Font size
WorksheetsWindow Server 2016 (70-742)
Total questions: 20
Worksheet time: 19mins
You are the system administrator of a large organization that has recently implemented Windows Server 2016. You have a few remote sites that do not have very tight security. You have decided to implement read-only domain controllers (RODCs). What forest and function levels does the network need for you to do the install? (Choose all that apply.)You are the system administrator of a large organization that has recently implemented Windows Server 2016. You have a few remote sites that do not have very tight security. You have decided to implement read-only domain controllers (RODCs). What forest and function levels does the network need for you to do the install? (Choose all that apply.)
Windows Server 2016
Windows Server 2008 R2
Windows Server 2012 R2
Windows Server 2008
Miguel is a junior-level system administrator, and he has basic knowledge about working with Active Directory. As his supervisor, you have asked Miguel to make several security related changes to OUs within the company’s Active Directory domain. You instruct Miguel to use the basic functionality provided in the Delegation of Control Wizard. Which of the following operations are represented as common tasks within the Delegation of Control Wizard? (Choose all that apply.)
Reset passwords on user accounts
Manage Group Policy links
Modify the membership of a group.
Create, delete, and manage groups
A system administrator is trying to determine which file system to use for a server that will become a Windows Server 2016 file server and domain controller. The company has the following requirements:
■ The file system must allow for file-level security from within Windows 2016 Server.
■ The file system must make efficient use of space on large partitions.
■ The domain controller Sysvol must be stored on the partition. Which of the following file systems meets these requirements?
FAT
FAT32
HPFS
NTFS
1. You are the system administrator responsible for your company’s infrastructure. You think you have an issue with name resolution, and you need to verify that you are using the correct hostname. You want to test DNS on the local system and need to see whether the hostname server-1 resolves to the IP address 10.1.1.1. Which of the following actions provides a solution to the problem?
Add a DNS server to your local subnet.
Add the mapping for the hostname server-1 to the IP address 10.1.1.1 in the local system’s HOSTS file.
Add an A record to your local WINS server.
Add an MX record to your local DNS server.
1. What is the maximum number of domains that a Windows Server 2016 computer configured as a domain controller may participate in at one time?
Zero
One
Two
Any number of domains
You are the administrator of an organization with a single Active Directory domain. A user who left the company returns after 16 weeks. The user tries to log on to their old computer and receives an error stating that authentication has failed. The user’s account has been enabled. You need to ensure that the user is able to log on to the domain using that computer. What do you do?
Reset the computer account in Active Directory. Disjoin the computer from the domain, and then rejoin the computer to the domain.
Run the ADadd command to rejoin the computer account
Run the MMC utility on the user’s computer, and add the Domain Computers snap-in.
Re-create the user account and reconnect the user account to the computer account.
You are the administrator of an organization with a single Active Directory domain. One of your senior executives tries to log on to a machine and receives the error “This user account has expired. Ask your administrator to reactivate your account.” You need to make sure that this doesn’t happen again to this user. What do you do?
Configure the domain policy to disable account lockouts.
Configure the password policy to extend the maximum password age to 0.
Modify the user’s properties to set the Account Never Expires setting.
Modify the user’s properties to extend the maximum password age to 0.
You are a domain administrator for a large domain. Recently, you have been asked to make changes to some of the permissions related to OUs within the domain. To restrict security for the Texas OU further, you remove some permissions at that level. Later, a junior system administrator mentions that she is no longer able to make changes to objects within the Austin OU (which is located within the Texas OU). Assuming that no other changes have been made to Active Directory permissions, which of the following characteristics of OUs might have caused the change in permissions?
Inheritance
Group Policy
Delegation
Object properties
You need to deactivate the UGMC option on some of your domain controllers. At which level in Active Directory would you deactivate UGMC?
Server
Site
Domain
Forest
The process of assigning permissions to set Group Policy for objects within an OU is known as ---------------?
Promotion
Inheritance
Delegation
Filtering
Which of the following statements is true regarding the actions that occur when a software package is removed from a GPO that is linked to an OU?
The application will be automatically uninstalled for all users within the OU
Current application installations will be unaffected by the change
The system administrator may determine the effect
The current user may determine the effect
You are the network administrator for your organization. You are working on creating a new GPO for the sales OU. You want the GPO to take effect immediately. Which command would you use?
GPForce
GPUpdate
GPResult
GPExecute
You are the network administrator for a large organization that has multiple sites and multiple OUs. You have a site named SalesSite that is for the sales building across the street. In the domain, there is an OU for all salespeople called Sales. You set up a GPO for the SalesSite, and you need to be sure that it applies to the Sales OU. The Sales OU GPOs cannot override the SalesSite GPO. What do you do?
On the GPO, disable the Block Child Inheritance setting.
On the GPO, set the Enforce setting.
On the GPO, set the priorities to 1.
On the Sales OU, set the Inherit Parent Policy settings
Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012 R2.
You need to ensure that a domain administrator can recover a deleted Active Directory object quickly.
Which tool should you use?
Dsadd quota
Active Directory Administrative Center
Active Directory Users and Computers
Group Policy Management Console
You network contains an Active Directory domain named contoso.com. The domain contains 1,000 desktop computers and 500 laptops. An organizational unit (OU) named OU1 contains the computer accounts for the desktop computers and the laptops.
You create a Windows PowerShell script named Script1.ps1 that removes temporary files and cookies. You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.
You need to run the script once weekly only on the laptops.
What should you do?
In GPO1, create a File preference that uses item-level targeting.
In GPO1, create a Scheduled Tasks preference that uses item-level targeting.
In GPO1, configure the File System security policy. Attach a WMI filter to GPO1.
In GPO1, add Script1.ps1 as a startup script. Attach a WMI filter to GPO1.
Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts.
You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU).
You need to force users to change their account password at least every 30 days.
What should you do?
From the Computer Configuration node of DCPolicy, modify Security Settings.
From the Computer Configuration node of DomainPolicy, modify Security Settings.
From the Computer Configuration node of DomainPolicy, modify Administrative Templates.
From the User Configuration node of DCPolicy, modify Security Settings.
Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.
The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)
The relevant users and client computer in the domain are configured as shown in the following table.
End of repeated scenario.
You are evaluating what will occur when you block inheritance on OU4.
Which GPO or GPOs will apply to User1 when the user signs in to Computer1 after block inheritance is
configured?
A1, A5, and A6
A3, A1, A5, and A7
A3 and A7 only
A7 only
Your network contains an Active Directory domain named contoso.com.
You discover that users can use passwords that contain only numbers.
You need to ensure that all the user passwords in the domain contain at least three of the following types of characters: Numbers Uppercase letters Lowercase letters Special characters
What should you edit?
The Default Domain Controllers Policy
The local policy on each client computer
The Default Domain Policy
The local policy on each domain controller
Your network contains an enterprise root certification authority (CA) named CA1.
Multiple computers on the network successfully enroll for certificates that will expire in one year. The certificates are based on a template named Secure_Computer. The template uses schema version 2.
You need to ensure that new certificates based on Secure_Computer are valid for three years.
What should you do?
Modify the Validity period for the certificate template
Instruct users to request certificates by running the certreq.exe command.
. Instruct users to request certificates by using the Certificates console.
Modify the Validity period for the root CA certificate
You deploy a new enterprise certification authority (CA) named CA1.
You plan to issue certificates based on the User certificate template.
You need to ensure that the issued certificates are valid for two years and support autoenrollment.
What should you do first?
Run the certutil.exe command and specify the resubmit parameter
Duplicate the User certificate template.
Add a new certificate template for CA1 to issue.
Modify the Request Handling settings for the CA.
