Download Microsoft.70-742.Train4Sure.2018-06-25.102q.tqb
| Vendor: | Microsoft |
| Exam Code: | 70-742 |
| Exam Name: | Identity with Windows Server 2016 |
| Date: | Jun 25, 2018 |
| File Size: | 4 MB |
Demo Questions
Question 1
Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named TestOU that contains test computers.
You need to enable a technician named Tech1 to create Group Policy objects (GPOs) and to link the GPOs to TestOU. The solution must use the principle of least privilege.
Which two actions should you perform? Each correct answer presents part of the solution.
- Add Tech1 to the Group Policy Creator Owners group.
- From Group Policy Management, modify the Delegation settings of the TestOU OU.
- Add Tech1 to the Protected Users group.
- From Group Policy Management, modify the Delegation settings of the contoso.com container.
- Create a new universal security group and add Tech1 to the group.
Correct answer: AB
Explanation:
The Group Policy Creator Owners group lets its members create new GPOs. You can delegate the ability for users to be given the ability to link GPOs to an OU or domain via the Delegation tab of the OU/domain/site within the GPMC. References: http://www.itprotoday.com/management-mobility/what-group-policy-creator-owners-group http://www.itprotoday.com/management-mobility/how-do-i-delegate-permissions-someone-edit-gpo The Group Policy Creator Owners group lets its members create new GPOs.
You can delegate the ability for users to be given the ability to link GPOs to an OU or domain via the Delegation tab of the OU/domain/site within the GPMC.
References:
http://www.itprotoday.com/management-mobility/what-group-policy-creator-owners-group
http://www.itprotoday.com/management-mobility/how-do-i-delegate-permissions-someone-edit-gpo
Question 2
Your company recently deployed a new child domain to an Active Directory forest.
You discover that a user modified the Default Domain Policy to configure several Windows components in the child domain.
A company policy states that the Default Domain Policy must be used only to configure domain-wide security settings.
You create a new Group Policy object (GPO) and configure the settings for the Windows components in the new GPO.
You need to restore the Default Domain Policy to the default settings from when the domain was first installed.
What should you do?
- From Group Policy Management, click Starter GPOs, and then click Manage Backups.
- From a command prompt, run the dcgpofix.exe command.
- From Windows PowerShell, run the Copy-GPO cmdlet.
- Run ntdsutil.exe to perform a metadata cleanup and a semantic database analysis.
Correct answer: B
Question 3
Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named OU1 that contains the computer accounts of two servers and the user account of a user named User1. A Group Policy object (GPO) named GPO1 is linked to OU1.
You have an application named App1 that installs by using an application installer named App1.exe.
You need to publish App1 to OU1 by using Group Policy.
What should you do?
- Create a Config.zap file and add a file to the File System node to the Computer Configuration node of GPO1.
- Create a Config.xml file and add a software installation package to the User Configuration node of GPO1.
- Create a Config.zap file and add a software installation package to the User Configuration node of GPO1.
- Create a Config.xml file and add a software installation package to the Computer Configuration node of GPO1.
Correct answer: C
