High quality 70-742 Study Guides 2021

NEW QUESTION 1
Your company has a testing environment that contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2021. Server1 has IP Address Management (IPAM) installed. IPAM has the following configuration.

The IPAM Overview page from Server Manager is shown in the IPAM Overview exhibit. (Click the Exhibit button.)

The group policy configurations are shown in the GPO exhibit. (Click the Exhibit button.) For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Answer:

Explanation: No domains have been selected in the “Configure Server Discovery” option. Therefore, no automatic discovery will take place. Manual addition of a server will also fail because IPAM needs a domain configured for server verification.

NEW QUESTION 2
Your network contains an Active Directory domain named contoso.com.
You have a Group Policy object (GPO) named GPO1. GPO1 is linked to an organizational unit (OU) named OU1.
GPO1 contains several corporate desktop restrictions that apply to all computers. You plan to deploy a printer to the computers in OU1.
You need to ensure that any user who signs in to a computer that runs Windows 10 in OU1 receives the new printer. All of the computers in OU1 must continue to apply the corporate desktop restrictions from GPO1.
What should you configure?

• A. a user preference and a WMI filter on GPO1.
• B. a computer preference that uses item-level targeting
• C. a computer preference and WMI filter on GPO1
• D. a user preference that uses item-level targeting

Answer: D

NEW QUESTION 3
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. Server2 has the DHCP Server role installed. The IPAM server retrieves data from Server2.
You create a domain user account named User1.
You need to ensure that User1 can use IPAM to manage DHCP.
Which command should you run on Server1? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 4
Your network contains an enterprise root certification authority (CA) named CA1.
Multiple computers on the network successfully enroll for certificates that will expire in one year. The certificates are based on a template named Secure_Computer. The template uses schema version 2.
You need to ensure that new certificates based on Secure_Computer are valid for three years. What should you do?

• A. Modify the Validity period for the certificate template.
• B. Instruct users to request certificates by running the certreq.exe command.
• C. Instruct users to request certificates by using the Certificates console.
• D. Modify the Validity period for the root CA certificate.

Answer: A

NEW QUESTION 5
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2021. The Computer account for Server1 is in organizational unit (OU) named OU1.
You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.
You need to add a domain user named user1 to the local Administrators group on Server1.
Solution: From the Computer Configuration node of GPO1, you configure the local Users and Groups preference.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Web1 that runs Windows Server 2021.
You need to list all the SSL certificates on Web1 that will expire during the next 60 days. Solution: You run the following command.
Get-ChildItem Cert:LocalMachineTrust |? { $_.NotAfter –It (Get-Date).AddDays( 60 ) }

Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 7
You have an offline root certification authority (CA) named CA1. CA1 is hosted on a virtual machine. You only turn on CA1 when the CA must be patched or you must generate a key for subordinate CAs. You start CA1, and you discover that the filesystem is corrupted.
You resolve the filesystem corruption and discover that you must reload the CA root from a backup.
When you attempt to run the Restore-CARoleService cmdlet, you receive the following error message: “The process cannot access the file because it is being used by another process.”

• A. Stop the Active Directory Domain Services (AD DS) service.
• B. Run the Restore-CARoleService cmdlet and specify the path to a valid CA key.
• C. Stop the Active Directory Certificate Services (AD CS) service.
• D. Run the Restore-CARoleService cmdlet and specify the Force parameter.

Answer: C

NEW QUESTION 8
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1. Server1 has several line-of-business applications. Each application runs as a service that uses the Network Service account. You need to configure the line-of-business applications to run by using a virtual account. What should you do?

• A. From the Services console, modify the Log On properties of the services.
• B. From the Microsoft Application Compatibility Toolkit (ACT), create a shim.
• C. From Windows PowerShell, run the Install-ADScrviceAccount cmdlet.
• D. From Windows PowerShell, run the New-ADServiccAccount cmdlet.

Answer: A

NEW QUESTION 9
Your network contains an Active Directory domain named contoso.com.
You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)

You discover that some of the settings configured in the A1 Group Policy object (GPO) fail to apply to the users in the OU1 organizational unit (OU).
You need to ensure that all of the settings in A1 apply to the users in OU1. What should you do?

• A. Enable loopback policy processing in A1.
• B. Block inheritance on OU1.
• C. Modify the policy processing order for OU1.
• D. Modify the GPO Status of A1.

Answer: C

NEW QUESTION 10
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.
The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)

The relevant users and client computer in the domain are configured as shown in the following table.

End of repeated scenario.
You plan to enforce the GPO link for A6.
Which five GPOs will apply to User1 in sequence when the user signs in to Computer1 after the link is enforced? To answer, move the appropriate GPOs from the list of GPOs to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 11
Your network contains an Active Directory domain. The domain contains an Active Directory Rights Management Services (AD RMS) cluster and a certification authority (CA).
You need to ensure that all the documents that are protected by using AD RMS can be decrypted if the account used to encrypt the documents is deleted.
What should you do?

• A. Back up the AD RMS-protected files by using Windows Server Backup.
• B. Configure key archival on the CA.
• C. Manually configure the AD RMS cluster key password.
• D. Configure super users in the AD RMS deployment.

Answer: D

Explanation: https://social.technet.microsoft.com/wiki/contents/articles/9111.disaster-recovery-guide-for-active-directory-righ

NEW QUESTION 12
Your network contains a single-domain Active Directory forest named contoso.com. The forest functional level is Windows Server 2021. The Active Directory Recycle Bin feature is enabled.
You need to design a procedure to restore the values of user object attributes if the values are changed accidentally.
Which cmdlets should you include in the procedure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 13
Your company has a main office and three branch offices.
The network contains an Active Directory domain named contoso.com.
The main office contains three domain controllers. Each branch office contains one domain controller.
You discover that new settings in the Default Domain Policy are not applied in one of the branch offices, but all other Group Policy objects (GPOs} are applied.
You need to check the replication of the Default Domain Policy for the branch office. What should you do from a domain controller in the main office?

• A. From a command prompt, run dcdiag.exe.
• B. From Group Policy Management, click Default Domain Policy under Contoso.com, and then open theDetails tab.
• C. From Group Policy Management, click Default Domain Policy under Contoso.com, and then open theScope tab.
• D. From a command prompt, run repadmin.exe.

Answer: D

NEW QUESTION 14
Your network contains an Active Directory domain named contoso.com. The domain contains four servers named Server1, Server2, Server3, and Server4 that run Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. Server2, Server3, and Server 4 have the DHCP Server role installed. IPAM manages Server2, Server3, and Server4.
A domain user named User1 is a member of the groups shown in the following table.

Which actions can User1 perform? To answer, select the appropriate options in the answer area.

Answer:

Explanation: Box 1: Can be performed by User1
DHCP Administrators can create DHCP scopes. Box 2: Cannot be performed by User1
DHCP Users cannot create scopes. Box 3: Cannot be performed by User1 IPAM users cannot creates copes.
References: https://technet.microsoft.com/en-us/library/dn741281(v=ws.11).aspx#create_access_scope

NEW QUESTION 15
Your network contains an Active Directory domain named contoso.com. The domain contains a member
server named Server1 that runs Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. IPAM uses a Windows Internal Database. You install Microsoft SQL Server on Server1.
You plan to move the IPAM database to SQL Server.
You need to create a SQL Server login for the IPAM service account.
For which user should you create the login? To answer, select the appropriate options in the answer area.

Answer:

Explanation: References:
https://blogs.technet.microsoft.com/yagmurs/2014/07/31/moving-ipam-database-from-windows-internal-databas

NEW QUESTION 16
Your network contains an Active Directory forest. The forest functional level is Windows Server 2021. You have a failover cluster named Cluster1. Cluster1 has two nodes named Server1 and Server2. All the
optional features in Active Directory are enabled.
A junior administrator accidentally deletes the computer object named Cluster1. You discover that Cluster1 is offline.
You need to restore the operation of Cluster1 in the least amount of time possible. What should you do?

• A. Run the Enable-ADAccount cmdlet from Windows PowerShell.
• B. Perform an authoritative restore by running ntdutil.exe.
• C. Perform a tombstone reanimation by running ldp.exe.
• D. Recover a deleted object from the Active Directory Recycle Bin.

Answer: D