Feedback keeps a question bank alive, and GuideTorrent collects it constantly from 070-744 candidates, running regular reviews of the Microsoft Securing Windows Server 2016 material so that what you study reflects the exam as it is, not as it was.
Microsoft 070-744 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Implement Threat Protection | - Mitigate malware and attacks
|
| Implement Identity and Access Security | - Secure authentication methods
|
| Implement Network Security | - Secure network traffic
|
| Implement Windows Server Security | - Secure server roles and services
|
Microsoft Securing Windows Server 2016 Questions Answered by GuideTorrent
- Implement Identity and Access Security ()
- Implement Windows Server Security ()
- Implement Threat Protection ()
Microsoft Securing Windows Server 2016 Sample Questions:
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. All servers run Windows Server
2016. All client computers run Windows 10.
The relevant objects in the domain are configured as shown in the following table.
You need to assign User1 the right to restore files and folders on Server1 and Server2.
Solution: You add User1 to the Backup Operators group in contoso.com.
Does this meet the goal?
- A. Yes
- B. No
Correct Answer: A 🗳️
Explanation: Only visible for GuideTorrent members. You can sign-up / login (it's free).
Note: This question Is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is Independent of the other questions in this series. Information and details provided in a question apply only to that question.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
Server1 has a shared folder named Share1.
You need to encrypt the contents of Share1.
Which tool should you use?
- A. Disk Management
- B. Storage Explorer
- C. Shared Folders
- D. Computer Management
- E. File Explorer
- F. System Configuration
- G. Server Manager
- H. File Server Resource Manager (FSRM)
Correct Answer: E 🗳️
The network contains an Active Directory domain named contoso.com. The domain contains the servers configured as shown in the following table.
All servers run Windows Server 2016. All client computers run Windows 10 and are domain members.
All laptops are protected by using BitLocker Drive Encryption (BitLocker).You have an organizational unit (OU) named OU1 that contains the computer accounts of application servers.
An OU named OU2 contains the computer accounts of the computers in the marketing department.
A Group Policy object (GPO) named GP1 is linked to OU1.
A GPO named GP2 is linked to OU2.
All computers receive updates from Server1.
You create an update rule named Update1.
You need to ensure that you can view Windows PowerShell code that was generated dynamically and executed on the computers in OU1.
What would you configure in GP1?
- A. Turn on Module Logging from the PowerShell settings
- B. Object Access\\Audit Application Generated from the advanced audit policy
- C. Turn on PowerShell Script Block Logging from the PowerShell settings
- D. Object Access\\Audit Other Object Access Events from the advanced audit policy
Correct Answer: C 🗳️
Explanation: Only visible for GuideTorrent members. You can sign-up / login (it's free).
Your network contains an Active Directory domain.
The domain contains two organizational units (OUs) named ProdOU and TestOU.
All production servers are in ProdOU. All test servers are in TestOU. A server named Server1 is in TestOU.
You have a Windows Server Update Services (WSUS) server named WSUS1 that runs Windows Server 2016.
All servers receive updates from WSUS1.
WSUS is configured to approve updates for computers in the Test computer group automatically.
Manual approval is required for updates to the computers in the Production computer group.
You move Server1 to ProdOU, and you discover that updates continue to be approved and installed automatically on Server1.
You need to ensure that all the servers in ProdOU only receive updates that are approved manually.
What should you do?
- A. Turn off auto-restart for updates during active hours by using Group Policy objects (GPOs).
- B. Create computer groups by using the Update Services console.
- C. Run wuauclt.exe /detectnow on each server after the server is moved to a different OU.
- D. Configure client-side targeting by using Group Policy objects (GPOs).
Correct Answer: D 🗳️
Explanation: Only visible for GuideTorrent members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com.
The domain contains two DNS servers that run Windows Server 2016.
The servers host two zones named contoso.com and admin.contoso.com.
You sign both zones.
You need to ensure that all client computers in the domain validate the zone records when they query the zone.
What should you deploy?
- A. a Microsoft Security Compliance Manager (SCM) policy
- B. a zone transfer policy
- C. a connection security rule
- D. a Name Resolution Policy Table (NRPT)
Correct Answer: D 🗳️
Explanation: Only visible for GuideTorrent members. You can sign-up / login (it's free).
Viewing page 1 out of 49 pages.
Viewing questions 1-5 out of 245 questions.


