070-742無料問題集「Microsoft Identity with Windows Server 2016」

質問 1

Your company has an office in Montreal.
The network contains an Active Directory domain named conloso.com.
You have an organizational unit (OU) named Montreal that contains all of the users accounts for the users in the Montreal office. An office manager in the Montreal office knows each user personally.
You need to ensure that the office manager can provide the users with a new password if the users forget their password.
What should you do?

（A）From the Security settings of the Montreal OU, assign the office manager the Reset Password permission.

（B）From the Security settings of each user account in the Montreal OU, assign the office manager the Change Password permission.

（C）Create a Group Policy object (GPO) and link the GPO to the OU of the domain. Filter the GPO to the Montreal users. Assign the office manager the Apply Group Policy permission on the GPO. Configure the Password Policy settings of the GPO.

（D）Create a Group Policy object (GPO) and link the GPO to the Montreal OU. Assign the office manager the Apply Group Policy permission on the GPO. Configure the Password Policy settings on the GPO.

正解：D 解答を投票する

質問 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com.
You need to identify which server is the schema master.
Solution: You open Active Directory Domains and Trusts Active Directory Domains and Trust in the console tree, and then click Does this meet the goal?

（A）Yes

（B）No

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which of the following CA types would you deploy if you wanted to deploy a CA at the top of a hierarchy that could issue signing certificates to other CAs and which would be taken offline if not issuing, renewing, or revoking signing certificates?

（A）Enterprise subordinate

（B）Standalone subordinate

（C）Enterprise root

（D）Standalone root

正解：D 解答を投票する

質問 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration.
PS C:\> (Get-ADForest).ForestMode
Windows2008R2Forest
PS C:\> (Get-ADDomain).DomainMode
Windows2008R2Domain
PS C:\>
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.
You need to configure Active Directory to support the planned deployment.
Solution: You run adprep.exe from the Windows Server 2016 installation media.
Does this meet the goal?

（A）Yes

（B）No

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Your network contains an Active Directory domain named contoso.com. The domain contains a read-only domain controller (RODC) named R0DC1.
You need to retrieve a list of accounts that have their password cached on RODC1.
Which command should you run?

（A）ntdsutil.exe

（B）repadmin.exe

（C）netdom.exe

（D）dcdiag.exe

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2012 R2.
You need to secure several high-privilege user accounts to meet the following requirements:
What should you do?

（A）Create a separate organizational unit (OU) for the user accounts and modify the Security settings of the OU.

（B）Add the user to the Protected Users group.

（C）Add the users to the Windows Authorization Access Group group.

（D）Create a universal security group for the user accounts and modify the Security settings of the group.

正解：B 解答を投票する

質問 7

You create a user account that will be used as a template for new user accounts.
Which setting will be copied when you copy the user account from Active Directory Users and Computers?

（A）the Office attribute

（B）the Description attribute

（C）the Member of attribute

（D）Published Certificates

正解：C 解答を投票する

質問 8

You deploy a new enterprise certification authority (CA) named CA1.
You plan to issue certificates based on the User certificate template.
You need to ensure that the issued certificates are valid for two years and support autoenrollment.
What should you do first?

（A）Run the certutil.exe command and specify the resubmit parameter.

（B）Add a new certificate template for CA1 to issue.

（C）Modify the Request Handling settings for the CA.

（D）Duplicate the User certificate template.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy a new Active Directory forest.
You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member servers.
Solution: From Windows PowerShell on a domain controller, you run the Set-KdsConfiguration cmdlet.
Does this meet the goal?

（A）Yes

（B）No

正解：B 解答を投票する

質問 10

Your network contains an Active Directory forest. The forest contains a forest root domain named contoso.com and a child domain named eu.contoso.com. Each domain contains two domain controllers that run Windows Server 2012 R2.
The forest functional level is Windows Server 2008 R2. The domain functional level of contoso.com is Windows Server 2012 R2. The domain functional level of eu.contoso.com is Windows Server 2008 R2.
You need to raise the domain functional level of contoso.com to Windows Server 2016. The solution must minimize administrative effort.
What should you do before you raise the domain functional level?

（A）Upgrade all of the domain controllers in the forest

（B）Raise the forest functional level

（C）Upgrade all of the domain controllers in contoso.com

（D）Raise the domain functional level of eu.contoso.com

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

070-742 無料問題集「Microsoft Identity with Windows Server 2016」

弊社を連絡する

関連リンク

トップ試験