微软70-742 SQL Server DBA考试题库：2019年最新版

需积分: 9 75 浏览量更新于2024-07-15 收藏 8.89MB PDF 举报

本资源是一份针对微软认证DBA考试70-742的题库，专注于"Identity with Windows Server 2016"这一主题。这份文档由Microsoft官方提供，版本为19.031，确保了最新内容的准确性。它强调了考生在购买后的免费更新政策，有效期为一年，用户可通过会员中心随时下载最新的考试资料。考前两天强烈建议再次验证产品以确保能够顺利通过考试。产品管理团队会密切关注供应商发布的考试更新信息，并为用户提供及时的服务。为了保障产品质量和客户满意度，若遇到任何关于题库的问题，如特定的考试编号（70-742）、版本号、页面和问题编号，以及登录账户信息，客户需联系passleader.com的支持邮箱（support@passleader.com），专业的技术专家会在24小时内提供帮助。值得注意的是，每个订单的产品都有独立的加密代码，确保用户单独使用，避免未经授权的分享。一旦发现共享文件的行为，将取消免费更新和账户访问权限，并可能面临法律制裁。因此，任何未经许可的修改都会受到相应的法律后果。最后，该声明保留最终解释权。订单编号为，考生在备考过程中应遵循这些规定，充分利用这份针对微软SQL Server DBA角色的专业资源，提高考试通过率。

Get Latest & Actual 70-742 Exam's Question and Answers from Passleader.

http://www.passleader.com

The forest contains several domains.

An administrator named Admin01 installs Windows Server 2016 on a server named Server1 and

then joins Server1 to the contoso.com domain.

Admin01 plans to configure Server1 as an enterprise root certification authority (CA).

You need to ensure that Admin01 can configure Server1 as an enterprise CA. The solution must

use the principle of least privilege.

To which group should you add Admin01?

Server Operators in the contoso.com domain

Cert Publishers on Server1

Enterprise Key Admins in the contoso.com domain

Enterprise Admins in the contoso.com domain.

Answer: D

QUESTION 27

Note: This question is part of a series of questions that use the same or similar answer

choices. An answer choice may be correct for more than one question in the series. Each

question is independent of the other questions in this series. Information and details

provided in a question apply only to that question.

Your network contains an Active Directory domain named contoso.com.

The domain contains 5,000 user accounts.

You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a

GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU).

You need to configure the Documents folder of every user to be stored on a server named

FileServer1.

What should you do?

From the Computer Configuration node of DCPolicy, modify Security Settings.

From the Computer Configuration node of DomainPolicy, modify Security Settings.

From the Computer Configuration node of DomainPolicy, modify Administrative Templates.

From the User Configuration node of DCPolicy, modify Security Settings.

From the User Configuration node of DomainPolicy, modify Folder Redirection.

From user Configuration node of DomainPolicy, modify Administrative Templates.

From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings.

From Preferences in the Computer Configuration node of DomainPolicy, modify Windows

Settings.

Answer: E

QUESTION 28

Your network contains an Active Directory forest named contoso.com.

You have an Active Directory Federation Services (AD FS) farm.

The farm contains a server named Server1 that runs Windows Server 2012 R2.

You add a server named Server2 to the farm. Server2 runs Windows Server 2016.

You remove Server1 from the farm.

You need to ensure that you can use role separation to manage the farm.

Which cmdlet should you run?

Set-AdfsFarmInformation

Update-AdfsRelyingPartyTrust

Get Latest & Actual 70-742 Exam's Question and Answers from Passleader.

http://www.passleader.com

Set-AdfsProperties

Invoke-AdfsFarmBehaviorLevelRaise

Answer: D

Explanation:

AD FS for Windows Server 2016 introduces the ability to have separation between server

administrators and AD FS service administrators.

After upgrading our ADFS servers to Windows Server 2016, the last step is to raise the Farm

Behavior Level using the Invoke-AdfsFarmBehaviorLevelRaise PowerShell cmdlet.

To upgrade the farm behavior level from Windows Server 2012 R2 to Windows Server 2016 use

the Invoke-ADFSFarmBehaviorLevelRaise cmdlet.

References: https://technet.microsoft.com/en-us/library/mt605334(v=ws.11).aspx

QUESTION 29

Note: This question is part of a series of questions that present the same scenario. Each

question in the series contains a unique solution that might meet the stated goals. Some

question sets might have more than one correct solution, while others might not have a

correct solution. After you answer a question in this section, you will NOT be able to

return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com.

The domain contains a server named Server1 that runs Windows Server 2016.

The computer account for Server1 is in organizational unit (OU) named OU1.

You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.

You need to add a domain user named User1 to the local Administrators group on Server1.

Solution: From a domain controller, you run the Set-AdComputer cmdlet.

Does this meet the goal?

Yes

Answer: B

QUESTION 30

Your company recently deployed a new child domain to an Active Directory forest.

You discover that a user modified the Default Domain Policy to configure several Windows

components in the child domain.

A company policy states that the Default Domain Policy must be used only to configure domain-

wide security settings.

You create a new Group Policy object (GPO) and configure the settings for the Windows

components in the new GPO.

You need to restore the Default Domain Policy to the default settings from when the domain was

first installed.

What should you do?

From Group Policy Management, click Starter GPOs, and then click Manage Backups.

From a command prompt, run the dcgpofix.exe command.

From Windows PowerShell, run the Copy-GPO cmdlet.

Run ntdsutil.exe to perform a metadata cleanup and a semantic database analysis.

Answer: B

Get Latest & Actual 70-742 Exam's Question and Answers from Passleader.

http://www.passleader.com

QUESTION 31

Note: This question is part of a series of questions that use the same or similar answer

choices. An answer choice may be correct for more than one question in the series. Each

question is independent of the other questions in this series. Information and details

provided in a question apply only to that question.

Your network contains an Active Directory forest named contoso.com.

The forest functional level is Windows Server 2012 R2.

You need to ensure that a domain administrator can recover a deleted Active Directory object

quickly.

Which tool should you use?

Dsadd quota

Dsmod

Active Directory Administrative Center

Dsacls

Dsamain

Active Directory Users and Computers

Ntdsutil

Group Policy Management Console

Answer: C

Explanation:

You can restore objects from the Active Directory Recycle Bin by using Active Directory

Administrative Center.

QUESTION 32

Note: This question is part of a series of questions that present the same scenario. Each

question in the series contains a unique solution that might meet the stated goals. Some

question sets might have more than one correct solution, while others might not have a

correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result,

these questions will not appear in the review screen.

You network contains an Active Directory forest named contoso.com.

The forest contains an Active Directory Rights Management Services (AD RMS) deployment.

Your company establishes a partnership with another company named Fabrikam, Inc.

The network of Fabrikam contains an Active Directory forest named fabrikam.com and an AD

RMS deployment.

You need to ensure that the users in contoso.com can access rights protected documents sent by

the users in fabrikam.com.

Solution: From AD RMS in contoso.com, you configure fabrikam.com as a trusted user domain.

Does this meet the goal?

Yes

Answer: B

Explanation:

Contoso would need to be the Trusted User Domain.

Get Latest & Actual 70-742 Exam's Question and Answers from Passleader.

http://www.passleader.com

End of repeated scenario.

You are evaluating what will occur when you block inheritance on OU4.

Which GPO or GPOs will apply to User1 when the user signs in to Computer1 after block

inheritance is configured?

A1, A5, and A6

A3, A1, A5, and A7

A3 and A7 only

A7 only

Answer: D

QUESTION 34