Microsoft 70-743 Online Practice Questions and Exam Preparation

Microsoft 70-743 Online Questions & Answers

• Question 1:

  You have a server named Server1 that runs Windows Server 2016. The Docker daemon runs on Server1.

  You need to configure the Docker daemon to accept connections only on TCP port 64500.

  What should you do?

  A. Run the sc control command.
  B. Run the New-NetFirewallRule cmdlet.
  C. Modify the routing table on Server1.
  D. Run the sc config command.
  E. Edit the configuration.json file
  F. Run the Set-Service Windows PowerShell cmdlet
  D. Run the sc config command.

  ---

  The preferred method for configuring the Docker Engine on Windows is using a configuration file. The configuration file can be found at 'C:\ProgramData\Docker\config\daemon.json'. If this file does not already exist, it can be created.

  Note: The Docker Engine can also be configured by modifying the Docker service using the sc config command.

  References:

  https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configure-docker-daemon

• Question 2:

  HOTSPOT

  You are configuring internal virtual networks to support multitenancy communication between tenant virtual machine networks and remote sites.

  You have a tenant named Tenant1.

  You need to enable Border Gateway Protocol (BGP) for Tenant1.

  Which commands should you run? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 3:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions,

  while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2.

  DC1 holds the RID master operations role.

  DC1 fails and cannot be repaired.

  You need to move the RID role to DC2.

  Solution: On DC2, you open Windows PowerShell and run

  Move-ADDirectoryServerOperationMasterRole

  -OperationMaster RIDMaster -Identity DC2.Contoso.com.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  There are 3 ways of transferring FSMO roles:

  Using graphical user interface available on a DC or any server/workstation with Administrative Tools / Remote Server Administration Tools installed.

  Using the command-line tool called ntdsutil.

  Using the PowerShell cmdlet Move-ADDirectoryServerOperationMasterRole.

  However, we need to seize the RID role and thus must use the Force parameter.

  References:

  http://kpytko.pl/active-directory-domain-services/transferring-fsmo-roles-with-powershell/

  https://docs.microsoft.com/en-us/powershell/module/addsadministration/move-addirectoryserveroperationmasterrole?view=win10-ps

  http://kpytko.pl/active-directory-domain-services/transferring-fsmo-roles-from-gui/

  http://kpytko.pl/active-directory-domain-services/transferring-fsmo-roles-from-command-line/

• Question 4:

  Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10. On Server1, you have the following zone configuration

  

  You need to prevent Server1 from resolving queries from DNS clients located on Subnet4.

  Server1 must resolve queries from all other DNS clients.

  Solution: From Windows PowerShell on Server1, you run the Export-DnsServerDnsSecPublicKey cmdlet.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Example: Export a trust anchor to a file share

  This command exports the trust anchor (DS record) for Contoso.com to a file share. A DNS administrator runs this command from the DNS server that hosts the zone Contoso.com and specifies that the zone signing key uses the SHA-1

  algorithm to create the DS record.

  PS C:\> Export-DnsServerDnsSecPublicKey -ComputerName "DNSDC1.Contoso.com" -ZoneName "Contoso.com" -Path "\\MyDNSKeyShare\keys" -PassThru -DigestType "Sha1"

• Question 5:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions,

  while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a server named Server1 that runs Windows Server 2016. Server1 is configured as a VPN server. Server1 is configured to allow domain users to establish VPN connections from 06:00 to 18:00, every day of the week.

  You need to ensure that domain users can establish VPN connections only between Monday and Friday.

  Solution: From Routing and Remote Access, you configure the Properties of Server1.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 6:

  Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series.

  Information and details provided in a question apply only to that question.

  You have a Hyper-V host named Server1 that runs Windows Server 2016. You plan to deploy several shielded virtual machines on Server1.

  You deploy a Host Guardian on a new server.

  You need to ensure that Server1 can host shielded virtual machines.

  What should you do first?

  A. the Mount-VHD cmdlet
  B. the Diskpart command
  C. the Set-VHD cmdlet
  D. the Set-VM cmdlet
  E. the Set-VMHost cmdlet
  F. the Set-VMProcessor cmdlet
  G. the Install-WindowsFeature cmdlet
  H. the Optimize-VHD cmdlet
  G. the Install-WindowsFeature cmdlet

  ---

  Installing Host Guardian Service (HGS) Role

  On a machine running Windows Server 2016, install the Host Guardian Service role using Server Manager or Windows PowerShell.

  From the command line issue the following command:

  Install-WindowsFeature HostGuardianServiceRole -IncludeManagementTools

  References: https://blogs.technet.microsoft.com/datacentersecurity/2016/03/16/windows-server-2016-and-host-guardian-service-for-shielded-vms/

• Question 7:

  Note: This question is part of a series of questions that use the same similar answer choices.

  An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.

  You have a Hyper-V host named Server1 that runs Windows Server 2016.

  Server1 has a virtual machine named VM1 that uses a single VHDX file.

  VM1 is configured shown in the following table:

  

  You plan to use VM1 as a virtual Machine Template to deploy shielded virtual machines.

  You need to ensure that VM1 can be used to deploy shielded virtual machines.

  What should you run?

  A. the Mount-VHD cmdlet
  B. the Diskpart command
  C. the Set-VHD cmdlet
  D. the Set-VM cmdlet
  E. the Set-VMHost cmdlet
  F. the Set-VMProcessor cmdlet
  G. the Install-Windows Feature cmdlet
  H. the Optimize-VHD cmdlet
  B. the Diskpart command

• Question 8:

  Your Network contains one Active Directory domain named contoso.com. You pilot DirectAccess on the network.

  During the pilot deployment, you enable DirectAccess only for a group Contoso\Test Computers. Once the pilot is complete, you need to enable DirectAccess for all the client computers in the domain. What should you do?

  A. From Windows PowerShell, run the Set-DAClient cmdlet.
  B. From Windows PowerShell, run the Set-DirectAccess cmdlet.
  C. From Active Directory Users and Computers, modify the membership of the Windows Authorization Access Group.
  D. From Group Policy Management, modify the security filtering of an object named Direct Access Client Setting Group Policy.
  D. From Group Policy Management, modify the security filtering of an object named Direct Access Client Setting Group Policy.

• Question 9:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After your answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory forest named contoso.com.

  You need to identify which server is the schema master.

  Solution: You open Active Directory Domains and Trusts, right-click Active Directory Domains and Trust in the console tree, and then click Operations Master.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  This solution only shows the Domain Naming Master.

• Question 10:

  HOTSPOT

  You have four servers named Server1, Server2, Server3, and Server4 that run Windows Server 2016.

  Server1 and Server2 are nodes in a failover cluster named FC1. Server3 and Server4 are nodes in a failover cluster named FC2.

  You add the cluster roles show in the following table.

  

  You add a file share named Share1 to FS1. You add a file share named Share2 to FS2.

  Which UNC paths can you use to access each share? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area: