070-744 試験問題を無料オンラインアクセス

Your network contains an Active Directory domain named contoso.com.
The domain contains a member server named Servers that runs Windows Server 2016.
You need to configure Servers as a Just Enough Administration (JEA) endpoint.
Which two actions should you perform? Each correct answer presents part of the solution.

• A.Generate a random Globally Unique Identifier (GUID)
• B.Create a maintenance Role Capability file
• C.Create and register a session configuration file.
• D.Create and export a Windows PowerShell session.
• E.Deploy Microsoft Identity Manager (MIM) 2016

You have a guarded fabric and a Host Guardian Service server named HGS1.
You deploy a Hyper-V host named Hyper1, and configure Hyper1 as part of the guarded fabric.
You plan to deploy the first shielded virtual machine. You need to ensure that you can run the virtual machine on Hyper1.
What should you do?

• A.On Hyper1, run the Export-HgsKeyProtectionState cmdlet, and then run the Import-HgsGuardian cmdlet.
• B.On Hyper1, run the Invoke-WebRequest cmdlet, and then run the Import-HgsGuardian cmdlet.
• C.On HGS1, run the Export-HgsKeyProtectionState cmdlet, and then run the Import-HgsGuardian cmdlet
• D.On HGS1, run the Invoke-WebRequest cmdlet, and then run the Import-HgsGuardian cmdlet.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1.
You configure Just Enough Administration (JEA) on Server1.
When will JEA limit the tasks that can be performed on Server1?

• A.when you run Enter-PSSession and specify Server1 and the -ComputeName parameter
• B.when establishing a Remote Desktop connection to Server1
• C.when you run winrs.exe and specify Server1 as the remote endpoint
• D.when you run psexec.exe and specify \\Server1 as the remote system

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1.
You implement the Host Guardian Service (HGS) configured for admin-trusted attestation.
You install the Hyper-V server role on Server1.
You need to add Server1 to the guarded hosts.
What should you do?

• A.On Server1, install the Host Guardian Hyper-V Support feature and a computer certificate from a trusted certification authority (CA).
• B.On Server1, install the Device Health Attestation server role and a computer certificate from a trusted certification authority (CA).
• C.Install the Device Health Attestation server role on Server1 and add Server1 to a domain security group.
• D.Install the Host Guardian Hyper-V Support feature on Server1 and add Server1 to a domain security group.

Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016.
Server1 is configured as a domain controller.
You configure Server1 as a Just Enough Administration (JEA) endpoint You configure the required JEA rights for a user named User1.
You need to tell User1 how to manage Active Directory objects from Server2.
What should you tell User1 to do first on Server2?

• A.Install the management consoles for Active Directory, and then launch Active Directory Users and Computer.
• B.From Windows PowerShell run the Enter-PSSession cmdlet.
• C.From Windows PowerShell, run the Import-Module cmdlet.
• D.From a command prompt, run ntdsutil.exe.