Faced the fiercer and fiercer competition in IT world, do you feel great pressure? Of course, you do. Then you'd better get the Microsoft Certification to escort your career. It is suggested that the Passcert is the best helper to your success of IT certification exam. So what are you waiting for? Go and get the latest Passcert Windows Server 2016 70-742 practice test from Passcert!


Feedbacks of many IT professionals who have passed Microsoft certification 70-742 exam prove that their successes benefit from Passcert help. Passcert targeted Passcert Windows Server 2016 70-742 practice test to give them great help, which save their valuable time and energy, and allow them to easily and smoothly pass their first Microsoft certification 70-742 exam. So Passcert a website worthy of your trust. Please select Passcert, you will be the next successful IT person. Passcert will help you achieve your dream.
Share some MCSA 70-742 exam questions and answers below.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. 
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. 
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2. 
Contoso.com has the following configuration. 
PS C:\> (Get-ADForest).ForestMode 
Windows2008R2Forest 
PS C:\> (Get-ADDomain).DomainMode 
Windows2008R2Domain 
PS C:\> 
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration. 
You need to configure Active Directory to support the planned deployment. 
Solution: You raise the domain functional level to Windows Server 2012 R2. 
Does this meet the goal? 
A. Yes 
B. No 
Answer: B 


Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. 
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. 
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1. 
You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1. 
You need to add a domain user named User1 to the local Administrators group on Server1. 
Solution: From the Computer Configuration node of GPO1, you configure the Account Policies settings. 
Does this meet the goal? 
A. Yes 
B. No 
Answer: B

You have a server named Server1 that runs Windows Server 2016. You need to configure Server1 as a Web Application Proxy.Which server role or role service should you install on Server1? 
A. Remote Access 
B. Active Directory Federation Services 
C. Web Server (IIS) 
D. DirectAccess and VPN (RAS) 
E. Network Policy and Access Services 
Answer: A

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.Information and details provided in a question apply only to that question.Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts.You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU).You need to force users to change their account password at least every 30 days.What should you do? 
A. From the Computer Configuration node of DCPolicy, modify Security Settings. 
B. From the Computer Configuration node of DomainPolicy, modify Security Settings. 
C. From the Computer Configuration node of DomainPolicy, modify Administrative Templates. 
D. From the User Configuration node of DCPolicy, modify Security Settings. 
E. From the User Configuration node of DomainPolicy, modify Folder Redirection. 
F. From user Configuration node of DomainPolicy, modify Administrative Templates. 
G. From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings. 
H. From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings. 
Answer: B

Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. Server1 is located in the perimeter network.You install the Active Directory Federation Services server role on Server1. You create an Active Directory Federation Services (AD FS) farm by using a certificate that has a subject name of sts.contoso.com.You need to enable certificate authentication from the Internet on Server1. Which two inbound TCP ports should you open on the firewall? Each correct answer presents part of the solution. 
A. 389 
B. 443 
C. 3389 
D. 8531 
E. 49443 
Answer: B,E

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.Information and details provided in a question apply only to that question.Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts.You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU).You need to configure the Documents folder of every user to be stored on a server named FileServer1.What should you do? 
A. From the Computer Configuration node of DCPolicy, modify Security Settings. 
B. From the Computer Configuration node of DomainPolicy, modify Security Settings. 
C. From the Computer Configuration node of DomainPolicy, modify Administrative Templates. 
D. From the User Configuration node of DCPolicy, modify Security Settings. 
E. From the User Configuration node of DomainPolicy, modify Folder Redirection. 
F. From user Configuration node of DomainPolicy, modify Administrative Templates. 
G. From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings. 
H. From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings. 
Answer: E

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. 
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. 
You network contains an Active Directory forest named contoso.com. The forest contains an Active Directory Rights Management Services (AD RMS) deployment. 
Your company establishes a partnership with another company named Fabrikam, Inc. The network of Fabrikam contains an Active Directory forest named fabrikam.com and an AD RMS deployment. 
You need to ensure that the users in contoso.com can access rights protected documents sent by the users in fabrikam.com. 
Solution: From AD RMS in contoso.com, you configure fabrikam.com as a trusted publisher domain. 
Does this meet the goal? 
A. Yes 
B. No 
Answer: A

Your network contains an Active Directory forest named contoso.com.You have an Active Directory Federation Services (AD FS) farm. The farm contains a server named Server1 that runs Windows Server 2012 R2.You add a server named Server2 to the farm. Server2 runs Windows Server 2016.You remove Server1 from the farm.You need to ensure that you can use role separation to manage the farm.Which cmdlet should you run? 
A. Set-AdfsFarmInformation 
B. Update-AdfsRelyingPartyTrust 
C. Set-AdfsProperties 
D. Invoke-AdfsFarmBehaviorLevelRaise 
Answer: A

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.Information and details provided in a question apply only to that question.Your network contains an Active Directory domain named contoso.com. The domain contains 5,000 user accounts.You have a Group Policy object (GPO) named DomainPolicy that is linked to the domain and a GPO named DCPolicy that is linked to the Domain Controllers organizational unit (OU).You need to use the application control policy settings to prevent several applications from running on the network.What should you do? 
A. From the Computer Configuration node of DCPolicy, modify Security Settings. 
B. From the Computer Configuration node of DomainPolicy, modify Security Settings. 
C. From the Computer Configuration node of DomainPolicy, modify Administrative Templates. 
D. From the User Configuration node of DCPolicy, modify Security Settings. 
E. From the User Configuration node of DomainPolicy, modify Folder Redirection. 
F. From user Configuration node of DomainPolicy, modify Administrative Templates. 
G. From Preferences in the User Configuration node of DomainPolicy, modify Windows Settings. 
H. From Preferences in the Computer Configuration node of DomainPolicy, modify Windows Settings. 
Answer: B

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. 
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. 
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1. 
You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1. 
You need to add a domain user named User1 to the local Administrators group on Server1. 
Solution: From the Computer Configuration node of GPO1, you configure the Local Users and Groups preference. 
Does this meet the goal? 
A. Yes 
B. No 
Answer: A


The Microsoft 70-742 exam is one of the most popular Microsoft Certification exams. If you want to reach a professional or expert level in the Microsoft Certification career certification tracks, Passing 70-742 exam is the first step. We provide professional Microsoft exam 70-742 information. It is the best and the lastest 70-742 practice exam.