| Exam Code/Number: | 70-742Join the discussion |
| Exam Name: | Identity with Windows Server 2016 |
| Certification: | Microsoft |
| Question Number: | 286 |
| Publish Date: | Jul 16, 2026 |
|
Rating
100%
|
|
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You network contains an Active Directory forest named contoso.com. The forest contains an Active Directory Rights Management Services (AD RMS) deployment.
Your company establishes a partnership with another company named Fabrikam, Inc. The network of Fabrikam contains an Active Directory forest named fabrikam.com and an AD RMS deployment.
You need to ensure that the users in contoso.com can access rights protected documents sent by the users in fabrikam.com.
Solution: From AD RMS in contoso.com, you configure fabrikam.com as a trusted publisher domain.
Does this meet the goal?
Your network contains an Active Directory forest named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account of Server1 is an organizational unit (OU) named OU1.
You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)
An administrator reports that the settings from GPO1 are not applied to Server1.
You need to ensure that the settings from GPO1 are applied to Server1.
What should you do?
Which of the following CA types would you deploy if you wanted to deploy a CA at the top of a hierarchy that could issue signing certificates to other CAs and which would be taken offline if not issuing, renewing, or revoking signing certificates?
You have a Nano Server named Nano1 that runs Windows Server 2016. Nano1 is deployed to a virtual machine and is a member of a workgroup.
You need to join Nano1 to a domain named contoso.com.
Which two commands should you run? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Web1 that runs Windows Server 2016.
You need to list all the SSL certificates on Web1 that will expire during the next 60 days.
Solution: You run the following command.
Get-ChildItem Cert:\LocalMachine\Trust |? { $_.NotAfter -It (Get-Date).AddDays( 60 ) } Does this meet the goal?
