?

• A.  Server2
• B.  Server4
• C.  Server1
• D.  Server3

Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario
Your network contains an Active Directory domain named contoso.com. The functional level of the forest and the domain is Windows Server 2008 R2.
The domain contains the servers configured as shown in the following table.

All servers run Windows Server 2016. All client computers run Windows 10.
You have an organizational unit (OU) named Marketing that contains the computers in the marketing department. You have an OU named Finance that contains the computers in the finance department. You have an OU named AppServers that contains application servers. A Group Policy object (GPO) named GP1 is linked to the Marketing OU. A GPO named GP2 is linked to the AppServers OU.
You install Windows Defender on Nano1.
End of repeated scenario
You need to ensure that you can implement the Local Administrator Password Solution (LAPS) (or the finance department computers.
What should you do in the contoso.com forest? To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation
Windows PowerShell module to import: AdmPwd.PS
Windows PowerShell cmdlet to use: Update-AdmPwdADSchema
https://4sysops.com/archives/set-up-microsoft-laps-local-administrator-password-solution-in-active-directory/

You configure Just Enough Administration (JEA).
You need to ensure that a non-administrator user can perform the following actions:
-Restart Internet Information Services (IIS)
-Restart a custom service named Service1.
How should you complete the role configuration file? To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation

VisibleExternalCommands = 'C:\\Windows\\system32\\iisreset.exe'
VisibleCmdlets = @{ Name 'Restart-service' ; Parameters @{ Name = 'Name'; ValidateSet = 'Service1'}}
https://docs.microsoft.com/en-us/powershell/jea/role-capabilities