Free Microsoft 70-742 Exam Dumps Questions & Answers

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain.
The domain contains a server named Server1.
An administrator named Admin01 plans to configure Server1 as a standalone certification authority (CA).
You need to identify to which group Admin01 must be a member to configure Server1 as a standalone CA.
The solution must use the principle of least privilege.
To which group should you add Admin01?

• A.Domain Admins in contoso.com
• B.Cert Publishers on Server1
• C.Key Admins in contoso.com
• D.Administrators on Server1.

Your company has a main office and three branch offices. The network contains an Active Directory domain named contoso.com.
The main office contains three domain controllers. Each branch office contains one domain controller.
You discover the new settings in the Default Domain Policy are not applied in one of the branch offices, but all other Group Policy objects (GPOs) are applied.
You need to check the replication of the Default Domain Policy for the branch office.
What should you do from a domain controller in the main office?

• A.From Windows PowerShell, run the Get-ADReplicationConnection cmdlet.
• B.From Group Policy Management, click Default Domain Policy under Contoso.com, and then open the Scope tab.
• C.From Group Policy Management, click Default Domain Policy under the Group Policy Objects container, and then open the Status tab.
• D.From a command prompt, run dcdiag.exe.

Your network contains an Active Directory forest. The forest contains two domains named litwarenc.com and contoso.com. The contoso.com domain contains two domains controllers named LON-DC01 and LON-DC02.
The domain controllers are located in a site named London that is associated to a subnet of 192.168.10.0/24 You discover that LON-DC02 is not a global catalog server.
You need to configure LON-DC02 as a global catalog server.
What should you do?

• A.From Windows PowerShell, run the Enable-ADOptionalFeature cmdlet.
• B.From Active Directory Sites and Services, modify the NTDS Settings object of LON-DC02.
• C.From Windows PowerShell, run the Set-NetNatGlobal cmdlet.
• D.From Active Directory Sites and Services, modify the properties of the 192.168.10.0/24 IP subnet.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy a new Active Directory forest.
You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member servers.
Solution: From Windows PowerShell on a domain controller, you run the Set-KdsConfiguration cmdlet.
Does this meet the goal?

• A.Yes
• B.No

Your network contains an Active Directory domain named contoso.com. The domain contains a user named User1, a group named Group1, and an organizational unit (OU) named OU1.
You need to enable User1 to link Group Policies to OU1.
Solution: From Active Directory Administrative Center, you add User1 to Group1 and grant Group1 Full Control permission to OU1.
Does this meet the goal?

• A.Yes
• B.No