70-744

70-744 practice questions, page 5 of 9, with answer review and explanations.

Question 21

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2016. The domain contains a server named Server1 that has Microsoft Security Compliance Manager (SCM) 4.0 installed. You export the baseline shown in the following exhibit. You have a server named Server2 that is a member of a workgroup. You copy the {2617e9b1-9672-492b-aefa-0505054848c2} folder to Server2. You need to deploy the baseline settings to Server2. What should you do?

  1. Download, install, and then run the Lgpo.exe command.
  2. From Group Policy Management, import a Group Policy object (GPO).
  3. From Windows PowerShell, run the Restore-GPO cmdlet.
  4. From Windows PowerShell, run the Import-GPO cmdlet.
  5. From a command prompt, run the secedit.exe command and specify the/import parameter.

Question 22

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. A technician is testing the deployment of Credential Guard on Server1. You need to verify whether Credential Guard is enabled on Server1. What should you do?

  1. From a command prompt, run the credwiz.exe command.
  2. From Task Manager, review the processes listed on the Details tab.
  3. From Server Manager, click Local Server, and review the properties of Server1.
  4. From Windows PowerShell, run the Get-WsManCredSSP cmdlet.
  5. From a command prompt, run the tsecimp.exe command.
  6. From Control Panel, open Credential Manager, and review the list of Windows Credentials.

Question 23

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The services on Server1 are shown in the following output. Server1 has the AppLocker rules configured as shown in the exhibit. (Click the Exhibit button.) Rule1 and Rule2 are configured as shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. Hot Area:

Question 24

Your network contains an Active Directory domain named contoso.com. You install the Windows Server Update Services server role on a member server named Server1. Server1 runs Windows Server 2016. You need to ensure that a user named User1 can perform the following tasks: ✑ View the Windows Server Update Services (WSUS) configuration. ✑ Generate WSUS update reports. The solution must use the principle of least privilege. What should you do on Server1?

  1. Modify the permissions of the ReportWebService virtual folder from the WSUS Administration website.
  2. Add User1 to the WSUS Reporters local group.
  3. Add User1 to the WSUS Administrators local group.
  4. Run wsusutil.exe and specify the postinstall parameter.

Question 25

You network contains an Active Directory domain named contoso.com. You have an organizational unit (OU) named Secure that contains all server. You install Microsoft Security Compliance Manager (SCM) 4.0 on a server named Server1. You need to export the SCM Print Server Security baseline and to deploy the baseline to a server named Server2. What should you do? To answer, select the appropriate options in the answer area. Hot Area: