70-742

70-742 practice questions, page 7 of 11, with answer review and explanations.

Question 31

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1. You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1. You need to add a domain user named User1 to the local Administrators group on Server1. Solution: From the Computer Configuration node of GPO1, you configure the Account Policies settings. Does this meet the goal?

  1. Yes
  2. No

Question 32

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The Computer account for Server1 is in organizational unit (OU) named OU1. You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1. You need to add a domain user named User1 to the local Administrators group on Server1. Solution: From the Computer Configuration node of GPO1, you configure the Restricted Groups settings. Does this meet the goal?

  1. Yes
  2. No

Question 33

Your network contains an Active Directory domain named contoso.com. All users are in an organizational unit (OU) named Corp_Users. You plan to modify the description of all the users who have a string of 514 in their mobile phone number. You need to view a list of the users that will be modified. What should you run?

  1. Get-ADOrganizationalUnit-Filter ג€mobilePhone-Like '*514*' ג€
  2. Get-ADUser-LDAPFilter ג€(mobilePhone= '*514*')ג€
  3. Get-ADUser-Filter ג€mobilePhone-Like '*514*' ג€
  4. Get-ADOrganizationalUnit-LDAPFilter ג€(mobilePhone= '*514*')ג€

Question 34

Your network contains an Active Directory domain. The domain contains a computer named Computer1 and an organizational unit (OU) named TestOU. TestOU contains 10 computer accounts that are used for testing. A Group Policy object (GPO) named GPO1 is linked to TestOU. On Computer1, you modify the User Right Assignment by using the local policy. You need to apply the User Right Assignment from Computer1 to the 10 test computers. What should you do?

  1. On Computer1 run the secedit.exe command and specify the /export parameter. Edit GPO1, and then import a security template.
  2. On Computer1, run the gpresult.exe command and specify the /x parameter. Edit GPO1, and then import a security template.
  3. On Computer1, run the secedit.exe command and specify the /export parameter. From Group Policy Management, run the Import Settings Wizard.
  4. On Computer1, run the gpresult.exe command and specify the /x parameter. From Group Policy Management, run the Restore Group Policy Object Wizard.

Question 35

Your network contains a single-domain Active Directory forest named contoso.com. The forest functional level is Windows Server 2016. The forest has Dynamic Access Control enabled. The domain contains two domain controllers named DC1 and DC2. Privileged user accounts used to manage Active Directory reside in a group named Contoso\AD_Admins. You create an authentication policy named Policy1 and an authentication policy silo named Silo1. You need to ensure that the accounts in the Contoso\AD_Admins group can sign in to the domain controllers only. Which three configurations should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  1. Create an access control condition in Policy1.
  2. Create a managed service account and add the account to Permitted Accounts in Silo1.
  3. Add the domain controllers to the Contoso\AD_Admins group.
  4. Add the privileged user accounts and the domain controllers to Permitted Accounts in Silo1.
  5. Assign Silo1 to the privileged user accounts and the domain controllers.