[Free] 2017(May) Ensurepass Examcollection Microsoft 70-744 Real Tests 1-10

Ensurepass
2017 May Microsoft Official New Released 70-744 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/70-744.html

Securing Windows Server 2016

QUESTION 1

Note: This question is part of a series of questions that present the same scenario. Each question In the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

 

After you answer a question In this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

 

Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2016. The forest contains 2,000 client computers that run Windows 10. All client computers are deployed from a customized Windows image.

 

You need to deploy 10 Privileged Access Workstations (PAWs). The solution must ensure that administrators can access several client applications used by all users.

 

Solution: You deploy one physical computer and configure it as a Hyper-V host that runs Windows Server 2016. You create 10 virtual machines and configure each one as a PAW.

 

Does this meet the goal?

 

A.

Yes

B.

No

 

Correct Answer: A

 

 

QUESTION 2

Your network contains an Active Directory domain named contoso.com. The domain contains five file servers that run Windows Server 2016.

 

You have an organizational unit (OU) named Finance that contains all of the servers.

 

You create a Group Policy object (GPO) and link the GPO to the Finance OU.

 

You need to ensure that when a user in the finance department deletes a file from a file server, the event is logged. The solution must log only users who have a manager attribute of Ben Smith.

 

Which audit policy setting should you configure in the GPO?

 

A.

File system in Global Object Access Auditing

B.

Audit Detailed File Share

C.

Audit Other Account Logon Events

D.

Audit File System in Object Access

 

Correct Answer: C

 

 

QUESTION 3

HOTSPOT

Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.

 

Start of repeated scenario

Your network contains an Active Directory domain named contoso.com. The functional level of the forest and the domain is Windows Server 2008 R2.

 

The domain contains the servers configured as shown in the following table.

 

clip_image001

 

All servers run Windows Server 2016. All client computers run Windows 10.

 

You have an organizational unit (OU) named Marketing that contains the computers in the marketing department. You have an OU named Finance that contains the computers in the finance department. You have an OU named AppServers that contains application servers. A Group Policy object (GPO) named GP1 is linked to the Marketing OU. A GPO named GP2 is linked to the AppServers OU.

 

You install Windows Defender on Nano1.

 

End of repeated scenario

 

You need to ensure that you can implement the Local Administrator Password Solution (LAPS) or the finance department computers.

 

What should you do in the contoso.com forest?

 

To answer, select the appropriate options in the answer area.

 

clip_image003

 

Correct Answer:

clip_image005

 

 

QUESTION 4

Note: The question Is part of a series of questions that present the same scenario. Each question In the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

 

After you answer a question in this section, you willNOTbeabletorrturntoit.Asa result, these questions will not appear in the review screen.

 

Your network contains an Active Directory domain named contoso.com. The domain contains multiple Hyper-V hosts.

 

You need to deploy several critical line-of-business applications to the network to meet the following requirements:

 

clip_image007The resources of the applications must be isolated from the physical host

clip_image007[1]Each application must be prevented from accessing the resources of the other applications.

clip_image007[2]The configurations of the applications must be accessible only from the operating system that hosts the application.

 

Solution: You deploy one Windows container to host all of the applications.

 

Does this meet the goal?

 

A.

Yes

B.

No

 

Correct Answer: A

 

 

QUESTION 5

Your network contains two single-domain Active Directory forests named contoso.com and contosoadmin.com. Contosoadmin.com contains all of the user accounts used to manage the servers in contoso.com.

 

You need to recommend a workstation solution that provides the highest level of protection from vulnerabilities and attacks.

 

What should you include in the recommendation?

 

A.

Provide a Privileged Access Workstation (PAW) for
each user account in both forests. Join each PAW to the contoso.com domain.

B.

Provide a Pnvileged Access Workstation (PAW) for each user in the contoso.com forest Join each PAW to the contoso.com domain.

C.

Provide a Pnvileged Access Workstation (PAW) for each administrator. Join each PAW to the contoso.com domain.

D.

Provide a Pnvileged Access Workstation (PAW) for each administrator. Join each PAW to the contosoadmin.com domain.

 

Correct Answer: B

 

 

QUESTION 6

HOTSPOT

Your network contains an Active Directory domain named adatum.com. The domain contains a file server named Server1 that runs Windows Server 2016.

 

You have an organizational unit (OU) named OU1 that contains Server1.

 

You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.

 

A user named User1 is a member of group named Group1. The properties of User1 are shown in the User1 exhibit (Click the Exhibit button.)

 

clip_image008

 

User1 has permissions to two files on Server1 configured as shown in the following table.

 

clip_image009

From Auditing Entry for Global File SACL, you configure the advanced audit policy settings in GPO1 as shown in the SACL exhibit (Click the Exhibit button.)

 

clip_image011

 

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

 

clip_image013

 

Correct Answer:

clip_image015

 

 

QUESTION 7

HOTSPOT

You plan to deploy three encrypted virtual machines that use Secure Boot. The virtual machines will be configured as shown in the following table.

 

clip_image016

 

How should you protect each virtual machine? To answer, select the appropriate options in the answer area.

 

clip_image017

 

Correct Answer:

clip_image018

 

 

QUESTION 8

Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2016.

 

You create a new bastion forest named admin.contoso.com. The forest functional level of admin.contoso.com is Windows Server 2012 R2.

 

You need to implement a Privileged Access Management (PAM) solution.

 

Which two actions should you perform? Each correct answer presents part of the solution.

 

A.

Raise the forest functional level of admm.contoso.com.

B.

Deploy Microsoft Identify Management (MIM) 2016 to admin.contoso.com.

C.

Configure contoso.com to trust admin.contoso.com.

D.

Deploy Microsoft Identity Management (MIM) 2016 to contoso.com.

E.

Raise the forest functional level of contoso.com.

< span lang="EN-US" style="font-family: ; mso-font-kerning: 0pt; mso-no-proof: yes">F.

Configure admin.contoso.com to trust contoso.com.

 

Correct Answer: CF

 

 

QUESTION 9

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

 

After you answer a question In this section, you will NOT be able to return to It. As a result, these questions will not appear In the review screen.

 

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2016. All client computers run Windows 10.

 

The relevant objects in the domain are configured as shown in the following table.

 

clip_image019

You need to assign User1 the right to restore files and folders on Server1 and Server2.

 

Solution: You create a Group Policy object (GPO), you link the GPO to the Servers OU, and then you modify the Users Rights Assignment in the GPO.

 

Does this meet the goat?

 

A.

Yes

B.

No

 

Correct Answer: A

 

 

QUESTION 10

Your network contains an Active Directory domain named contoso.com. The domain contains four servers. The servers are configured as shown in the following table.

 

clip_image021

 

You need to manage FS1 and FS2 by using Just Enough Administration (JEA).

 

What should you do before you can implement JEA?

 

A.

Install Microsoft .NET Framework 4.6.2 on FS2.

B.

Install Microsoft .NET Framework 4.6.2 on FS1.

C.

Install Windows Management Framework 5.0 on FS2.

D.

Upgrade DC1 to Windows Server 2016.

 

Correct Answer: D

100% Free Download!
—Download Free Demo:70-744 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 70-744 Full Exam PDF and VCE Q&As:50
—Get 10% off your purchase! Copy it:TJDN-947R-9CCD [2017.05.01-2017.05.31]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE