best preparation method to pass the Microsoft 70-742 exam, latest cisco 70-742 exam dumps

Bizfittraining shares the latest Microsoft MCSA 70-742 exam dumps for free exam practice tests and online downloads! “Identity with Windows Server 2016” 70-742 exam. Ready to pass the 70-742 exam please click https://www.pass4itsure.com/70-742.html (full exam dump)

Share a free Microsoft MCSA 70-742 video tutorial

Microsoft MCSA 70-742 Exam pdf

[July PDF] Free Microsoft 70-742 pdf dumps download from Google Drive: https://drive.google.com/open?id=1Cq7DdY9wIOIMCYPG68MXVmh274oAM-72

[Oct PDF] Free Microsoft 70-742 pdf dumps download from Google Drive: https://drive.google.com/open?id=1ud1Ol6gLEAE1JhCHsOZgKadew8f9sUUr

Exam 70-742: Identity with Windows Server 2016 – Microsoft: https://www.microsoft.com/en-us/learning/exam-70-742.aspx

Skills measured
This exam measures your ability to accomplish the technical tasks listed below.

  • Install and Configure Active Directory Domain Services (AD DS) (20-25%)
  • Manage and Maintain AD DS (15-20%)
  • Create and Manage Group Policy (25-30%)
  • Implement Active Directory Certificate Services (AD CS) (10-15%)
  • Implement Identity Federation and Access Solutions (15-20%)

Microsoft MCSA 70-742 Online Exam Practice Questions

QUESTION 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You network contains an Active Directory forest named contoso.com. The forest contains an Active Directory Rights
Management Services (AD RMS) deployment.
Your company establishes a partnership with another company named Fabrikam, Inc. The network of Fabrikam
contains an Active Directory forest named fabrikam.com and an AD RMS deployment.
You need to ensure that the users in contoso.com can access rights protected documents sent by the users in
fabrikam.com.
Solution: From AD RMS in contoso.com, you configure fabrikam.com as a trusted publisher domain.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
By default, an AD RMS Licensing Server can issue use licenses for only content where it originally issued the publishing
license. In some situations, this may not be acceptable. In order to specify a cluster that is allowed to issue use licenses
for content protected by a different cluster, the first cluster must be defined as a trusted publishing domain. If content
was published by another certification cluster either in your organization, for example, a subsidiary organization in
another forest, or in a separate organization, your AD RMS cluster can grant use licenses to users for this content by
configuring a Trusted Publishing Domain on your AD RMS cluster. By adding a Trusted Publishing Domain, you set up a
trust relationship between your AD RMS cluster and the other certification cluster by importing the Trusted Publishing
Certificate of the other cluster.
References: https://books.google.co.za/books?id=gjR-BAAAQBAJandpg=PA397andlpg=PA397anddq=configure+a+part
ners+forest+as+a+trusted+publishing+domain+-+AD+RMSandsource=blandots=mohQXTyW9sandsig=NJ7oFHuLYOs7
2o9EMyQiIscUW8andhl=enandsa=Xandved=0ahUKEwjuivW24sPbAhWGRMAKHQcEB6EQ6AEIOzAD#v=onepageand
q=configure%20a%20partners%20forest%20as%20a%20trusted%20publishing%20domain%20-%20AD%20RMSandf=
false

 

QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com.
The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.pass4itsure 70-742 exam question q2

You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com
namespace.
Solution: From a Group Policy object (GPO) in the domain, you add a rule to the Name Resolution Policy Table
(NRPT).
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
The NRPT stores configurations and settings that are used to deploy DNS Security Extensions (DNSSEC), and also
stores information related to DirectAccess, a remote access technology. Note: The Name Resolution Policy Table
(NRPT) is a new feature available in Windows Server 2008 R2. The NRPT is a table that contains rules you can
configure to specify DNS settings or special behavior for names or namespaces. When performing DNS name
resolution, the DNS Client service checks the NRPT before sending a DNS query. If a DNS query or response matches
an entry in the NRPT, it is handled according to settings in the policy. Queries and responses that do not match an
NRPT entry are processed normally.
References: https://technet.microsoft.com/en-us/library/ee649207(v=ws.10).aspx

 

QUESTION 3
Your company recently deployed a new child domain to an Active Directory forest.
You discover that a user modified the Default Domain Policy to configure several Windows components in the child
domain.
A company policy states that the Default Domain Policy must be used only to configure domain-wide security settings.
You create a new Group Policy object (GPO) and configure the settings for the Windows components in the new GPO.
You need to restore the Default Domain Policy to the default settings from when the domain was first installed.
What should you do?
A. From Group Policy Management, click Starter GPOs, and then click Manage Backups.
B. From a command prompt, run the dcgpofix.exe command.
C. From Windows PowerShell, run the Copy-GPO cmdlet.
D. Run ntdsutil.exe to perform a metadata cleanup and a semantic database analysis.
Correct Answer: B

 

QUESTION 4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers
named DC1 and DC2.
DC1 holds the RID master operations role. DC1 fails and cannot be repaired. You need to move the RID role to DC2.
Solution: On DC2, you open Windows PowerShell and run
Move-AddirectoryServerOperationMasterRole -OperationMasterRidMaster -Identity DC2.Adatum.com
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
You would need to use the -Force parameter because the server that held the role (DC1) if offline.

 

QUESTION 5
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1
that runs Windows Server 2016.
You install IP Address Management (IPAM) on Server1.
You select the automatic provisioning method, and then you specify a prefix of IPAM1.
You need to configure the environment for automatic IPAM provisioning.
Which cmdlet should you run? To answer, select the appropriate options in the answer area.
Hot Area:pass4itsure 70-742 exam question q5

Correct Answer:

pass4itsure 70-742 exam question q5-1

 

QUESTION 6
Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server
2016. The domain contains the servers shown in the following table.pass4itsure 70-742 exam question q6

The domain has several Managed Service Accounts.
Server 1 hosts a service named Service 1 that runs in the security context of the LocalSystem account.
You need to implement a group Managed Service Account to run Service 1.
Which two actions should you perform? Each correct answer presents part of the solution.
A. On DO. run New-ADServieeAceount.
B. OnDCl.runAdd-KDSRootickey.
C. On DC1. njn Add-AOCo«puterS«rviceAccount.
D. On Server1, modify the properties of Service1.
Correct Answer: B


QUESTION 7
Your network contains an Active Directory domain named contoso.com. All the accounts of the users in the sales
department are in an organizational unit (OU) named SalesOU.
An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object (GPO) named
Sales GPO.
You need to set the registry value of \HKEY_CURRENT_USER\Software\App1\Collaboration to 0.
Solution: You add a user preference that has an Update action.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A

 

QUESTION 8
Your network contains an Active Directory domain named contoso.com. The domain contains a Group Policy object
(GPO) named GPO1.
You configure the Internet Settings preference in GPO1 as shown in the exhibit. (Click the Exhibit button.)pass4itsure 70-742 exam question q8

A user reports that the homepage of Internet Explorer is not set to http://www.contoso.com.
You confirm that the other settings in GPO1 are applied.
You need to configure GPO1 to set the Internet Explorer homepage.
What should you do?
A. Edit the GPO1 preference and press F5.
B. Modify Security Settings for GPO1.
C. Modify WMI Filtering for GPO1.
D. Modify the GPO1 preference to use item-level targeting.
Correct Answer: A
The red dotted line under the homepage URL means that setting is disabled. Pressing F5 enables all settings.
References: https://community.spiceworks.com/topic/285312-add-default-website-in-group-policy

 

QUESTION 9
Your network contains an Active Directory forest named contoso.com. The forest contains the root domain and two child
domains named childl.contoso.com and child2.contoso.com.
Child1 contains three domain controllers named DC1, DC2, and DC3. Child2 contains one domain controller named
You have two accounts named Child1\Admin1 and Child2\Admin2 that you use to perform administrative tasks.
Currently, the accounts can manage only the member servers in their respective domain.
You plan to demote DC3 and to remove the Child2 domain.
You need to ensure that Admin1 can demote DC3 and that Admtn2 can demote DC4. The solution must use the
principle of least privilege.
To which groups should you add Admin1 and Admin2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:pass4itsure 70-742 exam question q9

Correct Answer:

pass4itsure 70-742 exam question q9-1

References: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/demoting-domain-controllers-and-domains–level-200

 

QUESTION 10
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1
that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1.
You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.
You need to add a domain user named User1 to the local Administrators group on Server1.
Solution: From a domain controller, you run the Set-AdComputer cmdlet.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
The Set-AdComputer cmdlet modifies an Active Directory computer object. It will not allow you to add a domain user to
a local Administrators group. References: https://technet.microsoft.com/es-es/library/hh852268(v=wps.620).aspx

 

QUESTION 11
DRAG DROP
Your network contains an Active Directory domain. The domain contains two domain controllers named DC1 and DC2.
DC2 is a virtual machine that is hosted on a Hyper-V host named HyperV1. DC1 holds the PDC emulator operations
master role.
You need to create a new domain controller named DC3 by using domain controller cloning.
Which five actions should you perform in sequence before you can import the cloned virtual machine? To answer, move
the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Select and Place:pass4itsure 70-742 exam question q11

Correct Answer:

pass4itsure 70-742 exam question q11-1

References: https://blogs.technet.microsoft.com/askpfeplat/2012/10/01/virtual-domain-controller-cloning-in-windows-server-2012/

 

QUESTION 12
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers
named DC1 and DC2.
DC1 holds the RID master operations role. DC1 fails and cannot be repaired. You need to move the RID role to DC2.
Solution: On DC2, you open the command prompt, run dsmgmt.exe, connect to DC2, and use the Seize RID master
opinion.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B

 

QUESTION 13
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains 10 domains.
The root domain contains a global catalog server named DC1.
You remove the global catalog server role from DC1.
You need to decrease the size of the Active Directory database on DC1.
Solution: You restart DC1 in Safe Mode. You run ntdsutil.exe, use the files option, and then restart DC1.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
References: https://theitbros.com/active-directory-database-compact-defrag/

Share Pass4itsure discount codes for free

pass4itsure discount codes

About Pass4itsure!

Pass4itsure offers the latest exam practice questions and answers free of charge! Update all exam questions throughout the year,
with a number of professional exam experts! To make sure it works! Maximum pass rate, best value for money! It helps you pass the exam easily on your first attempt.

why pass4itsure

Summarize:

How do I pass the Microsoft MCSA 70-742 exam? You need to be prepared for it! You need the latest and most effective learning materials and proper practices to pass the 70-742 exam. “Candidates for this exam manage identities using the functionalities in Windows Server 2016. Candidates install, configure, manage, and maintain Active Directory Domain Services (AD DS) as well as implement Group Policy Objects (GPOs)”.
Pass4itsure offers you the latest exam materials! You can use the materials to prepare to help you achieve excellent results!

This maybe you’re interested