Microsoft 70-742 Dumps 2021

NEW QUESTION 1
Your network contains an Active Directory domain named contoso.com.
You need to view a list of all the domain user accounts that are enabled. But whose users have not signed in during the last 30 days.
Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 2
Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest and the domains is Windows Server 2008 R2.
You have a global group named Group1 in the contoso.com domain. Group1 contains the user accounts in contoso.com. You need to ensure that you can add the user accounts in the fabrikam.com domain to Group1. What should you do?

• A. Run the Set-LocalGroup cmdlet.
• B. Assign the Domain Controllers group in fabrikam.com permissions to Group1
• C. Modify the scope of Group1 to Domain local.
• D. Change Group1 to a distribution group.

Answer: C

NEW QUESTION 3
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.
The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)

The relevant users and client computer in the domain are configured as shown in the following table.

End of repeated scenario.
Which five GPOs will apply to User1 in sequence when the user signs in to Computer1? To answer, move the appropriate GPOs from the list to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 4
Your network contains an Active Directory domain named contoso.com. The domain contains a user named User1, a group named Group1, and an Organizational unit (OU) named OU1.
You need to enable User1 to link Group Policies to OU1.
Solution: From Active Directory Administrative Center, you add User1 to Group1. From Group Policy Management, you click the Group Policy Objects container. From the Delegation tab, you add Group1.

• A. Yes
• B. No

Answer: B

NEW QUESTION 5
You have a server named Server1 that runs Windows Server 2021. Server1 has the Web Application Proxy role service installed.
You are publishing an application named App1 that will use Integrated Windows authentication as shown in the following graphic.

Use the drop-down menus to select the answer area choice that completes each statement based on the information presented in the graphic.

Answer:

Explanation:

NEW QUESTION 6
Your network contains an Active Directory domain.
Users do not have administrative privileges to their client computer You modify a computer setting in a Group Policy object (GPO).
You need to ensure that the setting is applied to five client computers as soon as possible. What should you do?

• A. From a domain controller, run the gpudate.exe command and specify the Force parameter.
• B. From each client computer, run the gpresult.exe command and specify the /r parameter.
• C. From each client computer, run the Get-Gpo cmdlet and specify the -alt parameter.
• D. From a domain controller, run the Invoke-GPUpdate cmdlet.

Answer: D

Explanation: https://technet.microsoft.com/en-us/library/hh852337(v=ws.11).aspx

NEW QUESTION 7
Your company has an office in Montreal.
The network contains an Active Directory domain named conloso.com.
You have an organizational unit (OU) named Montreal that contains all of the users accounts for the users in the Montreal office. An office manager in the Montreal office knows each user personally.
You need to ensure that the office manager can provide the users with a new password if the users forget their password.
What should you do?

• A. Create a Group Policy object (GPO) and link the GPO to the Montreal O
• B. Assign the office manager the Apply Group Policy permission on the GP
• C. Configure the Password Policy settings on the GPO.
• D. From the Security settings of the Montreal OU, assign the office manager the Reset Password permission.
• E. From the Security settings of each user account in the Montreal OU, assign the office manager the Change Password permission.
• F. Create a Group Policy object (GPO) and link the GPO to the OU of the domai
• G. Filter the GPO to the Montreal user
• H. Assign the office manager the Apply Group Policy permission on the GP
• I. Configure the Password Policy settings of the GPO.

Answer: A

NEW QUESTION 8
Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named OU1 that contains the computer accounts of two servers and the user account of a user named User1. A Group Policy object (GPO) named GPO1 is linked to OU1.
You have an application named App1 that installs by using an application installer named App1.exe. You need to publish App1 to OU1 by using Group Policy.
What should you do?

• A. Create a Config.zap file and add a file to the File System node to the Computer Configuration node of GPO1.
• B. Create a Config.xml file and add a software installation package to the User Configuration node of GPO1.
• C. Create a Config.zap file and add a software installation package to the User Configuration node of GPO1.
• D. Create a Config.xml file and add a software installation package to the Computer Configuration node of GPO1.

Answer: C

NEW QUESTION 9
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From a Group Policy object (GPO) in the domain, you add a rule to the Name Resolution Policy Table (NRPT).
Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation: The NRPT stores configurations and settings that are used to deploy DNS Security Extensions (DNSSEC), and also stores information related to DirectAccess, a remote access technology.
Note: The Name Resolution Policy Table (NRPT) is a new feature available in Windows Server 2008 R2. The NRPT is a table that contains rules you can configure to specify DNS settings or special behavior for names or namespaces. When performing DNS name resolution, the DNS Client service checks the NRPT before sending a DNS query. If a DNS query or response matches an entry in the NRPT, it is handled according to settings in the policy. Queries and responses that do not match an NRPT entry are processed normally.
References: https://technet.microsoft.com/en-us/library/ee649207(v=ws.10).aspx

NEW QUESTION 10
Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains a server named Server1.
An administrator named Admin01 plans to configure Server1 as a standalone certification authority (CA). You need to identify to which group Admin01 must be a member to configure Server1 as a standalone CA.
The solution must use the principle of least privilege.
To which group should you add Admin01?

• A. Administrators on Server1.
• B. Domain Admins in contoso.com
• C. Cert Publishers on Server1
• D. Key Admins in contoso.com

Answer: A

NEW QUESTION 11
Your network contains an Active Directory domain named contoso.com.
You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)

You discover that some of the settings configured in the A1 Group Policy object (GPO) fail to apply to the users in the OU1 organizational unit (OU).
You need to ensure that all of the settings in A1 apply to the users in OU1. What should you do?

• A. Enable loopback policy processing in A1.
• B. Block inheritance on OU1.
• C. Modify the policy processing order for OU1.
• D. Modify the GPO Status of A1.

Answer: C

NEW QUESTION 12
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.
The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)

The relevant users and client computer in the domain are configured as shown in the following table.

End of repeated scenario.
You are evaluating what will occur when you disable the Group Policy link for A6.
Which GPOs will apply to User2 when the user signs in to Computer1 after the link for A6 is disabled?

• A. A1 and A5 only
• B. A3, A1, and A5 only
• C. A3, A1, A5, and A4 only
• D. A3, A1, A5, and A7

Answer: C

NEW QUESTION 13
Your company has two offices. The offices are located in Montreal and Seattle. The network contains an Active Directory forest named contoso.com.
The forest contains three domain controllers configured as shown in the following table.

The company physically relocates Server2 from the Montreal office the Seattle office.
You discover that both Server1 and Server2 authenticate users who sign in to the client computers in the Montreal office. Only Server3 authentications users who sign in to the computers in the Seattle office.
You need to ensure that Server2 authenticates the users in the Seattle office during normal network operations. What should you do?

• A. From Windows Power Shell, run the Move-AD Directory Server cmdlet.
• B. From Active Directory Users and Computers, modify the Location property of Server2.
• C. From Windows PowerShell, run the Set-ADReplicationSite cmdlet.
• D. From Network Connections on Server2, modify the Internet Protocol Version 4 (TCP/IPv4) configuration.

Answer: C

NEW QUESTION 14
Your network contains an Active Directory domain named contoso.com. A Group Policy object (GPO) named GPO1 is linked to contoso.com.
GPO1 has computer configuration polices, user configuration policies and user preferences configured.
You need to ensure that the user preferences in GPO1 apply only to users who sign in to computers that runs Windows 10. All the other settings in GPO1 must be applied, regardless of the computer to which the user sign in.
What should you configure?

• A. Security Settings
• B. WMI filtering
• C. Security Filtering
• D. item-level targeting

Answer: D

NEW QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2.
DC1 holds the RID master operations role. DC1 fails and cannot be repaired. You need to move the RID role to DC2.
Solution: On DC2, you open the command prompt, run dsmgmt.exe, connect to DC2, and use the Seize RID master opinion.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 16
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Web1 that runs Windows Server 2021.
You need to list all the SSL certificates on Web1 that will expire during the next 60 days. Solution: You run the following command.
Get-ChildItem Cert:LocalMachineTrust |? { $_.NotAfter –It (Get-Date).AddDays( 60 ) }

Does this meet the goal?

• A. Yes
• B. No

Answer: A