70-742 試験問題を無料オンラインアクセス

Your network contains an Active Directory domain. All servers run Windows Server 2016. All client computers run Windows 10 Enterprise.
You deploy an enterprise certification authority (CA).
You are implementing an online responder.
You need to ensure that any clients that are issued certificates by the CA will use the online responder.
How should you configure the extension settings of the CA?

• A.Configure the CRL Distribution Point extension by adding a location that has the Include in the CDP extension of issued certificates check box selected.
• B.Configure the Authority Information Access (AIA) extension by adding a location that has the Include in the AIA extension of issued certificates check box selected.
• C.Configure the CRL Distribution Point extension by adding a location that has the Publish CRLs to this location check box and the Publish Delta CRLs to this location check box selected.
• D.Configure the Authority Information Access (AIA) extension by adding a location that has the Include in the online certificate status protocol (OCSP) extension check box selected.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
You install IP Address Management (IPAM) on Server1.
You need to manually start discovery of servers that IPAM can manage in contoso.com.
Which three cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

正解：

Explanation

Step 1: Invoke-IpamServerProvisioning
Choose a provisioning method
The Invoke-IpamGpoProvisioning cmdlet creates and links three group policies specified in the Domain parameter for provisioningrequired access settingson the server roles managed by the computer running the IP Address Management (IPAM) server.
Step 2: Add-IpamDiscoveryDomain
Configure the scope of discovery
The Add-IpamDiscoveryDomain cmdlet adds an Active Directory discovery domain for an IP AddressManagement (IPAM) server. A discovery domain is a domain that IPAM searches to find infrastructure servers. An IPAM server uses the list of discovery domains to determine what type of servers to add. By default, IPAM discovers all domain controllers, Dynamic Host Configuration Protocol (DHCP) servers, and Domain Name System (DNS) servers.
Step 3: Start-ScheduledTask
Start server discovery
To begin discovering servers on the network, click Start server discovery to launch the IPAM ServerDiscovery task or use the Start-ScheduledTask command.

You have a server named Server1 in a workgroup.
You need to configure a Group Policy setting on Server1 that will apply to only non-administrative users.
What should you do?

• A.Open Local Group Policy Editor. From the File menu, modify the Options settings.
• B.Open Local Users and Groups, Create a new group Run New-GPO.
• C.Open Local Group Policy Editor. From the View menu, modify the Customize settings.
• D.Run mmc.exe Add the Group Policy Object Editor snap-in and change the Group Policy object (GPO).

Your network contains an Active Directory domain named contoso.com.
You deploy a standalone root certification authority (CA) named CA1.
You need to auto enroll domain computers for certificates by using a custom certificate template.
What should you do first?

• A.Modify the Policy Module for CA1.
• B.Install an enterprise subordinate CA.
• C.Modify the Exit Module for CA1.
• D.Install a standalone subordinate CA.

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain.
The domain contains a server named Server1.
An administrator named Admin01 plans to configure Server1 as a standalone certification authority (CA).
You need to identify to which group Admin01 must be a member to configure Server1 as a standalone CA.
The solution must use the principle of least privilege.
To which group should you add Admin01?

• A.Key Admins in contoso.com
• B.Domain Admins in contoso.com
• C.Cert Publishers on Server1
• D.Administrators on Server1.