070-744 試験問題を無料オンラインアクセス

Your network contains an Active Directory domain named contoso.com.
The domain contains four global groups named Group1, Group2, Group3, and Group4. A user named User1 is a member of Group3.
You have an organizational unit (OU) named OU1 that contains computer accounts. A Group Policy object (GPO) named GPO1 is linked to OU1. OU1 contains a computer account named Computer1.
GPO1 has the User Rights Assignment configured as shown in the following table.

• A.Modify the membership of Group2.
• B.Modify the membership of Group4.
• C.Modify the membership of Group3.
• D.Modify the membership of Group1.

Your network contains an Active Directory domain named contoso.com.
You download Microsoft Security Compliance Toolkit 1.0 and all the security baselines.
You need to deploy one of the security baselines to all the computers in an organizational unit (OU) named OU1.
What should you do?

• A.From Group Policy Management, create and link a Group Policy object (GPO). Select the GPO and run the Import Settings Wizard.
• B.From Group Policy Management, click Group Policy Objects, and then click Manage Backups...
• C.Run 1gpo.exe and specify the /g parameter. From Policy Analyzer, click Add.
• D.From Group Policy Management, create and link a Group Policy object (GPO). Run 1gpo.exe and specify the /g parameter.

Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012. The forest contains a single domain. The domain contains multiple Hyper-V hosts.
You plan to deploy guarded hosts.
You deploy a new server named Server22 to a workgroup.
You need to configure Server22 as a Host Guardian Service server.
What should you do before you initialize the Host Guardian Service on Server22?

• A.Join Server22 to the domain.
• B.Install the Active Directory Domain Services server role on Server22.
• C.Raise the forest functional level.
• D.Obtain a certificate.

Windows PowerShell is a task-based command-line shell and scripting language designed especially for system administration.
Windows Defender comes with a number of different Defender-specific cmdlets that you can run through PowerShell to automate common tasks.
Which Cmdlet would you run first if you wanted to perform an offline scan?

• A.Set-MpPreference -DisablePrivacyMode $true
• B.Start-MpWDOScan
• C.Start-MpScan
• D.Set-MpPreference -DisableRestorePoint $true

You have a server named Server1 that runs Windows Server 2016 and is configured as a DNS server. You deed to ensure that Server1 can validate records from public DNSSEC-signed DNS zones. What should you do?

• A.From DNS Manager, sign a zone.
• B.From DNS Manager, add a trust anchor.
• C.From DNS Manager select Enable DNSSEC validation for remote responses
• D.From PowerShell, run Add-DnsServerResourceRecordDnsKey.