時間就是分數，2026 年的考位可不等人。在 Fast2test 購買 70-744 題庫，付款後一分鐘內即可收到下載連結，Microsoft Securing Windows Server 2016 的 245 道練習題立刻到手，今晚就能開始練習。

Microsoft 70-744 考試概覽:

Microsoft 70-744 考試大綱主題:

Microsoft Securing Windows Server 2016 考生最常問的問題

最新的 MCSA: Windows Server 2016 70-744 免費考試真題：

問題 #1

Your network contains an Active Directory forest named contoso.com. The forest contains three domains. All domain controllers run Windows Server 2016.
You deploy a second Active Directory forest named admin.contoso.com.
The forest contains a domain member server named Server1. Server1 has Microsoft Identity Manager (MIM)
2016 deployed.
You need to implement Privileged Access Management (PAM) and to use admin.contoso.com as an administrative forest.
Which two actions should you perform? Each correct answers presents part of the solution.

A. From a domain controller in admin.contoso.com, run the New-PAMTrust cmdlet.
B. From Server1, run the New-PAMTrust cmdlet
C. From a domain controller in contoso.com. run the New-PAMTrust cmdlet.
D. From a domain controller in admin.contoso.com, run the New-PAMDomainConfiguration cmdlet
E. From Server1, run the New-PAMDomainConfiguration cmdlet
F. From a domain controller in contoso.com, run the New-PAMDomainConfiguration cmdlet.

問題 #2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear i n the review screen.
You deploy Windows Server 2016 to a server named Server1,
You need to ensure that you can run Windows Containers on Server1.
Solution: On Server1, you enable the Containers feature, and then you install the PowerShell for Docker module. You restart the server.
Does this meet the goal?

A. No
B. Yes

問題 #3

You have server named Server1.
You need to configured PowerShell logging to capture dynamic code generation. the solution must minimize the number of events that are logged.
What should you configured?

A. Protected event logging
B. Module logging
C. System-wide transcription
D. Script block logging

問題 #4

Your network contains an Active Directory domain named contoso.com. The domain contains a certification authority (CA).
You need to implement code integrity policies and sign them by using certificates issued by the CA.
You plan to use the same certificate to sign policies on multiple computers.
You duplicate the Code Signing certificate template and name the new template Codeintegrity.
How should you configure the CodeIntegrity template?

A. Enable the Allow private key to be exported setting and modify the Key Usage extension.
B. Enable the Allow private key to be exported setting and enable the Basic Constraints extension
C. Disable the Allow private key to be exported setting and disable the Basic Constraints extension.
D. Disable the Allow private key to be exported setting and modify the Application Policies extension.

問題 #5

Your network contains an Active Directory domain.
You plan to run shielded virtual machines.
You are implementing TPM attestation mode for a guarded fabric.
You create a Code Integrity policy named Integrityl.xml.
You need to ensure that you can apply the Code Integrity policy to Hyper-V hosts.
Which cmdlet should you run?

A. Add-SignerRule
B. Add-HgsAttestation TpmHost
C. Set-HvCIoptions
D. ConvertFrom-CIPolicy

問題與答案：