Microsoft 70-743 Online Practice Questions and Exam Preparation

Microsoft 70-743 Online Questions & Answers

• Question 101:

  HOTSPOT

  Your network contains an Active Directory forest named contoso.com.

  Your company has a custom application named ERP1. ERP1 uses an Active Directory Lightweight Directory Services (AD LDS) server named Server1 to authenticate users.

  You have a member server named Server2 that runs Windows Server 2016. You install the Active Directory Federation Services (AD FS) server role on Server2 and create an AD FS farm.

  You need to configure AD FS to authenticate users from the AD LDS server.

  Which cmdlets should you run? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  To configure your AD FS farm to authenticate users from an LDAP directory, you can complete the following steps:

  1. Step 1: New-AdfsLdapServerConnection

  First, configure a connection to your LDAP directory using the New-AdfsLdapServerConnection cmdlet:

  $DirectoryCred = Get-Credential

  $vendorDirectory = New-AdfsLdapServerConnection –HostName dirserver –Port 50000 –SslMode None –AuthenticationMethod Basic –Credential $DirectoryCred

  2. Step 2 (optional):

  Next, you can perform the optional step of mapping LDAP attributes to the existing AD FS claims using the New-AdfsLdapAttributeToClaimMapping cmdlet.

  3. Step 3: Add-AdfsLocalClaimsProviderTrust

  Finally, you must register the LDAP store with AD FS as a local claims provider trust using the Add-AdfsLocalClaimsProviderTrust cmdlet:

  Add-AdfsLocalClaimsProviderTrust –Name “Vendors” –Identifier “urn:vendors” –Type L

  References: https://technet.microsoft.com/en-us/library/dn823754(v=ws.11).aspx

• Question 102:

  You have a Hyper-V host that runs Windows Server 2016. The host contains a virtual machine named VM1. VM1 has resource metering enabled.

  You need to use resource metering to track the amount of network traffic that VM1 sends to the 10.0.0.0/8 network.

  Which cmdlet should you run?

  A. New-VMResourcePool
  B. Set-VMNetworkAdapter
  C. Add-VMNetworkAdapterAcl
  D. Set-VMNetworkAdapterRoutingDomainMapping
  C. Add-VMNetworkAdapterAcl

  ---

  References: https://technet.microsoft.com/itpro/powershell/windows/hyper-v/add-vmnetworkadapteracl

• Question 103:

  You have a server named Server1 that runs Windows Server 2016.

  You need to configure Server1 as a Web Application Proxy.

  Which server role or role service should you install on Server1?

  A. Web Server (IIS)
  B. Network Policy and Access Services
  C. Direct Access and VPN (RAS)
  D. Active Directory Federation Services
  E. Remote Access
  E. Remote Access

  ---

  In Add Roles And Features Wizard , on the Server Role page, in the Role list, select the Remote Access check box , and click Next

• Question 104:

  HOTSPOT

  Your company has a main office and a branch office. The two offices connect to each other by using a WAN link.

  Your network contains an Active Directory forest named contoso.com. The forest contains a domain controller named DC1. All of the domain controllers are located in the main office.

  You install a read-only domain controller (RODC) named RODC1 in the branch office.

  You create a user account for a new user named User1. You add User1 to the Allowed RODC Password Replication Group. User1 starts work on Monday.

  You are notified that the WAN link will be down for maintenance on Monday.

  You need to ensure that User1 can log on in the branch office site on Monday.

  Which command should you run? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  The following example triggers replication of the passwords for the user account named JaneOh from the source domain controller named source-dc01 to all RODCs that have the name prefix dest-rodc: repadmin /rodcpwdrepl dest-rodc* source-dc01 cn=JaneOh,ou=execs,dc=contoso,dc=com

  References:

  https://technet.microsoft.com/en-us/library/cc742095(v=ws.11).aspx

• Question 105:

  Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.

  Start of repeated scenario Your network contains an Active Directory domain named contoso.com. The functional level of the forest and the domain is Windows Server 2008 R2. All servers in the domain run Windows Server 2016 Standard. The domain contains 300 client computers that run either Windows 8.1 or Windows 10.

  The domain contains nine servers that are configured as shown in the following table.

  

  The virtual machines are configured as follows:

  Each virtual machine has one virtual network adapter.

  VM1 and VM2 are part of a Network Load Balancing (NLB) cluster.

  All of the servers on the network can communicate with all of the virtual machines.

  End of repeated scenario.

  You create a new NLB cluster that contains VM3.

  You need to ensure that VM2 can remain in the original cluster and be added to the new cluster.

  What should you do first?

  A. Add a new virtual network adapter to VM2.
  B. Install the Web Application Proxy server role on VM2 and VM3.
  C. Change the cluster operation mode.
  D. Modify the default port rule.
  A. Add a new virtual network adapter to VM2.

  ---

  References: http://myitforum.com/myitforumwp/2012/08/16/how-to-configure-an-nlb-in-hyper-v-part-1/

• Question 106:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains four servers named Server1, Server2, Server3, and Server4 that run Windows Server 2016.

  Server1 and Server2 are nodes in a Hyper-V cluster named Cluster1. You have a highly available virtual machine named VM1. Server1 is the owner node of VM1. Server3 and Server4 are nodes of a scale-out file server named Cluster2.

  The storage on Server1 is configured as shown in the following table.

  

  VM1 is stored in C:\ClusterStorage\Volume1.

  You need to move the virtual disk of VM1 to a different location.

  What should you do? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

• Question 107:

  You have a DHCP server named Server1.

  Server1 has an IPv4 scope that serves 75 client computers that run Windows 10.

  When you review the address leases in the DHCP console, you discover several leases for devices that you do not recognize.

  You need to ensure that only the 75 Windows 10 computers can obtain a lease from the scope.

  What should you do?

  A. Run the Add-DhcpServerv4ExclusionRange cmdlet.
  B. Create and enable a DHCP filter.
  C. Create a DHCP policy for the scope.
  D. Run the Add-DhcpServerv4OptionDefinition cmdlet.
  A. Run the Add-DhcpServerv4ExclusionRange cmdlet.

• Question 108:

  You have two Hyper-V hosts named Server1 and Server2 that run Windows Server 2016. Server1 and Server2 are connected to the same network.

  On Server1 and Server2, you create an external network switch named Switch1.

  You have the virtual machines shown in the following table.

  

  All three virtual machines are connected to Switch1.

  You need to prevent applications in VM3 from being able to capture network traffic from VM1 or VM2. The solution must ensure that VM1 retains network connectivity.

  What should you do?

  A. On Server2, configure the VLAN ID setting of Switch1.
  B. On Server2, create an external switch and connect VM3 to the switch.
  C. Modify the subnet mask of VM1 and VM2.
  D. Configure network virtualization for VM1 and VM2.
  D. Configure network virtualization for VM1 and VM2.

  ---

  References:

  https://docs.microsoft.com/en-us/windows-server/networking/sdn/technologies/hyper-v-network-virtualization/hyperv-network-virtualization-technical-details-windows-server https://blogs.technet.microsoft.com/networking/2016/10/26/networkvirtualization-with-ws2016-sdn/

• Question 109:

  DRAG DROP

  You have a network that contains several servers that run Windows Server 2016.

  You need to use Desired State Configuration (DSC) to configure the servers to meet the following requirements:

  How should you configure the DSC recourses? To answer, drag the appropriate values to the correct locations. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view

  content.

  Select and Place:

  

  

  ---

  The WindowsFeature resource in Windows PowerShell Desired State Configuration (DSC) provides a mechanism to ensure that roles and features are added or removed on a target node. Box 2: Present The Ensure Property indicates if the role or feature is added. To ensure that the role or feature is added, set this property to "Present" To ensure that the role or feature is removed, set the property to "Absent". Example: WindowsFeature RoleExample { Ensure = "Present" # Alternatively, to ensure the role is uninstalled, set Ensure to "Absent" Name = "Web-Server"# Use the Name property from Get-WindowsFeature } Box 3: Service The Service resource in Windows PowerShell Desired State Configuration (DSC) provides a mechanism to manage services on the target node. Box 4: Running The State property indicates the state, either Running or Stopped, you want to ensure for the service. References: https://msdn.microsoft.com/en-us/powershell/dsc/windowsfeatureresource https://msdn.microsoft.com/en-us/powershell/dsc/serviceresource

• Question 110:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than onecorrect solutions, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Hyper-V host named Server1 that hosts a virtual machine named VM1. Server1 and VM1 run Windows Server 2016. The settings for VM1 are configured as shown in the exhibit below:

  

  You need to ensure that you can use the Copy-VMFile cmdlet on Server1 to copy files from VM1.

  Solution: You need to enable the Data Exchange integration service for VM1

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Guest Services:

  This is a new Integration Services component introduced in Windows Server 2012 R2 that is disabled by default.

  Guest Services enables the copying of files to a virtual machine using WMI APIs or using the new Copy-VMFile PowerShell cmdlet