70-742 Test 2

QUESTION 69. Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2012 R2. Your company hires a new security administrator to manage sensitive user data. You create a user account named Security1 for the security administrator. You need to ensure that the password for Security1 has at least 12 characters and is modified every 10 days. The solution must apply to Security1 only. Which tool should you use?

• A. Dsadd quota
• B. Dsmod
• C. Active Directory Administrative Center
• D. Dsacls
• E. Dsmain

QUESTION 70. Your network contains an Active Directory domain. All client computers run Windows 10. A client computer named Computer1 was in storage for five months and was unused during that time. You attempt to sign in to the domain from Computer1 and receive an error message. You need to ensure that you can sign in to the domain from Computer1. What should you do?

• A. Unjoin Computer1 from the domain, and then join the computer to the domain.
• B. From Active Directory Administrative Center, reset the computer account of Computer1.
• C. From Active Directory Administrative Center, disable Computer1, and then enable the computer account of Computer1.
• D. From Active Directory Users and Computers, run the Delegation of Control Wizard.

QUESTION 71. You network contains an active Directory domain. The domain contains 20 domain controllers. You discover that some Group Policy objects (GPOs) are not being applied by all the domain controllers. You need to verify whether GPOs replicate successfully to all the domain controllers. What should you do?

• A. Set BurFlags in the registry, and then restart the File Replication Service (FRS). Run dcdiag.exe for each domain controller.
• B. Set BurFlags in the registry, and then restart the File Replication Service (FRS). View the Directory Service event log.
• C. From Group Policy Management, view the Status tab for the domain.
• D. Run repadmin.exe for each GPO.

QUESTION 72. Your company has a marketing department and a security department. The network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA). You have two organizational units (OUs) named MKT_UsersOU and MKT_ComputersOU. MKT_UsersOU contains the user accounts for the users in the marketing department. MKT_ComputersOU contains the computer accounts for the computers in the marketing department. A Group policy object (GPO) named GPO1 is linked to MKT_UsersOU. A GPO named GPO2 linked to MKT_ComputersOU. You plan to deploy a web application for the marketing department users. The application will require certificates for authentication. The security department configures the CA to support the planned deployment. You need to ensure that the web application can authenticate the marketing department users. What should you do?

• A. From the User Configuration node of GPO1, create an Internet Setting preference.
• B. From the User Configuration node of GPO1, configure the Certificate Services Client - Auto enrollment settings.
• C. From the Computer Configuration node of GPO2, configure the Certificate Services Client - Certificate Enrollment Policy settings.
• D. From the Computer Configuration node of GPO2, create the Automatic Certificate Request Settings.

QUESTION 74. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The Computer account for Server1 is in organizational unit (OU) named OU1. You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1. You need to add a domain user named user1 to the local Administrators group on Server1. Solution: From the Computer Configuration node of GPO1, you configure the Restricted Groups settings. Does this meet the goal?

• A. Yes
• B. No

QUESTION 76. You have an enterprise certification authority (CA). You create a global security group named Group1. You need to provide members of Group1 with the ability to issue and manage certificates. The solution must prevent the Group1 members from managing certificates requested by members of the Domain Admins group. Which two actions should you perform?

• A. From the CA properties, modify the Policy Module settings.
• B. From the Certificate Templates console, modify the Security settings of the Administrator certificate template.
• C. From the CA properties, modify the security settings.
• D. From the CA properties, modify the Enrollment Agents settings.
• E. From the CA properties, modify the Certificate Managers Settings.

QUESTION 77. Your network contains an Active Directory domain named contoso.com. The domain contains a web application that uses Kerberos authentication. You change the domain name of the web application. You need to ensure that the service principal name (SPN) for the application is registered. Which tool should you use?

• A. Rdspnf
• B. Internet Information Services (IIS) Manager
• C. Dnscmd
• D. Ldifde

QUESTION 78. You have a server named Web1 that runs Windows Server 2016. You need to list all the SSL certificates on Web1 that will expire during the next 60 days. Solution: You run the following command. Get-ChildItem cert:\CurrentUser\My |& {$_.NotAfter -It (Get-Date}.AddDays(60)} Does this meet the goal?

• A. Yes
• B. No

QUESTION 79. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. Server1 has IP Address Management (IPAM) installed. IPAM is configured to use the Group Policy based provisioning method. The prefix for the IPAM Group Policy objects (GPOs) is IP. From Group Policy Management, you manually rename the IPAM GPOs to have a prefix of IPAM. You need to modify the GPO prefix used by IPAM. What should you do?

• A. Click Configure server discovery in Server Manager.
• B. Run the Set-IpamConfiguration cmdlet.
• C. Run the Invoke-IpamGpoProvisioning cmdlet.
• D. Click Provision the IPAM server in Server Manager.

QUESTION 81. Your network contains an Active Directory domain named contoso.com. You need to create a central store for Group Policy administrative templates. What should you use?

• A. Server Manager
• B. File Explorer
• C. Dcgpofix.exe
• D. Group Policy Management Console (GPMC)