Great material is assembled with care: the Microsoft Securing Windows Server 2016 bank at Prep4SureReview draws on the knowledge of seasoned IT specialists, keeps every 070-744 answer verified, and costs you nothing in updates for a full year.
Microsoft 070-744 Exam Overview:
| Certification Vendor: | Microsoft |
|---|---|
| Exam Name: | Securing Windows Server 2016 |
| Exam Number: | 70-744 |
| Exam Format: | Multiple choice, Case study, Simulation, Drag-and-drop, Build list |
| Exam Duration: | 120 minutes |
| Available Languages: | Chinese (Simplified), Spanish, English, Japanese, Portuguese (Brazil), Chinese (Traditional), German, French |
| Related Certifications: | MCSE: Cloud Platform and Infrastructure MCSA: Windows Server 2016 |
| Exam Price: | USD $165 |
| Passing Score: | 700 / 1000 |
| Real Exam Qty: | 40-60 |
| Certificate Validity Period: | Retired January 31, 2021; active MCSE valid for 3 years |
| Recommended Training: | Microsoft Official Course 20744 Microsoft Learn Self-Paced Learning |
| Exam Registration: | Microsoft Exam 70-744 Page Pearson VUE Registration |
| Sample Questions: |  |
| Exam Way: | Proctored onsite or online via Pearson VUE (retired) |
| Pre Condition: | Recommended: MCSA: Windows Server 2016 certification or equivalent knowledge of 70-740, 70-741, 70-742; 2+ years of server administration experience |
| Official Syllabus URL: | https://learn.microsoft.com/en-us/credentials/certifications/exams/70-744/ |
Microsoft 070-744 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Secure a Virtualization Infrastructure | 5-10 | - Implement Shielded and encryption-supported VMs - Secure VM storage and networking - Configure Guarded Fabric |
| Implement Workload-Specific Security | 5-10 | - Implement FSRM and File Classification Infrastructure - Secure containers and application workloads - Secure file services and Dynamic Access Control |
| Implement Server Hardening Solutions | 25-30 | - Create security baselines - Configure disk and file encryption - Protect credentials - Implement malware protection |
| Manage Privileged Identities | 25-30 | - Deploy Privileged Access Workstations (PAWs) - Secure Active Directory and AD FS - Implement Just-Enough Administration (JEA) - Configure Local Administrator Password Solution (LAPS) - Implement Just-In-Time (JIT) administration |
| Implement Threat Detection Solutions | 15-20 | - Use Operations Management Suite (OMS) security solutions - Configure auditing and log analysis - Identify and respond to security events - Deploy Microsoft Advanced Threat Analytics (ATA) |
| Secure a Network Infrastructure | 10-15 | - Secure network traffic and access - Implement advanced DNS and DHCP security - Configure Windows Firewall and IPsec |
Microsoft Securing Windows Server 2016 Essentials: What Candidates Ask
- Implement Workload-Specific Security (5-10)
- Implement Threat Detection Solutions (15-20)
- Secure a Virtualization Infrastructure (5-10)
Microsoft Securing Windows Server 2016 Sample Questions:
Your network contains an Active Directory domain named contoso.com.
The domain contains two DNS servers that run Windows Server 2016.
The servers host two zones named contoso.com and admin.contoso.com.
You sign both zones.
You need to ensure that all client computers in the domain validate the zone records when they query the zone.
What should you deploy?
- A. a connection security rule
- B. a Name Resolution Policy Table (NRPT)
- C. a zone transfer policy
- D. a Microsoft Security Compliance Manager (SCM) policy
Correct Answer: B 🗳️
Explanation: Only visible for Prep4SureReview members. You can sign-up / login (it's free).
You are implementing Privileged Access Management (PAM) for an Active Directory forest named contoso.com.
You install a bastion forest named adatum.com, and you establish a trust between the forests.
You need to create a group in contoso.com that will be used by Microsoft Identity Manager to create groups in adatum.com.
How should you configure the group? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation
References: https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/planning-bastion-environment Production forest is contoso.comBastion forest is adatum.com
https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/planning-bastion-environmentA security group on the local domain (contoso.com)There must be a group in the existing domain, whose name is the NetBIOS domain name followed bythree dollar signs, e.g., CONTOSO$$$.The group scope must be domain local and the group type must be Security.This is needed for groups to be created in the dedicated administrative forest (adatum.com) with the sameSecurity identifier as groups in this domain(contoso.com).
Create this group with the followingNew-ADGroup -name 'CONTOSO$$$' -GroupCategory Security
-GroupScope DomainLocal -SamAccountName 'CONTOSO$$$'After this, MIM could create "Shadow Group" in bastion adatum.com forest.
Your network contains an Active Directory domain named contoso.com. The domain contains several Hyper-V hosts.
You deploy a server named Server22 to a workgroup. Server22 runs Windows Server 2016.
You need to configure Server22 as the primary Host Guardian Service server.
Which three cmdlets should you run in sequence?
- A. Initialize-HgsServer
- B. Enable-WindowsOptionalFeature
- C. Install-Package
- D. Install-ADDSDomainController
- E. Install-Module
- F. Install-HgsServer
Correct Answer: A,D,F 🗳️
Explanation: Only visible for Prep4SureReview members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named conioso.com. The domain contains 1,000 client computers that run Windows 8.1 and 1,000 client computers that run Windows 10.
You deploy a Windows Server Update Services (WSUS) server. You create a computer group tor each organizational unit (OU) that contains client computers. You configure all of the client computers to receive updates from WSUS.
You discover that all of the client computers appear m the Unassigned Computers computer group in the Update Services console.
You need to ensure that the client computers are added automatically to the computer group that corresponds to the location of the computer account in Active Directory.
Which two actions should you perform? Each correct answer presents part of the solution.
- A. From Active Directory Users and Computers, create a domain local distribution group for each WSUS computer group.
- B. From the Update Services console, configure the Computers option.
- C. From Active Directory Users and Computers, modify the flags attnbute of each OU.
- D. From the Update Services console, run the WSUS Server Configuration Wizard.
- E. From Group Policy objects (GPOs), configure the Enable client-side targeting setting.
Correct Answer: B,E 🗳️
Note: This question It part of a series of questions that present the same scenario. Each question In the series contains a unique solution that might meet the stated goats. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to It. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10. Computer1 connects to a home network and a corporate network.
The corporate network uses the 17216.0.0/24 address space internally.
Computer1 runs an application named App1 that listens to port 8080.
You need to prevent connections to App1 when Computer1 is connected to the home network.
Solution: From Group Policy Management you create a software restriction policy.
Does this meet the goal?
- A. No
- B. Yes
Correct Answer: A 🗳️
Explanation: Only visible for Prep4SureReview members. You can sign-up / login (it's free).
Viewing page 1 out of 49 pages.
Viewing questions 1-5 out of 245 questions.
Mandel 
Steven 
Warner 
Christian 
Erin 
Samuel 
Guy 
Hunter 
Yedda 
Bart 
Jane 
Channing 
Blithe 
Elma 
Byron 
Chasel 
Nathaniel 
Vincent 
