- Home
- Server Administration
- Windows
- Identity with Windows server 2016 (70-742)
6.
You are promoting a Windows Server 2016 computer to an Active Directory domain controller
for test purposes. The new domain controller will be added to an existing domain.
While you are using the Active Directory Installation Wizard, you receive an error message
that prevents the server from being promoted. Which of the following might be the cause of
the problem? (Choose all that apply.)
- A.The system does not contain an NTFS partition on which the Sysvol directory can be created.
- B.You do not have a Windows Server 2016 DNS server on the network.
- C.The TCP/IP configuration on the new server is incorrect.
- D.The domain has reached its maximum number of domain controllers.
- Answer & Explanation
- Report
Answer : (A,C)
Explanation :
Explanation :
| The Sysvol directory must be created on an NTFS partition. If such a partition is not available, you will not be able to promote the server to a domain controller. An error in the network configuration might prevent the server from connecting to another domain controller in the environment. |
7.
Your network contains a single Active Directory domain. The domain contains five
Windows Server 2008 R2 domain controllers. You plan to install a new Windows Server
2016 domain controller. Which two actions would you need to perform? (Each correct
answer presents part of the solution. Choose two.)
- A.Run adprep.exe /rodcprep at the command line.
- B.Run adprep.exe /forestprep at the command line.
- C.Run adprep.exe /domainprep at the command line.
- D.From Active Directory Domains and Trusts, raise the functional level of the domain.
- E.From Active Directory Users and Computers, prestage the RODC computer account.
- Answer & Explanation
- Report
Answer : [B, C]
Explanation :
Explanation :
| You need to run the Adprep command when installing your first Windows Server 2016 domain controller onto a Windows Server 2008 R2 domain. Adprep /rodcprep actually gets the network ready to install a read-only domain controller and not a GUI version. |
8.
You are the network administrator for a large company that creates widgets. Management
asks you to implement a new Windows Server 2016 system. You need to implement federated
identity management. Which of the following will help you do this?
- A.Active Directory Federation Services
- B.Active Directory DNS Services
- C.Active Directory IIS Services
- D.Active Directory IAS Services
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
| You’ll need to use Active Directory Federation Services (AD FS) in order to implement federated identity management. Federated identity management is a standards-based and information technology process that will enable distributed identification, authentication, and authorization across organizational and platform boundaries. The AD FS solution in Windows Server 2016 helps administrators address these challenges by enabling organizations to share a user’s identity information securely. |
9.
You are the system administrator responsible for your company’s infrastructure. You think
you have an issue with name resolution, and you need to verify that you are using the correct
hostname. You want to test DNS on the local system and need to see whether the hostname
server-1 resolves to the IP address 10.1.1.1. Which of the following actions provides a
solution to the problem?
- A.Add a DNS server to your local subnet.
- B.Add the mapping for the hostname server-1 to the IP address 10.1.1.1 in the local system’s HOSTS file.
- C.Add an A record to your local WINS server.
- D.Add an MX record to your local DNS server.
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
| The HOSTS file is a text-file-based database of mappings between hostnames and IP addresses. It works like a file-based version of DNS. DNS resolves a hostname to an IP address. |
10.
You have one Active Directory forest in your organization that contains one domain
named WillPanek.com. You have two domain controllers configured with the DNS role
installed. There are two Active Directory Integrated zones named WillPanek.com and
WillPanekAD.com. One of your IT members (who is not an administrator) needs to be able
to modify the WillPanek.com DNS server, but you need to prevent this user from modifying
the WillPanekAD.com SOA record. How do you accomplish this?
- A.Modify the permissions of the WillPanek.com zone from the DNS Manager snap-in.
- B.Modify the permissions of the WillPanekAd.com zone from the DNS Manager snap-in.
- C.Run the Delegation Of Control Wizard in Active Directory.
- D.Run the Delegation Of Control Wizard in the DNS snap-in.
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
| You only need to give them rights to the WillPanek.com zone using the DNS snap-in. If they do not have any rights to the WillPanekAD.com zone, they will not be able to configure this zone in any way. |
|
|
||||||||||||||||||||||||||||
