Passing Guarantee 70-742 Dumps from PassLeader 70-742 VCE and PDF for Free (Question 22 – Question 24)

Valid 70-742 Dumps shared by PassLeader for Helping Passing 70-742 Exam! PassLeader now offer the newest 70-742 VCE dumps and 70-742 PDF dumps, the PassLeader 70-742 exam questions have been updated and ANSWERS have been corrected, get the newest PassLeader 70-742 dumps with VCE and PDF here: http://www.passleader.com/70-742.html (55 Q&As Dumps)

BTW, DOWNLOAD part of PassLeader 70-742 dumps from Cloud Storage: https://drive.google.com/open?id=0B-ob6L_QjGLpMHhld1g4c081cFk

QUESTION 22
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. Server1 is located in the perimeter network. You install the Active Directory Federation Services server role on Server1. You create an Active Directory Federation Services (AD FS) farm by using a certificate that has a subject name of sts.contoso.com. You need to enable certificate authentication from the Internet on Server1. Which two inbound TCP ports should you open on the firewall? Each correct answer presents part of the solution.

A.    389
B.    443
C.    3389
D.    8531
E.    49443

Answer: BE

QUESTION 23
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2. Contoso.com has the following configuration:
PS C:\> (Get-ADForest).ForestMode
Windows2008R2Forest
PS C:\> (Get-ADDomain).DomainMode
Windows2008R2Domain
PS C:\>
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration. You need to configure Active Directory to support the planned deployment.
Solution: You run adprep.exe from the Windows Server 2016 installation media.
Does this meet the goal?

A.    Yes
B.    No

Answer: A
Explanation:
Device Registration requires Windows Server 2012 R2 forest schema.

QUESTION 24
Your network contains an Active Directory domain named contoso.com. You have an organizational unit (OU) named TestOU that contains test computers. You need to enable a technician named Tech1 to create Group Policy objects (GPOs) and to link the GPOs to TestOU. The solution must use the principle of least privilege. Which two actions should you perform? Each correct answer presents part of the solution.

A.    Add Tech1 to the Group Policy Creator Owners group.
B.    From Group Policy Management, modify the Delegation settings of the TestOU OU.
C.    Add Tech1 to the Protected Users group.
D.    From Group Policy Management, modify the Delegation settings of the contoso.com container.
E.    Create a new universal security group and add Tech1 to the group.

Answer: AB


Get the newest PassLeader 70-742 VCE dumps here: http://www.passleader.com/70-742.html (55 Q&As Dumps)

And, DOWNLOAD the newest PassLeader 70-742 PDF dumps from Cloud Storage for free: https://drive.google.com/open?id=0B-ob6L_QjGLpMHhld1g4c081cFk