Microsoft 70-743 Online Practice Questions and Exam Preparation

Microsoft 70-743 Online Questions & Answers

• Question 141:

  Your network contains an Active Directory forest. The forest contains two domains named litwareinc.com. The contoso.com domain contains two domain controllers named LON-DC01 and LON-DC02. The domain controllers are located in a

  site named London that is associated to a subnet of 192.168.10.0/24.

  You discover that LON-DC02 is not a global catalog server.

  You need to configure LON-DC02 as a global catalog server.

  What should you do?

  A. From Active Directory Sites and Services. modify the NTDS Settings object of the London site.
  B. From the properties of the LON-DC02 computer account in Active Directory Users and computers, modify the City attribute.
  C. From Active Directory Sites and Services, modify the properties of the 192.168.10.0/24 IP subnet.
  D. From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the NTDS settings.
  D. From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the NTDS settings.

• Question 142:

  You have a server named Server1 that runs Windows Server 2016.

  Server1 is an IP Address Management (IPAM) server that collects DHCP and DNS logs and events for your entire network.

  You need to enable a user named TECH1 to create pointer (PTR), host (A) and service location (SRV) records on all of the DNS servers on the network.

  What should you do on Server1?

  A. From the IPAM node in Server Manager, create a new user role and a new access policy.
  B. From the IPAM node in Server Manager, create a new user role and a new access scope.
  C. Run the Set-IpamCustomField cmdlet, and then run the Set-IpamAccessScope cmdlet.
  D. Run the Set-IpamRange cmdlet, and then run the Set-IpamAccessScope cmdlet.
  B. From the IPAM node in Server Manager, create a new user role and a new access scope.

  ---

  References: https://docs.microsoft.com/en-us/windows-server/networking/technologies/ipam/view-roles-and-role-permissions

• Question 143:

  HOTSPOT

  You have an Active Directory domain named Contoso.com. The domain contains Hyper-V hosts named Server1 and Server2 that run Windows Server 2016. The Hyper-V hosts are configured to use NVGRE for network virtualization. You have six virtual machines that are connected to an external switch. The virtual machines are configured as shown.

  

  To which virtual machine or virtual machines can VM1 and VM3 connect? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  The Generic Routing Encapsulation ( GRE ) keys must match.

  If you implement network virtualization with NVGRE , when a virtual machine communicates over a network, NVGRE is used to encapsulate its packets.

  To separate the traffic between the two virtualized networks, the GRE headers on the tunneled packets include a GRE Key that provides a unique Virtual Subnet ID for each virtualized network.

  References:

  https://blogs.technet.microsoft.com/keithmayer/2012/10/08/step-by-step-hyper-v-network-virtualization-31-days-of-favorite-features-in-winserv-2012-part-8-of-31/

• Question 144:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. Refer to exhibit:

  

  Server1 has two virtual machines named VM1 and VM that run Windows Server 2016. VM1 connects to Private VM2 has two network adapters.

  You need to ensure that VM1 connects to the corporate network by using NAT. Solution: You connect VM2 to private1 and External1. You install the Remote Access Serverrole on VM2, and you configure NAT in the Routing and Remote

  Access console. You configure VM1 to use VM2 as the default gateway.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

• Question 145:

  You have an Active Directory domain named Contoso com.

  The domain contains servers named Server1 and Server2 that run Windows Server 2016.

  You install the Remote Access server role on Server1.

  You install the Network Policy and Access Services server role on Server2.

  You need to configure Server1 to use Server2 as a RADIUS server.

  What should you do?

  A. From Routing and Remote Access, configure the authentication provider.
  B. From the Connection Manager Administration Kit, create a Connection Manager profile.
  C. From Server Manager, create an Access Policy.
  D. From Active Directory Users and Computers, modify the Delegation settings of the Server1 computer account.
  A. From Routing and Remote Access, configure the authentication provider.

• Question 146:

  You have a server named Server1 that runs Windows Server 2016.

  You need to install the DNS Server role on Server1.

  What should you run?

  A. the dnscmd.exe command
  B. the dns.exe command
  C. the Install-WindowsFeature cmdlet
  D. the Add-WindowsPackage cmdlet
  C. the Install-WindowsFeature cmdlet

  ---

  Reference: https://docs.microsoft.com/en-us/powershell/module/servermanager/install-windowsfeature?view=winserver2012r2-ps

• Question 147:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com.

  The domain contains a DNS server named Server1.

  You enable Response Rate Limiting on Server1.

  You need to prevent Response Rate Limiting from applying to hosts that reside on the network of 10.0.0.0/24.

  Which cmdlets should you run? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  By default RRL, is disabled on Windows DNS Server. To enable it the admin has to input SetDNSServerRRL This enables RRL on the DNS server with default settings (See more at Set-DnsServerResponseRateLimiting )

  References:

  https://blogs.technet.microsoft.com/teamdhcp/2015/08/28/response-rate-limiting-in-windows-dns-server/

  https://docs.microsoft.com/en-us/powershell/module/dnsserver/add-dnsserverclientsubnet?view=win10-ps

  https://docs.microsoft.com/en-us/powershell/module/dnsserver/add-dnsserverresponseratelimitingexceptionlist?view=win10-ps

• Question 148:

  HOTSPOT

  Your network contains an Active Directory forest named contoso.com. The forest contains an Active Directory Federation Services (AD FS) farm. You install Windows Server 2016 on a server named Server2. You need to configure Server2 as a node in the federation server farm. Which cmdlets should you run? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  

  ---

  To install the Active Directory Federation Services server role use the following command to install the role and all management tools :

  Install-WindowsFeature -Name adfs-federation -IncludeManagementTools

  To deploy the first server in an AD FS farm in the contoso.com organization , use the following command:

  PS C:\> Install-AdfsFarm -CertificateThumbprint 8169c52b4ec6e77eb2ae17f028fe5da4e35c0bed FederationServiceName fs.corp.contoso.com -GroupServiceAccountIdentifier CONTOSO\GroupAccount01

  References:

  https://docs.microsoft.com/en-us/powershell/module/adfs/install-adfsfarm?view=win10-ps

• Question 149:

  Your network contains an Active Directory domain named contoso.com that contains a domain controller named DC1. All DNS servers for the network run BIND 10.

  Your perimeter network contains a DHCP server named DHCP1 that runs Windows Server 2016. DHCP1 is a member of a workgroup named WORKGROUP. DHCP1 provides IP address leases to guests accessing the Wi-Fi network.

  Several engineers access the network remotely by using a VPN connection to remote access server that runs Windows Server 2016. All of the VPN connections use certificate-based authentication and are subjects to access policies in

  Network Policy Server (NPS). Certificates are issued by an enterprise certification authority (CA) named CA1.

  All Windows computers on the network are activated by using Key Management Service (KMS). On-premises users use Remote Desktop Services (RDS).

  You plan to deploy IP Address Management (IPAM) to the network.

  Which action can you perform on the network by using IPAM?

  A. Audit authentication events from DC1.
  B. Create DHCP reservations on DHCP1.
  C. Audit certificate enrollment requests on CA1.
  D. Manage activations on the KMS server.
  E. Audit logon event on the RDS server.
  A. Audit authentication events from DC1.

• Question 150:

  You use Application Request Routing (ARR) to make internal web applications available to the Internet by using NTLM authentication.

  You need to replace ARR by using the Web Application Proxy.

  Which server role should you deploy first?

  A. Active Directory Rights Management Services
  B. Active Directory Federation Services
  C. Active Directory Certificate Services
  D. Active Directory Lightweight Directory Services
  B. Active Directory Federation Services