070-742 試験問題を無料オンラインアクセス

You use Application Request Routing (ARR) to make internal web applications available to the Internet by using NTLM authentication.
You need to replace ARR by using the Web Application Proxy.
Which server role should you deploy first?

• A.Active Directory Lightweight Directory Services
• B.Active Directory Certificate Services
• C.Active Directory federation Services
• D.Active Directory Rights Management Services

Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.
The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)

The relevant users and client computer in the domain are configured as shown in the following table.

End of repeated scenario.
You are evaluating what will occur when you disable the Group Policy link for A6.
Which GPOs will apply to User2 when the user signs in to Computer1 after the link for A6 is disabled?

• A.A3, A1, A5, and A7
• B.A3, A1, and A5 only
• C.A1 and A5 only
• D.A3, A1, A5, and A4 only

Your company has a main office and a branch office. The two offices connect to each other by using a WAN link.
Your network contains an Active Directory forest named contoso.com. The forest contains a domain controller named DC1. All of the domain controllers are located in the main office.
You install a read-only domain controller (RODC) named RODC1 in the branch office.
You create a user account for a new user named User1. You add User1 to the Allowed RODC Password Replication Group. User1 starts work on Monday.
You are notified that the WAN link will be down for maintenance on Monday.
You need to ensure that User1 can log on in the branch office site on Monday.
Which command should you run? To answer, select the appropriate options in the answer area.

正解：

Explanation

The following example triggers replication of the passwords for the user account named JaneOh from the source domain controller named source-dc01 to all RODCs that have the name prefix dest-rodc: repadmin
/rodcpwdrepl dest-rodc* source-dc01 cn=JaneOh,ou=execs,dc=contoso,dc=com References:
https://technet.microsoft.com/en-us/library/cc742095(v=ws.11).aspx

Your network contains an Active Directory domain named contoso.com. The domain contains a web application that uses Kerberos authentication.
You change the domain name of the web application.
You need to ensure that the service principal name (SPN) for the application is registered.
Which tool should you use?

• A.Ldifde
• B.Rdspnf
• C.Active Directory Users and Computers
• D.Dnscmd

You have a server named Server1 that has the Active Directory Federation Services server role installed.
You need to configure Server1 as the authorization server. Server1 will be used to authorize access to a web API from a web application. The web application will use OAuth 2.0 and OpenID Connect to access the web API as the authenticated user.
The solution must minimize administrative effort.
What should you do first?

• A.Run Add-AdfsNativeClientApplication
• B.Run New-AdfsapplicationGroup
• C.Enable the OAuth endpoint
• D.Run Add-AdfsServerApplication