[Free] 2017(May) Ensurepass Examcollection Microsoft 70-744 Real Tests 11-20

Ensurepass
2017 May Microsoft Official New Released 70-744 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/70-744.html

Securing Windows Server 2016

QUESTION 11

Note: This question is part of a series of question that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is Independent of the other questions in this series. Information and details provided in a question apply only to that question.

 

Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1 that runs Windows Server 2016.

 

Server1 has a volume named Volume1.

 

Dynamic Access Control is configured. A resource property named Property1 was created in the domain.

 

You need to ensure that Property1 is set to a value of Big for all of the files in Volume1 that are larger than 10 MB.

 

Which tool should you use?

A.

File Explorer

B.

Shared Folders

C.

Server Manager

D.

Disk Management

E.

Storage Explorer

F.

Computer Management

G.

System Configuration

H.

File Server Resource Manager (FSRM)

 

Correct Answer: F

 

 

QUESTION 12

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server5 that has the Windows Server Update Services server role installed.

 

You need to configure Windows Server Update Services (WSUS) on Server5 to use SSI.

 

You install a certificate in the local Computer store.

 

Which two tools should you use? Each correct answer presents part of the solution.

 

A.

Wsusutil

B.

Netsh

C.

Internet Information Services (IIS) Manager

D.

Server Manager

E.

Update Services

 

Correct Answer: BC

 

 

QUESTION 13

Your network contains an Active Directory domain named contoso.com.

 

You create a Microsoft Operations Management Suite (OMS) workspace.

 

You need to connect several computers directly to the workspace.

 

Which two pieces of information do you require? Each correct answer presents part of the solution.

 

A.

the ID of the workspace

B.

the name of the workspace

C.

the URL of the workspace

D.

the key of the workspace

 

Correct Answer: A

 

 

 

 

 

 

QUESTION 14

Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.

 

Start of repeated scenario

 

Your network contains an Active Directory domain named contoso.com. The functional level of the forest and the domain is Windows Server 2008 R2.

 

The domain contains the servers configured as shown in the following table.

 

clip_image001

 

All servers run Windows Server 2016. All client computers run Windows 10.

 

You have an organizational unit (OU) named Marketing that contains the computers in the marketing department. You have an OU named Finance that contains the computers in the finance department. You have an OU named AppServers that contains application servers. A Group Policy object (GPO) named GP1 is linked to the Marketing OU. A GPO named GP2 is linked to the AppServers OU.

 

You install Windows Defender on Nano1.

 

End of repeated scenario

 

You need to ensure that you can deploy a shielded virtual machine to Server4.

 

Which server role should you deploy?

 

A.

Hyper-V

B.

Device Health Attestation

C.

Network Controller

D.

Host Guardian Service

 

Correct Answer: A

 

 

 

 

 

 

 

 

QUESTION 15

Note: This question is part of a series of questions that use the same or simitar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

 

Your network contains an Active Directory domain named contoso.com The domain contains a server named Server1 that runs Windows Server 2016.

 

Server1 has a shared folder named Share1.

 

You need to ensure that all access to Share1 uses SMB Encryption.

 

Which tool should you use?

 

A.

File Explorer

B.

Shared Folders

C.

Server Manager

D.

Disk Management

E.

Storage Explorer

F.

Computer Management

G.

System Configuration

H.

File Server Resource Manager (FSRM)>

 

Correct Answer: H

 

 

QUESTION 16

Your network contains an Active Directory domain named contoio.com. The domain contains a server named Server1 that runs Windows Server 2016.

 

You have an organizational unit (OU) named Administration that contains the computer account of Server1.

 

You import the Active Directory module to Served1.

 

You create a Group Policy object (GPO) named GPO1 You link GPO1 to the Administration OU.

 

You need to log an event each time an Active Directory cmdlet is executed succesfully from Served.

 

What should you do?

 

A.

From Advanced Audit Policy in GPO1 configure auditing for directory service changes.

B.

Run the (Get-Module ActiveDirectory).LogPipelineExecutionDetails – $false command.

C.

Run the (Get-Module ArtivcDirectory).LogPipelineExecutionDetails = $true command.

D.

From Advanced Audit Policy in GPO1 configure auditing for other privilege use events.

 

Correct Answer: C

 

 

 

 

 

QUESTION 17

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016.

 

Server1 is configured as a domain controller.

 

You configure Server1 as a Just Enough Administration (JEA) endpoint You configure the required JEA rights for a user named User1.

 

You need to tell User1 how to manage Active Directory objects from Server2.

 

What should you tell User1 to do first on Server2?

 

A.

From a command prompt, run ntdsutil.exe.

B.

From Windows PowerShell, run the Import-Module cmdlet.

C.

From Windows PowerShell run the Enter-PSSession cmdlet.

D.

Install the management consoles for Active Directory, and then launch Active Directory Users and Computer.

 

Correct Answer: A

 

 

QUESTION 18

Your network contains an Active Directory forest named conloso.com.

 

The network is connected to the Internet.

 

You have 100 point-of-sale (POS) devices that run Windows 10. The devices cannot access the Internet.

 

You deploy Microsoft Operations Management Suite (OMS).

 

You need to use OMS to collect and analyze data from the POS devices.

 

What should you do first?

 

A.

Deploy Windows Server Gateway to the network.

B.

Install the OMS Log Analytics Forwarder on the network.

C.

Install Microsoft Data Management Gateway on the network.

D.

Install the Simple Network Management Protocol (SNMP) feature on the devices.

E.

Add the Microsoft NDJS Capture service to the network adapter of the devices.

 

Correct Answer: E

 

 

 

 

 

 

 

 

 

 

 

QUESTION 19

Note: This question is part of a series of questions that present the same scenario. Each question In the series contains a unique solution that might meet the stated goats. Some question sets might have more than one correct solution, while others might not have a correct solution.

 

After you answer a question in this section, you will NOT be able to return to It. As a result, these questions will not appear in the review screen.

 

Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10. Computer1 connects to a home network and a corporate network.

 

The corporate network uses the 17216.0.0/24 address space internally.

 

Computerl runs an application named App1 that listens to port 8080.

 

You need to prevent connections to App1 when Computer1 is connected to the home network.

 

Solution: From Group Policy Management you create a software restriction policy.

 

Does this meet the goal?

 

A.

Yes

B.

No

 

Correct Answer: A

 

 

QUESTION 20

Note: This question is part of a series of questions that present the same scenario. Each question In the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

 

After you answer a question in this section, you will NOT be able to return to It, As a result, these questions will not appear in the review screen.

 

Your network contains an Active Directory domain named contoso.com. The domain contains multiple Hyper-V hosts.

 

You need to deploy several critical line-to-business applications to the network to meet the following requirements:

 

clip_image003The resources of the applications must be isolated (rom the physical host.

clip_image003[1]Each application must be prevented from accessing the resources of the other applications.

clip_image003[2]The configurations of the applications must be accessible only from the operating system that hosts the application.

 

Solution: You deploy a separate Hyper-V container for each application.

 

Does this meet the goal?

 

A.

Yes

B.

No

 

Correct Answer: A

100% Free Download!
—Download Free Demo:70-744 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 70-744 Full Exam PDF and VCE Q&As:50
—Get 10% off your purchase! Copy it:TJDN-947R-9CCD [2017.05.01-2017.05.31]

Ensurepass ExamCollectio
n
Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE