Online Access Free 70-744 Exam Questions

Note: Thb question Is part of a series of questions that present the same scenario. Each question In the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you willNOTbeabletorrturntoit.Asa result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains multiple Hyper-V hosts.
You need to deploy several critical line-of-business applications to the network to meet the following requirements:
*The resources of the applications must be isolated from the physical host
*Each application must be prevented from accessing the resources of the other applications.
*The configurations of the applications must be accessible only from the operating system that hosts the application.
Solution: You deploy one Windows container to host all of the applications.
Does this meet the goal?

• A.No
• B.Yes

Your network contains an Active Directory domain named adatum.com.
The network contains a server named Server!. Server! is in a workgroup.
You need to create a backup of the local Group Policy on Server1 that you can import into a Group Policy object (GPO) in the domain.
Which tool should you use?

• A.Local Group Policy Editor
• B.Backup-GPO
• C.Group Policy Management
• D.lgpo.exe

Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Server1 that runs Windows Server 2016.
You need to prevent NTLM authentication on Server1.
Solution: From Windows PowerShell, you run the New-ADAuthenticationPolicy cmdlet.
Does this meet the goal?

• A.No
• B.Yes

Your network contains two Active Directory forests named contoso.com and adatum.com. Contoso.com contains a Hyper-V host named Server1. Server1 is a member of a group named HyperHosts. Adatum.com contains a server named Server2. Server1 and Server2 run Windows Server 2016.
Contoso.com trusts adatum.com.
You plan to deploy shielded virtual machines to Server1.
Which component should you install and which cmdlet should you run on Server1? To answer, select the appropriate options in the answer area.

Correct Answer:

Explanation

Key for this question is Admin-trusted attestation or (AD mode) for guarded fabric "Server1.contoso.com", whileServer2.adatum.com is running the Host Guardian Service.

https://docs.microsoft.com/en-us/windows-server/virtualization/guarded-fabric-shielded-vm/guarded-fabricguar
https://docs.microsoft.com/en-us/windows-server/virtualization/guarded-fabric-shielded-vm/guarded-fabricconfi st-successfully

Your network contains an Active Directory domain.
You plan to implement Dynamic Access Control.
You need to create a central access rule that will grant permissions to users who have the Department attribute set to Finance. The users must have access to resources that have the Department property Set to Finance.
Which two actions should you perform before you create the central access rule? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A.Create a central access policy.
• B.Enable a resource property.
• C.Create a claim type.
• D.Enable a claim type.
• E.Create a resource property list