Free Microsoft 70-742 Exam Dumps Questions & Answers

Your company has a main office and a branch office. The two offices connect to each other by using a WAN link.
Your network contains an Active Directory forest named contoso.com. The forest contains a domain controller named DC1. All of the domain controllers are located in the main office.
You install a read-only domain controller (RODC) named RODC1 in the branch office.
You create a user account for a new user named User1. You add User1 to the Allowed RODC Password Replication Group. User1 starts work on Monday.
You are notified that the WAN link will be down for maintenance on Monday.
You need to ensure that User1 can log on in the branch office site on Monday.
Which command should you run? To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation

The following example triggers replication of the passwords for the user account named JaneOh from the source domain controller named source-dc01 to all RODCs that have the name prefix dest-rodc: repadmin
/rodcpwdrepl dest-rodc* source-dc01 cn=JaneOh,ou=execs,dc=contoso,dc=com References:
https://technet.microsoft.com/en-us/library/cc742095(v=ws.11).aspx

Your network contains an Active Directory forest. The forest contains two sites named Site1 and Site2. Site1 contains 10 domain controllers. Site1 and Site2 connect to each other by using a WAN link.
You run the Active Directory Domain Services Configuration Wizard as shown in the following graphic.

Server3 is the only server in Site2.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

Correct Answer:

Explanation

By selectively caching credentials, RODCs address some of the challenges that enterprises can encounter in branch offices and perimeter networks (also known as DMZs) that may lack the physical security that is commonly found in datacenters and hub sites.

You network contains one Active Directory domain named adatum.com. The domain contains a DNS server named Server1 that runs Windows Server 2016. All domain computers use Server1 for DNS.
You sign adatum.com by using DNSSEC.
You need to configure the domain computers to validate DNS responses for adatum.com records.
What should you configure in Group Policy?

• A.  Name Resolution Policy
• B.  Public Key Policy
• C.  Network List Manager Policies
• D.  Network Access Protection (NAP)

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy a new Active Directory forest.
You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member servers.
Solution: You configure Kerberos constrained delegation on the computer account of each member server.
Does this meet the goal?

• A.  Yes
• B.  No

Your network contains an Active Directory domain named contos.com.
You need to create a central store for Group Policy administrative templates.
What should you use?

• A.  Group Policy Management Editor
• B.  Group Policy Management Console (GPMC)
• C.  Copy-Item
• D.  Copy-GPO