Exam 70-744 All Questions

View all questions & answers for the 70-744 exam

Exam 70-744 topic 1 question 14 discussion

Actual exam question from Microsoft's 70-744

Question #: 14
Topic #: 1

Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012. All servers run Windows Server 2016.
You create a new bastion forest named admin.contoso.com. The forest functional level of admin.contoso.com is Windows Server 2012 R2.
You need to implement a Privileged Access Management (PAM) solution.
Which two actions should you perform? Each correct answer presents part of the solution.

A. Raise the forest functional level of admin.contoso.com.
B. Deploy Microsoft Identify Management (MIM) 2016 to admin.contoso.com.
C. Configure contoso.com to trust admin.contoso.com.
D. Deploy Microsoft Identity Management (MIM) 2016 to contoso.com.
E. Raise the forest functional level of contoso.com.
F. Configure admin.contoso.com to trust contoso.com.

Show Suggested Answer

Suggested Answer: BC 🗳️
References:
https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/hardware-software-requirements https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/planning-bastion-environment

by thomasemr at Aug. 25, 2019, 3 a.m.

Comments

Submit Cancel

uevenasdf

Highly Voted 4 years, 11 months ago

B/C - The bastion environment requires Microsoft Identity Manager 2016, specifically the MIM Service and PAM components must be deployed.

upvoted 6 times

...

Kamikazekiller

Highly Voted 4 years, 10 months ago

Answer is correct. B. Deploy Microsoft Identify Management (MIM) 2016 to admin.contoso.com. C. Configure contoso.com to trust admin.contoso.com.

upvoted 6 times

...

SamsOtro

Most Recent 4 years, 7 months ago

B and C are correct

upvoted 2 times

...

jelly_baby

4 years, 9 months ago

Two steps that are needed: - Install MIM - Configure trust MIM is installed on the Bastion forest and the main domain needs to trust the new domain. Given answer B + C is correct.

upvoted 6 times

...

simcauley

5 years ago

There is no need to raise the functional level of admin.contoso.com as it meets the minimum requirement of 2012 R2. Answer is correct.

upvoted 2 times

V1980

4 years, 5 months ago

I concur with this. The functional level should be at least 2012 which it already is.

upvoted 1 times

...

why_does_it_matter

5 years, 2 months ago

I'd go with A + C

upvoted 1 times

...

Ario

5 years, 4 months ago

A and D is correct

upvoted 1 times

Ario

5 years, 2 months ago

Actually Given answer is correct (disregard A and D)

upvoted 4 times

...

coleman

5 years, 4 months ago

the answer should be.. A. Raise the forest functional level of admin.contoso.com. B. Deploy Microsoft Identify Management (MIM) 2016 to admin.contoso.com.

upvoted 2 times

Yebubbleman

4 years, 5 months ago

Holy shit! coleman! You exist in 70-744 discussions! :-)

upvoted 3 times

...

thomasemr

5 years, 10 months ago

https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/configuring-mim-environment-for-pam

upvoted 2 times

...

thomasemr

5 years, 10 months ago

https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/step-5-establish-trust-between-priv-corp-forests

upvoted 2 times

...