070-744 無料問題集「Microsoft Securing Windows Server 2016」
Your network contains an Active Directory domain named contoio.com. The domain contains a server named Server1 that runs Windows Server 2016.
You have an organizational unit (OU) named Administration that contains the computer account of Server1.
You import the Active Directory module to Served1.
You create a Group Policy object (GPO) named GPO1 You link GPO1 to the Administration OU.
You need to log an event each time an Active Directory cmdlet is executed successfully from Server1.
What should you do?
You have an organizational unit (OU) named Administration that contains the computer account of Server1.
You import the Active Directory module to Served1.
You create a Group Policy object (GPO) named GPO1 You link GPO1 to the Administration OU.
You need to log an event each time an Active Directory cmdlet is executed successfully from Server1.
What should you do?
正解：A
解答を投票する
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
A technician is testing the deployment of Credential Guard on Server1.
You need to verify whether Credential Guard is enabled on Server1.
What should you do?
A technician is testing the deployment of Credential Guard on Server1.
You need to verify whether Credential Guard is enabled on Server1.
What should you do?
正解：B
解答を投票する
Your company has an accounting department.
The network contains an Active Directory domain named contoso.com. The domain contains 10 servers.
You deploy a new server named Server11 that runs Windows Server 2016.
Server11 will host several network applications and network shares used by the accounting department.
You need to recommend a solution for Server11 that meets the following requirements:
-Protects Server11 from address spoofing and session hijacking
-Allows only the computers in We accounting department to connect to Server11 What should you recommend implementing?
The network contains an Active Directory domain named contoso.com. The domain contains 10 servers.
You deploy a new server named Server11 that runs Windows Server 2016.
Server11 will host several network applications and network shares used by the accounting department.
You need to recommend a solution for Server11 that meets the following requirements:
-Protects Server11 from address spoofing and session hijacking
-Allows only the computers in We accounting department to connect to Server11 What should you recommend implementing?
正解：D
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network contains an Active Directory domain named conioso.com. The domain contains 1,000 client computers that run Windows 8.1 and 1,000 client computers that run Windows 10.
You deploy a Windows Server Update Services (WSUS) server. You create a computer group tor each organizational unit (OU) that contains client computers. You configure all of the client computers to receive updates from WSUS.
You discover that all of the client computers appear m the Unassigned Computers computer group in the Update Services console.
You need to ensure that the client computers are added automatically to the computer group that corresponds to the location of the computer account in Active Directory.
Which two actions should you perform? Each correct answer presents part of the solution.
You deploy a Windows Server Update Services (WSUS) server. You create a computer group tor each organizational unit (OU) that contains client computers. You configure all of the client computers to receive updates from WSUS.
You discover that all of the client computers appear m the Unassigned Computers computer group in the Update Services console.
You need to ensure that the client computers are added automatically to the computer group that corresponds to the location of the computer account in Active Directory.
Which two actions should you perform? Each correct answer presents part of the solution.
正解：A、B
解答を投票する
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear i n the review screen.
You deploy Windows Server 2016 to a server named Serverl,
Von need to ensure that you can run Windows Containers on Server1.
Solution: On Server1, you enable the Containers feature, and then you install the Hyper-V server role. You restart the server.
Does this meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear i n the review screen.
You deploy Windows Server 2016 to a server named Serverl,
Von need to ensure that you can run Windows Containers on Server1.
Solution: On Server1, you enable the Containers feature, and then you install the Hyper-V server role. You restart the server.
Does this meet the goal?
正解：B
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Secure that contains all servers.
You install Microsoft Security Compliance Manager (SCM) 4.0 on a server named Server1.
You need to export the SCM Pnnt Server Secunty baseline and to deploy the baseline to a server named Server2.
What should you do? To answer, select the appropnate options in the answer area.
You have an organizational unit (OU) named Secure that contains all servers.
You install Microsoft Security Compliance Manager (SCM) 4.0 on a server named Server1.
You need to export the SCM Pnnt Server Secunty baseline and to deploy the baseline to a server named Server2.
What should you do? To answer, select the appropnate options in the answer area.
正解：
Explanation
Format to use to export the baseline: GPO Backup (folder)
Tool to use to import the baseline: Group Policy Management
When the security settings is exported from SCM 4 in a GPO (folder) format, with a long GUID name
You have to import it to GPO by using "Group Policy Management", right-click the GPO and use "Import Settings" button
Do not confuse with security template .inf files. Only security template .INF file (which is a single file, not a folder) could be imported to a GPO by Group
Format to use to export the baseline: GPO Backup (folder)
Tool to use to import the baseline: Group Policy Management
When the security settings is exported from SCM 4 in a GPO (folder) format, with a long GUID name
You have to import it to GPO by using "Group Policy Management", right-click the GPO and use "Import Settings" button
Do not confuse with security template .inf files. Only security template .INF file (which is a single file, not a folder) could be imported to a GPO by Group
You plan to implement Windows Defender Device Guard in your datacenter.
You build a model server that contains all the drivers and the software that you want to deploy and secure.
You need to create a new policy to ensure that only whitelisted files can be loaded to the servers. The policy must be in enforcement mode.
How should you complete the commands? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You build a model server that contains all the drivers and the software that you want to deploy and secure.
You need to create a new policy to ensure that only whitelisted files can be loaded to the servers. The policy must be in enforcement mode.
How should you complete the commands? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
Explanation
References:
https://docs.microsoft.com/en-us/powershell/module/configci/new-cipolicyrule?view=win10-ps
https://docs.microsoft.com/en-us/powershell/module/configci/set-ruleoption?view=win10-ps