最新的Microsoft Securing Windows Server 2016 - 070-744免費考試真題
Your network contains an Active Directory domain named contoso.com.
The domain contains 10 servers that run Windows Server 2016 and 800 client computers that run Windows
10.
You need to configure the domain to meet the following requirements:
-Users must be locked out from their computer if they enter an incorrect password twice.
-Users must only be able to unlock a locked account by using a one-time password that is sent to their mobile phone.
You deploy all the components of Microsoft Identity Manager (MIM) 2016.
Which three actions should you perform before you deploy the MIM add-ins and extensions? Each correct answer presents part of the solution.
The domain contains 10 servers that run Windows Server 2016 and 800 client computers that run Windows
10.
You need to configure the domain to meet the following requirements:
-Users must be locked out from their computer if they enter an incorrect password twice.
-Users must only be able to unlock a locked account by using a one-time password that is sent to their mobile phone.
You deploy all the components of Microsoft Identity Manager (MIM) 2016.
Which three actions should you perform before you deploy the MIM add-ins and extensions? Each correct answer presents part of the solution.
正確答案: C,D,E
說明：（僅 Fast2test 成員可見）
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
Multiple resource properties are defined in the domain.
Server1 has a volume named Volume1.
You need to view the classification properties that have been configured on Volume1.
Which tool should you use?
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
Multiple resource properties are defined in the domain.
Server1 has a volume named Volume1.
You need to view the classification properties that have been configured on Volume1.
Which tool should you use?
正確答案: F
說明：（僅 Fast2test 成員可見）
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear i n the review screen.
You deploy Windows Server 2016 to a server named Serverl,
Von need to ensure that you can run Windows Containers on Server1.
Solution: On Server1, you enable the Containers feature, and then you install the Hyper-V server role. You restart the server.
Does this meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear i n the review screen.
You deploy Windows Server 2016 to a server named Serverl,
Von need to ensure that you can run Windows Containers on Server1.
Solution: On Server1, you enable the Containers feature, and then you install the Hyper-V server role. You restart the server.
Does this meet the goal?
正確答案: A
說明：（僅 Fast2test 成員可見）
_____ enables easier management for BitLocker enabled desktops and servers in a domain environment by providing automatic unlock of operating system volumes at system reboot when connected to a wired corporate network. This feature requires the client hardware to have a DHCP driver implemented in its UEFI firmware.
正確答案: C
說明：（僅 Fast2test 成員可見）
Note: This question b part of a series of questions that present the same scenario. Each question In the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear In the review screen.
Your network contains an Active Directory domain named contow.com. All servers run Windows Server
2016. All client computers run Windows 10.
The relevant objects in the domain are configured as shown in the following table.
You need to assign User1 the right to restore files and folders on Server1 and Server2.
Solution: You create a Group Policy object (GPO), link it to the Operations Users OU, and modify the Users Rights Assignment in the GPO.
Does this meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear In the review screen.
Your network contains an Active Directory domain named contow.com. All servers run Windows Server
2016. All client computers run Windows 10.
The relevant objects in the domain are configured as shown in the following table.
You need to assign User1 the right to restore files and folders on Server1 and Server2.
Solution: You create a Group Policy object (GPO), link it to the Operations Users OU, and modify the Users Rights Assignment in the GPO.
Does this meet the goal?
正確答案: B
說明：（僅 Fast2test 成員可見）
Your network contains an Active Directory domain named contoso.com. The domain contains a user named User1 and a computer named Computer1. Remote Server Administration Tools (RSAT) is installed on Computer1.
You need to add User1 as a data recovery agent in the domain.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You need to add User1 as a data recovery agent in the domain.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正確答案:
Explanation
Explanation:
References:
https://msdn.microsoft.com/library/cc875821.aspx#EJAA
https://www.serverbrain.org/managing-security-2003/using-the-cipher-command-to-add-data-recovery-agent.htm
Explanation:
References:
https://msdn.microsoft.com/library/cc875821.aspx#EJAA
https://www.serverbrain.org/managing-security-2003/using-the-cipher-command-to-add-data-recovery-agent.htm
Your network contains an Active Directory domain named contoso.com.
The domain contains two DNS servers that run Windows Server 2016.
The servers host two zones named contoso.com and admin.contoso.com.
You sign both zones.
You need to ensure that all client computers in the domain validate the zone records when they query the zone.
What should you deploy?
The domain contains two DNS servers that run Windows Server 2016.
The servers host two zones named contoso.com and admin.contoso.com.
You sign both zones.
You need to ensure that all client computers in the domain validate the zone records when they query the zone.
What should you deploy?
正確答案: C
說明：（僅 Fast2test 成員可見）
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Serve1, that runs Windows Server 2016.
A technician is testing the deployment of Credential Guard on Server1.
You need to verify whether Credential Guard is enabled on Server1.
What should you do?
A technician is testing the deployment of Credential Guard on Server1.
You need to verify whether Credential Guard is enabled on Server1.
What should you do?
正確答案: A
說明：（僅 Fast2test 成員可見）
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
You deploy Advanced Threat Analytics (ATA) to Server1.
You need to move the ATA database to a different folder.
Which configuration file should you modify?
You deploy Advanced Threat Analytics (ATA) to Server1.
You need to move the ATA database to a different folder.
Which configuration file should you modify?
正確答案: D
說明：（僅 Fast2test 成員可見）
You implement Log Analytics in Microsoft Operations Management Suite (OMS) on all servers that run Windows Server 2016.
You need to generate a daily report that identifies which servers restarted during the last 24 hours.
Which query should you use?
You need to generate a daily report that identifies which servers restarted during the last 24 hours.
Which query should you use?
正確答案: A
說明：（僅 Fast2test 成員可見）
Your network contains an Active Directory domain.
You install Security Compliance Manager (SCM) 4.0 on a server that runs Windows Server 2016.
You need to modify a baseline, and then make the baseline available as a domain policy.
Which four actions should you perform in sequence?
You install Security Compliance Manager (SCM) 4.0 on a server that runs Windows Server 2016.
You need to modify a baseline, and then make the baseline available as a domain policy.
Which four actions should you perform in sequence?
正確答案:
Explanation
1. Duplicate a baseline.2. Modify the settings of a baseline.3. Export the baseline as a Group Policy Object (GPO) backup4. Import settings into a Group Policy object (GPO)
1. Duplicate a baseline.2. Modify the settings of a baseline.3. Export the baseline as a Group Policy Object (GPO) backup4. Import settings into a Group Policy object (GPO)
Your network contains an Active Directory domain.
You plan to run shielded virtual machines.
You are implementing TPM attestation mode for a guarded fabric.
You create a Code Integrity policy named Integrityl.xml.
You need to ensure that you can apply the Code Integrity policy to Hyper-V hosts.
Which cmdlet should you run?
You plan to run shielded virtual machines.
You are implementing TPM attestation mode for a guarded fabric.
You create a Code Integrity policy named Integrityl.xml.
You need to ensure that you can apply the Code Integrity policy to Hyper-V hosts.
Which cmdlet should you run?
正確答案: C
說明：（僅 Fast2test 成員可見）
Your network contains an Active Directory domain named contoso.com.
You download Microsoft Security Compliance Toolkit 1.0 and all the security baselines.
You need to deploy one of the security baselines to all the computers in an organizational unit (OU) named OU1.
What should you do?
You download Microsoft Security Compliance Toolkit 1.0 and all the security baselines.
You need to deploy one of the security baselines to all the computers in an organizational unit (OU) named OU1.
What should you do?
正確答案: B
說明：（僅 Fast2test 成員可見）
You have 10 Hyper-V hosts that run Windows Server 2016.
Each Hyper-V host has eight virtual machines that run a distributed web application named App1.
You plan to implement a Software Load Balancing (SLB) solution for client access to App1.
You deploy two new virtual machines named SLB1 and SLB2.
You need to install the required components on the Hyper-V hosts and the new servers for the planned implementation.
Which components should you install? Select the Appropriate in selection area.
Each Hyper-V host has eight virtual machines that run a distributed web application named App1.
You plan to implement a Software Load Balancing (SLB) solution for client access to App1.
You deploy two new virtual machines named SLB1 and SLB2.
You need to install the required components on the Hyper-V hosts and the new servers for the planned implementation.
Which components should you install? Select the Appropriate in selection area.
正確答案:
Explanation
Component to install on SLB1 and SLB2: SLB Multiplexer (MUX)
Component to install on each Hyper-V host:SLB Host Agent
https://blogs.technet.microsoft.com/tip_of_the_day/2016/06/28/tip-of-the-day-demystifying-software-definednetw
https://technet.microsoft.com/en-us/library/mt632286.aspxSLB Host Agent - When you deploy SLB, you must use System Center, Windows PowerShell, or anothermanagement application to deploy the SLB Host Agent on every Hyper-V host computer.You can install the SLB Host Agent on all versions of Windows Server 2016 that provide Hyper-V support,including Nano Server.SLB MUX - Part of the Software Load Balancer (SLB on Windows Server 2016, the SLB MUX processesinbound network traffic and maps VIPs (virtual IPs) toDIPs (datacenter IPs), then forwards the traffic to the correct DIP. Each MUX also uses BGP to publish VIProutes to edge routers. BGP Keep Alive notifies MUXeswhen a MUX fails, which allows active MUXes to redistribute the load in case of a MUX failure - essentiallyproviding load balancing for the load balancers.
Component to install on SLB1 and SLB2: SLB Multiplexer (MUX)
Component to install on each Hyper-V host:SLB Host Agent
https://blogs.technet.microsoft.com/tip_of_the_day/2016/06/28/tip-of-the-day-demystifying-software-definednetw
https://technet.microsoft.com/en-us/library/mt632286.aspxSLB Host Agent - When you deploy SLB, you must use System Center, Windows PowerShell, or anothermanagement application to deploy the SLB Host Agent on every Hyper-V host computer.You can install the SLB Host Agent on all versions of Windows Server 2016 that provide Hyper-V support,including Nano Server.SLB MUX - Part of the Software Load Balancer (SLB on Windows Server 2016, the SLB MUX processesinbound network traffic and maps VIPs (virtual IPs) toDIPs (datacenter IPs), then forwards the traffic to the correct DIP. Each MUX also uses BGP to publish VIProutes to edge routers. BGP Keep Alive notifies MUXeswhen a MUX fails, which allows active MUXes to redistribute the load in case of a MUX failure - essentiallyproviding load balancing for the load balancers.