Online Access Free 70-744 Exam Questions

Note: Thb question Is part of a series of questions that present the same scenario. Each question In the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you willNOTbeabletorrturntoit.Asa result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains multiple Hyper-V hosts.
You need to deploy several critical line-of-business applications to the network to meet the following requirements:
*The resources of the applications must be isolated from the physical host
*Each application must be prevented from accessing the resources of the other applications.
*The configurations of the applications must be accessible only from the operating system that hosts the application.
Solution: You deploy one Windows container to host all of the applications.
Does this meet the goal?

• A.No
• B.Yes

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
The hardware configuration on Server1 meets the requirements for Credential Guard.
You need to enable Credential Guard on Server1.
What should you do? To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation

https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-requirements The Virtualization-based security requires: -CPU virtualization extensions plus extended page tables-Windows hypervisorhttps://docs.
microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-manage#hardware-readines s-tool



References:
https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-requirements
https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-manage#hardwar

Your network contains an Active Directory domain.
You plan to run shielded virtual machines.
You are implementing TPM attestation mode for a guarded fabric.
You create a Code Integrity policy named Integrityl.xml.
You need to ensure that you can apply the Code Integrity policy to Hyper-V hosts.
Which cmdlet should you run?

• A.ConvertFrom-CIPolicy
• B.Add-SignerRule
• C.Set-HvCIoptions
• D.Add-HgsAttestation TpmHost

Your network contains an Active Directory domain named contoso.com. You plan to implement encryption on a file server named Server1. Server1 has TPM 2.0 and uses Secure Boot Server1 has the volumes configured as shown in the following table.

You need to encrypt the contents of volumes C and G.
The solution must use the highest level of security possible.
What should you use to encrypt the contents of each volume? To answer, drag the appropriate encryption options to the correct volumes. Each encryption option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Correct Answer:

Your network contains an Active Directory domain named contoso.com. The domain contains a file server named FS1 that runs Windows Server 2016. FS1 has a share named SecureFolder.
You need to track all users who access the contents of SecureFolder.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.From File Explorer, modify the Advanced security settings of SecureFolder.
• B.From the Default Domain Controller Group Policy object (GPO), enable Audit object access.
• C.From File Explorer, modify the Advanced sharing settings of SecureFolder.
• D.Create a Group Policy object (GPO) and enable Audit object access.