Valid 70-742 Dumps shared by PassLeader for Helping Passing 70-742 Exam! PassLeader now offer the newest 70-742 VCE dumps and 70-742 PDF dumps, the PassLeader 70-742 exam questions have been updated and ANSWERS have been corrected, get the newest PassLeader 70-742 dumps with VCE and PDF here: https://www.passleader.com/70-742.html (256 Q&As Dumps –> 283 Q&As Dumps)
BTW, DOWNLOAD part of PassLeader 70-742 dumps from Cloud Storage: https://drive.google.com/open?id=0B-ob6L_QjGLpMHhld1g4c081cFk
NEW QUESTION 234
Your network contains an Active Directory forest named contoso.com. You need to identify which server is the schema master.
Solution: From a command prompt, you run netdom query fsmo.
Does this meet the goal?
A. Yes
B. No
Answer: A
Explanation:
https://blogs.technet.microsoft.com/canitpro/2017/05/24/step-by-step-migrating-active-directory-fsmo-roles-from-windows-server-2012-r2-to-2016/
NEW QUESTION 235
Your network contains an Active Directory forest named contoso.com. You need to identify which server is the schema master.
Solution: You open Active Directory Users and Computers, right-click contoso.com in the console tree, and then click Operations Master.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
You need to use the Schema snap-in to find the schema master. The Schema snap-in is not installed by default but can be installed by using Schmmgmt.dll.
https://www.petri.com/determining_fsmo_role_holders
NEW QUESTION 236
Your network contains an Active Directory forest named contoso.com. You need to identify which server is the schema master.
Solution: You open Active Directory Domains and Trusts, right-click Active Directory Domains and Trust in the console tree, and then click Operations Master.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
You need to use the Schema snap-in to find the schema master. The Schema snap-in is not installed by default but can be installed by using Schmmgmt.dll.
https://www.petri.com/determining_fsmo_role_holders
NEW QUESTION 237
Your network contains an Active Directory forest named contoso.com. Your company plans to hire 500 temporary employees for a project that will last 90 days. You create a new user account for each employee. An organizational unit (OU) named Temp contains the user accounts for the employees. You need to prevent the new users from accessing any of the resources in the domain after 90 days. What should you do?
A. Run the Get-ADOrganizationalUnit cmdlet and pipe the output to the Set-Date cmdlet.
B. Run the Get-ADOrganizationalUnit cmdlet and pipe the output to the Set-ADAccountPassword cmdlet.
C. Run the Get-ADUser cmdlet and pipe the output to the Set-ADAccountExpiration cmdlet.
D. Create a Group Policy object (GPO) and link the GPO to the Temp OU.
Modify the Account Lockout Policy of the GPO.
Answer: C
Explanation:
https://docs.microsoft.com/en-us/powershell/module/addsadministration/set-adaccountexpiration?view=win10-ps
NEW QUESTION 238
Your network contains an Active Directory forest named adatum.com. A partner organization has an Active Directory forest named contoso.com. Adatum.com contains an Active Directory Rights Management (AD RMS) cluster installed on a server named adat1.adatum.com. Contoso.com contains an Active Directory Rights Management Services (AD RMS) cluster installed on a server named cont1.contoso.com. You need to allow the AD RMS cluster in adatum.com to accept rights account certificates (RACs) from contoso.com. What should you do?
A. In contoso.com, import the trusted user domain file from adat1.adatum.com.
B. In adatum.com, import the trusted publishing domain file from adat1.adatum.com.
C. In contoso.com, import the trusted publishing domain file from cont1.contoso.com.
D. In adatum.com, import the trusted user domain file from cont1.contoso.com.
Answer: D
Explanation:
https://winintro.ru/rms_help.en/html/59c802d0-3982-432c-b06f-3e148dca0166.htm
NEW QUESTION 239
Your network contains an Active Directory forest. The forest contains a forest root domain named contoso.com and a child domain named eu.contoso.com. Each domain contains two domain controllers that run Windows Server 2012 R2. The forest functional level is Windows Server 2008 R2. The domain functional level of contoso.com is Windows Server 2012 R2. The domain functional level of eu.contoso.com is Windows Server 2008 R2. You need to raise the domain functional level of contoso.com to Windows Server 2016. The solution must minimize administrative effort. What should you do before you raise the domain functional level?
A. Raise the forest functional level.
B. Upgrade all of the domain controllers in the forest.
C. Upgrade all of the domain controllers in contoso.com.
D. Raise the domain functional level of eu.contoso.com.
Answer: C
Explanation:
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels
NEW QUESTION 240
Your network contains an Active Directory forest. The forest functional level is Windows Server 2016. The network contains Linux servers that use MIT Kerberos V5 to provide an authentication, authorization, and access service. You need to ensure that users can use their Active Directory credentials to access the resources on the Linux servers. The solution must minimize administrative effort. What should you implement?
A. an external trust
B. a realm trust
C. Active Directory Federation Services (AD FS)
D. a Web Application Proxy
Answer: B
Explanation:
http://techgenix.com/active-directory-trusts/
https://www.rootusers.com/how-to-join-centos-linux-to-an-active-directory-domain/
NEW QUESTION 241
Your network contains an Active Directory forest named contoso.com. You need to identify which server is the schema master.
Solution: From Windows PowerShell, you run Get-ADDomainController -Discover -Service 2.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
This command gets a global catalog in the current forest using Discovery.
https://docs.microsoft.com/en-us/powershell/module/addsadministration/get-addomaincontroller?view=win10-ps
NEW QUESTION 242
Your network contains an Active Directory domain named contoso.com. The domain contains servers that run Windows Server 2016 and client computers that run Windows 10. The naming conventions for the computers and the servers is inconsistent. You plan to create a Group Policy object (GPO) named GPO1 and to link GPO1 to the domain. GPO1 will contain custom Group Policy preference settings. You need to ensure that the preference settings in GPO1 will apply only to member servers. GPO1 must NOT apply to domain controllers or client computers. Which type of item level targeting should you use?
A. Security Group
B. Processing Mode
C. Operating System
D. Environment Variable
E. Domain
Answer: C
Explanation:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc733022(v=ws.11)
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc753566%28v%3dws.10%29
NEW QUESTION 243
You deploy a new Active Directory forest. You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member servers.
Solution: You configure Kerberos constrained delegation on the computer account of each domain controller.
Does this meet the goal?
A. Yes
B. No
Answer: B
NEW QUESTION 244
Your network contains an Active Directory domain named contoso.com. You have an organizational unit (OU) named OU1. A Group Policy object (GPO) named GPO1 is linked to OU1. You create a user named User1, and you assign User1 the Full control permission to OU1. Which administrative action for GPOs can User1 perform?
A. Link an existing GPO from the domain to OU1.
B. Create a new GPO and link the GPO to OU1.
C. Add an administrative template to GPO1.
D. Edit the User Rights Assignment in GPO1.
Answer: A
NEW QUESTION 245
Your network contains an Active Directory forest named contoso.com. The forest contains 10 domains. The root domain contains a global catalog server named DC1. You remove the global catalog server role from DC1. You need to decrease the size of the Active Directory database on DC1.
Solution: You restart DC1 in Safe Mode. You run ntdsutil.exe, use the files option, and then restart DC1.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
https://theitbros.com/active-directory-database-compact-defrag/
NEW QUESTION 246
Hotspot
Your network contains a single-domain Active Directory forest named contoso.com. The forest functional level is Windows Server 2016. You plan to create and link a Group Policy object (GPO) named GPO1 will contain user settings only. You plan to apply GPO1 only to users who are members of a group named Group1. You need to ensure that GPO1 only applies to the members of Group1. The solution must use the principle of least privilege. What should you configure? (To answer, select the appropriate options in the answer area.)
Answer:
Explanation:
https://blogs.technet.microsoft.com/askpfeplat/2016/07/05/who-broke-my-user-gpos/
NEW QUESTION 247
Drag and Drop
Your network contains an Active Directory domain. The domain contains two domain controllers named DC1 and DC2. DC2 is a virtual machine that is hosted on a Hyper-V host named HyperV1. DC1 holds the PDC emulator operations master role. You need to create a new domain controller named DC3 by using domain controller cloning. Which five actions should you perform in sequence before you can import the cloned virtual machine? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
Answer:
Explanation:
https://blogs.technet.microsoft.com/askpfeplat/2012/10/01/virtual-domain-controller-cloning-in-windows-server-2012/
NEW QUESTION 248
Your network contains an Active Directory domain named contoso.com. All the accounts of the users in the sales department are in an organizational unit (OU) named SalesOU. An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object (GPO) named Sales GPO. You need to set the registry value of \HKEY_CURRENT_USER\Software\App1\Collaboration to 0.
Solution: You add a user preference that has a Replace action.
Does this meet the goal?
A. Yes
B. No
Answer: B
NEW QUESTION 249
You have a server named Server1 in a workgroup. You need to configure a Group Policy setting on Server1 that will apply to only non-administrative users. What should you do?
A. Open Local Group Policy Editor.
From the View menu, modify the Customize settings.
B. Open Local Group Policy Editor.
From the File menu, modify the Options settings.
C. Open Local Users and Groups.
Create a new group. Run New-GPO.
D. Run mmc.exe.
Add the Group Policy Object Editor snap-in and change the Group Policy object (GPO).
Answer: D
Explanation:
https://www.windowscentral.com/how-apply-local-group-policy-settings-specific-users-windows-10
NEW QUESTION 250
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs a Server Core installation of Windows Server 2016. Server1 is configured as an Active Directory Rights Management Services (AD RMS) server for the domain. You need to install the Identity Federation Support role service on Server1. What should you do first?
A. Run the Install-WindowsFeature -Name NET-Framework-45-ASPNET cmdlet.
B. Install a Server with Desktop Experience installation of Windows Server 2016.
C. Run the Add-AdfsClient cmdlet.
D. Run the Install-WindowsFeature Desktop-Experience cmdlet.
Answer: C
NEW QUESTION 251
……
Get the newest PassLeader 70-742 VCE dumps here: https://www.passleader.com/70-742.html (256 Q&As Dumps –> 283 Q&As Dumps)
And, DOWNLOAD the newest PassLeader 70-742 PDF dumps from Cloud Storage for free: https://drive.google.com/open?id=0B-ob6L_QjGLpMHhld1g4c081cFk