최신Microsoft Securing Windows Server 2016 - 070-744무료샘플문제
문제1
You have a server named Server1 that runs Windows Server 2016.
Windows Defender on Server1 has the following configurations.
Server1 has the following files:
* C:\Folder1\File1.exe
* C:\Folder2\File2.bat
* C:\Folder2\File3.com
Which files will be scanned for malware?
You have a server named Server1 that runs Windows Server 2016.
Windows Defender on Server1 has the following configurations.
Server1 has the following files:
* C:\Folder1\File1.exe
* C:\Folder2\File2.bat
* C:\Folder2\File3.com
Which files will be scanned for malware?
정답: F
설명: (KoreaDumps 회원만 볼 수 있음)
문제2
You have two servers named Setver1 and Server2 that run Windows Server 2016 and are in a workgroup.
Server1 is used as a reference computer to configure the security baseline for the other computers in the workgroup.
You need to apply the Group Policy computer settings of Server1 to Server2.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You have two servers named Setver1 and Server2 that run Windows Server 2016 and are in a workgroup.
Server1 is used as a reference computer to configure the security baseline for the other computers in the workgroup.
You need to apply the Group Policy computer settings of Server1 to Server2.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
정답:
Explanation
References:
https://blogs.technet.microsoft.com/secguide/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0/
References:
https://blogs.technet.microsoft.com/secguide/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0/
문제3
You have two computers configured as shown in the following table.
You need to ensure that the credentials that you use to establish Remote Desktop sessions from Client1 to Server1 are protected by using Remote CredentialGuard.
You have two computers configured as shown in the following table.
You need to ensure that the credentials that you use to establish Remote Desktop sessions from Client1 to Server1 are protected by using Remote CredentialGuard.
정답: A
설명: (KoreaDumps 회원만 볼 수 있음)
문제4
You have a Hyper-V host named Server1 that runs Windows Server 2016.
Server1 hosts the virtual machines configured as shown in the following table.
All the virtual machines have two volumes named C and D.
You plan to implement BitLocker Drive Encryption (BitLocker) on the virtual machines.
Which virtual machines can have their volumes protected by using BitLocker? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a Hyper-V host named Server1 that runs Windows Server 2016.
Server1 hosts the virtual machines configured as shown in the following table.
All the virtual machines have two volumes named C and D.
You plan to implement BitLocker Drive Encryption (BitLocker) on the virtual machines.
Which virtual machines can have their volumes protected by using BitLocker? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
정답:
Explanation
References:
https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/deploy/upgrade-virtual-machine-version
http://www.shulerent.com/2012/09/04/locking-down-a-virtual-machine-with-bitlocker/
문제5
Your network contains an Active Directory domain named contoso.com. All servers run Windows Server
2016.
You need to prevent direct .NET scripts invoked by interactive Windows PowerShell sessions from running on the servers.
What should you do for each server?
Your network contains an Active Directory domain named contoso.com. All servers run Windows Server
2016.
You need to prevent direct .NET scripts invoked by interactive Windows PowerShell sessions from running on the servers.
What should you do for each server?
정답: D
문제6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2016.
The forest contains 2,000 client computers that run Windows 10. All client computers are deployed from a customized Windows image.
You need to deploy 10 Privileged Access Workstations (PAWs). The solution must ensure that administrators can access several client applications used by all users.
Solution: You deploy 10 physical computers and configure them as virtualization hosts. You configure the operating system on each host as a PAW. You create a guest virtual machine by using the customized Windows image.
Does this meet the goal?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2016.
The forest contains 2,000 client computers that run Windows 10. All client computers are deployed from a customized Windows image.
You need to deploy 10 Privileged Access Workstations (PAWs). The solution must ensure that administrators can access several client applications used by all users.
Solution: You deploy 10 physical computers and configure them as virtualization hosts. You configure the operating system on each host as a PAW. You create a guest virtual machine by using the customized Windows image.
Does this meet the goal?
정답: A
설명: (KoreaDumps 회원만 볼 수 있음)
문제7
Your network contains an Active Directory forest named contoso.com. The functional level of the forest and the domain is Windows Server 2012 R2.
You plan to use Local Administrator Password Solution (LAPS) for all member servers.
You need to prepare the forest for LAPS.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Your network contains an Active Directory forest named contoso.com. The functional level of the forest and the domain is Windows Server 2012 R2.
You plan to use Local Administrator Password Solution (LAPS) for all member servers.
You need to prepare the forest for LAPS.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
정답: C,E
설명: (KoreaDumps 회원만 볼 수 있음)
문제8
You have a server named Server1 that runs Windows Server 2016.
You need to identify whether any inbound rules on Server1 require that users be authenticated before they can connect to the server.
Which cmdlet should you use?
You have a server named Server1 that runs Windows Server 2016.
You need to identify whether any inbound rules on Server1 require that users be authenticated before they can connect to the server.
Which cmdlet should you use?
정답: C
설명: (KoreaDumps 회원만 볼 수 있음)
문제9
Your network contains an Active Directory domain The domain contains the computers shown in the following table.
server 1 is a file server that has two shared folders named Share1 and Share2. Share1 has encryption enabled.
Share2 has encryption disabled. Domain users have read access to both shares.
From PowerShell, you run set-smbServerConfiguration -EncryptData $true -Force.
For each of the following statements select Yes if the statement is true. Otherwise, Select No.
Your network contains an Active Directory domain The domain contains the computers shown in the following table.
server 1 is a file server that has two shared folders named Share1 and Share2. Share1 has encryption enabled.
Share2 has encryption disabled. Domain users have read access to both shares.
From PowerShell, you run set-smbServerConfiguration -EncryptData $true -Force.
For each of the following statements select Yes if the statement is true. Otherwise, Select No.
정답:
문제10
Your network contains an Active Directory domain named contoso.com. You plan to implement encryption on a file server named Server1. Server1 has TPM 2.0 and uses Secure Boot Server1 has the volumes configured as shown in the following table.
You need to encrypt the contents of volumes C and G.
The solution must use the highest level of security possible.
What should you use to encrypt the contents of each volume? To answer, drag the appropriate encryption options to the correct volumes. Each encryption option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Your network contains an Active Directory domain named contoso.com. You plan to implement encryption on a file server named Server1. Server1 has TPM 2.0 and uses Secure Boot Server1 has the volumes configured as shown in the following table.
You need to encrypt the contents of volumes C and G.
The solution must use the highest level of security possible.
What should you use to encrypt the contents of each volume? To answer, drag the appropriate encryption options to the correct volumes. Each encryption option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
정답:
문제11
Your network contains an Active Directory domain named adatum.com.
You have a backup of a Group Policy object (GPO) named GPO1 that has the following settings:
* Change the system time: User1
* Minimum password length: 12 characters
* Password must meet complexity requirements: Disabled
You have a backup of a GPO named GPO2 that has the following settings:
* Change the system time: User2
* Minimum password length: 7 characters
* Password must meet complexity requirements: Not Defined
You create a GPO named GP03 that has the following settings:
* Change the system time: User3
* Minimum password length: 9 characters
* Password must meet complexity requirements: Enabled
You import the GPO1 settings into GP03, and then you import the GPO2 settings into GPO3. You need to identify the GPO3 settings after the imports.
What should you identity? To answer. select the appropriate options of the answer area.
NOTE: Each correct selection is worth one point.
Your network contains an Active Directory domain named adatum.com.
You have a backup of a Group Policy object (GPO) named GPO1 that has the following settings:
* Change the system time: User1
* Minimum password length: 12 characters
* Password must meet complexity requirements: Disabled
You have a backup of a GPO named GPO2 that has the following settings:
* Change the system time: User2
* Minimum password length: 7 characters
* Password must meet complexity requirements: Not Defined
You create a GPO named GP03 that has the following settings:
* Change the system time: User3
* Minimum password length: 9 characters
* Password must meet complexity requirements: Enabled
You import the GPO1 settings into GP03, and then you import the GPO2 settings into GPO3. You need to identify the GPO3 settings after the imports.
What should you identity? To answer. select the appropriate options of the answer area.
NOTE: Each correct selection is worth one point.
정답:
Explanation
References:
https://searchwindowsserver.techtarget.com/feature/Group-Policy-Management-Console
References:
https://searchwindowsserver.techtarget.com/feature/Group-Policy-Management-Console
문제12
You have a guarded fabric that consists of the servers shown in the following table.
You need to ensure that you can start the shielded virtual machines on the Hyper-V hosts if the Hyper-V hosts cannot connect to the HGS.
What should you do?
You have a guarded fabric that consists of the servers shown in the following table.
You need to ensure that you can start the shielded virtual machines on the Hyper-V hosts if the Hyper-V hosts cannot connect to the HGS.
What should you do?
정답: D
설명: (KoreaDumps 회원만 볼 수 있음)
문제13
Note: This question is part of a series of questions that present the same scenario. Each question In the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question In this section, you will NOT be able to return to It. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10. Computer1 connects to a home network and a corporate network.
The corporate network uses the 172.16.0.0/24 address space internally.
Computer1 runs an application named App1 that listens to port 8080.
You need to prevent connections to App1 when Computer1 is connected to the home network.
Solution: From Group Policy Management, You create an Applocker rule.
Note: This question is part of a series of questions that present the same scenario. Each question In the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question In this section, you will NOT be able to return to It. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10. Computer1 connects to a home network and a corporate network.
The corporate network uses the 172.16.0.0/24 address space internally.
Computer1 runs an application named App1 that listens to port 8080.
You need to prevent connections to App1 when Computer1 is connected to the home network.
Solution: From Group Policy Management, You create an Applocker rule.
정답: A
설명: (KoreaDumps 회원만 볼 수 있음)