70-744 Securing Windows Server Practice Questions

A company has a file server that hosts sensitive financial data. The security policy requires that all network traffic to and from the file share must be encrypted. Additionally, to prevent man-in-the-middle attacks, the integrity of every SMB packet must be verified. Which two actions must be performed to meet these requirements for a specific share named 'FinanceData'?

You are auditing PowerShell activity on a critical server. You need to capture the full content of every script executed, including scripts, commands, and script blocks, for forensic analysis. Which PowerShell logging feature must be enabled via Group Policy to achieve this?

You are deploying a new Hyper-V cluster that will host virtual machines containing sensitive intellectual property. You plan to use BitLocker to encrypt the Clustered Shared Volumes (CSVs). To allow the cluster nodes to automatically unlock the encrypted CSVs upon startup without manual intervention, you must use a specific BitLocker feature. Which feature should you implement?

You are securing a Nano Server deployment using Desired State Configuration (DSC). You need to apply a set of firewall rules defined in a security baseline. Which built-in DSC resource would you use in your configuration script to manage Windows Firewall rules on the Nano Server?

You are configuring OMS Log Analytics to collect security event logs from your on-premises domain controllers. The domain controllers do not have direct internet access. What component must be deployed to facilitate the collection of logs and forward them to the OMS workspace?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2016. The forest contains 2,000 client computers that runWindows 10. All client computers are deployed from a customized Windows image.You need to deploy 10 Privileged Access Workstations (PAWs). The solution must ensure that administrators can access several client applications used by all users.Solution: You deploy 10 physical computers and configure them as PAWs. You deploy 10 additional computers and configure them by using the customizedWindows image.Does this meet the goal? A.YesB.No

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2016. The forest contains 2,000 client computers that runWindows 10. All client computers are deployed from a customized Windows image.You need to deploy 10 Privileged Access Workstations (PAWs). The solution must ensure that administrators can access several client applications used by all users.Solution: You deploy 10 physical computers and configure each one as a virtualization host. You deploy the operating system on each host by using the customized Windows image. On each host, you create a guest virtual machine and configure the virtual machine as a PAW.Does this meet the goal? A.YesB.No

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2016. The forest contains 2,000 client computers that runWindows 10. All client computers are deployed from a customized Windows image.You need to deploy 10 Privileged Access Workstations (PAWs). The solution must ensure that administrators can access several client applications used by all users.Solution: You deploy one physical computer and configure it as Hyper-V host that runs Windows Server 2016. You create 10 virtual machines and configure each one as a PAW.Does this meet the goal? A.YesB.No

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contain an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10. Computer1 connects to a home network and a corporate network.The corporate network uses the 172.16.0.0/24 address space internally.Computer1 runs an application named App1 that listens to port 8080.You need to prevent connections to App1 when Computer1 is connected to the home network.Solution: From Group Policy Management, you create an AppLocker rule.Does this meet the goal? A.YesB.No

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contain an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10. Computer1 connects to a home network and a corporate network.The corporate network uses the 172.16.0.0/24 address space internally.Computer1 runs an application named App1 that listens to port 8080.You need to prevent connections to App1 when Computer1 is connected to the home network.Solution: From Group Policy Management, you create software restriction policy.Does this meet the goal? A.YesB.No