Online Access Free 070-742 Exam Questions

Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2012 R2.
You need to secure several high-privilege user accounts to meet the following requirements:
What should you do?

• A.Create a universal security group for the user accounts and modify the Security settings of the group.
• B.Create a separate organizational unit (OU) for the user accounts and modify the Security settings of the OU.
• C.Add the users to the Windows Authorization Access Group group.
• D.Add the user to the Protected Users group.

You have a server named Server1 that has the Active Directory Federation Services server role installed.
You need to configure Server1 as the authorization server. Server1 will be used to authorize access to a web API from a web application. The web application will use OAuth 2.0 and OpenID Connect to access the web API as the authenticated user.
The solution must minimize administrative effort.
What should you do first?

• A.Enable the OAuth endpoint
• B.Run Add-AdfsNativeClientApplication
• C.Run New-AdfsapplicationGroup
• D.Run Add-AdfsServerApplication

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest and the domains is Windows Server 2008 R2.
You have a global group named Group1 in the contoso.com domain. Group1 contains the user accounts in contoso.com.
You need to ensure that you can add the user accounts in the fabrikam.com domain to Group1.
What should you do?

• A.Modify the scope of Group1 to Universal.
• B.Raise the domain functional level of contoso.com to Windows Server 2016.
• C.Assign the Domain Controllers group in fabrikam.com permissions to Group1.
• D.In both domains, run the adprep.exe command and specify the /domainprep parameter.

Your network contains a single-domain Active Directory forest named contoso.com. The forest functional level is Windows Server 2016. The Active Directory Recycle Bin feature is enabled.
You need to design a procedure to restore the values of user object attributes if the values are changed accidentally.
Which cmdlets should you include in the procedure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Your network contains an Active Directory forest named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account of Server1 is an organizational unit (OU) named OU1.
You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)

An administrator reports that the settings from GPO1 are not applied to Server1.
You need to ensure that the settings from GPO1 are applied to Server1.
What should you do?

• A.Enforce GPO1
• B.Enable the link of GPO1
• C.Remove the security filtering
• D.Disable Block inheritance