2018/Sep Braindump2go 70-742 Exam Dumps with PDF and VCE New Updated Today! Following are some new 70-742 Real Exam Questions:
1.|2018 Latest 70-742 Exam Dumps (PDF & VCE) 207Q&As Download:
https://www.braindump2go.com/70-742.html
2.|2018 Latest 70-742 Exam Questions & Answers Download:
https://drive.google.com/drive/folders/0B75b5xYLjSSNTHFSYmh4MkNta2M?usp=sharing
QUESTION 131
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts.
You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU).
You need to ensure that all of the client computers on the network automatically download and install Windows updates.
What should you do?
A. From the Computer Configuration node of DCPolicy, modify Security Settings.
B. From the Computer Configuration node of DomainPolicy, modify Security Settings.
C. From the Computer Configuration node of DomainPolicy, modify Administrative Templates.
D. From the User Configuration node of DCPolicy, modify Security Settings.
E. From the User Configuration node of DomainPolicy, modify Folder Redirection.
F. From user Configuration node of DomainPolicy, modify Administrative Templates.
G. From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings.
H. From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings.
Answer: C
Explanation:
To load policy settings by using Group Policy, you must use the Wuau.adm file that describes the new policy settings for the Automatic Updates client. Wuau.adm is automatically installed in the Windows\Inf folder when you install the new Automatic Updates feature.
You can load Windows\Inf\Wuau.adm as an administrative template in Group Policy Object Editor.
References: https://support.microsoft.com/en-za/help/328010/how-to-configure-automatic-updates-by-using-group-policy-or-registry-s
QUESTION 132
Your company has a main office and three branch offices.
The network contains an Active Directory domain named contoso.com.
The main office contains three domain controllers. Each branch office contains one domain controller.
You discover that new settings in the Default Domain Policy are not applied in one of the branch offices, but all other Group Policy objects (GPOs) are applied.
You need to check the replication of the Default Domain Policy for the branch office.
What should you do from a domain controller in the main office?
A. From a command prompt, run dcdiag.exe.
B. From Group Policy Management, click Default Domain Policy under Contoso.com, and then open the Details tab.
C. From Group Policy Management, click Default Domain Policy under Contoso.com, and then open the Scope tab.
D. From a command prompt, run repadmin.exe.
Answer: D
QUESTION 133
You create a user account that will be used as a template for new user accounts.
Which setting will be copied when you copy the user account from Active Directory Users and Computers.
A. Remote Desktop Services Profile
B. the Department attribute
C. Published Certificates
D. the Office attribute
Answer: B
Explanation:
A user template in Active Directory can be used if you are creating users for a specific department, with exactly the same properties, and membership to the same user groups. A user template is nothing more than a disabled user account that has all these settings already in place.
References: http://www.rebeladmin.com/2014/07/create-users-with-user-templates-in-ad/
QUESTION 134
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1. Server1 has several line-of-business applications. Each application runs as a service that uses the Network Service account. You need to configure the line-of-business applications to run by using a virtual account. What should you do?
A. From the Services console, modify the Log On properties of the services.
B. From the Microsoft Application Compatibility Toolkit (ACT), create a shim.
C. From Windows PowerShell, run the Install-ADScrviceAccount cmdlet.
D. From Windows PowerShell, run the New-ADServiccAccount cmdlet.
Answer: A
QUESTION 135
Your network contains an Active Directory forest named contoso.com. The forest contains 10 domains.
The root domain contains a global catalog server named DC1.
You remove the global catalog server role from DC1.
You need to decrease the size of the Active Directory database on DC1.
Solution: You restart DC1 in Directory Services Repair Mode. You run compact.exe, and then restart DC1.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
You need to run ntdsutil.exe with the ‘compact to’ option.
https://theitbros.com/active-directory-database-compact-defrag/
QUESTION 136
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts.
You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU).
You need to ensure that the members of the Backup Operators group can back up domain controllers.
What should you do?
A. From the Computer Configuration node of DCPolicy, modify Security Settings.
B. From the Computer Configuration node of DomainPolicy, modify Security Settings.
C. From the Computer Configuration node of DomainPolicy, modify Administrative Templates.
D. From the User Configuration node of DCPolicy, modify Security Settings.
E. From the User Configuration node of DomainPolicy, modify Folder Redirection.
F. From user Configuration node of DomainPolicy, modify Administrative Templates.
G. From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings.
H. From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings.
Answer: D
QUESTION 137
Your network contains two Active Directory forests named fabrikam.com and contoso.com.
Each forest contains a single domain
Contoso.com has a Group Policy object (GPO) named Cont_GPO1.
You need to apply the settings from Cont_GPO1 to the computers in fabrikam.com.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Back up Cont_GP01. In fabrikam.com, create and link a new GPO by using the Group Policy Management Console (GPMC), and then run the Import Settings Wizard.
B. Back up Cont_GP01. In fabrikam.com, run the Restore-GPO cmdlet, and then run the New-GPLink cmdlet.
C. Copy \\contoso.com\SysVol\contoso.com\Policies to \\fabrikam.com\SysVol\fabrikam.com\Policies. In fabrikam.com, run the New-GPLink cmdlet.
D. Back up Cont_GP01. In fabrikam.com, create and link a new GPO by using the Group Policy Management Console (GPMC), and then run the Restore Group Policy Object Wizard.
Answer: AB
QUESTION 138
User1 is in OU1. GPO1 is linked to OU1.
The settings in GPO1 are configured as shown in the exhibit. (Click the Exhibit button)
Computer1 does not have any shortcuts on the desktop.
A. 1
B. 2
C. 3
D. 4
Answer: C
QUESTION 139
Your network contains an Active Directory domain named contoso.com.
The user account for a user named User1 is in an organizational unit (OU) named OU1.
You need to enable User1 to sign in as [email protected].
Solution: From Windows PowerShell, You run Set-ADObject `CN=User1, OU=OU1, DC=Contoso,DC=com’ -add @ {UserPrincipalNAme=’[email protected]’} -remove @{UserPrincipalName=’[email protected]’},
Does this meet the goal?
A. Yes
B. No
Answer: A
QUESTION 140
Your network contains an Active Directory domain. The domain contains an Active Directory Rights Management Services (AD RMS) cluster and a certification authority (CA).
You need to ensure that all the documents that are protected by using AD RMS can be decrypted if the account used to encrypt the documents is deleted.
What should you do?
A. Back up the AD RMS-protected files by using Windows Server Backup.
B. Configure key archival on the CA.
C. Manually configure the AD RMS cluster key password.
D. Configure super users in the AD RMS deployment.
Answer: D
Explanation:
https://social.technet.microsoft.com/wiki/contents/articles/9111.disaster-recovery-guide-for-active-directory-rights-management-services.aspx
QUESTION 141
Your network contains an Active Directory forest. The forest contains a domain named contoso.com. The domain contains three domain controllers.
A domain controller named lon-dc1 fails. You are unable to repair lon-dc1.
You need to prevent the other domain controllers from attempting to replicate to lon-dc1.
Solution: From Active Directory Users and Computers, you remove the computer account of lon-dc1.
Does this meet the goal?
A. Yes
B. No
Answer: A
Explanation:
To remove the failed server object from the domain controllers container, access Active Directory Users and Computers, expand the domain controllers container, and delete the computer object associated with the failed domain controller
References: https://www.petri.com/delete_failed_dcs_from_ad
!!!RECOMMEND!!!
1.|2018 Latest 70-742 Exam Dumps (PDF & VCE) 207Q&As Download:
https://www.braindump2go.com/70-742.html
2.|2018 Latest 70-742 Study Guide Video: