Microsoft Networking with Windows Server 2016 - 070-741 Exam Practice Test
Your network contains an Active Directory domain named contoso.com. The Functional level of the forest and the domain is Windows Server 2008 R2. All servers in the domain run Windows server 2016 standard. The domain contains 100 client computers that run either Windows 8.1 or Windows 10.
The domain contains nine servers that are configured as shown in the following table.
The domain contains nine servers that are configured as shown in the following table.
Correct Answer:
You have multiple servers that run Windows Server 2016.
The DNS Server server role is installed on a server named Server1.
You need to configure Server1 to use a DNS forwarder that has an IP address of 192.168.10.15.
What should you run?
The DNS Server server role is installed on a server named Server1.
You need to configure Server1 to use a DNS forwarder that has an IP address of 192.168.10.15.
What should you run?
Correct Answer: E
Your network contains an Active Directory domain. The domain contains two domain controllers named DO and DC2. DC! and DC2 host an Active Directory-integrated DNS zone named contoso.com You have two DNS Client Subnets named Subnet1 and Subnet2.
You plan to create two DNS records for www.contoso.com. One record will point to 10.1.23, and the other record will point to 172.23.6.5.
You need to ensure that www.contoso.com resolves to:
* 10.1.2.3 from Subnet1
You plan to create two DNS records for www.contoso.com. One record will point to 10.1.23, and the other record will point to 172.23.6.5.
You need to ensure that www.contoso.com resolves to:
* 10.1.2.3 from Subnet1
Correct Answer: C
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are a network administrator for a company named Contoso, Ltd. The network is configured as shown in the exhibit.
You install the Remote Access server role on Server2. Server2 has the following configured:
* Network address translation (NAT)
* The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to Server2.
You identify the following requirements:
* Add 28 devices to subnet2 for a temporary project.
* Configure Server2 to accept VPN connections from the internet.
* Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
You deploy a computer named ComputerA to Subnet1. ComputerA has an IP address of 10.10.0.129 and a subnet mask of 255.255.255.0.
You plan to use ComputerA to access the resources on Web1.
Which IP address should you use as the default gateway on ComputerA?
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are a network administrator for a company named Contoso, Ltd. The network is configured as shown in the exhibit.
You install the Remote Access server role on Server2. Server2 has the following configured:
* Network address translation (NAT)
* The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to Server2.
You identify the following requirements:
* Add 28 devices to subnet2 for a temporary project.
* Configure Server2 to accept VPN connections from the internet.
* Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
You deploy a computer named ComputerA to Subnet1. ComputerA has an IP address of 10.10.0.129 and a subnet mask of 255.255.255.0.
You plan to use ComputerA to access the resources on Web1.
Which IP address should you use as the default gateway on ComputerA?
Correct Answer: C
You have two servers named Server1 and Server2 that run Windows Server 2016. Server1 and Server2 have the Network Policy Server role service installed.
Server1 is configured to forward connection requests to Server2.
Incoming connection requests to Server1 contain the User Name attribute. The User Name attribute does not contain the domain name suffix.
You need to ensure that the User Name attribute will be replaced by using a format of [email protected].
How should you configure the attribute manipulation role on Server1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Server1 is configured to forward connection requests to Server2.
Incoming connection requests to Server1 contain the User Name attribute. The User Name attribute does not contain the domain name suffix.
You need to ensure that the User Name attribute will be replaced by using a format of [email protected].
How should you configure the attribute manipulation role on Server1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-crp-reg-expressions
https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-crp-reg-expressions To replace user with user@specific_domain Find:$ Replace: @specific_domain
Your network contains an Active Directory forest named adatum.com. The forest contains a server named Server1. Server1 has the DFS Namespaces role service installed and is configured as shown in the following exhibit.
\\Server1.adatum.com\namespace1 has a folder target named Folder1. A user named User1 has Full Control share and NTFS permissions to Folder1.
Folder1 contains a file named File1.doc. User1 has only Write NTFS permissions to File1.doc.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
\\Server1.adatum.com\namespace1 has a folder target named Folder1. A user named User1 has Full Control share and NTFS permissions to Folder1.
Folder1 contains a file named File1.doc. User1 has only Write NTFS permissions to File1.doc.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Correct Answer:
Your company has a branch office that has three floors. The office currently uses a different subnet on each floor. The subnets are configured as shown in the following table.
You have been asked to use reconfigure the network to use one subnet that encompasses all three floors. The new subnet will come from the 192.168.0.0/16 address space.
You need to identify which IP address and which subnet mask to use for the default gateway. The solution must meet the following requirements:
* Use the first available subnet
* Use a single subnet for all three floors.
* Use the first available IP address on the segment for the default gateway.
* Minimize the number of unused IP addresses.
Which IP address and which subnet mask should you identify? To answer, select the appropriate options in the answer area.
You have been asked to use reconfigure the network to use one subnet that encompasses all three floors. The new subnet will come from the 192.168.0.0/16 address space.
You need to identify which IP address and which subnet mask to use for the default gateway. The solution must meet the following requirements:
* Use the first available subnet
* Use a single subnet for all three floors.
* Use the first available IP address on the segment for the default gateway.
* Minimize the number of unused IP addresses.
Which IP address and which subnet mask should you identify? To answer, select the appropriate options in the answer area.
Correct Answer:
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:
Server1 has two virtual machines named VM1 and VM that run Windows Server 2016. VM1 connects to Private VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM2 to private1 and External1. You install the Remote Access Server role on VM2, and you configure NAT in the Routing and Remote Access console. You configure VM1 to use VM2 as the default gateway.
Does this meet the goal?
Refer to exhibit:
Server1 has two virtual machines named VM1 and VM that run Windows Server 2016. VM1 connects to Private VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM2 to private1 and External1. You install the Remote Access Server role on VM2, and you configure NAT in the Routing and Remote Access console. You configure VM1 to use VM2 as the default gateway.
Does this meet the goal?
Correct Answer: B
You have two DNS servers named Server1 and Server2.
All client computers run Windows 10 and are configured to use Server1 for DNS name resolution.
Server2 hosts a primary zone named contoso.com.
Your network recently experienced several DNS spoofing attacks on the contoso.com zone.
You need to prevent further attacks from succeeding.
What should you do on Server??
All client computers run Windows 10 and are configured to use Server1 for DNS name resolution.
Server2 hosts a primary zone named contoso.com.
Your network recently experienced several DNS spoofing attacks on the contoso.com zone.
You need to prevent further attacks from succeeding.
What should you do on Server??
Correct Answer: A
Your network contains an Active Directory domain named contoso.com. The domain contains a domain-based Distributed File System (DFS) namespace named Namespace1.
You need to view the shares to which users will be redirected when the users attempt to connect to a folder named Folder1 in the DFS namespace.
What cmdlet should you run? To answer, select the appropriate options in the answer area.
You need to view the shares to which users will be redirected when the users attempt to connect to a folder named Folder1 in the DFS namespace.
What cmdlet should you run? To answer, select the appropriate options in the answer area.
Correct Answer:
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest has three sites located in London, Paris, and Berlin.
The London site contains a web server named Web1 that runs Windows Server 2016.
You need to configure Web1 as an HTTP content server for the hosted cache servers located in the Paris and Berlin sites.
Solution: You install the Static Content role service, and then you restart the IIS Admin Service.
Does this meet the goal?
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest has three sites located in London, Paris, and Berlin.
The London site contains a web server named Web1 that runs Windows Server 2016.
You need to configure Web1 as an HTTP content server for the hosted cache servers located in the Paris and Berlin sites.
Solution: You install the Static Content role service, and then you restart the IIS Admin Service.
Does this meet the goal?
Correct Answer: A
You have two servers named Server1 and Server2. Server1 is a DNS server. Server2 is configured to use Server1 as the primary DNS server. You run ipconfig /displaydns on Server2 and receive the following output.
An administrator modifies the records in adatum.com as shown in the Adatum.com Zone exhibit. (Click the Exhibit button.)
The properties of the DNS record for ComputerA are shown in the ComputerA exhibit. (Click the Exhibit button.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
An administrator modifies the records in adatum.com as shown in the Adatum.com Zone exhibit. (Click the Exhibit button.)
The properties of the DNS record for ComputerA are shown in the ComputerA exhibit. (Click the Exhibit button.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
As you can see in the first graph, the TTL cache timeout is 876 seconds left at Server2, so for the upcoming 15 minutes, Server2 would still use the cached IP address for reaching computera. In the first graph, there's a Negative cache for computerb, and by default a Negative cache stays in Windows for 15 minutes, Server2 must wait for Negative cache of computerb to time-out before it can send another DNS query for a new IP address.
You have a DNS server named Server1 that runs Windows Server 2016. Server1 has an Active Directory-integrated zone named adatum.com.
All client computers run Windows 10.
You recently encountered unexpected responses to DNS client queries in the adatum.corn zone.
You need to log all the records written to the zone.
Which cmdlet should you run?
All client computers run Windows 10.
You recently encountered unexpected responses to DNS client queries in the adatum.corn zone.
You need to log all the records written to the zone.
Which cmdlet should you run?
Correct Answer: A
You have a DHCP server. The server has a scope named Scope1 that has the following configurations:
* Address range 192.168.0.2 -192.168.1.254
* Mask: 255255254.0
* Router 192.168.0.1
* Lease duration: 8 days
* DNS server: 172.16.0.254
* Reservation: 00-15-5D-00-27-03 - 192.168.1254
You need to ensure that all the Hyper-V virtual machines that receive leases from Scope1 meet the following requirements:
* Have IP addresses that range from 192.168.1.1 to 192.168.1.100.
* Use a DNS server of 10.10.10.1.
The solution must NOT affect other DHCP clients that receive IP configurations from Scope1.
What should you create?
* Address range 192.168.0.2 -192.168.1.254
* Mask: 255255254.0
* Router 192.168.0.1
* Lease duration: 8 days
* DNS server: 172.16.0.254
* Reservation: 00-15-5D-00-27-03 - 192.168.1254
You need to ensure that all the Hyper-V virtual machines that receive leases from Scope1 meet the following requirements:
* Have IP addresses that range from 192.168.1.1 to 192.168.1.100.
* Use a DNS server of 10.10.10.1.
The solution must NOT affect other DHCP clients that receive IP configurations from Scope1.
What should you create?
Correct Answer: C
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016.
Server1 has Microsoft System Center 2016 Virtual Machine Manager (VMM) installed. Server2 has IP Address Management (IPAM) installed.
You create a domain user named User1.
You need to integrate IPAM and VMM. VMM must use the account of User1 to manage IPAM. The solution must use the principle of least privilege.
What should you do on each server? To answer, select the appropriate options in the answer area.
Server1 has Microsoft System Center 2016 Virtual Machine Manager (VMM) installed. Server2 has IP Address Management (IPAM) installed.
You create a domain user named User1.
You need to integrate IPAM and VMM. VMM must use the account of User1 to manage IPAM. The solution must use the principle of least privilege.
What should you do on each server? To answer, select the appropriate options in the answer area.
Correct Answer:
Explanation:
https://technet.microsoft.com/en-us/library/dn783349(v=ws.11).aspx
https://technet.microsoft.com/en-us/library/jj878348(v=ws.11).aspx