Microsoft 70-742 Identity with Windows Server 2016 Exam Practice Test

Your network contains an Active Directory domain named contos.com. The domain contains a server named Server1 that runs a server core installation of windows Server 2016. Server is configured as an Active Directory Rights Management Services (AD RMS) server for the domain.

You need to install the identity Federation Support role service on Server1.

What should you don first?

Your network contains an Active Directory domain. The domain contains a server named Server1 that runs Windows Server 2016- Server1 runs a service named Service! in the security context of the Network Service account

The domain contains an enterprise certification authority (CA).

You plan to create a certificate template that will be used to issue certificates for Service1. Server1 will enroll for the certificates on behalf of Service1.

Which template settings you must configure to allow Service1 to access the private keys of the certificates installed on Server1?

Your company uses Active Directory Rights Management Services (AD RMS).

You need to ensure that only users who use AD RMS client version 2.1 or newer can obtain a rights account certificate from the AD RMS cluster.

What should you enable first?

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. All domain-joined computers have Fast Logon Optimization enabled.

You need to ensure that the next time a user signs in to Server1, the user-targeted Group Policy objects (GPOs) are processed fully before the user gains access to the desktop.

What should you run on Server?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com. You have an organizational unit (OU) named LondonUsers that contains 10,000 users. You need to modify the office attribute of all the users in the LondonUsers OU.

Solution: You create an LDIF file. You run ldifde.exe and specify the --i and --f parameters.

Does this meet the goal?

You have servers that run Windows Server 2016 and devices that run Windows 10 Enterprise.

You have a certification authority (CA) that Issued computer certificates to all the servers and devices.

You plan to allow the Windows 10 devices to connect to the network remotely by using VPN device tunnels.

You install the Remote Access server role on a server. From the Routing and Remote Access console, you configure the server for the VPN role.

You need to ensure that the Windows 10 devices can establish the VPN tunnel before users sign in to the devices. What should you do on the VPN server?

You plan to deploy a Software Defined Networking (SDN) infrastructure.

Which service provides name resolution for the virtual machines on a tenant network?