Microsoft 70-742 Actual Tests : Identity with Windows Server 2016

Your company has a marketing department.
The network contains an Active Directory domain named contoso.com.
The main office contains three domain controllers. Each branch office contains one domain controller.
You discover that new settings in the Default Domain Policy are not applied on one of the branch offices, but all other Group Policy objects (GPOs) are applied.
You need to check the replication of the Default Domain Policy for the branch Office.
What should you do from a domain controller in the main office?

• A. From Group Policy Management, click Default Domain Policy under Contoso.com
• B. From Windows Power Shell, run the Get-GPO Report cmdlet.
• C. From a command prompt, run repadmin.exe.
• D. From a command prompt, run dcdlage.exe.

Your network contains an Active Directory domain named contoso.com. The relevant objects in the domain are configured as shown in the following table.

User1 is in OU1. GPO1 is linked to OU1.
The settings in GPO1 are configured as shown in the exhibit. (Click the Exhibit tab.) Computer1 does not have any shortcuts on the desktop.
How many shortcuts appear on the desktop after User1 signs in to Computer1?

• A. 1
• B. 3
• C. 2
• D. 4

Your network contains an Active Directory domain named contoso.com. The domain contains four servers named Server1, Server2, Server3, and Server4 that run Windows Server 2016.
Server1 has IP Address Management (IPAM) installed. Server2, Server3, and Server 4 have the DHCP Server role installed. IPAM manages Server2, Server3, and Server4.
A domain user named User1 is a member of the groups shown in the following table.

Which actions can User1 perform? To answer, select the appropriate options in the answer area.

Explanation

Box 1: Can be performed by User1
DHCP Administrators can create DHCP scopes.
Box 2: Cannot be performed by User1
DHCP Users cannot create scopes.
Box 3: Cannot be performed by User1
IPAM users cannot creates copes.
References: https://technet.microsoft.com/en-us/library/dn741281(v=ws.11).aspx#create_access_scope

Your network contains an Active Directory forest named contoso.com. The forest contains an enterprise root certification authority (CA) on a server that runs Windows Server 2016.
You plan to create and issue a custom subordinate CA template.
You need to prevent subordinate CAs from issuing subordinate certificates.
What should you configure in the template?

• A. the Security settings
• B. the Request Handling settings
• C. the Cryptography settings
• D. the Basic Constraints extension

Your network contains an Active Directory forest. The forest contains two sites named Site1 and Site2. Site1 contains 10 domain controllers. Site1 and Site2 connect to each other by using a WAN link.
You run the Active Directory Domain Services Configuration Wizard as shown in the following graphic.

Server3 is the only server in Site2.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

Explanation

By selectively caching credentials, RODCs address some of the challenges that enterprises can encounter in branch offices and perimeter networks (also known as DMZs) that may lack the physical security that is commonly found in datacenters and hub sites.