Microsoft 70-744 Exam Practice Questions (P. 5)
- Full Access (205 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #21
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2016.
The domain contains a server named Server1 that has Microsoft Security Compliance Manager (SCM) 4.0 installed.
You export the baseline shown in the following exhibit.

You have a server named Server2 that is a member of a workgroup.
You copy the {2617e9b1-9672-492b-aefa-0505054848c2} folder to Server2.
You need to deploy the baseline settings to Server2.
What should you do?
The domain contains a server named Server1 that has Microsoft Security Compliance Manager (SCM) 4.0 installed.
You export the baseline shown in the following exhibit.

You have a server named Server2 that is a member of a workgroup.
You copy the {2617e9b1-9672-492b-aefa-0505054848c2} folder to Server2.
You need to deploy the baseline settings to Server2.
What should you do?
- ADownload, install, and then run the Lgpo.exe command.
- BFrom Group Policy Management, import a Group Policy object (GPO).
- CFrom Windows PowerShell, run the Restore-GPO cmdlet.
- DFrom Windows PowerShell, run the Import-GPO cmdlet.
- EFrom a command prompt, run the secedit.exe command and specify the/import parameter.
Correct Answer:
D
References:
https://anytecho.wordpress.com/2015/05/22/importing-group-policies-using-powershell-almost/
D
References:
https://anytecho.wordpress.com/2015/05/22/importing-group-policies-using-powershell-almost/
send
light_mode
delete
Question #22
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
A technician is testing the deployment of Credential Guard on Server1.
You need to verify whether Credential Guard is enabled on Server1.
What should you do?
A technician is testing the deployment of Credential Guard on Server1.
You need to verify whether Credential Guard is enabled on Server1.
What should you do?
- AFrom a command prompt, run the credwiz.exe command.
- BFrom Task Manager, review the processes listed on the Details tab.
- CFrom Server Manager, click Local Server, and review the properties of Server1.
- DFrom Windows PowerShell, run the Get-WsManCredSSP cmdlet.
- EFrom a command prompt, run the tsecimp.exe command.
- FFrom Control Panel, open Credential Manager, and review the list of Windows Credentials.
Correct Answer:
B
References:
https://yungchou.wordpress.com/2016/10/10/credential-guard-made-easy-in-windows-10-version-1607/
B
References:
https://yungchou.wordpress.com/2016/10/10/credential-guard-made-easy-in-windows-10-version-1607/
send
light_mode
delete
Question #23
HOTSPOT -
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
The services on Server1 are shown in the following output.

Server1 has the AppLocker rules configured as shown in the exhibit. (Click the Exhibit button.)

Rule1 and Rule2 are configured as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
The services on Server1 are shown in the following output.

Server1 has the AppLocker rules configured as shown in the exhibit. (Click the Exhibit button.)

Rule1 and Rule2 are configured as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:

send
light_mode
delete
Question #24
Your network contains an Active Directory domain named contoso.com.
You install the Windows Server Update Services server role on a member server named Server1. Server1 runs Windows Server 2016.
You need to ensure that a user named User1 can perform the following tasks:
✑ View the Windows Server Update Services (WSUS) configuration.
✑ Generate WSUS update reports.
The solution must use the principle of least privilege.
What should you do on Server1?
You install the Windows Server Update Services server role on a member server named Server1. Server1 runs Windows Server 2016.
You need to ensure that a user named User1 can perform the following tasks:
✑ View the Windows Server Update Services (WSUS) configuration.
✑ Generate WSUS update reports.
The solution must use the principle of least privilege.
What should you do on Server1?
- AModify the permissions of the ReportWebService virtual folder from the WSUS Administration website.
- BAdd User1 to the WSUS Reporters local group.
- CAdd User1 to the WSUS Administrators local group.
- DRun wsusutil.exe and specify the postinstall parameter.
Correct Answer:
C
References:
https://technet.microsoft.com/en-us/library/hh852346(v=ws.11).aspx#BKMK_ConfigComputerGroups
C
References:
https://technet.microsoft.com/en-us/library/hh852346(v=ws.11).aspx#BKMK_ConfigComputerGroups
send
light_mode
delete
Question #25
HOTSPOT -
You network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Secure that contains all server.
You install Microsoft Security Compliance Manager (SCM) 4.0 on a server named Server1.
You need to export the SCM Print Server Security baseline and to deploy the baseline to a server named Server2.
What should you do? To answer, select the appropriate options in the answer area.
Hot Area:

You network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Secure that contains all server.
You install Microsoft Security Compliance Manager (SCM) 4.0 on a server named Server1.
You need to export the SCM Print Server Security baseline and to deploy the baseline to a server named Server2.
What should you do? To answer, select the appropriate options in the answer area.
Hot Area:

Correct Answer:
References:
http://www.techrepublic.com/blog/it-security/use-ms-security-compliance-manager-to-secure-your-windows-environment/ https://technet.microsoft.com/en-us/library/hh489604.aspx

References:
http://www.techrepublic.com/blog/it-security/use-ms-security-compliance-manager-to-secure-your-windows-environment/ https://technet.microsoft.com/en-us/library/hh489604.aspx
send
light_mode
delete
All Pages