70-744

70-744 practice questions, page 4 of 9, with answer review and explanations.

Question 16

Your network contains an Active Directory domain named contoso.com. The domain contains 100 servers. You deploy the Local Administrator Password Solution (LAPS) to the network. You deploy a new server named FinanceServer5, and join FinanceServer5 to the domain. You need to ensure that the passwords of the local administrators of FinanceServer5 are available to the LAPS administrators. What should you do?

  1. On FinanceServer5, register AdmPwd.dll.
  2. On FinanceServer5, install the LAPS Windows PowerShell module.
  3. In the domain, modify the permissions for the computer account of FinanceServer5.
  4. In the domain, modify the permissions of the Domain Controllers organizational unit (OU).

Question 17

Your network contains an Active Directory domain named contoso.com. The domain contains four servers. The servers are configured as shown in the following table. You need to manage FS1 and FS2 by using Just Enough Administration (JEA). What should you do before you can implement JEA?

  1. Install Microsoft.NET Framework 4.6.2 on FS2.
  2. Install Microsoft.NET Framework 4.6.2 on FS1.
  3. Install Windows Management Framework 5.0 on FS2.
  4. Upgrade DC1 to Windows Server 2016.

Question 18

Your network contains an Active Directory forest named contoso.com. The forest has Microsoft Identity Manager (MIM) 2016 deployed. You implement Privileged Access Management (PAM). You need to request privileged access from a client computer in contoso.com by using PAM. How should you complete the Windows PowerShell script? To answer, select the appropriate options in the answer area. Hot Area:

Question 19

Your network contains an Active Directory domain named contoso.com. The domain contains five servers. All servers run Windows Server 2016. A new security policy states that you must modify the infrastructure to meet the following requirements: ✑ Limit the rights of administrators. ✑ Minimize the attack surface of the forest. ✑ Support Multi-Factor authentication for administrators. You need to recommend a solution that meets the new security policy requirements. What should you recommend deploying?

  1. an administrative forest
  2. domain isolation
  3. an administrative domain in contoso.com
  4. the Local Administrator Password Solution (LAPS)

Question 20

Your network contains two single-domain Active Directory forests named contoso.com and contosoadmin.com. Contosoadmin.com contains all of the user accounts used to manage the servers in contoso.com. You need to recommend a workstation solution that provides the highest level of protection from vulnerabilities and attacks. What should you include in the recommendation?

  1. Provide a Privileged Access Workstation (PAW) for each user account in both forests. Join each PAW to the contoso.com domain.
  2. Provide a Privileged Access Workstation (PAW) for each user in the contoso.com forest. Join each PAW to the contoso.com domain.
  3. Provide a Privileged Access Workstation (PAW) for each administrator. Join each PAW to the contoso.com domain.
  4. Provide a Privileged Access Workstation (PAW) for each administrator. Join each PAW to the contosoadmin.com domain.