Free Microsoft 070-742 Exam Dumps Questions & Answers

Your network contains a signle-domin Active Directory forest named contoso.com. The forest functional level is Windows Server 2016. The forest has Dynamic Access Control enabled.
The domin contains two domain controllers named DC1 and DC2. Privileged user accounts used to manage Active Directory reside in a group named Contoso\AD_Admins.
You create an authentication policy named Policy1 and an authentication policy silo named Silo1.
You need to ensure that the accounts in the Contoso\AD-Admins group can sign in to the domain controllers only.
Which three configurations should you perform? Each correction answer presents part of the solution.

• A.  Create a managed service account and add the account to Permitted Accounts in Silo1.
• B.  Create an access control condition in Policy1.
• C.  Add the domain controllers to the Contoso\AD_Admins group.
• D.  Assign Silo1 to the privileged user accounts and the domain controllers.
• E.  Add the privileged user accounts and the domain controllers to Permitted Accounts in Silo1.

Your company has two offices. The offices are located in Montreal and Seattle.
The network contains an Active Directory forest named contoso.com.
The forest contains three domain controllers configured as shown in the following table.

The company physically relocates Server2 from the Montreal office the Seattle office.
You discover that both Server1 and Server2 authenticate users who sign in to the client computers in the Montreal office. Only Server3 authentications users who sign in to the computers in the Seattle office.
You need to ensure that Server2 authenticates the users in the Seattle office during normal network operations.
What should you do?

• A.  From Windows PowerShell, run the Set-ADReplicationSite cmdlet.
• B.  From Active Directory Users and Computers, modify the Location property of Server2.
• C.  From Network Connections on Server2, modify the Internet Protocol Version 4 (TCP/IPv4) configuration.
• D.  From Windows Power Shell, run the Move-AD Directory Server cmdlet.

Your network contains an Active Directory domain named contoso.com.
You deploy a standalone root certification authority (CA) named CA1.
You need to auto enroll domain computers for certificates by using a custom certificate template.
What should you do first?

• A.  Install a standalone subordinate CA.
• B.  Modify the Exit Module for CA1.
• C.  Install an enterprise subordinate CA.
• D.  Modify the Policy Module for CA1.

You use Application Request Routing (ARR) to make internal web applications available to the Internet by using NTLM authentication.
You need to replace ARR by using the Web Application Proxy.
Which server role should you deploy first?

• A.  Active Directory Lightweight Directory Services
• B.  Active Directory Rights Management Services
• C.  Active Directory Certificate Services
• D.  Active Directory federation Services

You Active Directory domain has the Group Policy objects (GPOs) shown in the following exhibit.

Use the drop- down menus to select choice that complete each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

References:
https://emeneye.wordpress.com/2016/02/16/group-policy-order-of-precedence-faq/