Microsoft Securing Windows Server 2016 Set 3

Your network contains an Active Directory domain named contoso.com. The domain contains 100 servers. You deploy the Local Administrator Password Solution (LAPS) to the network. You need to view the password of the local administrator of a server named Server5. Which tool should you use?

Your network contains an Active Directory domain named contoso.com. The domain contains multiple servers that run either Windows Server 2012 or Windows Server 2012 R2. You plan to implement Just Enough Administration (JEA) to manage all of the servers. What should you install on each server to ensure that the servers can be managed by using JEA?

Your network contains an Active Directory domain named contoso.com. The domain contains two global groups named Group1 and Group2. A user named User1 is a member of Group1. You have an organizational unit (OU) named OU1 that contains the computer accounts of computers that contain sensitive data. A Group Policy object (GPO) named GPO1 is linked to OU1. OU1 contains a computer account named Computer1. GPO1 has the User Rights Assignment configured as shown in the following table. You need to prevent User1 from signing in to Computer1. What should you do?

Your network contains an Active Directory domain. You plan to implement Dynamic Access Control. You need to create a central access rule that will grant permissions to users who have the Department attribute set to Finance. The users must have access to resources that have the Department property set to Finance. Which two actions should you perform before you create the central access rule? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Your network contains two Active Directory forests named corp.contoso.com and priv.contoso.com. Both forests have only a single domain. The priv.contoso.com domain contains a server named Server1 that runs Windows Server 2016. You install Microsoft Identity Manager (MIM) 2016 on Server1. You plan to deploy MIM-based Privileged Access Management (PAM) between the two forests. You run New-PAMTrust in the priv.contoso.com domain. You need to configure the trust relationship between the forests to support the PAM deployment. Which three settings should you configure for the trust? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. You have an organizational unit (OU) named Administration that contains the computer account of Server1. You import the Active Directory module to Server1. You create a Group Policy object (GPO) named GPO1. You link GPO1 to the Administration OU. You need to log an event each time an Active Directory cmdlet is executed successfully from Server1. What should you do?

Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012. The forest contains 20 member servers that are configured as file servers. All domain controllers run Windows Server 2016. You create a new forest named contosoadmin.com. You need to use the Enhanced Security Administrative Environment (ESAE) approach for the administration of the resources in contoso.com. Which two actions should you perform? Each correct answer presents part of the solution.

Your network contains an Active Directory domain named contoso.com. The domain contains a file server named FS1 that runs Windows Server 2016. FS1 has a share named SecureFolder. You need to track all users who access the contents of SecureFolder. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. You deploy Advanced Threat Analytics (ATA) to Server1. You need to move the ATA database to a different folder. Which configuration file should you modify?