Microsoft 70-744 Securing Windows Server 2016 Exam Practice Test

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.

Multiple resource properties are defined in the domain.

Server1 has a volume named Volume1.

You need to view the classification properties that have been configured on Volume1.

Which tool should you use?

Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named OU1.

OU1 contains a server named Server1. The properties of Server1 are shown in the Server1 exhibit. (Click the Server1 tab.)

You create a Group Policy object (GPO) linked to OU1. You configure the GPO as shown in the LAPS exhibit. (Click the LAPS tab.)

You need to ensure that the password of the local Administrator of Server1 is managed by using Local Administrator Password Solution (LAPS).

Which cmdlet should you run?

You have a server named Server1 that runs Windows Server 2016. Server1 contains a folder named Folder1.

Folder1 is shared as Share1.

You need to enable SMB encryption for Share1.

What should you do?

You have a server named Server1.

You need to configure Windows Defender to perform a full scan every day at 21:00.

What should you do?

You have several servers that run Windows Server 2016. All the servers were recently configured 10 use a new Windows Server Update Services (WSUS) server named WSUS1. WSUSI is configured to download updates as shown in the exhibit. {Click the Exhibit tab.)

You discover that the servers have out-of-date Windows Defender definitions. The servers receive security updates from WSUSI.

You need to ensure that the servers receive the latest Windows Defender definitions.

What should you do?

Your network contains an Active Directory domain named contoso.com.

All DNS servers host an Active Directory-integrated zone for the domain that is DNSSEC-signed. All the DNS servers have a trust anchor installed for a DNS zone named fabrikam.com.

For all the computers in the domain, you configure a name resolution policy that enforces DNSSEC validation for the contoso.com and fabrikam.com DNS namespaces.

You need to verify whether the trust anchor is valid.

What should you do?

You have server named Server1.

You need to configured PowerShell logging to capture dynamic code generation. the solution must minimize the number of events that are logged.

What should you configured?