Free Microsoft 70-744 Exam Dumps Questions & Answers

Your network contains an Active Directory domain named contoso.com. The domain contains multiple servers that run multiple applications. Domain user accounts are used to authenticate access requests to the servers.
You plan to prevent NTLM from being used to authenticate to the servers.
You start to audit NTLM authentication events for the domain. You need to view all of the NTLM authentication events and to identify which applications authenticate by using NTLM.
On which computers should you review the event logs and which logs should you review? To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation

Do not confuse this with event ID 4776 recorded on domain controller's security event log!!!This question asks for implementing NTLM auditing when domain clients is connecting to memberservers! See below for further information.
https://docs.microsoft.com/en-us/windows/device-security/security-policy-settings/network-security-restrict-ntlm this-domainVia lab testing, most of the NTLM audit logs are created on Windows 10 clients, except that you use WindowsServer 2016 OS as clients (but this is unusual)

You have Hyper-V hosts that each has a Software Defined Networking (SDN) deployment. The network uses a virtual subnet of 192.168.0.0/24. You create an access control list (ACL) and apply the ACL to the virtual subnets shown in the following table.

Use The drop-down menus to select the answer choice that completes each statement based on the information presented in the Table.

Correct Answer:

Explanation

References:
https://docs.microsoft.com/en-us/windows-server/networking/sdn/manage/use-acls-for-traffic-flow

You have an organizational unit (OU) named OU1 that contains Server!.
You create a Group Policy object (GPO) named GP01 and link GP01 to OU1.
A user named User1 is a member of group named Group1. The properties of User! are shown in the User1 exhibit. (Click the User1 tab.)

Correct Answer:

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows10.
The network uses the 172.16.0.0/16 address space.
Computer1 has an application named App1.exe that is located in D:\Apps\. App1.exe is configured to accept connections on TCP port 8080.
You need to ensure that App1.exe can accept connections only when Computer1 is connected to the corporate network.
Solution: You run the New-NetFirewallRule -DisplayName "Rule1" -Direction Inbound
-Program "D:\Apps\App1.exe" -Action Allow -Profile Domain command.
Does this meet the goal?

• A.  Yes
• B.  No

Your network contains an Active Directory forest named contoso.com. The functional level of the forest and the domain is Windows Server 2012 R2.
You plan to use Local Administrator Password Solution (LAPS) for all member servers.
You need to prepare the forest for LAPS.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.  Deploy an enterprise certification authority (CA).
• B.  Run the Update-AdmPwdADSchema cmdlet.
• C.  Run the Set-AdmPwdComputerSelfPermission cmdlet.
• D.  Install the LAPS client-side extension on all domain controllers.
• E.  Run the Set-AdmPwdAuditing cmdlet.