[Free] 2019(Nov) EnsurePass Microsoft 70-742 Dumps with VCE and PDF 71-80

Get Full Version of the Exam
http://www.EnsurePass.com/70-742.html

Question No.71

You have an enterprise certification authority (CA). You create a global security group named Group1.

You need to provide members of Group1 with the ability to issue and manage certificates. The solution must prevent the Group1 members from managing certificates requested by members of the Domain Admins group.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  1. From the CA properties, modify the Policy Module settings.

  2. From the Certificate Templates console, modify the Security settings of the Administrator certificate template.

  3. From the CA properties, modify the security settings.

  4. From the CA properties, modify the Enrollment Agents settings.

  5. From the CA properties, modify the Certificate Managers Settings.

  6. From the Certificate Templates console, modify the Security settings of the User certificate template.

Correct Answer: AE

Question No.72

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You deploy a new Active Directory forest.

You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member servers.

Solution: You configure Kerberos constrained delegation on the computer account of each domain controller.

Does this meet the goal?

  1. Yes

  2. No

Correct Answer: B

Question No.73

HOTSPOT

Your network contains an Active Directory domain named contoso.com.

You have an administrative computer named Computer1 that runs Windows Server 2016. From Computer1, you edit a Group Policy object (GPO) named GPO1 as shown in the exhibit.

image

You receive a new administrative template named Template1. Template1 consists of Template1.adml. Template1 is in English US.

You need to ensure that the settings of Template1 appear under the Administrative Templates node.

To where should you copy the Template1 files?

To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

image

Correct Answer:

image

Question No.74

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a server named Web1 that runs Windows Server 2016.

You need to list all the SSL certificates on Web1 that will expire during the next 60 days. Solution: You run the following command.

Get-ChildItem Cert:\LocalMachine\Trust |? { $_.NotAfter -It (Get-Date).AddDays( 60 ) } Does this meet the goal?

  1. Yes

  2. No

Correct Answer: A

Question No.75

DRAG DROP

You network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA).

A user named Admin1 is a member of the Domain Admins group.

You need to ensure that you can archive keys on the CA. The solution must use Admin1 as a key recovery agent.

Which four actions should you perform in sequence?

To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

image

Correct Answer:

image

Question No.76

You network contains an Active Directory domain named contoso.com. The domain contains an Active Directory Federation Services (AD FS) server named ADFS1, a Web Application Proxy server named WAP1, and a web server named Web1.

You need to publish a website on Web1 by using the Web Application Proxy. Users will authenticate by using OAuth2 preauthentication.

What should you do first?

  1. On Web1, add site bindings.

  2. On Web1, add handler mappings.

  3. On ADFS1, enable an endpoint.

  4. On ADFS1, add a claims provider trust.

Correct Answer: D

Question No.77

HOTSPOT

Your network contains an Active Directory domain named contoso.com.

You need to view a list of all the domain user accounts that are enabled. But whose users have not signed in during the last 30 days.

Which command should you run?

To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

image

Correct Answer:

image

Question No.78

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2012 R2.

Your company hires a new security administrator to manage sensitive user data. You create a user account named Security1 for the security administrator.

You need to ensure that the password for Security1 has at least 12 characters and is modified every 10 days. The solution must apply to Security1 only.

Which tool should you use?

  1. Dsadd quota

  2. Dsmod

  3. Active Directory Administrative Center

  4. Dsacls

  5. Dsmain

  6. Active Directory Users and Computers

  7. Ntdsutil

  8. Group Policy Management Console

Correct Answer: F

Question No.79

Note: This question is part of a series of questions that use the same or similar answer choices.

An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

Your network contains an Active Directory domain named contoso.com. You recently deleted 5,000 objects from the Active Directory database.

You need to reduce the amount of disk space used to store the Active Directory database on a domain controller.

  1. Dsadd quota

  2. Dsmod

  3. Active Directory Administrative Center

  4. Dsacls

  5. Domain

  6. Active Directory Users and Computers

  7. Ntdsutil

  8. Group Policy Management Console

Correct Answer: G

Question No.80

Your network contains an Active Directory domain named contoso.com. The domain contains a user named User1 and an organizational unit (OU) named OU1.

You create a Group Policy object (GPO) named GPO1. You need to ensure that User1 can link GPO1 to OU1. What should you do?

  1. Modify the security setting of User1.

  2. Add User1 to the Group Policy Creator Owner group.

  3. Modify the security setting of OU1.

  4. Modify the security setting of GPO1.

Correct Answer: D

Get Full Version of the Exam
70-742 Dumps
70-742 VCE and PDF

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.