How can I pass Microsoft 70-742 exam? Get the latest Microsoft 70-742 dumps pdf practice exam questions! With the help of Pass4itsure, you will get all the latest questions and answers for the Microsoft 70-742 exam. Relax, calm, and prepare for the 70-742 exam without any tension.
Features Of Pass4itsure
Share Pass4itsure Microsoft dumps special discount:
Are you looking for an exam MCSA 70–742 and you want to get help, then Pass4itsure is the best!
Pass4itsure 70-742 exam dumps free share:
Table of Contents:
- Sensible Microsoft 70-742 pdf download free
- Microsoft 70-742 practice testing questions from Youtube
- Microsoft MCSA 70-742 practice test for free
Microsoft 70-742 pdf download free
[q1-q13] Microsoft 70-742 pdf free from Google Drive: https://drive.google.com/file/d/1N9xxYsN5vJ1OIHkMzKPKJPFcw5F4LL2W/view?usp=sharing
Microsoft 70-742 practice testing questions from Youtube
Microsoft MCSA 70-742 practice test for free
QUESTION 1
Your network contains an Active Directory domain named contoso.com.
Some user accounts in the domain have the P.O. Box attribute set.
You plan to remove the value of the P.O. Box attribute for all of the users by using Ldifde.
You have a user named User1 who is located in the Users container.
How should you configure the LDIF file to remove the value of the P.O. Box attribute for User1? To answer, select the
appropriate options in the answer area.
Hot Area:
Correct Answer:
QUESTION 2
Note: This question is part of a series of questions that use the same scenario. For you convenience, the scenario is
repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is
exactly the same in each question in this series.
Start of repeated scenario.
You work for a company named Contoso, Ltd.
The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an
Active Directory forest named adatum.com.
The contoso.com forest contains the objects configured as shown in the following table.
Group1 and Group2 contain only user accounts.
Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3
that runs Windows 10. Computer3 is currently in a workgroup.
An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain.
From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com
domain, and then you create a contact named Contact1 in OU1.
An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a
user logon name of [email protected]
End of repeated scenario.
You need to ensure that User2 can add Group4 as a member of Group5.
What should you modify?
A. the group scope of Group5
B. the Managed By settings of Group4
C. the group scope of Group4
D. the Managed By settings of Group5
Correct Answer: D
QUESTION 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory forest named contoso.com.
You need to identify which server is the schema master.
Solution: From Windows PowerShell, you run Get-ADDomainController –Discover –Service 2.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
This command gets a global catalog in the current forest using Discovery.
References: https://docs.microsoft.com/en-us/powershell/module/addsadministration/getaddomaincontroller?view=win10-ps
QUESTION 4
You have an Active Directory Rights Management Services (AD RMS) server named RMS1.
Multiple documents are protected by using RMS1.
RMS1 fails and cannot be recovered.
You install the AD RMS server role on a new server named RMS2.
You restore the AD RMS database from RMS1 to RMS2.
Users report that they fail to open the protected documents and to protect new documents.
You need to ensure that the users can access the protected content.
What should you do?
A. From Active Directory Rights Management, update the Service Connection Point (SCP) for RMS1.
B. From DNS, create an alias (CNAME) record for RMS2.
C. From DNS, modify the service location (SRV) record for RMS1.
D. From RMS2, register a service principal name (SPN) in Active Directory.
Correct Answer: D
QUESTION 5
Your network contains an Active Directory forest named contoso.com
Your company plans to hire 500 temporary employees for a project that will last 90 days.
You create a new user account for each employee. An organizational unit (OU) named Temp contains the user
accounts for the employees.
You need to prevent the new users from accessing any of the resources in the domain after 90 days.
What should you do?
A. Run the Get-ADUser cmdlet and pipe the output to the Set-ADUser cmdlet.
B. Create a group that contains all of the users in the Temp OU. Create a Password Setting object (PSO) for the new
group.
C. Create a Group Policy object (GPO) and link the GPO to the Temp OU. Modify the Password Policy settings of the
GPO.
D. Run the GET-ADOrganizationalUnit cmdlet and pipe the output to the Set-Date cmdlet.
Correct Answer: A
QUESTION 6
You have an enterprise certification authority (CA) named ContosoCA. Recovery agents are configured for ContosoCA.
You duplicate the User certificate template and name it Cont_User. You plan to issue the certificates based on
Cont_User to provide users with the ability to encrypt email messages and files.
You need to ensure that the recovery agents can access any user-encrypted files and email messages if the users lose
their certificate.
What should you do?
A. Modify the Recovery Agents settings for ContosoCA.
B. Issue a certificate based on a key recovery agent certificate.
C. Modify the Request Handling settings for Cont_User.
D. On ContosoCA, configure the Key Recovery Agent template as a certificate template to issue.
Correct Answer: C
QUESTION 7
Your network contains an Active Directory domain named contoso.com. The domain contains a member server named
Server1 and a domain controller named DC1. Both servers run Windows Server 2016. Server1 is used to perform
administrative tasks, including managing Group Polices.
After maintenance is performed on DC1, you open a Group Policy object (GPO) from Server1 as shown in the exhibit.
You need to be able to view all of the Administrative Templates settings in GPO1. What should you do?
A. From File Explorer, copy the administrative templates from \\contoso.com\SYSVOL\contoso.com\Policies to the
PolicyDefinitions folder on Server1.
B. From File Explorer, delete \\contoso.com\SYSVOL\contoso.com\Policies\PolicyDefinitions.
C. From File Explorer, delete the PolicyDefinitions folder from Server1.
D. From Group Policy Management, configure WMI Filtering for GPO1.
Correct Answer: B
QUESTION 8
Your network contains an Active Directory domain named contoso.com. The domain contains three servers named
Server1, Server2, and Server3 that run Windows Server 2016.
Server1 has IP Address Management (IPAM) installed. Server2 and Server3 have the DHCP Server role installed and
have several DHCP scopes configured. The IPAM server retrieves data from Server2 and Server3.
A domain user named User1 is a member of the groups shown in the following table.
On Server1, you create a security policy for User1. The policy grants the IPAM DHCP Scope Administrator Role with the
\Global access scope to the user. Which actions can User1 perform? To answer, select the appropriate options in the
answer area.
Hot Area:
Correct Answer:
User1 is using Server Manager, not IPAM to perform the administration. Therefore, only the “DHCP Administrators”
permission on Server2 and the “DHCP Users” permissions on Server3 are applied. The permissions granted through
membership of the “IPAM DHCP Scope Administrator Role” are not applied when the user is not using the IPAM
console.
QUESTION 9
HOTSPOT
Your network contains an Active Directory forest named contoso.com. They connect to the forest by using ldp.exe and
receive the output as shown in the following exhibit.
Use drop-down menus to select the answer choice that completes each statement based on the information presented
in the graphic. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 10
Your network contains an Active Directory domain named contoso.com. All the accounts of the users in the sales
department are in an organizational unit (OU) named SalesOU.
An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object (GPO) named
Sales GPO.
You need to set the registry value of \HKEY_CURRENT_USER\Software\App1\Collaboration to 0.
Solution: You add a computer preference that has a Create action.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
QUESTION 11
Your network contains an enterprise root certification authority (CA) named CA1.
Multiple computers on the network successfully enroll for certificates that will expire in one year. The certificates are
based on a template named Secure_Computer. The template uses schema version 2.
You need to ensure that new certificates based on Secure_Computer are valid for three years.
What should you do?
A. Modify the Validity period for the certificate template.
B. Instruct users to request certificates by running the certreq.exe command.
C. Instruct users to request certificates by using the Certificates console.
D. Modify the Validity period for the root CA certificate.
Correct Answer: A
QUESTION 12
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may
be correct for more than one question in the series. Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
Your network contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1 that runs Windows Server 2016.
You need to create a snapshot of the Active Directory database on DC1.
Which tool should you use?
A. Dsadd quota
B. Dsmod
C. Active Directory Administrative Center
D. Dsacls
E. Dsmain
F. Active Directory Users and Computers
G. Ntdsutil
H. Group Policy Management Console
Correct Answer: G
QUESTION 13
Your network contains two network domains sales.fabrikam.com, and contoso.com,
You recently added a site named Europe.
The forest contains four users who are members of the groups shown in the following table.
You need to create a Group Policy object (GPO) named GP01 and to link GPO1 to the Europe site.
Which users can perform each task? To answer, select the appropriate options in the answer area. NOTE: Each correct
selection is worth one point
Hot Area:
Correct Answer:
Why choose Pass4itsure
Many people are happy after using Pass4itsure dumps, because they feel satisfied and clear the first time they try. They know that Pass4itsure is the best of them. The most complete exam questions and answers! The safest buying experience! The greatest free sharing of exam practice questions and answers!
One last word:
This blog shares the latest Microsoft 70-742 dumps, 70-742 exam questions, 70-742 pdf, 70-742 exam video! You need to practice a lot to pass the exam. Choose Pass4itsure 70-742 dumps, help you successfully pass the 70-742 exam.
