Exit demo 70-744 Securing Windows Server 2016 PDF format · free preview

Microsoft 70-744 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/70-744.html

Question 1
Multiple choice

Your network contains an Active Directory domain named contoso.com.

The domain contains a member server named Servers that runs Windows Server 2016.

You need to configure Servers as a Just Enough Administration (JEA) endpoint.

Which two actions should you perform? Each correct answer presents part of the solution.

A.

Create and export a Windows PowerShell session.

B.

Deploy Microsoft Identity Manager (MIM) 2016

C.

Create a maintenance Role Capability file

D.

Generate a random Globally Unique Identifier (GUID)

E.

Create and register a session configuration file.

Question 2
Multiple choice

Your network contains an Active Directory Domain named contoso.com. The domain contains 10 servers that run Windows Server 2016 and 800 client computers that run Windows 10.

You need to configure the domain to meet the following requirements:

1. Users must be locked out from their computer if they enter an incorrect password twice.
2. Users must only be able to unlock a locked account by using a one-time password that is sent to their mobile phone.

You deploy all the components of Microsoft Identity Manager (MIM) 2016.

Which three actions should you perform before you deploy the MIM add-ins and extensions? Each correct answer presents part of the solution.

A.

From a Group Policy object (GPO), configure Public Key Policies

B.

Deploy a Multi-Factor Authentication provider and copy the required certificates to the MIM server.

C.

From the MIM Portal, configure the Password Reset AuthN Workflow.

D.

Deploy a Multi-Factor Authentication provider and copy the required certificates to the client computers.

E.

From a Group Policy object (GPO), configure Security Settings.

Question 3
Multiple choice

Your network contains an Active Directory domain named contoso.com. The domain contains several Hyper-V hosts.

You deploy a server named Server22 to a workgroup. Server22 runs Windows Server 2016.

You need to configure Server22 as the primary Host Guardian Service server.

Which three cmdlets should you run in sequence?

A.

Install-HgsServer

B.

Install-Module

C.

Install-Package

D.

Enable-WindowsOptionalFeature

E.

Install-ADDSDomainController

F.

Initialize-HgsServer

Question 4
Single choice

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server
2016.

You need to prevent direct .NET scripts invoked by interactive Windows PowerShell sessions from running on the servers.

What should you do for each server?

A.

Create an AppLocker rule.

B.

Create a Code Integrity rule.

C.

Disable PowerShell Remoting.

D.

Modify the local Kerberos policy settings.

Question 5
Single choice

Your network contains an Active Directory domain named contoso.com. The domain contains 100 servers.

You deploy the Local Administrator Password Solution (LAPS) to the network

You need to view the password of the local administrator of a server named Server5.

Which tool should you use?

A.

Active Directory Users and Computers

B.

Computer Management

C.

Accounts from the Settings app

D.

Server Manager

Question 6
Multiple choice

Your network contains an Active Directory domain named contoso.com.

The domain contains 10 computers that are in an organizational unit (OU) named OU1.

You deploy the Local Administrator Password Solution (LAPS) client to the computers.

You link a Group Policy object (GPO) named GPO1 to OU1, and you configure the LAPS password policy settings in GPO1.

You need to ensure that the administrator passwords on the computers in OU1 are managed by using LAPS.

Which two actions should you perform? Each correct answer presents part of the solution.

A.

Restart the domain controller that hosts the PDC emulator role.

B.

Update the Active Directory Schema.

C.

Enable LDAP encryption on the domain controllers.

D.

Restart the computers.

E.

Modify the permissions on OU1.

Question 7
Single choice

You have a server named Server1 that runs Windows Server 2016.

You need to identify whether IPsec tunnel authorization is configured on Server1.

Which cmdlet should you use?

A.

Get-NetIPSecRule

B.

Get-NetFirewallRule

C.

Get-NetFirewallProfile

D.

Get-NetFirewallSetting

E.

Get-NetFirewallPortFilter

F.

Get-NetFirewallAddressFilter

G.

Get-NetFirewallSecurityFilter

H.

Get-NetFirewallApplicationFilter

Question 8
Single choice

You have a server named Server1 that runs Windows Server 2016.

You configure Just Enough Administration (JEA) on Server1.

You need to view a list of commands that will be available to a user named User1 when User1 establishes a JEA session to Server1.

Which cmdlet should you use?

A.

Trace-Command

B.

Get-PSSessionCapability

C.

Get-PSSessionConfiguration

D.

Show-Command

Question 9
Single choice

Your network contains an Active Directory domain named contoso.com.

The domain contains a computer named Computer1 that runs Windows 10.

Computer1 connects to a home network and a corporate network.

The corporate network uses the 172.16.0.0/24 address space internally.

Computer1 runs an application named App1 that listens to port 8080.

You need to ensure that App1.exe can accept connections only when Computer1 is connected to the corporate network.

Solution: You run the command New-NetFirewallRule -DisplayName "Rule1" -Direction Inbound -Program
"D:\\Apps\\App1.
exe" -Action Allow -Profile Domain Does this meet the goal?

A.

Yes

B.

No

Question 10
Single choice

Your network contains an Active Directory domain named contoso.com.

You are deploying Microsoft Advanced Threat Analytics (ATA).

You create a user named User1.

You need to configure the user account of User1 as a Honeytoken account.

Which information must you use to configure the Honeytoken account?

A.

the SAM account name of User1

B.

the Globally Unique Identifier (GUID) of User1

C.

the SID of User1

D.

the UPN of User1

Showing 10 of 258 questions · Unlock the full set