What does this exam test?

Identity services in Windows Server 2016.

Note: This question is part of a series of questions that use the same scenario. For you convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series. Start of repeated scenario. You work for a company named Contoso, Ltd. The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an Active Directory forest named adatum.com. The contoso.com forest contains the objects configured as shown in the following table. Group1 and Group2 contain only user accounts. Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3 that runs Windows 10. Computer3 is currently in a workgroup. An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain. From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com domain, and then you create a contact named Contact1 in OU1. An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a user logon name of User1@litwareinc.com . End of repeated scenario. You need to ensure that User2 can add Group4 as a member of Group5. What should you modify?

Correct Answer: the group scope of Group4

Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series. Start of repeated scenario. You work for a company named Contoso, Ltd. The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an Active Directory forest named adatum.com. The contoso.com forest contains the objects configured as shown in the following table. Group1 and Group2 contain only user accounts. Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3 that runs Windows 10. Computer3 is currently in a workgroup. An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain. From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com domain, and then you create a contact named Contact1 in OU1. An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a user logon name of User1@litwareinc.com . End or repeated scenario. You need to ensure that Admin1 can add Group2 as a member of Group3. What should you modify?

Correct Answer: Modify the group type of Group3.

Your network contains an Active Directory forest named contoso.com Your company plans to hire 500 temporary employees for a project that will last 90 days. You create a new user account for each employee. An organizational unit (OU) named Temp contains the user accounts for the employees. You need to prevent the new users from accessing any of the resources in the domain after 90 days. What should you do?

Correct Answer: Run the Get-ADOrganizationalUnit cmdlet and pipe the output to the Set-Date cmdlet.

Your network contains an Active Directory forest. The forest contains two domains named litwarenc.com and contoso.com. The contoso.com domain contains two domains controllers named LON-DC01 and LON-DC02. The domain controllers are located in a site named London that is associated to a subnet of 192.168.10.0/24 You discover that LON-DC02 is not a global catalog server. You need to configure LON-DC02 as a global catalog server. What should you do?

Correct Answer: From Active Directory Sites and Services, modify the properties of the 192.168.10.0/24 IP subnet.

Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2012 R2. You need to secure several high-privilege user accounts to meet the following requirements: ✑ Prevent authentication by using NTLM. ✑ Use Kerberos to verify authentication requests to any resources. ✑ Prevent the users from signing in to a client computer if the computer is disconnected from the domain. What should you do?

Correct Answer: Add the users to the Windows Authorization Access Group group.

Your network contains an Active Directory forest named contoso.com. Users frequently access the website of an external partner company. The URL of the website is http://partners.adatum.com. The partner company informs you that it will perform maintenance on its Web server and that the IP addresses of the Web server will change. After the change is complete, the users on your internal network report that they fail to access the website. However, some users who work from home report that they can access the website. You need to ensure that your DNS servers can resolve partners.adatum.com to the correct IP address immediately. What should you do?

Correct Answer: Run dnscmd and specify the CacheLockingPercent parameter.

You network contains one Active Directory domain named adatum.com. The domain contains a DNS server named Server1 that runs Windows Server 2016. All domain computers use Server1 for DNS. You sign adatum.com by using DNSSEC. You need to configure the domain computers to validate DNS responses for adatum.com records. What should you configure in Group Policy?

Correct Answer: Public Key Policy

Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers. You have a branch office that has a local support technician named Tech1. Tech1 installs Windows Server 2016 on a server named RODC1 in a workgroup. You need Tech1 to deploy RODC1 as a read-only domain controller (RODC) in the contoso.com domain. Which three actions should you perform? Each correct answer presents part of the solution.

Correct Answer: Instruct Tech1 to install the Active Directory Domain Services server role on RODC1.

Your network contains an Active Directory domain. All client computers run Windows 10. A client computer named Computer1 was in storage for five months and was unused during that time. You attempt to sign in to the domain from Computer1 and receive an error message. You need to ensure that you can sign in to the domain from Computer1. What should you do?

Correct Answer: From Active Directory Administrative Center, disable Computer1, and then enable the computer account of Computer1.

Your network contains an Active Directory domain. The domain contains a computer named Computer1 and an organizational unit (OU) named TestOU. TestOU contains 10 computer accounts that are used for testing. A Group Policy object (GPO) named GPO1 is linked to TestOU. On Computer1, you modify the User Right Assignment by using the local policy. You need to apply the User Right Assignment from Computer1 to the 10 test computers. What should you do?

Correct Answer: On Computer1, run the gpresult.exe command and specify the /x parameter. From Group Policy Management, run the Restore Group Policy Object Wizard.

Your network contains a single-domain Active Directory forest named contoso.com. The forest functional level is Windows Server 2016. The forest has Dynamic Access Control enabled. The domain contains two domain controllers named DC1 and DC2. Privileged user accounts used to manage Active Directory reside in a group named Contoso\AD_Admins. You create an authentication policy named Policy1 and an authentication policy silo named Silo1. You need to ensure that the accounts in the Contoso\AD_Admins group can sign in to the domain controllers only. Which three configurations should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Correct Answer: Add the domain controllers to the Contoso\AD_Admins group.

You create a user account that will be used as a template for new user accounts. Which setting will be copied when you copy the user account from Active Directory Users and Computers?

Correct Answer: the Department attribute

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question. Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts. You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU). You need to ensure that the members of the Backup Operators group can back up domain controllers. What should you do?

Correct Answer: From the User Configuration node of DCPolicy, modify Security Settings.

Your network contains an Active Directory forest. Some users report experiencing difficulties signing in to domain controllers. You suspect that the service location (SRV) records might be causing the issue. What are two possible commands that you can run to verify the SRV records? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Correct Answer: dcdiag.exe /test:DNS

You create a user account that will be used as a template for new user accounts. Which setting will be copied when you copy the user account from Active Directory Users and Computers?

Correct Answer: the Office attribute

Your network contains two Active Directory forests named fabrikam.com and contoso.com. Each forest contains two sites. Each site contains two domain controllers. You need to configure all the domain controllers in both the forests as global catalog servers. Which snap-in should you use?

Correct Answer: Active Directory Sites and Services

Your network contains an Active Directory forest named contoso.com. Your company plans to hire 500 temporary employees for a project that will last 90 days. You create a new user account for each employee. An organizational unit (OU) named Temp contains the user accounts for the employees. You need to prevent the new users from accessing any of the resources in the domain after 90 days. What should you do?

Correct Answer: Run the Get-ADOrganizationalUnit cmdlet and pipe the output to the Set-ADAccountPassword cmdlet.

Your network contains an Active Directory forest. The forest contains a forest root domain named contoso.com and a child domain named eu.contoso.com. Each domain contains two domain controllers that run Windows Server 2012 R2. The forest functional level is Windows Server 2008 R2. The domain functional level of contoso.com is Windows Server 2012 R2. The domain functional level of eu.contoso.com is Windows Server 2008 R2. You need to raise the domain functional level of contoso.com to Windows Server 2016. The solution must minimize administrative effort. What should you do before you raise the domain functional level?

Correct Answer: Raise the forest functional level

Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series. Start of repeated scenario. You work for a company named Contoso, Ltd. The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an Active Directory forest named adatum.com. The contoso.com forest contains the objects configured as shown in the following table. Group1 and Group2 contain only user accounts. Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3 that runs Windows 10. Computer3 is currently in a workgroup. An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain. From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com domain, and then you create a contact named Contact1 in OU1. An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a user logon name of User1@litwareinc.com . End of repeated scenario. You need to ensure that User1 can back up the data stored on Computer1. The solution must prevent the user from restoring the data on Computer1. What should you do?

Correct Answer: Add User1 to the Backup Operators group on Computer1

Your network contains an Active Directory forest named contoso.com. A partner company has a forest named fabrikam.com. Each forest contains one domain. You need to provide access for a group named Research in fabrikam.com to resources in contoso.com. The solution must use the principle of least privilege. What should you do?

Correct Answer: Create an external trust from contoso.com to fabrikam.com. Enable Active Directory split permissions in contoso.com.

Your network contains an Active Directory forest. The forest functional level is Windows Server 2016. You have a failover cluster named Cluster1. Cluster1 has two nodes named Server1 and Server2. All the optional features in Active Directory are enabled. A junior administrator accidentally deletes the computer object named Cluster1. You discover that Cluster1 is offline. You need to restore the operation of Cluster1 in the least amount of time possible. What should you do?

Correct Answer: Recover a deleted object from the Active Directory Recycle Bin.

Your company has two offices. The offices are located in Montreal and Seattle. The network contains an Active Directory forest named contoso.com. The forest contains three domain controllers configured as shown in the following table. The company physically relocates Server2 from the Montreal office to the Seattle office. You discover that both Server1 and Server2 authenticate users who sign in to the client computers in the Montreal office. Only Server3 authenticates users who sign in to the computers in the Seattle office. You need to ensure that Server2 authenticates the users in the Seattle office during normal network operations. What should you do?

Correct Answer: From Active Directory Users and Computers, modify the Location property of Server2.

Welcome to awslagi.com – Sharing AWS, Google Cloud, Microsoft Azure IT Exams. It's free for all!

Identity with Windows Server 2016

Manage identity services with Windows Server 2016 expertise.

4.8★★★★★(161 ratings)

19,425 studentsIntermediate

Learn to implement and operate identity solutions such as Active Directory, certificate services, and access control in Server 2016. The exam focuses on secure identity infrastructure that supports enterprise authentication and authorization. It is highly relevant for administrators responsible for identity and access management. These skills help organizations protect users, resources, and policy enforcement across the environment.

What you'll learn

Manage Active Directory- Configure certificate services- Support identity infrastructure- Control access policies- Secure authentication systems

70-742

Lectures2

Quizzes0

Duration30 week

Students19,425

$20.00

📢 Unlock Full Access to Success!

"The content displayed here is a promotional preview and contains only 50% of the actual exam database. To access the complete set of updated questions, please upgrade to the Full Version."

👉 Click the button and follow the instructions to secure your full access immediately!