PrepAway - Latest Free Exam Questions & Answers

Category: 70-744 (v.1)

Exam 70-744: Securing Windows Server 2016 (update August 9th, 2017)

which cmdlet should you run on Server2?

Hotspot Question
Your network contains two Active Directory forests named contoso.com and adatum.com.
Contoso.com contains a Hyper-V host named Server1. Server1 is a member of a group named
HyperHosts. Adatum.com contains a server named Server2. Server1 and Server2 run Windows
Server 2016. Contoso.com trusts adatum.com. You plan to deploy shielded virtual machines to
Server1 and to configure Admin-trusted attestation on Server2. Which component should you install
and which cmdlet should you run on Server2? To answer, select the appropriate options in the
answer area.

You need to ensure that you can implement the Local Adm…

Hotspot Question
Note: This question is part of a series of questions that use the same scenario. For your
convenience, the scenario is repeated in each question. Each question presents a different
goal and answer choices, but the text of the scenario is exactly the same in each question
in this series.
Start of repeated scenario
Your network contains an Active Directory domain named contoso.com. The functional level of the
forest and the domain is Windows Server 2008 R2. The domain contains the servers configured as
shown in the following table.

All servers run Windows Server 2016. All client computers run Windows 10. You have an
organizational unit (OU) named Marketing that contains the computers in the marketing department.
You have an OU named Finance that contains the computers in the finance department. You have
an OU named AppServers that contains application servers. A Group Policy object (GPO) named
GP1 is linked to the Marketing OU. A GPO named GP2 is linked to the AppServers OU. You install
Windows Defender on Nano1.
End of repeated scenario
You need to ensure that you can implement the Local Administrator Password Solution (LAPS) (or
the finance department computers. What should you do in the contoso.com forest? To answer,
select the appropriate options in the answer area.

Your network contains an Active Directory domain named…

Hotspot Question
Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs Windows Server 2016. The services on Server1 are shown in the
following output.

Server1 has the AppLocker rules configured as shown in the exhibit (Click the Exhibit button).

Rule1 and Rule2 are configured a$ shown in the following table.

F g lect No.

You create a Group Policy object (GPO) named GPO1 and link…

Hotspot Question
Your network contains an Active Directory domain named adatum.com. The domain contains a file
server named Server1 that runs Windows Server 2016. You have an organizational unit (OU)
named OU1 that contains Server1. You create a Group Policy object (GPO) named GPO1 and link
GPO1 to OU1. A user named User1 is a member of group named Group1. The properties of User1
are shown in the User1 exhibit (Click the Exhibit button).

User1 has permissions to two files on Server1 configured as shown in the following table.

From Auditing Entry for Global File SACL, you configure the advanced audit policy settings in GPO1
as shown in the SACL exhibit (Click the Exhibit button).

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

How should you complete the Windows PowerShell script?

Hotspot Question
Your network contains an Active Directory forest named contoso.com. The forest has Microsoft
Identity Manager (MIM) 2016 deployed. You implement Privileged Access Management (PAM).
You need to request privileged access from a client computer in contoso.com by using PAM. How
should you complete the Windows PowerShell script? To answer, select the appropriate options in
the answer area.

You need to export the SCM Pnnt Server Secunty baseline…

Hotspot Question
Your network contains an Active Directory domain named contoso.com. You have an
organizational unit (OU) named Secure that contains all servers. You install Microsoft Security
Compliance Manager (SCM) 4.0 on a server named Server1. You need to export the SCM Pnnt
Server Secunty baseline and to deploy the baseline to a server named Server2. What should you
do? To answer, select the appropnate options in the answer area.

Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to return
to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains
multiple Hyper-V hosts. You need to deploy several critical line-to-business applications to the
network to meet the following requirements:
– The resources of the applications must be isolated (rom the physical
host.
– Each application must be prevented from accessing the resources of the
other applications.
– The configurations of the applications must be accessible only from the
operating system that hosts the application.
Solution: You deploy a separate Hyper-V container for each application.
Does this meet the goal?


Page 1 of 612345...Last »