Practical 70-742 Free Practice Questions 2021

NEW QUESTION 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Web1 that runs Windows Server 2021.
You need to list all the SSL certificates on Web1 that will expire during the next 60 days. Solution: You run the following command.

Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 2
Your network contains an Active Directory domain named contoso.com.
All the accounts of the users in the sales department are in an organizational unit (OU) named SalesOU. An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object
(GPO) named SalesGPO. You need to set the registry value of
HKEY_CURRENT_USERSoftwareApp1CoIlaboration to 0.
Solution: You add a user preference that has an Update action. Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 3
Your network contains an Active Directory forest named contoso.com. The forest contains an Active Directory Federation Services (AD FS) farm.
You install Windows Server 2021 on a server named Server2.
You need to configure Server2 as a node in the federation server farm.
Which cmdlets should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 4
Your network contains an Active Directory domain named contoso.com.
You have an application named App1 that is deployed to all the client computers in the domain. App1 writes a registry value named LocalStorage on all the client computers.
You need to delete the LocalStorage registry value from all the client computers in the domain that have less than 100 GB of free disk space on their system volume.
What should you do?

• A. Configure Software Settings in a Group Policy object (GPO) and enable a WMI filter.
• B. Configure a Group Policy setting to modify the security of the LocalStorage registry value.
• C. Create an administrative template file that contains the LocalStorage registry setting, and then add the administrative template to a Group Policy object (GPO).
• D. Configure a Group Policy preference that uses item-level targeting.

Answer: D

Explanation: In Windows Server 2008 Microsoft introduced a Group Policy extension, named Group Policy Preferences (GPP). GPP that includes registry settings, allows you to add, remove or modify key values.
References: https://theitbros.com/add-modify-and-delete-registry-keys-using-group-policy/

NEW QUESTION 5
Your network contains an Active Directory domain named contoso.com. The domain contains a username User1, a group named Group1, and an organizational unit (OU) named OU1.
You need to enable User1 to link Group Policies to OU1.
Solution: From Active Directory Administrative Center, you add User1 to Group1. From ADSI Edit, you grant Group1 Full Control permissions to the “CN=Policies, CN=System, DC=Contoso, DC=com” object.
Does this meet the goal?

• A. Yes
• B. NO

Answer: B

NEW QUESTION 6
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2021.
Server1 has Microsoft System Center 2021 Virtual Machine Manager (VMM) installed. Server2 has IP Address Management (IPAM) installed.
You create a domain user named User1.
You need to integrate IPAM and VMM. VMM must use the account of User1 to manage IPAM. The solution must use the principle of least privilege.
What should you do on each server? To answer, select the appropriate options in the answer area.

Answer:

Explanation: References:
https://technet.microsoft.com/en-us/library/dn783349(v=ws.11).aspx

NEW QUESTION 7
Your network contains an Active Directory domain named contoso.com.
You need to create a central store for Group Policy administrative templates. What should you use?

• A. Server Manager
• B. File Explorer
• C. Dcgpofix.exe
• D. Group Policy Management Console (GPMC)

Answer: B

NEW QUESTION 8
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. Server2 has the DHCP Server role installed. The IPAM server retrieves data from Server2.
The domain has two users named User1 and User2 and a group named Group1. User1 is the only member of Group1.
Server1 has one IPAM access policy. You edit the access policy as shown in the Policy exhibit. (Click the Exhibit button.)

The DHCP scopes are configured as shown in the Scopes exhibit. (Click the Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Answer:

Explanation:

NEW QUESTION 9
Your network contains a single-domain Active Directory forest named contoso.com. The forest functional level is Windows Server 2021. The Active Directory Recycle Bin feature is enabled.
You need to design a procedure to restore the values of user object attributes if the values are changed accidentally.
Which cmdlets should you include in the procedure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 10
Your network contains an Active Directory domain. The domain contains computer named Comouter1 and an organizational unit (OU) named TestOU. TestOU contains 10 computer accounts that are used for testing. A Group Policy object (GPO) named GPO1 is linked to TestOU.
On Computer1, you modify the User Right Assignment by using the local policy.
You need to apply the User Right Assignment from Computer1 to the 10 test computers. What should you do?

• A. On Computer1, run the gprcsult.exe command and specify the A paramete
• B. From Group Policy Management, run the Restore Group Policy Object Wizard.
• C. On Computer1, run the secedit.exe command and specify the /export paramete
• D. From Group Policy Management, run the Import Settings Wizard.
• E. On Computer1, run the gpresult.exe command and specify the A paramete
• F. Edit GPO1, and then import a security template.
• G. On Computer1 run the secedit.exe command and specify the /export paramete
• H. Edit GPO1, and then import a security template.

Answer: D

NEW QUESTION 11
Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2012 R2.
You need to secure several high-privilege user accounts to meet the following requirements: What should you do?

• A. Create a universal security group for the user accounts and modify the Security settings of the group.
• B. Add the users to the Windows Authorization Access Group group.
• C. Add the user to the Protected Users group.
• D. Create a separate organizational unit (OU) for the user accounts and modify the Security settings of the OU.

Answer: C

NEW QUESTION 12
You network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA).
A user named Admin1 is a member of the Domain Admins group.
You need to ensure that you can archive keys on the CA. The solution must use Admin1 as a key recovery agent.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 13
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2.
DC1 holds the RID master operations role. DC1 fails and cannot be repaired. You need to move the RID role to DC2.
Solution: On DC2, you open Windows PowerShell and run
Move-AddirectoryServerOperationMasterRole -OperationMasterRidMaster -Identity DC2.Adatum.com Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: You would need to use the -Force parameter because the server that held the role (DC1) if offline.

NEW QUESTION 14
Your network contains an Active Directory forest named contoso.com.
A partner company has a forest named fabrikam.com. Each forest contains one domain.
You need to provide access for a group named Research in fabrikam.com to resources in contoso.com. The solution must use the principle of least privilege.
What should you do?

• A. Create an external trust from fabrikam.com to contoso.co
• B. Enable Active Directory split permissions in fabrikam.com.
• C. Create an external trust from contoso.com to fabrikam.co
• D. Enable Active Directory split permissions in contoso.com.
• E. Create a one-way forest trust from contoso.com to fabrikam.com that uses selective authentication.
• F. Create a one-way forest trust from fabrikam.com to contoso.com that uses selective authentication.

Answer: C

NEW QUESTION 15
User1 is in OU1. GPO1 is linked to OU1.

The settings in GPO1 are configured as shown in the exhibit. (Click the Exhibit button)

Computer1 does not have any shortcuts on the desktop.

• A. 1
• B. 2
• C. 3
• D. 4

Answer: D

NEW QUESTION 16
Your network contains an Active Directory domain named contoso.com. The domain contains a web application that uses Kerberos authentication.
You change the domain name of the web application.
You need to ensure that the service principal name (SPN) for the application is registered. Which tool should you use?

• A. Rdspnf
• B. Active Directory Users and Computers
• C. Dnscmd
• D. Ldifde

Answer: B