70-742 무료 덤프문제 온라인 액세스

Your network contains an Active Directory domain named contoso.com. The domain contains servers that run Windows Server 2016. The servers are configured as shown in the following table.

You have a research department. The computers in the research department are not domain-joined.
You need to ensure that the research department computers can use automatic certificate enrollment to receive and renew certificates from the CA.
Which two role services should you install and configure on CAP? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.Online Responder
• B.Certificate Enrollment Policy Web Service
• C.Certificate Enrollment Web Service
• D.Network Device Enrollment Service
• E.Certificate Authority Web Enrollment

Your network contains an Active Directory domain named contoso.com.
You create a domain security group named Group1 and add several users to it.
You need to force all of the users in Group1 to change their password every 35 days. The solution must affect the Group1 users only.
What should you do?

• A.Modify the Password Policy settings in a Group Policy object (GPO) that is linked to the domain, and then filter the GPO to Group1 only.
• B.From Active Directory Administrative Center, create a Password Setting object (PSO).
• C.From Windows PowerShell, run the Set-ADDomain cmdlet, and then run the Set-ADAccountPassword cmdlet.
• D.Create a forms authentication provider, and then set the forms authentication credentials.

Your network contains an Active Directory forest named contoso.com
Your company plans to hire 500 temporary employees for a project that will last 90 days.
You create a new user account for each employee. An organizational unit (OU) named Temp contains the user accounts for the employees.
You need to prevent the new users from accessing any of the resources in the domain after 90 days.
What should you do?

• A.Create a group that contains all of the users in the Temp OU. Create a Password Setting object (PSO) for the new group.
• B.Run the GET-ADOrganizationalUnit cmdlet and pipe the output to the Set-Date cmdlet.
• C.Create a Group Policy object (GPO) and link the GPO to the Temp OU. Modify the Password Policy settings of the GPO.
• D.Run the Get-ADUser cmdlet and pipe the output to the Set-ADUser cmdlet.

Your network contains an Active Directory domain named contoso.com. The domain contains the objects shown in the following table.

The domain has the Group Policy objects (GPOs) shown in the following table.

For each of the following statements, selects Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

정답:

Explanation
No
No
Yes

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named Server1.
You recently restored a backup of the Active Directory database from Server1 to an alternate Location.
The restore operation does not interrupt the Active Directory services on Server1.
You need to make the Active Directory data in the backup accessible by using Lightweight Directory Access Protocol (LDAP).
Which tool should you use?

• A.Dsamain
• B.Active Directory Users and Computers
• C.Active Directory Administrative Center
• D.Dsmod
• E.Dsacls
• F.Dsadd quota
• G.Group Policy Management Console
• H.Ntdsutil