Microsoft Identity with Windows Server 2016 Set 1

Question - 15 Maximum mark : - 29

Home
All Exams
Microsoft Identity with Windows Server 2016 Online Practice Exams
Microsoft Identity with Windows Server 2016 Set 1

Your network contains an Active Directory forest named contoso.com Your company plans to hire 500 temporary employees for a project that will last 90 days. You create a new user account for each employee. An organizational unit (OU) named Temp contains the user accounts for the employees. You need to prevent the new users from accessing any of the resources in the domain after 90 days. What should you do?

Run the Get-ADUser cmdlet and pipe the output to the Set-ADUser cmdlet. ✘ Create a group that contains all of the users in the Temp OU. Create a Password Setting object (PSO) for the new group. ✘ Create a Group Policy object (GPO) and link the GPO to the Temp OU. Modify the Password Policy settings of the GPO. ✘ Run the Get-ADOrganizationalUnit cmdlet and pipe the output to the Set-Date cmdlet. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Your network contains an Active Directory forest. The forest contains two domains named litwarenc.com and contoso.com. The contoso.com domain contains two domains controllers named LON-DC01 and LON-DC02. The domain controllers are located in a site named London that is associated to a subnet of 192.168.10.0/24 You discover that LON-DC02 is not a global catalog server. You need to configure LON-DC02 as a global catalog server. What should you do?

From Active Directory Sites and Services, modify the properties of the 192.168.10.0/24 IP subnet. ✘ From Windows PowerShell, run the Set-NetNatGlobal cmdlet. ✘ From Active Directory Sites and Services, modify the NTDS Settings object of LON-DC02. ✘ From Windows PowerShell, run the Enable-ADOptionalFeature cmdlet. ✔ From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the NTDS settings. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Your network contains an Active Directory domain named contoso.com. The domain functional level is Windows Server 2012 R2. You need to secure several high-privilege user accounts to meet the following requirements: Prevent authentication by using NTLM. Use Kerberos to verify authentication request to any resources. Prevent the users from signing in to a client computer if the computer is disconnected from the domain. What should you do?

Create a universal security group for the user accounts and modify the Security settings of the group. ✘ Add the users to the Windows Authorization Access Group group. ✘ Add the user to the Protected Users group. ✘ Create a separate organizational unit (OU) for the user accounts and modify the Security settings of the OU. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Your network contains an Active Directory forest named contoso.com. Users frequently access the website of an external partner company. The URL of the website is http://partners.adatum.com. The partner company informs you that it will perform maintenance on its Web server and that the IP addresses of the Web server will change. After the change is complete, the users on your internal network report that they fail to access the website. However, some users who work from home report that they can access the website. You need to ensure that your DNS servers can resolve partners.adatum.com to the correct IP address immediately. What should you do?

Run dnscmd and specify the CacheLockingPercent parameter. ✘ Run Set-DnsServerGlobalQueryBlockList. ✘ Run ipconfig and specify the Renew parameter. ✘ Run Set-DnsServerCache. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You network contains one Active Directory domain named adatum.com. The domain contains a DNS server named Server1 that runs Windows Server 2016. All domain computers use Server1 for DNS. You sign adatum.com by using DNSSEC. You need to configure the domain computers to validate DNS responses for adatum.com records. What should you configure in Group Policy?

Network List Manager Policies ✘ Network Access Protection (NAP) ✘ Name Resolution Policy ✘ Public Key Policy ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers. You have a branch office that has a local support technician named Tech1. Tech1 installs Windows Server 2016 on a server named RODC1 in a workgroup. You need Tech1 to deploy RODC1 as a read-only domain controller (RODC) in the contoso.com domain. Which three actions should you perform? Each correct answer presents part of the solution.

Instruct Tech1 to run the Active Directory Domain Services Configuration Wizard. Create an RODC computer account by using Active Administrative Center. Instruct Tech1 to run dcpromo.exe on RODC1. Instruct Tech1 to install the Active Directory Domain Services server role on RODC1. Modify the permissions of the Domain Controllers organizational unit (OU).

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Your network contains an Active Directory domain. All client computers run Windows 10. A client computer named Computer1 was in storage for five months and was unused during that time. You attempt to sign in to the domain from Computer1 and receive an error message. You need to ensure that you can sign in to the domain from Computer1. What should you do?

Unjoin Computer1 from the domain, and then join the computer to the domain. ✘ From Active Directory Administrative Center, reset the computer account of Computer1. ✘ From Active Directory Administrative Center, disable Computer1, and then enable the computer account of Computer1. ✘ From Active Directory Users and Computers, run the Delegation of Control Wizard. ✔ From Windows PowerShell on Computer1, run the Restore-Computer cmdlet ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest and the domains is Windows Server 2008 R2. You have a global group named Group1 in the contoso.com domain. Group1 contains the user accounts in the contoso.com. You need to ensure that you can add the user accounts in the fabrikam.com domain to Group1. What should you do?

Assign the Domain Controllers group in fabrikam.com permissions to Group1. ✘ Modify the scope of Group1 to Universal. ✘ Raise the domain functional level contoso.com to Windows Server 2016. ✘ Raise the domain functional level of fabriakm.com Windows Server 2016. ✔ Change Group1 to a distribution group ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Your network contains an Active Directory domain named contoso.com. All users are in an organizational unit (OU) named Corp_Users. You plan to modify the description of all the users who have a string of 514 in their mobile phone number. You need to view a list of the users that will be modified. What should you run?

Get-ADOrganizationalUnit-Filter "mobilePhone-Like '*514*' "

✘

Get-ADUser-LDAPFilter "(mobilePhone= '*514*')"

✘

Get-ADUser-Filter "mobilePhone-Like '*514*' "

✘

Get-ADOrganizationalUnit-LDAPFilter "(mobilePhone= '*514*')"

✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

Your network contains an Active Directory domain. The domain contains a computer named Computer1 and an organizational unit (OU) named TestOU. TestOU contains 10 computer accounts that are used for testing. A Group Policy object (GPO) named GPO1 is linked to TestOU. On Computer1, you modify the User Right Assignment by using the local policy. You need to apply the User Right Assignment from Computer1 to the 10 test computers. What should you do?

On Computer1 run the secedit.exe command and specify the /export parameter. Edit GPO1, and then import a security template. ✘ On Computer1, run the gpresult.exe command and specify the /x parameter. Edit GPO1, and then import a security template. ✘ On Computer1, run the secedit.exe command and specify the /export parameter. From Group Policy Management, run the Import Settings Wizard. ✘ On Computer1, run the gpresult.exe command and specify the /x parameter. From Group Policy Management, run the Restore Group Policy Object Wizard. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

Microsoft Identity with Windows Server 2016 Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner