70-742.json

{
  "title": "Identity with Windows Server 2016",
  "description": "161 questions available in Multiple Choice en Multiple Answer format.",
  "author": {
    "id": "00001",
    "name": "Snodecoder",
    "image": "http://www.example.com/image.png"
  },
  "createdAt": "2020-07-01T22:55:11.002Z",
  "code": "70-742",
  "time": 120,
  "pass": 75,
  "image": "http://www.example.com/image.png",
  "cover": [
    {
      "variant": 2,
      "text": "Identity with Windows Server 2016"
    },
    {
      "variant": 1,
      "text": "161 questions available in Multiple Choice en Multiple Answer format."
    }
  ],
  "test": [
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You work for a company named Contoso, Ltd."
        },
        {
          "variant": 1,
          "text": "The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an Active Directory forest named adatum.com."
        },
        {
          "variant": 1,
          "text": "The contoso.com forest contains the objects configured as shown in the following table."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image1.jpg"
        },
        {
          "variant": 1,
          "text": "Group1 and Group2 contain only user accounts."
        },
        {
          "variant": 1,
          "text": "Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3 that runs Windows 10. Computer3 is currently in a workgroup."
        },
        {
          "variant": 1,
          "text": "An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain."
        },
        {
          "variant": 1,
          "text": "From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com domain, and then you create a contact named Contact1 in OU1."
        },
        {
          "variant": 1,
          "text": "An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a user logon name of User1@litwareinc.com."
        },
        {
          "variant": 1,
          "text": "You need to ensure that User2 can add Group4 as a member of Group5."
        },
        {
          "variant": 1,
          "text": "What should you modify?"
        },
        {
          "variant": 1,
          "text": " "
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "the group scope of Group5"
        },
        {
          "label": "B",
          "Text": "the Managed By settings of Group4"
        },
        {
          "label": "C",
          "Text": "the group scope of Group4"
        },
        {
          "label": "D",
          "Text": "the Managed By settings of Group5"
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You work for a company named Contoso, Ltd."
        },
        {
          "variant": 1,
          "text": "The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an Active Directory forest named adatum.com."
        },
        {
          "variant": 1,
          "text": "The contoso.com forest contains the objects configured as shown in the following table."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image2.jpg"
        },
        {
          "variant": 1,
          "text": "Group1 and Group2 contain only user accounts."
        },
        {
          "variant": 1,
          "text": "Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3 that runs Windows 10. Computer3 is currently in a workgroup."
        },
        {
          "variant": 1,
          "text": "An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain."
        },
        {
          "variant": 1,
          "text": "From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com domain, and then you create a contact named Contact1 in OU1."
        },
        {
          "variant": 1,
          "text": "An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a user logon name of User1@litwareinc.com."
        },
        {
          "variant": 1,
          "text": "End or repeated scenario."
        },
        {
          "variant": 1,
          "text": "You need to ensure that Admin1 can add Group2 as a member of Group3."
        },
        {
          "variant": 1,
          "text": "What should you modify?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Modify the Security settings of Group3."
        },
        {
          "label": "B",
          "Text": "Modify the group scope of Group3."
        },
        {
          "label": "C",
          "Text": "Modify the group type of Group3."
        },
        {
          "label": "D",
          "Text": "Set Admin1 as the manager of Group3."
        },
        {
          "label": "E",
          "Text": "Add Admin1 to the Enterprise Admins group"
        }
      ],
      "answer": [
        false,
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com"
        },
        {
          "variant": 1,
          "text": "Your company plans to hire 500 temporary employees for a project that will last 90 days."
        },
        {
          "variant": 1,
          "text": "You create a new user account for each employee. An organizational unit (OU) named Temp contains the user accounts for the employees."
        },
        {
          "variant": 1,
          "text": "You need to prevent the new users from accessing any of the resources in the domain after 90 days."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Run the Get-ADUser cmdlet and pipe the output to the Set-ADUser cmdlet."
        },
        {
          "label": "B",
          "Text": "Create a group that contains all of the users in the Temp OU. Create a Password Setting object (PSO) for the new group."
        },
        {
          "label": "C",
          "Text": "Create a Group Policy object (GPO) and link the GPO to the Temp OU. Modify the Password Policy settings of the GPO."
        },
        {
          "label": "D",
          "Text": "Run the Get-ADOrganizationalUnit cmdlet and pipe the output to the Set-Date cmdlet."
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest. The forest contains two domains named litwarenc.com and contoso.com. The contoso.com domain contains two domains controllers named LON-DC01 and LON-DC02."
        },
        {
          "variant": 1,
          "text": "The domain controllers are located in a site named London that is associated to a subnet of 192.168.10.0/24"
        },
        {
          "variant": 1,
          "text": "You discover that LON-DC02 is not a global catalog server. You need to configure LON-DC02 as a global catalog server."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From Active Directory Sites and Services, modify the properties of the 192.168.10.0/24 IP subnet."
        },
        {
          "label": "B",
          "Text": "From Windows PowerShell, run the Set-NetNatGlobal cmdlet."
        },
        {
          "label": "C",
          "Text": "From Active Directory Sites and Services, modify the NTDS Settings object of LON-DC02."
        },
        {
          "label": "D",
          "Text": "From Windows PowerShell, run the Enable-ADOptionalFeature cmdlet."
        },
        {
          "label": "E",
          "Text": "From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the NTDS settings."
        },
        {
          "label": "F",
          "Text": "From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the City attribute."
        },
        {
          "label": "G",
          "Text": "From the properties of the Domain Controllers organizational unit (OU) in Active Directory Users and Computers, modify the Security settings."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2012 R2."
        },
        {
          "variant": 1,
          "text": "You need to secure several high-privilege user accounts to meet the following requirements:"
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Create a universal security group for the user accounts and modify the Security settings of the group."
        },
        {
          "label": "B",
          "Text": "Add the users to the Windows Authorization Access Group group."
        },
        {
          "label": "C",
          "Text": "Add the user to the Protected Users group."
        },
        {
          "label": "D",
          "Text": "Create a separate organizational unit (OU) for the user accounts and modify the Security settings of the OU."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com. Users frequently access the website of an external partner company. The URL of the website is http://partners.adatum.com."
        },
        {
          "variant": 1,
          "text": "The partner company informs you that it will perform maintenance on its Web server and that the IP addresses of the Web server will change."
        },
        {
          "variant": 1,
          "text": "After the change is complete, the users on your internal network report that they fail to access the website. However, some users who work from home report that they can access the website."
        },
        {
          "variant": 1,
          "text": "You need to ensure that your DNS servers can resolve partners.adatum.com to the correct IP address immediately."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Run dnscmd and specify the CacheLockingPercent parameter."
        },
        {
          "label": "B",
          "Text": "Run Set-DnsServerGlobalQueryBlockList."
        },
        {
          "label": "C",
          "Text": "Run ipconfig and specify the Renew parameter."
        },
        {
          "label": "D",
          "Text": "Run Set-DnsServerCache."
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You network contains one Active Directory domain named adatum.com. The domain contains a DNS server named Server1 that runs Windows Server 2016. All domain computers use Server1 for DNS."
        },
        {
          "variant": 1,
          "text": "You sign adatum.com by using DNSSEC. "
        },
        {
          "variant": 1,
          "text": "You need to configure the domain computers to validate DNS responses for adatum.com records."
        },
        {
          "variant": 1,
          "text": "What should you configure in Group Policy?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Network List Manager Policies"
        },
        {
          "label": "B",
          "Text": "Network Access Protection (NAP)"
        },
        {
          "label": "C",
          "Text": "Name Resolution Policy"
        },
        {
          "label": "D",
          "Text": "Public Key Policy"
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": " "
        },
        {
          "variant": 1,
          "text": "You work for a company named Contoso, Ltd."
        },
        {
          "variant": 1,
          "text": "The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an Active Directory forest named adatum.com. The contoso.com forest contains the objects configured as shown in the following table."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image2.jpg"
        },
        {
          "variant": 1,
          "text": "Group1 and Group2 contain only user accounts."
        },
        {
          "variant": 1,
          "text": "Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3 that runs Windows 10. Computer3 is currently in a workgroup."
        },
        {
          "variant": 1,
          "text": "An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain."
        },
        {
          "variant": 1,
          "text": "From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com domain, and then you create a contact named Contact1 in OU1."
        },
        {
          "variant": 1,
          "text": "An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a user logon name of User1@litwareinc.com."
        },
        {
          "variant": 1,
          "text": " "
        },
        {
          "variant": 1,
          "text": "You need to ensure that Admin1 can convert Group1 to a global group."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Add Admin1 to the Enterprise Admins group."
        },
        {
          "label": "B",
          "Text": "Remove all the members from Group1."
        },
        {
          "label": "C",
          "Text": "Modify the Security settings of Group1."
        },
        {
          "label": "D",
          "Text": "Convert Group1 to a universal security group."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 1,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers."
        },
        {
          "variant": 1,
          "text": "You have a branch office that has a local support technician named Tech1. Tech1 installs Windows Server 2016 on a server named RODC1 in a workgroup."
        },
        {
          "variant": 1,
          "text": "You need Tech1 to deploy RODC1 as a read-only domain controller (RODC) in the contoso.com domain."
        },
        {
          "variant": 1,
          "text": "Which three actions should you perform? Each correct answer presents part of the solution."
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Instruct Tech1 to run the Active Directory Domain Services Configuration Wizard."
        },
        {
          "label": "B",
          "Text": "Create an RODC computer account by using Active Administrative Center."
        },
        {
          "label": "C",
          "Text": "Instruct Tech1 to run dcpromo.exe on RODC1."
        },
        {
          "label": "D",
          "Text": "Instruct Tech1 to install the Active Directory Domain Services server role on RODC1."
        },
        {
          "label": "E",
          "Text": "Modify the permissions of the Domain Controllers organizational unit (OU)."
        }
      ],
      "answer": [
        true,
        true,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2012 R2."
        },
        {
          "variant": 1,
          "text": "Your company hires a new security administrator to manage sensitive user data. You create a user account named Security1 for the security administrator."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the password for Security1 has at least 12 characters and is modified every 10 days. The solution must apply to Security1 only."
        },
        {
          "variant": 1,
          "text": "Which tool should you use?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Dsadd quota"
        },
        {
          "label": "B",
          "Text": "Dsmod"
        },
        {
          "label": "C",
          "Text": "Active Directory Administrative Center"
        },
        {
          "label": "D",
          "Text": "Dsacls"
        },
        {
          "label": "E",
          "Text": "Dsamain"
        },
        {
          "label": "F",
          "Text": "Active Directory Users and Computers"
        },
        {
          "label": "G",
          "Text": "Ntdsutil"
        },
        {
          "label": "H",
          "Text": "Group Policy Management Console"
        }
      ],
      "answer": [
        false,
        false,
        true,
        false,
        false,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain. All client computers run Windows 10."
        },
        {
          "variant": 1,
          "text": "A client computer named Computer1 was in storage for five months and was unused during that time. You attempt to sign in to the domain from Computer1 and receive an error message."
        },
        {
          "variant": 1,
          "text": "You need to ensure that you can sign in to the domain from Computer1."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Unjoin Computer1 from the domain, and then join the computer to the domain."
        },
        {
          "label": "B",
          "Text": "From Active Directory Administrative Center, reset the computer account of Computer1."
        },
        {
          "label": "C",
          "Text": "From Active Directory Administrative Center, disable Computer1, and then enable the computer account of Computer1."
        },
        {
          "label": "D",
          "Text": "From Active Directory Users and Computers, run the Delegation of Control Wizard."
        },
        {
          "label": "E",
          "Text": "From Windows PowerShell on Computer1, run the Restore-Computer cmdlet"
        },
        {
          "label": "F",
          "Text": "From a command prompt, run the Systemreset.exe command"
        },
        {
          "label": "G",
          "Text": "From Windows PowerShell on Computer1, run the Set-ADComputer cmdlet "
        }
      ],
      "answer": [
        true,
        false,
        false,
        false,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest and the domains is Windows Server 2008 R2."
        },
        {
          "variant": 1,
          "text": "You have a global group named Group1 in the contoso.com domain. Group1 contains the user accounts in the contoso.com."
        },
        {
          "variant": 1,
          "text": "You need to ensure that you can add the user accounts in the fabrikam.com domain to Group1."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Assign the Domain Controllers group in fabrikam.com permissions to Group1."
        },
        {
          "label": "B",
          "Text": "Modify the scope of Group1 to Universal."
        },
        {
          "label": "C",
          "Text": "Raise the domain functional level contoso.com to Windows Server 2016."
        },
        {
          "label": "D",
          "Text": "Raise the domain functional level of fabriakm.com Windows Server 2016."
        },
        {
          "label": "E",
          "Text": "Change Group1 to a distribution group"
        }
      ],
      "answer": [
        false,
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1."
        },
        {
          "variant": 1,
          "text": "You need to add a domain user named User1 to the local Administrators group on Server1."
        },
        {
          "variant": 1,
          "text": "Solution: From a domain controller, you run the Set-AdComputer cmdlet."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://technet.microsoft.com/es-es/library/hh852268(v=wps.620).aspx"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1."
        },
        {
          "variant": 1,
          "text": "You need to add a domain user named User1 to the local Administrators group on Server1."
        },
        {
          "variant": 1,
          "text": "Solution: From the Computer Configuration node of GPO1, you configure the Local Users and Groups preference."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://www.ntweekly.com/2015/01/10/how-to-add-users-to-local-admin-group-using-group-policy-windows-server-2012/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1."
        },
        {
          "variant": 1,
          "text": "You need to add a domain user named User1 to the local Administrators group on Server1."
        },
        {
          "variant": 1,
          "text": "Solution: From the Computer Configuration node of GPO1, you configure the Account Policies settings."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://technet.microsoft.com/pt-pt/library/cc757692(v=ws.10).aspx"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "The Computer account for Server1 is in organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1."
        },
        {
          "variant": 1,
          "text": "You need to add a domain user named User1 to the local Administrators group on Server1."
        },
        {
          "variant": 1,
          "text": "Solution: From the Computer Configuration node of GPO1, you configure the Restricted Groups settings."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "All users are in an organizational unit (OU) named Corp_Users."
        },
        {
          "variant": 1,
          "text": "You plan to modify the description of all the users who have a string of 514 in their mobile phone number."
        },
        {
          "variant": 1,
          "text": "You need to view a list of the users that will be modified."
        },
        {
          "variant": 1,
          "text": "What should you run?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Get-ADOrganizationalUnit-Filter “mobilePhone-Like ‘*514*’ ”"
        },
        {
          "label": "B",
          "Text": "Get-ADUser-LDAPFilter “(mobilePhone= ‘*514*’)”"
        },
        {
          "label": "C",
          "Text": "Get-ADUser-Filter “mobilePhone-Like ‘*514*’ ”"
        },
        {
          "label": "D",
          "Text": "Get-ADOrganizationalUnit-LDAPFilter “(mobilePhone= ‘*514*’)”"
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain. The domain contains a computer named Computer1 and an organizational unit (OU) named TestOU. TestOU contains 10 computer accounts that are used for testing. A Group Policy object (GPO) named GPO1 is linked to TestOU."
        },
        {
          "variant": 1,
          "text": "On Computer1, you modify the User Right Assignment by using the local policy."
        },
        {
          "variant": 1,
          "text": "You need to apply the User Right Assignment from Computer1 to the 10 test computers."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "On Computer1 run the secedit.exe command and specify the /export parameter. Edit GPO1, and then import a security template."
        },
        {
          "label": "B",
          "Text": "On Computer1, run the gpresult.exe command and specify the /x parameter. Edit GPO1, and then import a security template."
        },
        {
          "label": "C",
          "Text": "On Computer1, run the secedit.exe command and specify the /export parameter. From Group Policy Management, run the Import Settings Wizard."
        },
        {
          "label": "D",
          "Text": "On Computer1, run the gpresult.exe command and specify the /x parameter. From Group Policy Management, run the Restore Group Policy Object Wizard."
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 1,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains a single-domain Active Directory forest named contoso. com. The forest functional level is Windows Server 2016. The forest has Dynamic Access Control enabled. The domain contains two domain controllers named DC1 and DC2. Privileged user accounts used to manage Active Directory reside in a group named Contoso\\AD_Admins."
        },
        {
          "variant": 1,
          "text": "You create an authentication policy named Policy1 and an authentication policy silo named Silo1."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the accounts in the Contoso\\AD_Admins group can sign in to the domain controllers only."
        },
        {
          "variant": 1,
          "text": "Which three configurations should you perform? Each correct answer presents part of the solution."
        },
        {
          "variant": 1,
          "text": "NOTE: Each correct selection is worth one point."
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Create an access control condition in Policy1."
        },
        {
          "label": "B",
          "Text": "Create a managed service account and add the account to Permitted Accounts in Silo1."
        },
        {
          "label": "C",
          "Text": "Add the domain controllers to the Contoso\\AD_Admins group."
        },
        {
          "label": "D",
          "Text": "Add the privileged user accounts and the domain controllers to Permitted Accounts in Silo1."
        },
        {
          "label": "E",
          "Text": "Assign Silo1 to the privileged user accounts and the domain controllers."
        }
      ],
      "answer": [
        true,
        false,
        false,
        true,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain."
        },
        {
          "variant": 1,
          "text": "You have a user account that is a member of the Domain Admins group."
        },
        {
          "variant": 1,
          "text": "You have 100 laptops that have a standard corporate image installed. The laptops are in workgroups and have random names."
        },
        {
          "variant": 1,
          "text": "A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each laptop must be in an organizational unit (OU) that is associated to the department of the user who will use the laptop. The laptop names must start with four characters indicating the department, followed by a four-digit number."
        },
        {
          "variant": 1,
          "text": "Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops."
        },
        {
          "variant": 1,
          "text": "You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and the computer accounts of the laptops are in the correct OUs."
        },
        {
          "variant": 1,
          "text": "Solution: You instruct Tech1 to sign in to each laptop, to rename each laptop by using System in Control Panel, and then to join each laptop to the domain by using the Netdom join command."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain."
        },
        {
          "variant": 1,
          "text": "You have a user account that is a member of the Domain Admins group."
        },
        {
          "variant": 1,
          "text": "You have 100 laptops that have a standard corporate image installed. The laptops are in workgroups and have random names."
        },
        {
          "variant": 1,
          "text": "A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each laptop must be in an organizational unit (OU) that is associated to the department of the user who will use the laptop. The laptop names must start with four characters indicating the department, followed by a four-digit number."
        },
        {
          "variant": 1,
          "text": "Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops."
        },
        {
          "variant": 1,
          "text": "You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and the computer accounts of the laptops are in the correct OUs."
        },
        {
          "variant": 1,
          "text": "Solution: You pre-create the computer account of each laptop in Active Directory Users and Computers."
        },
        {
          "variant": 1,
          "text": "You instruct Tech1 to sign in to each laptop, to rename each laptop, and then to join each laptop to the domain by using System in Control Panel."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "A user named User1 is in an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You are troubleshooting a folder access issue for User1."
        },
        {
          "variant": 1,
          "text": "You need a list of groups to which User1 is either a direct member or an indirect member."
        },
        {
          "variant": 1,
          "text": "Solution: You run Get-ADGroup –Identity User1 –Property MemberOf."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "The"
        },
        {
          "variant": 1,
          "text": "Get-ADGroup"
        },
        {
          "variant": 1,
          "text": "cmdlet"
        },
        {
          "variant": 1,
          "text": "does"
        },
        {
          "variant": 1,
          "text": "not"
        },
        {
          "variant": 1,
          "text": "include"
        },
        {
          "variant": 1,
          "text": "the"
        },
        {
          "variant": 1,
          "text": "MemberOf"
        },
        {
          "variant": 1,
          "text": "property."
        },
        {
          "variant": 1,
          "text": "The"
        },
        {
          "variant": 1,
          "text": "command"
        },
        {
          "variant": 1,
          "text": "above"
        },
        {
          "variant": 1,
          "text": "is,"
        },
        {
          "variant": 1,
          "text": "therefore,"
        },
        {
          "variant": 1,
          "text": "not"
        },
        {
          "variant": 1,
          "text": "valid."
        },
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/powershell/module/addsadministration/get-adgroup?view=win10-ps"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "A user named User1 is in an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You are troubleshooting a folder access issue for User1."
        },
        {
          "variant": 1,
          "text": "You need a list of groups to which User1 is either a direct member or ab indirect member."
        },
        {
          "variant": 1,
          "text": "Solution: You run dsget user cn=User1, ou=OU1, dc=contoso, dc=com –memberof –expand."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc732535%28v%3dws.10%29"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "A user named User1 is in an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You are troubleshooting a folder access issue for User1."
        },
        {
          "variant": 1,
          "text": "You need a list of groups to which User1 is either a direct member or an indirect member."
        },
        {
          "variant": 1,
          "text": "Solution: You instruct User 1 to sign in and run whoami.exe/groups."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://www.thewindowsclub.com/whoami-windows"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You create a user account that will be used as a template for new user accounts."
        },
        {
          "variant": 1,
          "text": "Which setting will be copied when you copy the user account from Active Directory Users and Computers?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "the Department attribute"
        },
        {
          "label": "B",
          "Text": "the Description attribute"
        },
        {
          "label": "C",
          "Text": "Permission"
        },
        {
          "label": "D",
          "Text": "Remote Desktop Services Profile"
        },
        {
          "label": "E",
          "Text": "the User logon name attribute "
        },
        {
          "label": "F",
          "Text": "Published Certificates "
        },
        {
          "label": "G",
          "Text": "the Office attribute "
        }
      ],
      "answer": [
        true,
        false,
        false,
        false,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 1,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest."
        },
        {
          "variant": 1,
          "text": "Some users report experiencing difficulties signing in to domain controllers. You suspect that the service location (SRV) records might be causing the issue."
        },
        {
          "variant": 1,
          "text": "What are two possible commands that you can run to verify the SRV records? Each correct answer presents a complete solution."
        },
        {
          "variant": 1,
          "text": "NOTE: Each correct selection is worth one point."
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "dnscmd /DirectoryPartitionInfo"
        },
        {
          "label": "B",
          "Text": "dcdiag.exe /test:DNS"
        },
        {
          "label": "C",
          "Text": "dcdiag.exe /test:connectivity"
        },
        {
          "label": "D",
          "Text": "dnscmd /IpValidate"
        },
        {
          "label": "E",
          "Text": "dcdiag.exe /test:DnsRecordRegistration"
        },
        {
          "label": "F",
          "Text": "dnscmd /info"
        }
      ],
      "answer": [
        false,
        false,
        true,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your company has multiple branch offices."
        },
        {
          "variant": 1,
          "text": "The network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "In one of the branch offices, a new technician is hired to add computers to the domain."
        },
        {
          "variant": 1,
          "text": "After successfully joining multiple computers to the domain, the technician fails to join any more computers to the domain."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the technician can join an unlimited number of computers to the domain."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Run the Delegation of Control Wizard on the Computers container."
        },
        {
          "label": "B",
          "Text": "Run the redircmp.exe command."
        },
        {
          "label": "C",
          "Text": "Modify the Security settings of the technician’s user account."
        },
        {
          "label": "D",
          "Text": "Add the technician to the Windows Authorization Access group."
        },
        {
          "label": "E",
          "Text": "Configure the technician’s user account as a manager service account."
        },
        {
          "label": "F",
          "Text": "Run the Set-ADComputer cmdlet."
        },
        {
          "label": "G",
          "Text": "Add the technician to the Domain Computers group."
        }
      ],
      "answer": [
        true,
        false,
        false,
        false,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://www.itprotoday.com/active-directory/delegating-privileges-active-directory"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You create a user account that will be used as a template for new user accounts."
        },
        {
          "variant": 1,
          "text": "Which setting will be copied when you copy the user account from Active Directory Users and Computers?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Published Certificates"
        },
        {
          "label": "B",
          "Text": "the Member of attribute"
        },
        {
          "label": "C",
          "Text": "the Office attribute"
        },
        {
          "label": "D",
          "Text": "the Description attribute"
        },
        {
          "label": "E",
          "Text": "Permissions"
        },
        {
          "label": "F",
          "Text": "Remote Desktop Services Profile"
        }
      ],
      "answer": [
        false,
        true,
        false,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "http://www.rebeladmin.com/2014/07/create-users-with-user-templates-in-ad/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains two Active Directory forests named fabrikam.com and contoso.com. Each forest contains two sites. Each site contains two domain controllers."
        },
        {
          "variant": 1,
          "text": "You need to configure all the domain controllers in both the forests as global catalog servers."
        },
        {
          "variant": 1,
          "text": "Which snap-in should you use?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Active Directory Users and Computers"
        },
        {
          "label": "B",
          "Text": "Active Directory Sites and Services"
        },
        {
          "label": "C",
          "Text": "Active Directory Domains and Trusts"
        },
        {
          "label": "D",
          "Text": "Active Directory Federation Services"
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains the Active Directory forests and domains shown in the following table:"
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image4.jpg"
        },
        {
          "variant": 1,
          "text": "A two-way forest trust exists between ForestA and ForestB. "
        },
        {
          "variant": 1,
          "text": "Each domain in ForestB contains user accounts that are used to manage servers. "
        },
        {
          "variant": 1,
          "text": "You need to ensure that the user accounts used to manage the servers in ForestB are members of the Server Operators in ForestA. "
        },
        {
          "variant": 1,
          "text": "Solution: In DomainBRoot, you add the users to the Server Operators group. You modify the membership of the Server Operators in ForestA. "
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#bkmk-serveroperators"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains the Active Directory forests and domains shown in the following table:"
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image4.jpg"
        },
        {
          "variant": 1,
          "text": "A two-way forest trust exists between ForestA and ForestB. "
        },
        {
          "variant": 1,
          "text": "Each domain in ForestB contains user accounts that are used to manage servers. "
        },
        {
          "variant": 1,
          "text": "You need to ensure that the user accounts used to manage the servers in ForestB are members of the Server Operators in ForestA. "
        },
        {
          "variant": 1,
          "text": "Solution: In each domain in ForestB, you create a global group that contains the user accounts of the respective domain. You create a universal group in DomainBRoot. You add the new global groups to the new universal group. You modify the membership of the Server Operators in ForestA."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes "
        },
        {
          "label": "B",
          "Text": "No "
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#bkmk-serveroperators"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains the Active Directory forests and domains shown in the following table. "
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image5.jpg"
        },
        {
          "variant": 1,
          "text": "A two-way forest trust exists between ForestA and ForestB. Each domain in ForestB contains user accounts that are used to manage servers. You need to ensure that the user accounts used to manage the servers in ForestB are members of the server Operators groups in ForestA. "
        },
        {
          "variant": 1,
          "text": "Solution: In each domain in ForestB, you add the users to the Server Operators group. You modify the membership of the Server Operations in ForestA. "
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#bkmk-serveroperators"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest and the domains is Windows Server 2008 R2."
        },
        {
          "variant": 1,
          "text": "You have a global group named Group1 in the contoso.com domain. Group1 contains the user accounts in contoso.com."
        },
        {
          "variant": 1,
          "text": "You need to ensure that you can add the user accounts in the fabrikam.com domain to Group1."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Raise the domain functional level of fabrikam.com to Windows Server 2016"
        },
        {
          "label": "B",
          "Text": "Modify the scope of Group1 to Domain local"
        },
        {
          "label": "C",
          "Text": "Assign the Domain Controllers group in fabrikam.com permissions to Group1"
        },
        {
          "label": "D",
          "Text": "Run the Set-LocalGroup cmdlet"
        },
        {
          "label": "E",
          "Text": "Change Group1 to a distribution group"
        },
        {
          "label": "F",
          "Text": "Raise the domain functional level of contoso.com to Windows Server 2016"
        },
        {
          "label": "G",
          "Text": "In both domains, run the adprep.exe command and specify the /domainprep parameter "
        }
      ],
      "answer": [
        false,
        true,
        false,
        false,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "Reference:"
        },
        {
          "variant": 1,
          "text": "https://www.netwrix.com/active_directory_group_management.html"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com."
        },
        {
          "variant": 1,
          "text": "You need to identify which server is the schema master."
        },
        {
          "variant": 1,
          "text": "Solution: You open Active Directory Users and Computers, right-click contoso.com in the console tree, and then click Operations Master."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://www.petri.com/determining_fsmo_role_holders"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com."
        },
        {
          "variant": 1,
          "text": "You need to identify which server is the schema master."
        },
        {
          "variant": 1,
          "text": "Solution: From Windows PowerShell, you run Get-ADDomainController –Discover –Service 2."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/powershell/module/addsadministration/get-addomaincontroller?view=win10-ps"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You work for a company named Contoso, Ltd."
        },
        {
          "variant": 1,
          "text": "The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an Active Directory forest named adatum.com."
        },
        {
          "variant": 1,
          "text": "The contoso.com forest contains the objects configured as shown in the following table."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image2.jpg"
        },
        {
          "variant": 1,
          "text": "Group1 and Group2 contain only user accounts."
        },
        {
          "variant": 1,
          "text": "Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3 that runs Windows 10. Computer3 is currently in a workgroup."
        },
        {
          "variant": 1,
          "text": "An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain."
        },
        {
          "variant": 1,
          "text": "From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com domain, and then you create a contact named Contact1 in OU1."
        },
        {
          "variant": 1,
          "text": "An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a user logon name of User1@litwareinc.com."
        },
        {
          "variant": 1,
          "text": "Admin1 attempts to delete OU1 and receives an error message."
        },
        {
          "variant": 1,
          "text": "You need to ensure that Admin1 can delete OU1."
        },
        {
          "variant": 1,
          "text": "What should you do first?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Modify the Object settings for OU1"
        },
        {
          "label": "B",
          "Text": "Add Admin1 to the Enterprise Admins group"
        },
        {
          "label": "C",
          "Text": "Delete Contact1"
        },
        {
          "label": "D",
          "Text": "Disable the Active Directory Recycle Bin"
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://www.dtonias.com/access-denied-delete-move-ou-active-directory/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com."
        },
        {
          "variant": 1,
          "text": "Your company plans to hire 500 temporary employees for a project that will last 90 days."
        },
        {
          "variant": 1,
          "text": "You create a new user account for each employee. An organizational unit (OU) named Temp contains the user accounts for the employees."
        },
        {
          "variant": 1,
          "text": "You need to prevent the new users from accessing any of the resources in the domain after 90 days."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Run the Get-ADOrganizationalUnit cmdlet and pipe the output to the Set-Date cmdlet."
        },
        {
          "label": "B",
          "Text": "Run the Get-ADOrganizationalUnit cmdlet and pipe the output to the Set-ADAccountPassword cmdlet."
        },
        {
          "label": "C",
          "Text": "Run the Get-ADUser cmdlet and pipe the output to the Set-ADAccountExpiration cmdlet."
        },
        {
          "label": "D",
          "Text": "Create a Group Policy object (GPO) and link the GPO to the Temp OU. Modify the Account Lockout Policy of the GPO."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/powershell/module/addsadministration/set-adaccountexpiration?view=win10-ps"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest. The forest contains a forest root domain named contoso.com and a child domain named eu.contoso.com. Each domain contains two domain controllers that run Windows Server 2012 R2."
        },
        {
          "variant": 1,
          "text": "The forest functional level is Windows Server 2008 R2. The domain functional level of contoso.com is Windows Server 2012 R2. The domain functional level of eu.contoso.com is Windows Server 2008 R2."
        },
        {
          "variant": 1,
          "text": "You need to raise the domain functional level of contoso.com to Windows Server 2016. The solution must minimize administrative effort."
        },
        {
          "variant": 1,
          "text": "What should you do before you raise the domain functional level?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Raise the forest functional level"
        },
        {
          "label": "B",
          "Text": "Upgrade all of the domain controllers in the forest"
        },
        {
          "label": "C",
          "Text": "Upgrade all of the domain controllers in contoso.com"
        },
        {
          "label": "D",
          "Text": "Raise the domain functional level of eu.contoso.com"
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You work for a company named Contoso, Ltd."
        },
        {
          "variant": 1,
          "text": "The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an Active Directory forest named adatum.com."
        },
        {
          "variant": 1,
          "text": "The contoso.com forest contains the objects configured as shown in the following table."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image2.jpg"
        },
        {
          "variant": 1,
          "text": "Group1 and Group2 contain only user accounts."
        },
        {
          "variant": 1,
          "text": "Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3 that runs Windows 10. Computer3 is currently in a workgroup."
        },
        {
          "variant": 1,
          "text": "An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain."
        },
        {
          "variant": 1,
          "text": "From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com domain, and then you create a contact named Contact1 in OU1."
        },
        {
          "variant": 1,
          "text": "An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a user logon name of User1@litwareinc.com."
        },
        {
          "variant": 1,
          "text": "You need to ensure that User1 can back up the data stored on Computer1. The solution must prevent the user from restoring the data on Computer1."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Add User1 to the Backup Operators group of the domain"
        },
        {
          "label": "B",
          "Text": "Modify the Security Settings of the local Group Policy on Computer1"
        },
        {
          "label": "C",
          "Text": "Add User1 to the Power Users group on Computer1"
        },
        {
          "label": "D",
          "Text": "Add User1 to the Backup Operators group on Computer1"
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/back-up-files-and-directories"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain."
        },
        {
          "variant": 1,
          "text": "You have a user account that is a member of the Domain Admins group."
        },
        {
          "variant": 1,
          "text": "You have 100 laptops that have a standard corporate image installed. The laptops are in workgroups and have random names."
        },
        {
          "variant": 1,
          "text": "A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each laptop must be in an organizational unit (OU) that is associated to the department of the user who will use the laptop. The laptop names must start with four characters indicating the department, followed by a four-digit number."
        },
        {
          "variant": 1,
          "text": "Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops."
        },
        {
          "variant": 1,
          "text": "You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and the computer accounts of the laptops are in the correct OUs."
        },
        {
          "variant": 1,
          "text": "Solution: You script the creation of files domain join, and then you give the files to Tech1."
        },
        {
          "variant": 1,
          "text": "You instruct Tech1 to sign in to each laptop, and then to run djoin.exe."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. You have an organizational unit (OU) named LondonUsers that contains 10,000 users. You need to modify the office attribute of all the users in the LondonUsers OU. "
        },
        {
          "variant": 1,
          "text": "Solution: From PowerShell, you run the Get-ADUser cmdlet and specify the –SearchBase parameter. You pipe the results to the Set-Aduser cmdlet. "
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. You have an organizational unit (OU) named LondonUsers that contains 10,000 users. You need to modify the office attribute of all the users in the LondonUsers OU. "
        },
        {
          "variant": 1,
          "text": "Solution: You create an LDIF file. You run ldifde.exe and specify the –i and –f parameters. "
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://webactivedirectory.com/2011/07/18/simple-powershell-script-to-bulk-update-or-modify-active-directory-user-attributes/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the Administrators group on each computer in the domain always contains Contoso\\Domain Admins."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Modify the Default Domain Policy and enable the Accounts: Administrator Account status setting."
        },
        {
          "label": "B",
          "Text": "Modify the Default Domain Policy and configure the Restricted Groups setting."
        },
        {
          "label": "C",
          "Text": "Modify the Default Domain Controllers Policy and enable the Accounts: Administrator account status setting."
        },
        {
          "label": "D",
          "Text": "Modify the Default Domain Controllers Policy and configure the Restricted Groups setting."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest and the domains is Windows Server 2008 R2."
        },
        {
          "variant": 1,
          "text": "You have a global group named Group1 in the contoso.com domain. Group1 contains the user accounts in the contoso.com."
        },
        {
          "variant": 1,
          "text": "You need to ensure that you can add the user accounts in the fabrikam.com domain to Group1."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Modify the scope of Group1 to Universal."
        },
        {
          "label": "B",
          "Text": "Raise the domain functional level contoso.com to Windows Server 2016."
        },
        {
          "label": "C",
          "Text": "Run the Set-LocalGroup cmdlet."
        },
        {
          "label": "D",
          "Text": "Change Group1 to a distribution group."
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. You have an organizational unit (OU) named LondonUsers that contains 10,000 users. You need to modify the office attribute of all the users in the LondonUsers OU. "
        },
        {
          "variant": 1,
          "text": "Solution: From PowerShell, you run the Get-ADObject cmdlet and specify the –SearchBase and LdapFilter parameter. You pipe the results to the Set-ADObject cmdlet. "
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/powershell/module/activedirectory/get-adobject?view=winserver2012-ps"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You need to limit the number of Active Directory Domain Services (AD DS) objects that a user can create in the domain."
        },
        {
          "variant": 1,
          "text": "Which tool should you use?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Dsadd quota"
        },
        {
          "label": "B",
          "Text": "Dsmod"
        },
        {
          "label": "C",
          "Text": "Active Directory Administrative Center"
        },
        {
          "label": "D",
          "Text": "Dsacls"
        },
        {
          "label": "E",
          "Text": "Dsamain"
        },
        {
          "label": "F",
          "Text": "Active Directory Users and Computers"
        },
        {
          "label": "G",
          "Text": "Ntdsutil"
        },
        {
          "label": "H",
          "Text": "Group Policy Management Console"
        }
      ],
      "answer": [
        true,
        false,
        false,
        false,
        false,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://blogs.technet.microsoft.com/activedirectoryua/2009/03/19/active-directory-quotas/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012 R2."
        },
        {
          "variant": 1,
          "text": "You need to ensure that a domain administrator can recover a deleted Active Directory object quickly."
        },
        {
          "variant": 1,
          "text": "Which tool should you use?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Dsadd quota"
        },
        {
          "label": "B",
          "Text": "Dsmod"
        },
        {
          "label": "C",
          "Text": "Active Directory Administrative Center"
        },
        {
          "label": "D",
          "Text": "Dsacls"
        },
        {
          "label": "E",
          "Text": "Dsamain"
        },
        {
          "label": "F",
          "Text": "Active Directory Users and Computers"
        },
        {
          "label": "G",
          "Text": "Ntdsutil"
        },
        {
          "label": "H",
          "Text": "Group Policy Management Console"
        }
      ],
      "answer": [
        false,
        false,
        true,
        false,
        false,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://blogs.technet.microsoft.com/canitpro/2014/07/28/step-by-step-restoring-a-deleted-object-via-active-directory-recycle-bin/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com."
        },
        {
          "variant": 1,
          "text": "A partner company has a forest named fabrikam.com. Each forest contains one domain."
        },
        {
          "variant": 1,
          "text": "You need to provide access for a group named Research in fabrikam.com to resources in contoso.com. The solution must use the principle of least privilege."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Create an external trust from fabrikam.com to contoso.com. Enable Active Directory split permissions in fabrikam.com."
        },
        {
          "label": "B",
          "Text": "Create an external trust from contoso.com to fabrikam.com. Enable Active Directory split permissions in contoso.com."
        },
        {
          "label": "C",
          "Text": "Create a one-way forest trust from contoso.com to fabrikam.com that uses selective authentication."
        },
        {
          "label": "D",
          "Text": "Create a one-way forest trust from fabrikam.com to contoso.com that uses selective authentication."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You deploy a new Active Directory forest."
        },
        {
          "variant": 1,
          "text": "You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member servers."
        },
        {
          "variant": 1,
          "text": "Solution: From Windows PowerShell on a domain controller, you run the Set-KdsConfiguration cmdlet."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. You recently deleted 5,000 objects from the Active Directory database."
        },
        {
          "variant": 1,
          "text": "You need to reduce the amount of disk space used to store the Active Directory database on a domain controller."
        },
        {
          "variant": 1,
          "text": "Which tool should you use?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Dsadd quota"
        },
        {
          "label": "B",
          "Text": "Dsmod"
        },
        {
          "label": "C",
          "Text": "Active Directory Administrative Center"
        },
        {
          "label": "D",
          "Text": "Dsacls"
        },
        {
          "label": "E",
          "Text": "Dsamain"
        },
        {
          "label": "F",
          "Text": "Active Directory Users and Computers"
        },
        {
          "label": "G",
          "Text": "Ntdsutil"
        },
        {
          "label": "H",
          "Text": "Group Policy Management Console"
        }
      ],
      "answer": [
        false,
        false,
        false,
        false,
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You deploy a new Active Directory forest."
        },
        {
          "variant": 1,
          "text": "You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member servers."
        },
        {
          "variant": 1,
          "text": "Solution: You configure Kerberos constrained delegation on the computer account of each member server."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest. The forest functional level is Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "You have a failover cluster named Cluster1. Cluster1 has two nodes named Server1 and Server2. All the optional features in Active Directory are enabled."
        },
        {
          "variant": 1,
          "text": "A junior administrator accidentally deletes the computer object named Cluster1."
        },
        {
          "variant": 1,
          "text": "You discover that Cluster1 is offline."
        },
        {
          "variant": 1,
          "text": "You need to restore the operation of Cluster1 in the least amount of time possible."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Run the Enable-ADAccount cmdlet from Windows PowerShell."
        },
        {
          "label": "B",
          "Text": "Perform an authoritative restore by running ntdutil.exe."
        },
        {
          "label": "C",
          "Text": "Perform a tombstone reanimation by running ldp.exe."
        },
        {
          "label": "D",
          "Text": "Recover a deleted object from the Active Directory Recycle Bin."
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "The domain contains a domain controller named DC1 that runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "You need to create a snapshot of the Active Directory database on DC1."
        },
        {
          "variant": 1,
          "text": "Which tool should you use?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Dsadd quota"
        },
        {
          "label": "B",
          "Text": "Dsmod"
        },
        {
          "label": "C",
          "Text": "Active Directory Administrative Center"
        },
        {
          "label": "D",
          "Text": "Dsacls"
        },
        {
          "label": "E",
          "Text": "Dsamain"
        },
        {
          "label": "F",
          "Text": "Active Directory Users and Computers"
        },
        {
          "label": "G",
          "Text": "Ntdsutil"
        },
        {
          "label": "H",
          "Text": "Group Policy Management Console"
        }
      ],
      "answer": [
        false,
        false,
        false,
        false,
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your company has two offices. The offices are located in Montreal and Seattle.  The network contains an Active Directory forest named contoso.com. "
        },
        {
          "variant": 1,
          "text": "The forest contains three domain controllers configured as shown in the following table."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image6.jpg"
        },
        {
          "variant": 1,
          "text": "The company physically relocates Server2 from the Montreal office to the Seattle office."
        },
        {
          "variant": 1,
          "text": "You discover that both Server1 and Server2 authenticate users who sign in to the client computers in the Montreal office. Only Server3 authenticates users who sign in to the computers in the Seattle office."
        },
        {
          "variant": 1,
          "text": "You need to ensure that Server2 authenticates the users in the Seattle office during normal network operations."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From Windows PowerShell, run the Set-ADReplicationSite cmdlet."
        },
        {
          "label": "B",
          "Text": "From Active Directory Users and Computers, modify the Location Property of Server2."
        },
        {
          "label": "C",
          "Text": "From Network Connections on Server2, modify the Internet Protocol Version 4 (TCP/IPv4) configuration."
        },
        {
          "label": "D",
          "Text": "From Windows PowerShell, run the Move-ADDirectoryServer cmdlet."
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "The domain contains a web application that uses Kerberos authentication."
        },
        {
          "variant": 1,
          "text": "You change the domain name of the web application."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the service principal name (SPN) for the application is registered."
        },
        {
          "variant": 1,
          "text": "Which tool should you use?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Rdspnf"
        },
        {
          "label": "B",
          "Text": "Active Directory Users and Computers"
        },
        {
          "label": "C",
          "Text": "Dnscmd"
        },
        {
          "label": "D",
          "Text": "Ldifde"
        },
        {
          "label": "E",
          "Text": "Netsh"
        },
        {
          "label": "F",
          "Text": "Internet Information Services (IIS) Manager"
        },
        {
          "label": "G",
          "Text": "Repladmin "
        }
      ],
      "answer": [
        false,
        false,
        false,
        true,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://blogs.technet.microsoft.com/tristank/2006/05/08/3-simple-rules-to-kerberos-authenticationdelegation-spns/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "On Server1, you create a local user named User1. User1 is a member of the local Administrators group."
        },
        {
          "variant": 1,
          "text": "Server1 has the following local Group Policies:"
        },
        {
          "variant": 1,
          "text": "Local Computer Policy"
        },
        {
          "variant": 1,
          "text": "Local Computer\\User1 Policy"
        },
        {
          "variant": 1,
          "text": "Local Computer\\Administrators Policy"
        },
        {
          "variant": 1,
          "text": "You need to force User1 to change his password every 14 days."
        },
        {
          "variant": 1,
          "text": "Solution: You create a Password Setting object (PSO) in the domain."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "On Server1, you create a local user named User1. User1 is a member of the local Administrators group."
        },
        {
          "variant": 1,
          "text": "Server1 has the following local Group Policies:"
        },
        {
          "variant": 1,
          "text": "Local Computer Policy"
        },
        {
          "variant": 1,
          "text": "Local Computer\\User1 Policy"
        },
        {
          "variant": 1,
          "text": "Local Computer\\Administrators Policy"
        },
        {
          "variant": 1,
          "text": "You need to force User1 to change his password every 14 days."
        },
        {
          "variant": 1,
          "text": "Solution: You configure the Password Policy settings in a Group Policy object (GPO) that is linked to the Domain Controllers organizational unit (OU)."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest. The forest contains a domain named contoso.com. The domain contains three domain controllers."
        },
        {
          "variant": 1,
          "text": "A domain controller named lon-dc1 fails. You are unable to repair lon-dc1."
        },
        {
          "variant": 1,
          "text": "You need to prevent the other domain controllers from attempting to replicate to lon-dc1."
        },
        {
          "variant": 1,
          "text": "Solution: From Active Directory Sites and Services, you remove the object of lon-dc1."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest. The forest contains a domain named contoso.com. The domain contains three domain controllers."
        },
        {
          "variant": 1,
          "text": "A domain controller named lon-dc1 fails. You are unable to repair lon-dc1."
        },
        {
          "variant": 1,
          "text": "You need to prevent the other domain controllers from attempting to replicate to lon-dc1."
        },
        {
          "variant": 1,
          "text": "Solution: From ntdsutil.exe, you perform a metadata cleanup."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest. The forest contains a domain named contoso.com. The domain contains three domain controllers."
        },
        {
          "variant": 1,
          "text": "A domain controller named lon-dc1 fails. You are unable to repair lon-dc1."
        },
        {
          "variant": 1,
          "text": "You need to prevent the other domain controllers from attempting to replicate to lon-dc1."
        },
        {
          "variant": 1,
          "text": "Solution: From Active Directory Domains and Trusts, you transfer the operations master roles from lon-dc1."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com. The forest contains 10 domains. The root domain contains a global catalog server named DC1."
        },
        {
          "variant": 1,
          "text": "You remove the global catalog server role from DC1."
        },
        {
          "variant": 1,
          "text": "You need to decrease the size of the Active Directory database on DC1."
        },
        {
          "variant": 1,
          "text": "Solution: You restart DC1 in Directory Services Repair Mode. You run compact.exe, and then restart DC1."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://theitbros.com/active-directory-database-compact-defrag/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com. The forest contains 10 domains."
        },
        {
          "variant": 1,
          "text": "The root domain contains a global catalog server named DC1."
        },
        {
          "variant": 1,
          "text": "You remove the global catalog server role from DC1."
        },
        {
          "variant": 1,
          "text": "You need to decrease the size of the Active Directory database on DC1."
        },
        {
          "variant": 1,
          "text": "Solution: You restart DC1 in Safe Mode. You run ntdsutil.exe, use the files option, and then restart DC1."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://theitbros.com/active-directory-database-compact-defrag/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You create a domain security group named Group1 and add several users to it."
        },
        {
          "variant": 1,
          "text": "You need to force all of the users in Group1 to change their password every 35 days. The solution must affect the Group1 users only."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Create a forms authentication provider, and then set the forms authentication credentials."
        },
        {
          "label": "B",
          "Text": "From Active Directory Administrative Center, create a Password Setting object (PSO)."
        },
        {
          "label": "C",
          "Text": "Modify the Password Policy settings in a Group Policy object (GPO) that is linked to the domain, and then filter the GPO to Group1 only."
        },
        {
          "label": "D",
          "Text": "From Windows PowerShell, run the Set-ADDomain cmdlet, and then run the Set-ADAccountPassword cmdlet."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You discover that users can use passwords that contain only numbers."
        },
        {
          "variant": 1,
          "text": "You need to ensure that all the user passwords in the domain contain at least three of the following types of characters:"
        },
        {
          "variant": 1,
          "text": "Numbers"
        },
        {
          "variant": 1,
          "text": "Uppercase letters"
        },
        {
          "variant": 1,
          "text": "Lowercase letters\nSpecial characters"
        },
        {
          "variant": 1,
          "text": "What should you edit?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "The Default Domain Controllers Policy"
        },
        {
          "label": "B",
          "Text": "The local policy on each client computer"
        },
        {
          "label": "C",
          "Text": "The Default Domain Policy"
        },
        {
          "label": "D",
          "Text": "The local policy on each domain controller"
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com The forest contains a member server named Server1."
        },
        {
          "variant": 1,
          "text": "Server1 has several line-of-business applications. Each application runs as a service that uses the Network Service account."
        },
        {
          "variant": 1,
          "text": "You need to configure the line-of-business applications to run by using a virtual account."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From Windows PowerShell, run the Install-ADServiceAccount cmdlet."
        },
        {
          "label": "B",
          "Text": "From the Services console, modify the Log On properties of the services."
        },
        {
          "label": "C",
          "Text": "From the Microsoft Application Compatibility Toolkit (ACT), create a shim."
        },
        {
          "label": "D",
          "Text": "From Windows PowerShell, run the New-ADServiceAccount cmdlet."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2."
        },
        {
          "variant": 1,
          "text": "DC1 holds the RID master operations role. DC1 fails and cannot be repaired. You need to move the RID role to DC2."
        },
        {
          "variant": 1,
          "text": "Solution: On DC2, you open Windows PowerShell and run Move-AddirectoryServerOperationMasterRole -OperationMasterRidMaster -Identity DC2.Adatum.com"
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2."
        },
        {
          "variant": 1,
          "text": "DC1 holds the RID master operations role. DC1 fails and cannot be repaired. You need to move the RID role to DC2."
        },
        {
          "variant": 1,
          "text": "Solution: On DC2, you open the command prompt, run dsmgmt.exe, connect to DC2, and use the Seize RID master opinion."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "The domain contains a read-only domain controller (RODC) named RODC1."
        },
        {
          "variant": 1,
          "text": "You need to retrieve a list of accounts that have their password cached on RODC1."
        },
        {
          "variant": 1,
          "text": "Which command should you run?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "repadmin.exe"
        },
        {
          "label": "B",
          "Text": "ntdsutil.exe"
        },
        {
          "label": "C",
          "Text": "dcdiag.exe"
        },
        {
          "label": "D",
          "Text": "netdom.exe"
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References"
        },
        {
          "variant": 1,
          "text": "https://support.microsoft.com/en-za/help/2028962/the-active-directory-users-and-computers-mmc-snap-in-does-not-list-all"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named adatum.com. The domain contains a security group named G_Research and an organizational unit (OU) named OU_Research."
        },
        {
          "variant": 1,
          "text": "All the users in the research department are members of G_Research and their user accounts are in OU_Research."
        },
        {
          "variant": 1,
          "text": "You need to ensure that all the research department users change their password every 28 days and enforce a complex password that is 12 characters long."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From a Group Policy Management, create and link a Group Policy object (GPO) to OU_Research. Modify the password policy in the GPO."
        },
        {
          "label": "B",
          "Text": "From a Group Policy Management, create and link a Group Policy object (GPO) to the domain. Modify the password policy in the GPO. Filter the GPO to apply to G_Research only."
        },
        {
          "label": "C",
          "Text": "From Active Directory Users and Computers, modify the properties of the Password Settings Container."
        },
        {
          "label": "D",
          "Text": "From Active Directory Administrative Center, create a new Password Settings object (PSO)."
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest. The forest functional level is Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "The network contains Linux servers that use MIT Kerberos V5 to provide an authentication, authorization, and access service."
        },
        {
          "variant": 1,
          "text": "You need to ensure that users can use their Active Directory credentials to access the resources on the Linux servers. The solution must minimize administrative effort."
        },
        {
          "variant": 1,
          "text": "What should you implement?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "an external trust"
        },
        {
          "label": "B",
          "Text": "a realm trust"
        },
        {
          "label": "C",
          "Text": "Active Directory Federation Services (AD FS)"
        },
        {
          "label": "D",
          "Text": "a Web Application Proxy"
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "http://techgenix.com/active-directory-trusts/"
        },
        {
          "variant": 1,
          "text": "https://www.rootusers.com/how-to-join-centos-linux-to-an-active-directory-domain/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "The user account for a user named User1 is in an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You need to enable User1 to sign in as user1@adatum.com."
        },
        {
          "variant": 1,
          "text": "Solution: From Active Directory Domains and Trusts, you configure an alternative UPN suffix. From Active Directory Administrative Center, you configure the User UPN logon property of User1."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "The user account for a user named User1 is in an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You need to enable User1 to sign in as user1@adatum.com."
        },
        {
          "variant": 1,
          "text": "Solution: From Active Directory Users and Computers, you set the E-mail property of User1 to user1@adatum.com."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "The user account for a user named User1 is in an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You need to enable User1 to sign in as user1@adatum.com."
        },
        {
          "variant": 1,
          "text": "Solution: From Windows PowerShell, you run Set-ADuser User1 –UserPrincipalName User1@Adatum.com."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "The user account for a user named User1 is in an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You need to enable User1 to sign in as user1@adatum.com."
        },
        {
          "variant": 1,
          "text": "Solution: From Windows PowerShell, you run "
        },
        {
          "variant": 1,
          "text": "Set-ADObject 'CN=User1,OU=OU1,DC=Contoso,DC=com' "
        },
        {
          "variant": 1,
          "text": "–Add @{UserPrincipalName='User1@Adatum.com'} –Remove @ {UserPrincipalName='User1@Contoso.com'}."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You deploy a new Active Directory forest."
        },
        {
          "variant": 1,
          "text": "You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member servers."
        },
        {
          "variant": 1,
          "text": "Solution: You configure Kerberos constrained delegation on the computer account of each domain controller."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 1,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2016. The domain contains the servers shown in the following table."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image7.jpg"
        },
        {
          "variant": 1,
          "text": "The domain has several Managed Service Accounts."
        },
        {
          "variant": 1,
          "text": "Server1 hosts a service named Service1 that runs in the security context of the LocalSystem account."
        },
        {
          "variant": 1,
          "text": "You need to implement a group Managed Service Account to run Service1."
        },
        {
          "variant": 1,
          "text": "Which two actions should you perform? Each correct answer presents part of the solution."
        },
        {
          "variant": 1,
          "text": "NOTE: Each correct selection is worth one point."
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "On Server1, modify the properties of Service1."
        },
        {
          "label": "B",
          "Text": "On DC1, run Add-ADComputerServiceAccount."
        },
        {
          "label": "C",
          "Text": "On DC1, run New-ADServiceAccount."
        },
        {
          "label": "D",
          "Text": "On DC1, run Add-KDSRootKey."
        }
      ],
      "answer": [
        true,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named Server1."
        },
        {
          "variant": 1,
          "text": "You recently restored a backup of the Active Directory database from Server1 to an alternate Location. The restore operation does not interrupt the Active Directory services on Server1."
        },
        {
          "variant": 1,
          "text": "You need to make the Active Directory data in the backup accessible by using Lightweight Directory Access Protocol (LDAP)."
        },
        {
          "variant": 1,
          "text": "Which tool should you use?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Dsadd quota"
        },
        {
          "label": "B",
          "Text": "Dsmod"
        },
        {
          "label": "C",
          "Text": "Active Directory Administrative Center"
        },
        {
          "label": "D",
          "Text": "Dsacls"
        },
        {
          "label": "E",
          "Text": "Dsamain"
        },
        {
          "label": "F",
          "Text": "Active Directory Users and Computers"
        },
        {
          "label": "G",
          "Text": "Ntdsutil"
        },
        {
          "label": "H",
          "Text": "Group Policy Management Console"
        }
      ],
      "answer": [
        false,
        false,
        false,
        false,
        true,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "http://www.itprotoday.com/windows-8/using-active-directory-snapshots-and-dsamain-tool"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You network contains an Active Directory domain named contoso.com. The domain contains 1,000 desktop computers and 500 laptops. An organizational unit (OU) named OU1 contains the computer accounts for the desktop computers and the laptops."
        },
        {
          "variant": 1,
          "text": "You create a Windows PowerShell script named Script1.ps1 that removes temporary files and cookies. You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1."
        },
        {
          "variant": 1,
          "text": "You need to run the script once weekly only on the laptops."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "In GPO1, create a File preference that uses item-level targeting."
        },
        {
          "label": "B",
          "Text": "In GPO1, create a Scheduled Tasks preference that uses item-level targeting."
        },
        {
          "label": "C",
          "Text": "In GPO1, configure the File System security policy. Attach a WMI filter to GPO1."
        },
        {
          "label": "D",
          "Text": "In GPO1, add Script1.ps1 as a startup script. Attach a WMI filter to GPO1."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 1,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You have an organizational unit (OU) named TestOU that contains test computers."
        },
        {
          "variant": 1,
          "text": "You need to enable a technician named Tech1 to create Group Policy objects (GPOs) and to link the GPOs to TestOU. The solution must use the principle of least privilege."
        },
        {
          "variant": 1,
          "text": "Which two actions should you perform? Each correct answer presents part of the solution."
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Add Tech1 to the Group Policy Creator Owners group."
        },
        {
          "label": "B",
          "Text": "From Group Policy Management, modify the Delegation settings of the TestOU OU."
        },
        {
          "label": "C",
          "Text": "Add Tech1 to the Protected Users group."
        },
        {
          "label": "D",
          "Text": "From Group Policy Management, modify the Delegation settings of the contoso.com container."
        },
        {
          "label": "E",
          "Text": "Create a new universal security group and add Tech1 to the group."
        }
      ],
      "answer": [
        true,
        true,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "http://www.itprotoday.com/management-mobility/what-group-policy-creator-owners-group"
        },
        {
          "variant": 1,
          "text": "http://www.itprotoday.com/management-mobility/how-do-i-delegate-permissions-someone-edit-gpo"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your company recently deployed a new child domain to an Active Directory forest."
        },
        {
          "variant": 1,
          "text": "You discover that a user modified the Default Domain Policy to configure several Windows components in the child domain."
        },
        {
          "variant": 1,
          "text": "A company policy states that the Default Domain Policy must be used only to configure domain-wide security settings."
        },
        {
          "variant": 1,
          "text": "You create a new Group Policy object (GPO) and configure the settings for the Windows components in the new GPO."
        },
        {
          "variant": 1,
          "text": "You need to restore the Default Domain Policy to the default settings from when the domain was first installed."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From Group Policy Management, click Starter GPOs, and then click Manage Backups."
        },
        {
          "label": "B",
          "Text": "From a command prompt, run the dcgpofix.exe command."
        },
        {
          "label": "C",
          "Text": "From Windows PowerShell, run the Copy-GPO cmdlet."
        },
        {
          "label": "D",
          "Text": "Run ntdsutil.exe to perform a metadata cleanup and a semantic database analysis."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You have an organizational unit (OU) named OU1 that contains the computer accounts from two servers and the user account of a user named User1. A Group Policy object (GPO) named GPO1 is linked to OU1."
        },
        {
          "variant": 1,
          "text": "You have an application named App1 that installs by using an application installer named App1.exe."
        },
        {
          "variant": 1,
          "text": "You need to publish App1 to OU1 by using Group Policy."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        },
        {
          "variant": 1,
          "text": " "
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Create a Config.zap file and add a file to the File System node to the Computer Configuration node of GPO1."
        },
        {
          "label": "B",
          "Text": "Create a Config.xml file and add a software installation package to the User Configuration node of GPO1. "
        },
        {
          "label": "C",
          "Text": "C. Create a Config.zap file and add a software installation package to the User Configuration node of GPO1."
        },
        {
          "label": "D",
          "Text": "Create a Config.xml file and add a software installation package to the Computer Configuration node of GPO1."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)"
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image8.jpg"
        },
        {
          "variant": 1,
          "text": "You discover that some of the settings configured in the A1 Group Policy object (GPO) fail to apply to the users in the OU1 organizational unit (OU). You need to ensure that all of the settings in A1 apply to the users in OU1."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Link the A2 GPO to the domain."
        },
        {
          "label": "B",
          "Text": "Modify the policy processing order for contoso.com."
        },
        {
          "label": "C",
          "Text": "Modify the policy processing order OU1."
        },
        {
          "label": "D",
          "Text": "Modify the GPO Status of A1."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://blogs.technet.microsoft.com/musings_of_a_technical_tam/2012/02/15/group-policy-basics-part-2-understanding-which-gpos-to-apply/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You have a Group Policy object (GPO) named GPO1. GPO1 is linked to an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "GPO1 contains several corporate desktop restrictions that apply to all computers."
        },
        {
          "variant": 1,
          "text": "You plan to deploy a printer to the computers in OU1."
        },
        {
          "variant": 1,
          "text": "You need to ensure that any user who signs in to a computer that runs Windows 10 in OU1 receives the new printer. All of the computers in OU1 must continue to apply the corporate desktop restrictions from GPO1."
        },
        {
          "variant": 1,
          "text": "What should you configure?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "a user preference and a WMI filter on GPO1."
        },
        {
          "label": "B",
          "Text": "a computer preference that uses item-level targeting"
        },
        {
          "label": "C",
          "Text": "a computer preference and WMI filter on GPO1"
        },
        {
          "label": "D",
          "Text": "a user preference that uses item-level targeting"
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts."
        },
        {
          "variant": 1,
          "text": "You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU)."
        },
        {
          "variant": 1,
          "text": "You need to use the application control policy settings to prevent several applications from running on the network."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From the Computer Configuration node of DCPolicy, modify Security Settings."
        },
        {
          "label": "B",
          "Text": "From the Computer Configuration node of DomainPolicy, modify Security Settings."
        },
        {
          "label": "C",
          "Text": "From the Computer Configuration node of DomainPolicy, modify Administrative Templates."
        },
        {
          "label": "D",
          "Text": "From the User Configuration node of DCPolicy, modify Security Settings."
        },
        {
          "label": "E",
          "Text": "From the User Configuration node of DomainPolicy, modify Folder Redirection."
        },
        {
          "label": "F",
          "Text": "From user Configuration node of DomainPolicy, modify Administrative Templates."
        },
        {
          "label": "G",
          "Text": "From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings."
        },
        {
          "label": "H",
          "Text": "From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false,
        false,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts."
        },
        {
          "variant": 1,
          "text": "You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU)."
        },
        {
          "variant": 1,
          "text": "You need to configure the Documents folder of every user to be stored on a server named FileServer1."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From the Computer Configuration node of DCPolicy, modify Security Settings."
        },
        {
          "label": "B",
          "Text": "From the Computer Configuration node of DomainPolicy, modify Security Settings."
        },
        {
          "label": "C",
          "Text": "From the Computer Configuration node of DomainPolicy, modify Administrative Templates."
        },
        {
          "label": "D",
          "Text": "From the User Configuration node of DCPolicy, modify Security Settings."
        },
        {
          "label": "E",
          "Text": "From the User Configuration node of DomainPolicy, modify Folder Redirection."
        },
        {
          "label": "F",
          "Text": "From user Configuration node of DomainPolicy, modify Administrative Templates."
        },
        {
          "label": "G",
          "Text": "From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings."
        },
        {
          "label": "H",
          "Text": "From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings."
        }
      ],
      "answer": [
        false,
        false,
        false,
        false,
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts."
        },
        {
          "variant": 1,
          "text": "You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU)."
        },
        {
          "variant": 1,
          "text": "You need to force users to change their account password at least every 30 days."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From the Computer Configuration node of DCPolicy, modify Security Settings."
        },
        {
          "label": "B",
          "Text": "From the Computer Configuration node of DomainPolicy, modify Security Settings."
        },
        {
          "label": "C",
          "Text": "From the Computer Configuration node of DomainPolicy, modify Administrative Templates."
        },
        {
          "label": "D",
          "Text": "From the User Configuration node of DCPolicy, modify Security Settings."
        },
        {
          "label": "E",
          "Text": "From the User Configuration node of DomainPolicy, modify Folder Redirection."
        },
        {
          "label": "F",
          "Text": "From user Configuration node of DomainPolicy, modify Administrative Templates."
        },
        {
          "label": "G",
          "Text": "From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings."
        },
        {
          "label": "H",
          "Text": "From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false,
        false,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1."
        },
        {
          "variant": 1,
          "text": "The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)"
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image9.jpg"
        },
        {
          "variant": 1,
          "text": "The relevant users and client computer in the domain are configured as shown in the following table."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image10.jpg"
        },
        {
          "variant": 1,
          "text": "You are evaluating what will occur when you block inheritance on OU4."
        },
        {
          "variant": 1,
          "text": "Which GPO or GPOs will apply to User1 when the user signs in to Computer1 after block inheritance is configured?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "A1, A5, and A6"
        },
        {
          "label": "B",
          "Text": "A3, A1, A5, and A7"
        },
        {
          "label": "C",
          "Text": "A3 and A7 only"
        },
        {
          "label": "D",
          "Text": "A7 only"
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1."
        },
        {
          "variant": 1,
          "text": "The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)"
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image11.jpg"
        },
        {
          "variant": 1,
          "text": "The relevant users and client computer in the domain are configured as shown in the following table."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image10.jpg"
        },
        {
          "variant": 1,
          "text": "You are evaluating what will occur when you disable the Group Policy link for A6."
        },
        {
          "variant": 1,
          "text": "Which GPOs will apply to User2 when the user signs in to Computer1 after the link for A6 is disabled?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "A1 and A5 only"
        },
        {
          "label": "B",
          "Text": "A3, A1, and A5 only"
        },
        {
          "label": "C",
          "Text": "A3, A1, A5, and A4 only"
        },
        {
          "label": "D",
          "Text": "A3, A1, A5, and A7"
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a user named User1 and an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You create a Group Policy object (GPO) named GPO1."
        },
        {
          "variant": 1,
          "text": "You need to ensure that User1 can link GPO1 to OU1."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Modify the security settings of User1."
        },
        {
          "label": "B",
          "Text": "Add User1 to the Group Policy Creator Owner group."
        },
        {
          "label": "C",
          "Text": "Modify the security settings of OU1."
        },
        {
          "label": "D",
          "Text": "Modify the security settings of GPO1."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You network contains an active Directory domain. The domain contains 20 domain controllers. You discover that some Group Policy objects (PROs) are not being applied by all the domain controllers."
        },
        {
          "variant": 1,
          "text": "You need to verify whether GPOs replicate successfully to all the domain controllers."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Set BurFlags in the registry, and then restart the File Replication Service (FRS). Run dcdiag.exe for each domain controller."
        },
        {
          "label": "B",
          "Text": "Set BurFlags in the registry, and then restart the File Replication Service (FRS). View the Directory Service event log."
        },
        {
          "label": "C",
          "Text": "From Group Policy Management, view the Status tab for the domain."
        },
        {
          "label": "D",
          "Text": "Run repadmin.exe for each GPO."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your company has a marketing department and a security department. The network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA)."
        },
        {
          "variant": 1,
          "text": "You have two organizational units (OUs) named MKT_UsersOU and MKT_ComputersOU. MKT_UsersOU contains the user accounts for the users in the marketing department. MKT_ComputersOU contains the computer accounts for the computers in the marketing department."
        },
        {
          "variant": 1,
          "text": "A Group policy object (GPO) named GPO1 is linked to MKT_UsersOU."
        },
        {
          "variant": 1,
          "text": "A GPO named GPO2 linked to MKT_ComputersOU."
        },
        {
          "variant": 1,
          "text": "You plan to deploy a web application for the marketing department users."
        },
        {
          "variant": 1,
          "text": "The application will require certificates for authentication."
        },
        {
          "variant": 1,
          "text": "The security department configures the CA to support the planned deployment."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the web application can authenticate the marketing department users. What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From the User Configuration node of GPO1, create an Internet Setting preference."
        },
        {
          "label": "B",
          "Text": "From the User Configuration node of GPO1, configure the Certificate Services Client - Auto-enrollment settings."
        },
        {
          "label": "C",
          "Text": "From the Computer Configuration node of GPO2, configure the Certificate Services Client - Certificate Enrollment Policy settings."
        },
        {
          "label": "D",
          "Text": "From the Computer Configuration node of GPO2, create the Automatic Certificate Request Settings."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "Server1 has IP Address Management (IPAM) installed. IPAM is configured to use the Group Policy based provisioning method. The prefix for the IPAM Group Policy objects (GPOs) is IP."
        },
        {
          "variant": 1,
          "text": "From Group Policy Management, you manually rename the IPAM GPOs to have a prefix of IPAM."
        },
        {
          "variant": 1,
          "text": "You need to modify the GPO prefix used by IPAM."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Click Configure server discovery in Server Manager."
        },
        {
          "label": "B",
          "Text": "Run the Set-IpamConfiguration cmdlet."
        },
        {
          "label": "C",
          "Text": "Run the Invoke-IpamGpoProvisioning cmdlet."
        },
        {
          "label": "D",
          "Text": "Click Provision the IPAM server in Server Manager."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/powershell/module/ipamserver/set-ipamconfiguration?view=win10-ps"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 and a domain controller named DC1. Both servers run Windows Server 2016. Server1 is used to perform administrative tasks, including managing Group Polices."
        },
        {
          "variant": 1,
          "text": "After maintenance is performed on DC1, you open a Group Policy object (GPO) from Server1 as shown in the exhibit."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image12.jpg"
        },
        {
          "variant": 1,
          "text": "You need to be able to view all of the Administrative Templates settings in GPO1. What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From File Explorer, copy the administrative templates from \\\\contoso.com\\SYSVOL\\contoso.com\\Policies to the PolicyDefinitions folder on Server1."
        },
        {
          "label": "B",
          "Text": "From File Explorer, delete \\\\contoso.com\\SYSVOL\\contoso.com\\Policies\\PolicyDefinitions."
        },
        {
          "label": "C",
          "Text": "From File Explorer, delete the PolicyDefinitions folder from Server1."
        },
        {
          "label": "D",
          "Text": "From Group Policy Management Editor, configure the Filter Options for GPO1."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. All the accounts of the users in the sales department are in an organizational unit (OU) named SalesOU."
        },
        {
          "variant": 1,
          "text": "An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object (GPO) named Sales GPO."
        },
        {
          "variant": 1,
          "text": "You need to set the registry value of \\HKEY_CURRENT_USER\\Software\\App1\\Collaboration to 0."
        },
        {
          "variant": 1,
          "text": "Solution: You add a user preference that has an Update action."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. All the accounts of the users in the sales department are in an organizational unit (OU) named SalesOU."
        },
        {
          "variant": 1,
          "text": "An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object (GPO) named Sales GPO."
        },
        {
          "variant": 1,
          "text": "You need to set the registry value of \\HKEY_CURRENT_USER\\Software\\App1\\Collaboration to 0."
        },
        {
          "variant": 1,
          "text": "Solution: You add a computer preference that has a Replace action."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. All the accounts of the users in the sales department are in an organizational unit (OU) named SalesOU."
        },
        {
          "variant": 1,
          "text": "An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object (GPO) named Sales GPO."
        },
        {
          "variant": 1,
          "text": "You need to set the registry value of \\HKEY_CURRENT_USER\\Software\\App1\\Collaboration to 0."
        },
        {
          "variant": 1,
          "text": "Solution: You add a user preference that has a Replace action."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a user named User1, a group named Group1, and an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You need to enable User1 to link Group Policies to OU1."
        },
        {
          "variant": 1,
          "text": "Solution: From Active Directory Users and Computers, you add User1 to the Group Policy Creator owners group."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "http://www.itprotoday.com/management-mobility/what-group-policy-creator-owners-group"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a user named User1, a group named Group1, and an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You need to enable User1 to link Group Policies to OU1."
        },
        {
          "variant": 1,
          "text": "Solution: From Active Directory Administrative Center, you add User1 to Group1. From ADSI Edit, you grant Group1 Full Control permissions to the “CN=Policies, CN=System, DC=Contoso, DC=com” object."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a username User1, a group named Group1, and an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You need to enable User1 to link Group Policies to OU1."
        },
        {
          "variant": 1,
          "text": "Solution: From Active Directory Administrative Center, you add User1 to Group1. From Group Policy Management, you click the Group Policy Objects container. From the Delegation tab, you add Group1."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a user named User1, a group named Group1, and an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You need to enable User1 to link Group Policies to OU1."
        },
        {
          "variant": 1,
          "text": "Solution: From Active Directory Administrative Center, you add User1 to Group1 and grant Group1 Full Control permissions to OU1."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "A Group Policy object (GPO) named GPO1 is linked to contoso.com."
        },
        {
          "variant": 1,
          "text": "GPO1 has computer configuration policies, user configuration policies, and user preferences configured."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the user preferences in GPO1 apply only to users who sign in to computers that runs Windows 10. All the other settings in GPO1 must be applied, regardless of the computer to which the users sign in."
        },
        {
          "variant": 1,
          "text": "What should you configure?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "WMI Filtering"
        },
        {
          "label": "B",
          "Text": "Item-level targeting"
        },
        {
          "label": "C",
          "Text": "Security Settings"
        },
        {
          "label": "D",
          "Text": "Security Filtering"
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your company has a marketing department."
        },
        {
          "variant": 1,
          "text": "The network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "The domain contains two top-level organizational units (OUs) named MKT_Comps and MKT_Users. MKT_Comps contains the computer accounts for the computers in the marketing department. MKT_Users contains the user accounts for the users in the marketing department."
        },
        {
          "variant": 1,
          "text": "You link a new Group Policy object (GPO) named GPO1 to MKT_Comps."
        },
        {
          "variant": 1,
          "text": "You need to deploy a VPN connection to all of the users who sign in to the marketing department computers. The users must be able to modify the VPN connection settings."
        },
        {
          "variant": 1,
          "text": "Where in GPO1 should you create the settings for the VPN connection?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Computer Configuration/Policies/Administrative Templates/Network/network Connections"
        },
        {
          "label": "B",
          "Text": "User Configuration/Policies/Administrative Templates/Network/Network Connections"
        },
        {
          "label": "C",
          "Text": "User Configuration/Preferences/Control Panel Settings/Network Options"
        },
        {
          "label": "D",
          "Text": "Computer Configuration/Preferences/Control Panel Settings/Network Options"
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The network contains several IP subnets. One of the subnets uses a network ID if 192.168.10.0/24."
        },
        {
          "variant": 1,
          "text": "You link a Group Policy object (GPO) named GPO1 to the domain."
        },
        {
          "variant": 1,
          "text": "You need to map a drive to a specific file share on the computers in the 192.168.10.0/24 network only."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From the User Configuration node of GPO1, configure the Folder Redirection settings. Link a WMI filter to GPO1."
        },
        {
          "label": "B",
          "Text": "From the Computer Configuration node of GPO1, configure the Network Connections settings. Link a WMI filter to GPO1."
        },
        {
          "label": "C",
          "Text": "From the User Configuration node of GPO1, create a Group Policy preference that uses item-level targeting."
        },
        {
          "label": "D",
          "Text": "From the Computer Configuration node of GPO1, create a Group Policy preference that uses item-level targeting."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain."
        },
        {
          "variant": 1,
          "text": "Users do not have administrative privileges to their client computer."
        },
        {
          "variant": 1,
          "text": "You modify a computer setting in a Group Policy object (GPO)."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the setting is applied to five client computers as soon as possible."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From each client computer, run the gpresult.exe command and specify the /r parameter."
        },
        {
          "label": "B",
          "Text": "From a domain controller, run the gpupdate.exe command and specify the Force parameter."
        },
        {
          "label": "C",
          "Text": "From a domain controller, run the Invoke-GPUpdate cmdlet."
        },
        {
          "label": "D",
          "Text": "From each client, run the Get-Gpo cmdlet and specify the –all parameter."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 1,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains two Active Directory forests named fabrikam.com and contoso.com. Each forest contains a single domain."
        },
        {
          "variant": 1,
          "text": "Contoso.com has a Group Policy object (GPO) named Cont_GPO1."
        },
        {
          "variant": 1,
          "text": "You need to apply the settings from Cont_GPO1 to the computers in fabrikam.com."
        },
        {
          "variant": 1,
          "text": "Which two actions should you perform? Each correct answer presents a complete solution."
        },
        {
          "variant": 1,
          "text": "NOTE: Each correct selection is worth one point."
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Back up Cont_GPO1. In fabrikam.com, create and link a new GPO by using the Group Policy Management Console (GPMC), and then run the Import Settings Wizard."
        },
        {
          "label": "B",
          "Text": "Back up Cont_GPO1. In fabrikam.com, run the Restore-GPO cmdlet, and then run the New-GPLink cmdlet."
        },
        {
          "label": "C",
          "Text": "Back up Cont_GPO1. In fabrikam.com run the Import-GPO cmdlet, and then run the New-GPLink cmdlet."
        },
        {
          "label": "D",
          "Text": "Copy\\\\contoso.com\\SysVol\\contoso.com\\Policies to \\\\fabrikam.com\\SysVol\\ fabrikam.com\\Policies. In fabrikam.com, run the New-GPLink cmdlet."
        },
        {
          "label": "E",
          "Text": "Back up Cont_GPO1. In fabrikam.com, create and link a new GPO by using the Group Policy Management Console (GPMC), and then run the Restore Group Policy Object Wizard."
        }
      ],
      "answer": [
        true,
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1."
        },
        {
          "variant": 1,
          "text": "The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)"
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image11.jpg"
        },
        {
          "variant": 1,
          "text": "The relevant users and client computer in the domain are configured as shown in the following table."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image10.jpg"
        },
        {
          "variant": 1,
          "text": "You are evaluating what will occur when you set user Group Policy loopback processing mode to Replace in A7."
        },
        {
          "variant": 1,
          "text": "Which GPO or GPOs will apply to User2 when the user signs in to Computer1 after loopback processing is configured?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "A1 and A7 only"
        },
        {
          "label": "B",
          "Text": "A3, A1, A5, A6 and A7"
        },
        {
          "label": "C",
          "Text": "A3, A5, A1, and A7 only"
        },
        {
          "label": "D",
          "Text": "A7 only"
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://support.microsoft.com/en-us/help/231287/loopback-processing-of-group-policy"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You have an application named App1 that is deployed to all the client computers in the domain. App1 writes a registry value named LocalStorage on all the client computers."
        },
        {
          "variant": 1,
          "text": "You need to delete the LocalStorage registry value from all the client computers in the domain that have less than 100 GB of free disk space on their system volume."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Configure Software Settings in a Group Policy object (GPO) and enable a WMI filter."
        },
        {
          "label": "B",
          "Text": "Configure a Group Policy setting to modify the security of the LocalStorage registry value."
        },
        {
          "label": "C",
          "Text": "Create an administrative template file that contains the LocalStorage registry setting, and then add the administrative template to a Group Policy object (GPO)."
        },
        {
          "label": "D",
          "Text": "Configure a Group Policy preference that uses item-level targeting."
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://theitbros.com/add-modify-and-delete-registry-keys-using-group-policy/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain. The domain contains an organizational unit (OU) named FileServersOU. A Group Policy object (GPO) named GPO1 is linked to FileServersOU. FileServersOU contains all the file servers in the domain."
        },
        {
          "variant": 1,
          "text": "You make an urgent security edit to GPO1."
        },
        {
          "variant": 1,
          "text": "You need to ensure that all the file servers receive the updated setting as soon as possible."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Right-click FileServersOU and click Group Policy Update…"
        },
        {
          "label": "B",
          "Text": "Right-click the GPO link for GPO1 and click Enforced."
        },
        {
          "label": "C",
          "Text": "Right-click Group Policy Results and click Group Policy Results Wizard…"
        },
        {
          "label": "D",
          "Text": "Right-click FileServersOU and click Refresh."
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": " "
        },
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1."
        },
        {
          "variant": 1,
          "text": "The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit tab.)"
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image13.jpg"
        },
        {
          "variant": 1,
          "text": "The relevant users and client computer in the domain are configured as shown in the following table."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image14.jpg"
        },
        {
          "variant": 1,
          "text": "You are evaluating what will occur when you set user Group Policy loopback processing mode to Replace in A4."
        },
        {
          "variant": 1,
          "text": "Which GPO or GPOs will apply to User2 when the user signs in to Computer1 after loopback processing is configured?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "A1, A5, A6 and A4"
        },
        {
          "label": "B",
          "Text": "A3, A1, A4, and A7"
        },
        {
          "label": "C",
          "Text": "A3, A1, A5 and A4 "
        },
        {
          "label": "D",
          "Text": "A4 only"
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You have a server named Server1 in a workgroup."
        },
        {
          "variant": 1,
          "text": "You need to configure a Group Policy setting on Server1 that will apply to only non-administrative users."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Open Local Group Policy Editor. From the View menu, modify the Customize settings."
        },
        {
          "label": "B",
          "Text": "Open Local Group Policy Editor. From the File menu, modify the Options settings."
        },
        {
          "label": "C",
          "Text": "Open Local Users and Groups. Create a new group. Run New-GPO."
        },
        {
          "label": "D",
          "Text": "Run mmc.exe. Add the Group Policy Object Editor snap-in and change the Group Policy object (GPO)."
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://www.windowscentral.com/how-apply-local-group-policy-settings-specific-users-windows-10"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your company has a main office and three branch offices. The network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "The main office contains three domain controllers. Each branch office contains one domain controller."
        },
        {
          "variant": 1,
          "text": "You discover the new settings in the Default Domain Policy are not applied in one of the branch offices, but all other Group Policy objects (GPOs) are applied."
        },
        {
          "variant": 1,
          "text": "You need to check the replication of the Default Domain Policy for the branch office."
        },
        {
          "variant": 1,
          "text": "What should you do from a domain controller in the main office?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From Group Policy Management, click Default Domain Policy under Contoso.com, and then open the Scope tab."
        },
        {
          "label": "B",
          "Text": "From a command prompt, run dcdiag.exe."
        },
        {
          "label": "C",
          "Text": "From a command prompt, run repadmin.exe."
        },
        {
          "label": "D",
          "Text": "From Windows PowerShell, run the Get-GPOReport cmdlet."
        },
        {
          "label": "E",
          "Text": "From Group Policy Management, click Default Domain Policy under Contoso.com, and then open the Details tab."
        },
        {
          "label": "F",
          "Text": "From a command prompt, run gpresult.exe."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains servers that run Windows Server 2016 and client computers that run Windows 10. The naming conventions for the computers and the servers is inconsistent."
        },
        {
          "variant": 1,
          "text": "You plan to create a Group Policy object (GPO) named GPO1 and to link GPO1 to the domain. GPO1 will contain custom Group Policy preference settings."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the preference settings in GPO1 will apply only to member servers. GPO1 must NOT apply to domain controllers or client computers."
        },
        {
          "variant": 1,
          "text": "Which type of item level targeting should you use?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Security Group"
        },
        {
          "label": "B",
          "Text": "Processing Mode"
        },
        {
          "label": "C",
          "Text": "Operating System"
        },
        {
          "label": "D",
          "Text": "Environment Variable"
        },
        {
          "label": "E",
          "Text": "Domain"
        }
      ],
      "answer": [
        false,
        false,
        true,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc733022(v=ws.11)"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc753566%28v%3dws.10%29"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You have an organizational unit (OU) named OU1. A Group Policy object (GPO) named GPO1 is linked to OU1."
        },
        {
          "variant": 1,
          "text": "You create a user named User1, and you assign User1 the Full control permission to OU1."
        },
        {
          "variant": 1,
          "text": "Which administrative action for GPOs can User1 perform?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Link an existing GPO from the domain to OU1"
        },
        {
          "label": "B",
          "Text": "Create a new GPO and link the GPO to OU1"
        },
        {
          "label": "C",
          "Text": "Add an administrative template to GPO1"
        },
        {
          "label": "D",
          "Text": "Edit the User Rights Assignment in GPO1"
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account of Server1 is an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)"
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image15.jpg"
        },
        {
          "variant": 1,
          "text": "An administrator reports that the settings from GPO1 are not applied to Server1."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the settings from GPO1 are applied to Server1."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Enable the link of GPO1"
        },
        {
          "label": "B",
          "Text": "Enforce GPO1"
        },
        {
          "label": "C",
          "Text": "Disable Block inheritance"
        },
        {
          "label": "D",
          "Text": "Remove the security filtering"
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/powershell/module/grouppolicy/set-gplink?view=win10-ps"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The relevant objects in the domain are configured as shown in the following table."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image16.jpg"
        },
        {
          "variant": 1,
          "text": "User1 is in OU1. GPO1 is linked to OU1."
        },
        {
          "variant": 1,
          "text": "The settings in GPO1 are configured as shown in the exhibit. (Click the Exhibit tab.)"
        },
        {
          "variant": 1,
          "text": "Computer1 does not have any shortcuts on the desktop."
        },
        {
          "variant": 1,
          "text": "How many shortcuts appear on the desktop after User1 signs in to Computer1?"
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image17.jpg"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "1"
        },
        {
          "label": "B",
          "Text": "2"
        },
        {
          "label": "C",
          "Text": "3"
        },
        {
          "label": "D",
          "Text": "4"
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. All domainjoined computers have Fast Logon Optimization enabled. "
        },
        {
          "variant": 1,
          "text": "You need to ensure that the next time a user signs in to Server1, the user-targeted Group Policy objects (GPOs) are processed fully before the user gains access to the desktop. "
        },
        {
          "variant": 1,
          "text": "What should you run on Server?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "secedit with the /configure switch"
        },
        {
          "label": "B",
          "Text": "Invoke-Gpupdate with the –Boot switch"
        },
        {
          "label": "C",
          "Text": "gpupdate with the /force switch"
        },
        {
          "label": "D",
          "Text": "Invoke-Gpupdate with the –Sync switch"
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "Reference:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/powershell/module/grouppolicy/invoke-gpupdate?view=win10-ps"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You network contains an Active Directory Domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You modify a Group Policy object (GPO) as shown in the exhibit. "
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image18.jpg"
        },
        {
          "variant": 1,
          "text": "You need to ensure that the Administrative Templates and their settings appear in Group Policy Management Editor."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Modify the members of the Group Policy Creator Owners group."
        },
        {
          "label": "B",
          "Text": "Configure the Group Policy filtering options."
        },
        {
          "label": "C",
          "Text": "On DC1, delete the PolicyDefinitions folder from the C:\\Windows\\SYSVOL\\sysvol\\Contoso.com\\Policies folder."
        },
        {
          "label": "D",
          "Text": "On DC1, delete the PolicyDefinitions folder from C:\\Windows."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016. The computer accounts of Server1 and Server2 are in the Computers container."
        },
        {
          "variant": 1,
          "text": "A Group Policy object (GPO) named GPO1 is linked to the domain. GPO1 has multiple computer settings defined and has following configurations."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image19.jpg"
        },
        {
          "variant": 1,
          "text": "An administrator discovers that GPO1 is not applied to Server1. GPO1 is applied to Server2."
        },
        {
          "variant": 1,
          "text": "Which configuration possibly prevents GPO1 from being applied to Server1?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "The permissions on GPO1"
        },
        {
          "label": "B",
          "Text": "The Enforced setting of GPO1"
        },
        {
          "label": "C",
          "Text": "The permissions on the Computers container"
        },
        {
          "label": "D",
          "Text": "The permissions on the domain object of contoso.com"
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 and a domain controller named DC1. Both servers run Windows Server 2016. Server1 is used to perform administrative tasks, including managing Group Polices."
        },
        {
          "variant": 1,
          "text": "After maintenance is performed on DC1, you open a Group Policy object (GPO) from Server1 as shown in the exhibit."
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image20.jpg"
        },
        {
          "variant": 1,
          "text": "You need to be able to view all of the Administrative Templates settings in GPO1."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From Group Policy Management Editor, configure item-level targeting in GPO1."
        },
        {
          "label": "B",
          "Text": "From File Explorer, delete \\\\contoso.com\\SYSVOL\\contoso.com\\Policies\\PolicyDefinitions."
        },
        {
          "label": "C",
          "Text": "From Group Policy Management, configure Security Filtering for GPO1."
        },
        {
          "label": "D",
          "Text": "From Group Policy Management Editor, configure the Filter Options for GPO1."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)"
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image21.jpg"
        },
        {
          "variant": 1,
          "text": "You discover that some of the settings configured in the A1 Group Policy object (GPO) fail to apply to the users in the OU1 organizational unit (OU). You need to ensure that all of the settings in A1 apply to the users in OU1."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Link the A2 GPO to the domain."
        },
        {
          "label": "B",
          "Text": "Configure the Enforced setting for the A1 link on OU1."
        },
        {
          "label": "C",
          "Text": "Modify Security Settings for A1."
        },
        {
          "label": "D",
          "Text": "Block inheritance on OU1."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/archive/blogs/musings_of_a_technical_tam/group-policy-basics-part-2-understanding-which-gpos-to-apply"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains 10 servers that run Windows Server 2016. The computer accounts of the servers are in an organizational unit (OU) named OU1."
        },
        {
          "variant": 1,
          "text": "You create a global group named Server Admins."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the members of Server Admins can stop and start the Server service on the servers in OU1. The solution must use the principle of least privilege."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Create a Group Policy object (GPO) linked to OU1. Modify the Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\User Rights Assignment settings."
        },
        {
          "label": "B",
          "Text": "On each new server deployed to OU1, configure Computer Configuration\\Policies\\Windows Settings\\Security Settings for Local Computer Policy\\NonAdministrators Policy."
        },
        {
          "label": "C",
          "Text": "Create a Group Policy object (GPO) linked to OU1. Modify the Computer Configuration\\Policies\\Windows Settings\\Security Settings\\System Services settings."
        },
        {
          "label": "D",
          "Text": "From the Local Computer Policy on each new server deployed to OU1, configure Computer Configuration\\Policies\\Windows Settings\\Security Settings."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://social.technet.microsoft.com/Forums/ie/en-US/e9d3a8d3-5301-4961-96be-99f586c6fc1c/using-ad-to-allow-a-user-to-startstop-a-service?forum=winserverDS"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. All domainjoined computers have Fast Logon Optimization enabled. "
        },
        {
          "variant": 1,
          "text": "You need to ensure that the next time a user signs in to Server1, the user-targeted Group Policy objects (GPOs) are processed fully before the user gains access to the desktop. "
        },
        {
          "variant": 1,
          "text": "What should you run on Server?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "secedit with the /analyze switch"
        },
        {
          "label": "B",
          "Text": "Invoke-Gpupdate with the –Boot switch"
        },
        {
          "label": "C",
          "Text": "gpupdate with the /wait switch"
        },
        {
          "label": "D",
          "Text": "gpupdate with the /Sync switch"
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/gpupdate"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You have an enterprise certification authority (CA) named CA1. You have a certificate template named UserAutoEnroll that is based on the User certificate template. Domain users are configured to autoenroll for UserAutoEnroll."
        },
        {
          "variant": 1,
          "text": "A user named User1 has an email address defined in Active Directory. A user named User2 does not have an email address defined in Active Directory. You discover that User1 was issued a certificate based on UserAutoEnroll template automatically."
        },
        {
          "variant": 1,
          "text": "A request by user2 for a certificate based on the UserAutoEnroll template fails."
        },
        {
          "variant": 1,
          "text": "You need to ensure that all users can autoenroll for certificated based on the UserAutoEnroll template."
        },
        {
          "variant": 1,
          "text": "Which setting should you configure from the properties on the UserAutoEnroll certificate template?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Issuance Requirements"
        },
        {
          "label": "B",
          "Text": "Request Handling"
        },
        {
          "label": "C",
          "Text": "Cryptography"
        },
        {
          "label": "D",
          "Text": "Subject Name"
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Which of the following CA types would you deploy if you wanted to deploy a CA at the top of a hierarchy that could issue signing certificates to other CAs and which would be taken offline if not issuing, renewing, or revoking signing certificates?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Enterprise root"
        },
        {
          "label": "B",
          "Text": "Enterprise subordinate"
        },
        {
          "label": "C",
          "Text": "Standalone root"
        },
        {
          "label": "D",
          "Text": "Standalone subordinate"
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You need to ensure that clients will check at least every 30 minutes as to whether a certificate has been revoked. Which of the following should you configure to accomplish this goal?"
        },
        {
          "variant": 1,
          "text": " "
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Key recovery agent"
        },
        {
          "label": "B",
          "Text": "CRL publication interval"
        },
        {
          "label": "C",
          "Text": "Delta CRL publication interval"
        },
        {
          "label": "D",
          "Text": "Certificate templates."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA) named CA1."
        },
        {
          "variant": 1,
          "text": "You duplicate the Computer certificate template, and you name the template Cont_Computers."
        },
        {
          "variant": 1,
          "text": "You need to ensure that all of the certificates issued based on Cont_Computers have a key size of 4,096 bits."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From the properties of CA1, modify the Security settings."
        },
        {
          "label": "B",
          "Text": "From the properties of CA1, modify the Request Handling settings."
        },
        {
          "label": "C",
          "Text": "From the properties of the Computer template, modify the Key Attestation settings."
        },
        {
          "label": "D",
          "Text": "From the properties of Cont_Computers, modify the Cryptography settings."
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 1,
      "question": [
        {
          "variant": 1,
          "text": "You have an enterprise certification authority (CA)."
        },
        {
          "variant": 1,
          "text": "You create a global security group named Group1."
        },
        {
          "variant": 1,
          "text": "You need to provide members of Group1 with the ability to issue and manage certificates."
        },
        {
          "variant": 1,
          "text": "The solution must prevent the Group1 members from managing certificates requested by members of the Domain Admins group."
        },
        {
          "variant": 1,
          "text": "Which two actions should you perform? Each correct answer presents part of the solution."
        },
        {
          "variant": 1,
          "text": "NOTE: Each correct selection is worth one point."
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From the CA properties, modify the Policy Module settings."
        },
        {
          "label": "B",
          "Text": "From the Certificate Templates console, modify the Security settings of the Administrator certificate template."
        },
        {
          "label": "C",
          "Text": "From the CA properties, modify the security settings."
        },
        {
          "label": "D",
          "Text": "From the CA properties, modify the Enrollment Agents settings."
        },
        {
          "label": "E",
          "Text": "From the CA properties, modify the Certificate Managers Settings."
        },
        {
          "label": "F",
          "Text": "From the Certificate Templates console, modify the Security settings of the User certificate template."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com. The forest contains an enterprise root certification authority (CA) on a server that runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "You plan to create and issue a custom subordinate CA template."
        },
        {
          "variant": 1,
          "text": "You need to prevent subordinate CAs from issuing subordinate certificates."
        },
        {
          "variant": 1,
          "text": "What should you configure in the template?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "The Cryptography settings"
        },
        {
          "label": "B",
          "Text": "The Request Handling settings"
        },
        {
          "label": "C",
          "Text": "The Basic Constraints extension"
        },
        {
          "label": "D",
          "Text": "The Security settings"
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active directory domain named contoso.com. The domain has an enterprise certification authority (CA)."
        },
        {
          "variant": 1,
          "text": "You duplicate the Basic EFS template, and you name the template Template1.You configure the CA to issue Template1."
        },
        {
          "variant": 1,
          "text": "Users are configured to obtain a new certificate automatically when they sign in to a computer in the domain."
        },
        {
          "variant": 1,
          "text": "You need to enable the users to automatically obtain a certificate based on Template1."
        },
        {
          "variant": 1,
          "text": "What should you modify?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "The Publication Settings for the CA."
        },
        {
          "label": "B",
          "Text": "The Security Settings for Template1."
        },
        {
          "label": "C",
          "Text": "The Request Handling properties for Template1."
        },
        {
          "label": "D",
          "Text": "The Request Handling properties for the CA."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You have an offline root certification authority (CA) named CA1. CA1 is hosted on a virtual machine."
        },
        {
          "variant": 1,
          "text": "You only turn on CA1 when the CA must be patched or you must generate a key for subordinate CAs."
        },
        {
          "variant": 1,
          "text": "You start CA1, and you discover that the filesystem is corrupted."
        },
        {
          "variant": 1,
          "text": "You resolve the filesystem corruption and discover that you must reload the CA root from a backup."
        },
        {
          "variant": 1,
          "text": "When you attempt to run the Restore-CARoleService cmdlet, you receive the following error message: “The process cannot access the file because it is being used by another process.”"
        },
        {
          "variant": 1,
          "text": "You need to ensure that you can restore the CA."
        },
        {
          "variant": 1,
          "text": "What should you do first?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Stop the Active Directory Certificate Services (AD CS) service."
        },
        {
          "label": "B",
          "Text": "Run the Restore-CARoleService cmdlet and specify the –Force parameter."
        },
        {
          "label": "C",
          "Text": "Stop the Active Directory Domain Services (AD DS) service."
        },
        {
          "label": "D",
          "Text": "Run the Restore-CARoleService cmdlet and specify the path to a valid CA key."
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You deploy a standalone root certification authority (CA) named CA1."
        },
        {
          "variant": 1,
          "text": "You need to autoenroll domain computers for certificates by using a custom certificate template."
        },
        {
          "variant": 1,
          "text": "What should you do first?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Modify the Policy Module for CA1."
        },
        {
          "label": "B",
          "Text": "Modify the Exit Module for CA1."
        },
        {
          "label": "C",
          "Text": "Install a standalone subordinate CA."
        },
        {
          "label": "D",
          "Text": "Install an enterprise subordinate CA."
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 1,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "The domain contains an enterprise root certification authority (CA) on a server that runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "You need to configure the CA to support Online Certificate Status Protocol (OCSP) responders."
        },
        {
          "variant": 1,
          "text": "Which two actions should you perform? Each correct selection presents part of the solution."
        },
        {
          "variant": 1,
          "text": "NOTE: Each correct selection is worth one point."
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Add a new certificate template to issue."
        },
        {
          "label": "B",
          "Text": "Modify the Authority Information Access (AIA) of the CA."
        },
        {
          "label": "C",
          "Text": "Configure an enrollment agent."
        },
        {
          "label": "D",
          "Text": "Install a standalone subordinate CA."
        },
        {
          "label": "E",
          "Text": "Modify the CRL distribution point (CDP) of the CA."
        }
      ],
      "answer": [
        true,
        true,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://www.poweradmin.com/blog/deploying-active-directory-certificate-services-and-online-responder/"
        }
      ]
    },
    {
      "variant": 1,
      "question": [
        {
          "variant": 1,
          "text": "You have a standalone root certification authority (CA)."
        },
        {
          "variant": 1,
          "text": "You have a new security policy requirements specifying that any changes to the CA configuration must be logged."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the CA meets the new security requirement."
        },
        {
          "variant": 1,
          "text": "Which two actions should you perform? Each correct answer presents part of the solution."
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From the Certification Authority console, modify the Auditing settings for the CA."
        },
        {
          "label": "B",
          "Text": "From the Certification Authority console, modify the Security settings for the CA."
        },
        {
          "label": "C",
          "Text": "From Local Group Policy Editor, configure auditing for policy change."
        },
        {
          "label": "D",
          "Text": "From the Certification Authority console, modify the Certificate Managers settings for the CA."
        },
        {
          "label": "E",
          "Text": "From Local Group Policy Editor, configure auditing for object access."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/basic-audit-policy-change"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/basic-audit-object-access"
        }
      ]
    },
    {
      "variant": 1,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com. The domain contains servers that run Windows Server 2016. The servers are configured as shown in the following table:"
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image22.jpg"
        },
        {
          "variant": 1,
          "text": "You have a research department. The computers in the research department are not domain-joined. "
        },
        {
          "variant": 1,
          "text": "You need to ensure that the research department computers can use automatic certificate enrollment to receive and renew certificates from the CA. "
        },
        {
          "variant": 1,
          "text": "Which two role services should you install and configure on CA1? Each correct answer presents part of the solution."
        },
        {
          "variant": 1,
          "text": "NOTE: Each correct selection is worth one point."
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Certificate Enrollment Policy Web Service "
        },
        {
          "label": "B",
          "Text": "Certificate Authority Web Enrollment "
        },
        {
          "label": "C",
          "Text": "Online Responder "
        },
        {
          "label": "D",
          "Text": "Certificate Enrollment Web Service "
        },
        {
          "label": "E",
          "Text": "Network Device Enrollment Service "
        }
      ],
      "answer": [
        true,
        true,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://www.ejbca.org/docs/Part_2__Microsoft_Certification_Authority_and_Group_Policies.html"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You have a certification authority (CA) named CA1. You create a certificate template named Template1 that has the following configurations:"
        },
        {
          "variant": 1,
          "text": "Minimum key size: 2048"
        },
        {
          "variant": 1,
          "text": "Cryptographic provider: Microsoft Strong Cryptographic Provider \nCompatibility Settings-Certification Authority: Windows server 2012 R2 \nCompatibility Settings-Certificate recipient: Windows 8.1 /Windows Server 2012 R2"
        },
        {
          "variant": 1,
          "text": "You plan to configure Template1 to require that computers requesting certificates based on Template1 must have a TPM-protected private key. "
        },
        {
          "variant": 1,
          "text": "You need to modify Template1 to ensure that you can configure the Key Attestation settings. "
        },
        {
          "variant": 1,
          "text": "What should you change?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Compatibility Settings – Certification Authority to Windows Server 2016 "
        },
        {
          "label": "B",
          "Text": "Compatibility Settings – Certificate recipient to Windows 10/Windows Server 2016 "
        },
        {
          "label": "C",
          "Text": "Cryptographic provider to Microsoft Platform Crypto Provider"
        },
        {
          "label": "D",
          "Text": "Minimum key size to 4096 "
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/manage/component-updates/tpm-key-attestation"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain. All servers run Windows Server 2016. All client computers run Windows 10 Enterprise."
        },
        {
          "variant": 1,
          "text": "You deploy an enterprise certification authority (CA)."
        },
        {
          "variant": 1,
          "text": "You are implementing an online responder."
        },
        {
          "variant": 1,
          "text": "You need to ensure that any clients that are issued certificated by the CA will use the online responder."
        },
        {
          "variant": 1,
          "text": "How should you configure the extension settings of the CA?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Configure the CRL Distribution Point extension by adding a location that has the Publish CRLs to this location check box and the Publish Delta CRLs to this location check box selected."
        },
        {
          "label": "B",
          "Text": "Configure the Authority Information Access (AIA) extension by adding a location that has the Include in the AIA extension of issued certificates check box selected."
        },
        {
          "label": "C",
          "Text": "Configure the Authority Information Access (AIA) extension by adding a location that has the Include in the online certificate status protocol (OCSP) extension check box selected."
        },
        {
          "label": "D",
          "Text": "Configure the CRL Distribution Point extension by adding a location that has the Include in the CDP extension of issued certificates check box selected."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://www.poweradmin.com/blog/deploying-active-directory-certificate-services-and-online-responder/"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com."
        },
        {
          "variant": 1,
          "text": "You have an Active Directory Federation Services (AD FS) farm. The farm contains a server named Server1 that runs Windows Server 2012 R2."
        },
        {
          "variant": 1,
          "text": "You add a server named Server2 to the farm. Server2 runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "You remove Server1 from the farm."
        },
        {
          "variant": 1,
          "text": "You need to ensure that you can use role separation to manage the farm."
        },
        {
          "variant": 1,
          "text": "Which cmdlet should you run?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Set-AdfsFarmInformation"
        },
        {
          "label": "B",
          "Text": "Update-AdfsRelyingPartyTrust"
        },
        {
          "label": "C",
          "Text": "Set-AdfsProperties"
        },
        {
          "label": "D",
          "Text": "Invoke-AdfsFarmBehaviorLevelRaise"
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 1,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. Server1 is located in the perimeter network."
        },
        {
          "variant": 1,
          "text": "You install the Active Directory Federation Services server role on Server1. You create an Active Directory Federation Services (AD FS) farm by using a certificate that has a subject name of sts.contoso.com."
        },
        {
          "variant": 1,
          "text": "You need to enable certificate authentication from the Internet on Server1."
        },
        {
          "variant": 1,
          "text": "Which two inbound TCP ports should you open on the firewall? Each correct answer presents part of the solution."
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "389"
        },
        {
          "label": "B",
          "Text": "443"
        },
        {
          "label": "C",
          "Text": "3389"
        },
        {
          "label": "D",
          "Text": "8531"
        },
        {
          "label": "E",
          "Text": "49443"
        }
      ],
      "answer": [
        false,
        true,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You have a server named Server1 that runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "You need to configure Server1 as a Web Application Proxy."
        },
        {
          "variant": 1,
          "text": "Which server role or role service should you install on Server1?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Remote Access"
        },
        {
          "label": "B",
          "Text": "Active Directory Federation Services"
        },
        {
          "label": "C",
          "Text": "Web Server (IIS)"
        },
        {
          "label": "D",
          "Text": "DirectAccess and VPN (RAS)"
        },
        {
          "label": "E",
          "Text": "Network Policy and Access Services"
        }
      ],
      "answer": [
        true,
        false,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You are configuring AD FS. Which server should you deploy on your organization's perimeter network?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Web application proxy"
        },
        {
          "label": "B",
          "Text": "Relying-party server"
        },
        {
          "label": "C",
          "Text": "Federation server"
        },
        {
          "label": "D",
          "Text": "Claims-provider server"
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You have an Active Directory Rights Management Services (AD RMS) server named RMS1. Multiple documents are protected by using RMS1."
        },
        {
          "variant": 1,
          "text": "RMS1 fails and cannot be recovered. You install the AD RMS server role on a new server named RMS2. You restore the AD RMS database from RMS1 to RMS2."
        },
        {
          "variant": 1,
          "text": "Users report that they fail to open the protected documents and to protect new documents."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the users can access the protected content."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From Active Directory Rights Management, update the Service Connection Point (SCP) for RMS1."
        },
        {
          "label": "B",
          "Text": "From DNS, create an alias (CNAME) record for RMS2."
        },
        {
          "label": "C",
          "Text": "From DNS, modify the service location (SRV) record for RMS1."
        },
        {
          "label": "D",
          "Text": "From RMS2, register a service principal name (SPN) in Active Directory."
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You have a server named Web1 that runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "You need to list all the SSL certificates on Web1 that will expire during the next 60 days. Solution: You run the following command."
        },
        {
          "variant": 1,
          "text": "Get-ChildItem Cert:\\LocalMachine\\My |? { $_.NotAfter –It (Get-Date).AddDays( 60 ) } Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You network contains an Active Directory domain named contoso.com. The domain contains an Active Directory Federation Services (AD FS) server named ADFS1, a Web Application Proxy server named WAP1, and a web server named Web1."
        },
        {
          "variant": 1,
          "text": "You need to publish a website on Web1 by using the Web Application Proxy. Users will authenticate by using OAuth2 preauthentication."
        },
        {
          "variant": 1,
          "text": "What should you do first?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "On Web1, add site bindings."
        },
        {
          "label": "B",
          "Text": "On Web1, add handler mappings."
        },
        {
          "label": "C",
          "Text": "On ADFS1, enable an endpoint."
        },
        {
          "label": "D",
          "Text": "On ADFS1, add a claims provider trust."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain. The domain contains an Active Directory Rights Management Services (AD RMS) cluster and a certification authority (CA)."
        },
        {
          "variant": 1,
          "text": "You need to ensure that all the documents that are protected by using AD RMS can be decrypted if the account used to encrypt the documents is deleted."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Configure super users in the AD RMS deployment."
        },
        {
          "label": "B",
          "Text": "Manually configure the AD RMS cluster key password."
        },
        {
          "label": "C",
          "Text": "Back up the AD-RMS-protected files by using Windows Server Backup."
        },
        {
          "label": "D",
          "Text": "Configure key archival on the CA."
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 1,
      "question": [
        {
          "variant": 1,
          "text": "You have an internal web server that hosts websites. The websites use HTTP and HTTPS."
        },
        {
          "variant": 1,
          "text": "You deploy a Web Application Proxy to your perimeter network."
        },
        {
          "variant": 1,
          "text": "You need to ensure that users from the Internet can access the websites by using HTTPS only. Internet access to the websites must use the Web Application Proxy."
        },
        {
          "variant": 1,
          "text": "Which two actions should you perform? Each correct answer presents part of the solution."
        },
        {
          "variant": 1,
          "text": "NOTE: Each correct selection is worth one point."
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "From the web server, enable HTTP Redirect on the Web Application Proxy server."
        },
        {
          "label": "B",
          "Text": "Configure the Web Application Proxy to perform preauthentication by using Oauth2."
        },
        {
          "label": "C",
          "Text": "From the Remote Access Management Console, publish the websites. Configure pass-through authentication and select Enable HTTP to HTTPS redirection."
        },
        {
          "label": "D",
          "Text": "On external DNS name servers, create DNS entries that point to the private IP address of the web server."
        },
        {
          "label": "E",
          "Text": "On external DNS name servers, create DNS entries that point to the public IP address of the Web Application Proxy. "
        }
      ],
      "answer": [
        false,
        false,
        true,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain named contoso.com."
        },
        {
          "variant": 1,
          "text": "You plan to deploy a new Active Directory Rights Management Services (AD RMS) cluster on a server named Server1."
        },
        {
          "variant": 1,
          "text": "You need to create the AD RMS service account. The solution must use the principle of least privilege."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Create a local user account on Server1 and add the account to the Administrators group on Server1."
        },
        {
          "label": "B",
          "Text": "Create a domain user account and add the account to the Administrators group on Server1."
        },
        {
          "label": "C",
          "Text": "Create a domain user account and add the account to the Domain Users group in the domain."
        },
        {
          "label": "D",
          "Text": "Create a domain user account and add the account to the Account Operators group in the domain."
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You use Application Request Routing (ARR) to make internal web applications available to the Internet by using NTLM authentication."
        },
        {
          "variant": 1,
          "text": "You need to replace ARR by using the Web Application Proxy."
        },
        {
          "variant": 1,
          "text": "Which server role should you deploy first?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Active Directory Certificate Services"
        },
        {
          "label": "B",
          "Text": "Active Directory Federation Services"
        },
        {
          "label": "C",
          "Text": "Active Directory Lightweight Directory Services"
        },
        {
          "label": "D",
          "Text": "Active Directory Rights Management Services"
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com. All domain controllers run Windows Server 2012 R2."
        },
        {
          "variant": 1,
          "text": "You deploy a new server named Server1 that runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "A server administrator named ServerAdmin01 is a member of the Doman users group. You add ServerAdmin01 to the Administrators group on Server1."
        },
        {
          "variant": 1,
          "text": "ServerAdmin01 signs in to Server1 and successfully configures a new Active Directory Rights Management Services (AD RMS) cluster."
        },
        {
          "variant": 1,
          "text": "You need to ensure that clients discover the AD RMS cluster by querying Active Directory."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Update the Active Directory schema."
        },
        {
          "label": "B",
          "Text": "Register a Service Connection Point (SCP)."
        },
        {
          "label": "C",
          "Text": "Modify the Security settings of the computer account of Server1."
        },
        {
          "label": "D",
          "Text": "Upgrade one domain controller to Windows Server 2016."
        }
      ],
      "answer": [
        false,
        true,
        false,
        false
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com. The domain contains an Active Directory Federation Services (AD FS) server named Server1."
        },
        {
          "variant": 1,
          "text": "On a standalone server named Server2, you install and configure the Web Application Proxy."
        },
        {
          "variant": 1,
          "text": "You have an internal web application named WebApp1. AD FS has a relying party trust for WebApp1."
        },
        {
          "variant": 1,
          "text": "You need to provide external users with access to WebApp1. Authentication to WebApp1 must use AD FS preauthentication."
        },
        {
          "variant": 1,
          "text": "Which tool should you use to publish WebApp1?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Remote Access Management on Server2"
        },
        {
          "label": "B",
          "Text": "Remote Access Management on Server1"
        },
        {
          "label": "C",
          "Text": "AD FS Management on Server2"
        },
        {
          "label": "D",
          "Text": "AD FS Management on Server1"
        },
        {
          "label": "E",
          "Text": "Routing and Remote Access on Server1"
        }
      ],
      "answer": [
        true,
        false,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows-server/remote/remote-access/web-application-proxy/publishing-applications-using-ad-fs-preauthentication"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named adatum.com."
        },
        {
          "variant": 1,
          "text": "A partner organization has an Active Directory forest named contoso.com."
        },
        {
          "variant": 1,
          "text": "Adatum.com contains an Active Directory Rights Management (AD RMS) cluster installed on a server named adat1.adatum.com."
        },
        {
          "variant": 1,
          "text": "Contoso.com contains an Active Directory Rights Management Services (AD RMS) cluster installed on a server named cont1.contoso.com."
        },
        {
          "variant": 1,
          "text": "You need to allow the AD RMS cluster in adatum.com to accept rights account certificates (RACs) from contoso.com."
        },
        {
          "variant": 1,
          "text": "What should you do?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "In contoso.com, import the trusted user domain file from adat1.adatum.com"
        },
        {
          "label": "B",
          "Text": "In adatum.com, import the trusted publishing domain file from adat1.adatum.com"
        },
        {
          "label": "C",
          "Text": "In contoso.com, import the trusted publishing domain file from cont1.contoso.com"
        },
        {
          "label": "D",
          "Text": "In adatum.com, import the trusted user domain file from cont1.contoso.com"
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You have a server named Web1 that runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "You need to list all the SSL certificates on Web1 that will expire during the next 60 days."
        },
        {
          "variant": 1,
          "text": "Solution: You run the following command."
        },
        {
          "variant": 1,
          "text": "Get-ChildItem Cert:\\CurrentUser\\Trust |? { $_.NotAfter –It (Get-Date).AddDays( 60 ) } Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You have a server named Web1 that runs Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "You need to list all the SSL certificates on Web1 that will expire during the next 60 days."
        },
        {
          "variant": 1,
          "text": "Solution: You run the following command."
        },
        {
          "variant": 1,
          "text": "Get-ChildItem Cert:\\CurrentUser\\My |? { $_.NotAfter –It (Get-Date).AddDays( 60 ) } Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": null
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You have a server named Server1 that has the Active Directory Federation Services server role installed. "
        },
        {
          "variant": 1,
          "text": "You need to configure Server1 as the authorization server. Server1 will be used to authorize access to a web API from a web application. The web application will use OAuth 2.0 and OpenID Connect to access the web API as the authenticated user. The solution must minimize administrative effort. "
        },
        {
          "variant": 1,
          "text": "What should you do first?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Run New-AdfsApplicationGroup "
        },
        {
          "label": "B",
          "Text": "Add a web API application  "
        },
        {
          "label": "C",
          "Text": "Run Add-AdfsNativeClientApplication "
        },
        {
          "label": "D",
          "Text": "Run Add-AdfsWebApiApplication "
        }
      ],
      "answer": [
        false,
        false,
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/powershell/module/adfs/add-adfswebapiapplication?view=win10-ps"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain. The domain contains the servers shown in the following table. "
        },
        {
          "variant": 0,
          "text": "https://start.opensourceexams.org/exams/70-742/images/image23.jpg"
        },
        {
          "variant": 1,
          "text": "You have a server named WebServer2 in a workgroup. WebServer2 has the Web Server (IIS) server role installed. You plan to deploy a Web Application Proxy to provide preauthentication for HTTP Basic application publishing to allow users to connect to mailboxes by using Exchange ActiveSync. "
        },
        {
          "variant": 1,
          "text": "You need to install the Web Application Proxy role service. The solution must minimize the attack surface. "
        },
        {
          "variant": 1,
          "text": "On which server should you install the role service?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "WebServer2 "
        },
        {
          "label": "B",
          "Text": "WebServer1"
        },
        {
          "label": "C",
          "Text": "ADFS1"
        },
        {
          "label": "D",
          "Text": "ADFS2"
        }
      ],
      "answer": [
        true,
        false,
        false,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://www.techsupportpk.com/2016/12/deploy-web-application-proxy-windows-server-2016.html"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/sharepoint/hybrid/configure-web-application-proxy-for-a-hybrid-environment"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows-server/storage/work-folders/deploy-work-folders-adfs-step4"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your company uses Active Directory Rights Management Services (AD RMS). "
        },
        {
          "variant": 1,
          "text": "You need to ensure that only users who use AD RMS client version 2.1 or newer can obtain a rights account certificate from the AD RMS cluster. "
        },
        {
          "variant": 1,
          "text": "What should you enable first?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "decommissioning"
        },
        {
          "label": "B",
          "Text": "user exclusion"
        },
        {
          "label": "C",
          "Text": "lockbox exclusion"
        },
        {
          "label": "D",
          "Text": "Application Exclusion"
        }
      ],
      "answer": [
        false,
        false,
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://forsenergy.com/en-us/rms_help/html/9a944ab7-f0d9-4224-97c6-b2543f537827.htm"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "You network contains an Active Directory forest named contoso.com. The forest contains an Active Directory Rights Management Services (AD RMS) deployment."
        },
        {
          "variant": 1,
          "text": "Your company establishes a partnership with another company named Fabrikam, Inc. The network of Fabrikam contains an Active Directory forest named fabrikam.com and an AD RMS deployment."
        },
        {
          "variant": 1,
          "text": "You need to ensure that the users in contoso.com can access rights protected documents sent by the users in fabrikam.com."
        },
        {
          "variant": 1,
          "text": "Solution: From AD RMS in contoso.com, you configure fabrikam.com as a trusted publisher domain."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://books.google.co.za/books?id=gjR-BAAAQBAJ&pg=PA397&lpg=PA397&dq=configure+a+partners+forest+as+a+trusted+publishing+domain+-+AD"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2."
        },
        {
          "variant": 1,
          "text": "Contoso.com has the following configuration."
        },
        {
          "variant": 1,
          "text": "PS C:\\> (Get-ADForest).ForestMode Windows2008R2Forest"
        },
        {
          "variant": 1,
          "text": "PS C:\\> (Get-ADDomain).DomainMode"
        },
        {
          "variant": 1,
          "text": "Windows2008R2Domain PS C:\\>"
        },
        {
          "variant": 1,
          "text": "You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration."
        },
        {
          "variant": 1,
          "text": "You need to configure Active Directory to support the planned deployment."
        },
        {
          "variant": 1,
          "text": "Solution: You run adprep.exe from the Windows Server 2016 installation media."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/configure-a-federation-server-with-device-registration-service"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers-to-windows-server-2012-r2-and-windows-server-2012"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2."
        },
        {
          "variant": 1,
          "text": "Contoso.com has the following configuration."
        },
        {
          "variant": 1,
          "text": "PS C:\\> (Get-ADForest).ForestMode Windows2008R2Forest"
        },
        {
          "variant": 1,
          "text": "PS C:\\> (Get-ADDomain).DomainMode"
        },
        {
          "variant": 1,
          "text": "Windows2008R2Domain PS C:\\>"
        },
        {
          "variant": 1,
          "text": "You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration."
        },
        {
          "variant": 1,
          "text": "You need to configure Active Directory to support the planned deployment."
        },
        {
          "variant": 1,
          "text": "Solution: You upgrade a domain controller to Windows Server 2016."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        true,
        false
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/configure-a-federation-server-with-device-registration-service"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers-to-windows-server-2012-r2-and-windows-server-2012"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2."
        },
        {
          "variant": 1,
          "text": "Contoso.com has the following configuration."
        },
        {
          "variant": 1,
          "text": "PS C:\\> (Get-ADForest).ForestMode Windows2008R2Forest"
        },
        {
          "variant": 1,
          "text": "PS C:\\> (Get-ADDomain).DomainMode"
        },
        {
          "variant": 1,
          "text": "Windows2008R2Domain PS C:\\>"
        },
        {
          "variant": 1,
          "text": "You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration."
        },
        {
          "variant": 1,
          "text": "You need to configure Active Directory to support the planned deployment."
        },
        {
          "variant": 1,
          "text": "Solution: You raise the domain functional level to Windows Server 2012 R2."
        },
        {
          "variant": 1,
          "text": "Does this meet the goal?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "Yes"
        },
        {
          "label": "B",
          "Text": "No"
        }
      ],
      "answer": [
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "References:"
        },
        {
          "variant": 1,
          "text": "https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/configure-a-federation-server-with-device-registration-service"
        }
      ]
    },
    {
      "variant": 0,
      "question": [
        {
          "variant": 1,
          "text": "Your network contains an Active Directory domain. The domain contains an Active Directory Rights Management Services (AD RMS) cluster."
        },
        {
          "variant": 1,
          "text": "All client computers run Windows 10 Enterprise."
        },
        {
          "variant": 1,
          "text": "You need to control from which versions of Windows users can access rights-protected content."
        },
        {
          "variant": 1,
          "text": "What should you create?"
        }
      ],
      "choices": [
        {
          "label": "A",
          "Text": "a security policy"
        },
        {
          "label": "B",
          "Text": "a trust policy"
        },
        {
          "label": "C",
          "Text": "an exclusion policy"
        }
      ],
      "answer": [
        false,
        false,
        true
      ],
      "explanation": [
        {
          "variant": 1,
          "text": "https://books.google.co.za/books?id=G9Y5DwAAQBAJ&pg=PA385&lpg=PA385&dq=rights-protected+content+-+exclusion"
        }
      ]
    }
  ]
}