Windows Server 2016 70-741 - Simulado IV

Question 1 of 57

1

Question #01

HOTSPOT -
You have a network policy server (NPS) server named NPS1. One network policy is enabled on NPS1. The policy is configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information in the graphic.
Hot Area:

Select one of the following:

Explanation

Question 2 of 57

1

Question #02

HOTSPOT -
You have a Hyper-V host named Server1 that runs Windows Server 2016. Server1 connects to your corporate network. The Corporate network uses the
10.10.0.0/16 address space.
Server1 hosts a virtual machine named VM1, VM1 is configured to have an IP addresses of 172.16.1.54/16.
You need to ensure that VM1 can access the resources on the corporate network.
What should you do? To answer, select the appropriate options in the answer area.
Hot Area:

Select one of the following:

Explanation

Question 3 of 57

1

Question #153Topic 1
HOTSPOT -
You install the DHCP Server role on a server named server1. You create a new scope on Server1. The scope properties are configured as shown in the following exhibit.

Use the drop down menus to select the answer choice that completes each statement based on the information presented in the graphics.
Hot Area:

Select one of the following:

Explanation

Question 4 of 57

1

Question #04

HOTSPOT -
You have a DNS server named Server1.
The forwarders are configured as shown in the Forwarders exhibit. (Click the Exhibit button.)

The Advanced Settings are configured as shown in the Advanced exhibit. (Click the Exhibit button.)

The Root Hints are configured as shown in the Root Hints exhibit. (Click the Exhibit button.)

Server1 does not contain any DNS zones.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:

Select one of the following:

Explanation

Question 5 of 57

1

Question #05

You are a network administrator for a company named Contoso, Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured:
✑ Network address translation (NAT)
✑ The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to Server2.
You identify the following requirements:
✑ Add 28 devices to subnet2 for a temporary project.
✑ Configure Server2 to accept VPN connections from the internet.
✑ Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
You add a computer to subnet1. The computer has an IP address of 10.10.0.129. Web1 receives a request from the new computer and sends a response.
You need to determine which address Web1 sends the response to.
Which IP address should you choose?

Select one of the following:

10.10.0.129
10.10.0.224
131.107.0.223
172.16.128.222

Explanation

Question 6 of 57

20

Question #06

HOTSPOT -
You are a network administrator for a company named Contoso, Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured:
✑ Network address translation (NAT)
✑ The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to Server2.
You identify the following requirements:
✑ Add 28 devices to subnet2 for a temporary project.
✑ Configure Server2 to accept VPN connections from the internet.
✑ Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
You need to identify which subnet mask you must use for subnet2. The solution must minimize the number of available IP addresses on Subnet2.
What subnet mask should you identify? To answer, select the appropriate options in the answer area.
Hot Area:

Select one of the following:

Explanation

Question 7 of 57

20

Question #07

You are a network administrator for a company named Contoso, Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured:
✑ Network address translation (NAT)
✑ The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to Server2.
You identify the following requirements:
✑ Add 28 devices to subnet2 for a temporary project.
✑ Configure Server2 to accept VPN connections from the internet.
✑ Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
What should you do to meet the DHCP connectivity requirement for Subnet2?

Select one of the following:

Install the Routing role service on Server2.
Install the IP address Management (IPAM) Server feature on Server2.
Install the Routing role service on Server1.
Install the DHCP Server server role on Server1.

Explanation

Question 8 of 57

20

Question #08

HOTSPOT -
You are a network administrator for a company named Contoso, Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured:
✑ Network address translation (NAT)
✑ The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to Server2.
You identify the following requirements:
✑ Add 28 devices to subnet2 for a temporary project.
✑ Configure Server2 to accept VPN connections from the internet.
✑ Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
You deploy a computer named Computer8 to subnet4. Computer8 has an IP address of 192.168.10.230 and a subnet mask of 255.255.255.240.
What is the broadcast address for Subnet4? To answer, select the appropriate options in the answer area.
Hot Area:

Drag an answer into the correct orange point.

10

239

Explanation

Question 9 of 57

20

Question #09

You plan to deploy several Hyper-V hosts that run Windows Server 2016. The deployment will use Software defined Networking (SDN) and VXLAN.
Which server role should you install on the network to support the planned deployment?

Select one of the following:

Network Controller
Network Policy and Access Services
Remote Access
Host Guardian Service

Explanation

Question 10 of 57

20

Question #10

Your network contains three subnets, a production subnet that contains production servers, a development network that contains development servers, and a client network that contains client computers.
The development network is used to test applications and reproduces servers that are located on the production network. The development network and the production network use the same IP address range.
A developer has a client computer on the client network. The developer reports that when he attempts to connect to the IP address 10.10.1.6 from his computer, he connects to a server on the production network.
You need to ensure that when the developer connects to 10.10.1.6, he connects to a sever on the development network.
Which cmdlet should you use?

Select one of the following:

New-NetNeighbor
New-NetRoute
Set-NetTcpSetting
Set-NetNeighbor

Explanation

Question 11 of 57

20

Question #11

Your network contains an Active Directory domain named contoso.com. The domain contains a domain-based Distributed File System (DFS) namespace named
Namespace1 that has access-based enumeration enabled. Namespace1 has a folder named folder1. Folder1 has a target of \\Server1\Folder1.
The Permission for folder1 are configured as shown in the following table.

Access-based enumeration is disabled for the share of Folder1.
You need to ensure that both User1 and User2 can see Folder1 when they access \\Contoso.com\NameSpace1.
What should you do?

Select one of the following:

Enable access-based enumeration for Folder1.
Disable access-based enumeration for Namespace1.
Assign User1 the read NTFS permission to Folder1
Deny User1 the read DFS permission to Folder1.

Explanation

Question 12 of 57

20

Question #12

You have a server named Server1 that runs Windows Server 2016 and is configured as a domain controller.
You install the DNS Server server role on Server1.
You plan to store a DNS zone in a custom Active Directory partition.
You need to create a new Active Directory partition for the zone.
What should you use?

Select one of the following:

Set-DnsServer
Active Directory Sites and Services
Dns.exe
Dnscmd.exe
New-ADObject
Active Directory Administrative Center
DNS Manager

Explanation

Question 13 of 57

20

Question #13

You have an Active Directory forest that contains 30 servers and 6,000 client computers.
You deploy a new DHCP server that runs Windows Server 2016.
You need to retrieve the list of the authorized DHCP servers.
Which command should you run?

Select one of the following:

Get-DCHPServerDatabase
Netstat-p IP ""s ""a
Get-DHCPServerInDc
Show-ADAuthenticationPolicyExpression-AllowedToAuthenticateTo
Netsh DHCP server initiate auth
Get-DHCPServerSetting

Explanation

Question 14 of 57

20

Question #14

You have a server named Server1 that runs Windows Server 2016. Server1 is an IP Address Management (IPAM) server that collects DHCP and DNS logs and events for your entire network.
You need to get the IP addresses that were assigned to a client computer named Computer1 during the last week.
What should you do on Server1?

Select one of the following:

From the IPAM node in Server Manager, click IP Address Space, and then review the IP Address Inventory.
Open Event Viewer and click Windows Logs. Filter the Security log for Computer1.
Run the Get-IpamDhcpConfigurationEvent cmdlet.
Run the Get-IpamIpAddressAuditEvent cmdlet.
Open Event Viewer and click Windows Logs. Filter the Forwarded Events log for Computer1.
Run the Get-IpamAddress cmdlet.

Explanation

Question 15 of 57

20

Question #15

You are deploying a small network that has 30 client computers. The network uses the 192.168.1.0/24 address space. All computers obtain IP configurations from a DHCP server named Server1.
You install a server named Server2 that runs Windows Server 2016. Server2 has two network adapters named Internal and Internet. Internet connects to an
Internet Service Provider (ISP) and obtains the 131.107.0.10 IP address. Internal connects to the internal network and is configured to use the 192.168.1.250 IP address.
You need to provide Internet connectivity for the client computers.
What should you do?

Select one of the following:

On Server2, select the Internet and Internal network adapters and bridge the connections. From the DHCP console on Server1, authorize Server2.
On Server1, stop the DHCP server. On the Internal network adapter on Server2, enable Internet Connection Sharing (ICS).
On Server2 run the New-NetNat ""Name NAT1 -InternalIPInterfaceAddressPrefix 192.168.1.0/24 cmdlet. Configure Server1 to provide the 003 Router option of 131.107.0.10.
Install the Routing role service on Server2 and configure the NAT routing protocol. Configure Server1 to provide the 003 Router option of 192.168.1.250.
Install the Routing role service on Server2 and configure the NAT routing protocol. Configure Server1 to provide the 003 Router option of 131.107.0.10.
Recreate the DHCP scope on Server1 to lease addresses from the 131.107.0.0/24 address space. On Server2, change the IP address of the internal network adapter to 131.107.0.1. Configure Server1 to provide the 003 Router option of 131.107.0.1.

Explanation

Question 16 of 57

20

Question #16

You have a server named Server1 that runs Windows Server 2016. Server1 will be used as a VPN server. You need to configure Server1 to support VPN
Reconnect.
Which VPN protocol should you use?

Select one of the following:

SSTP
IKEv2
PPTP
L2TP

Explanation

Question 17 of 57

20

Question #17

You have Hyper-V host named Server1.
Server1 has a network adapter that has virtual machine queue (VMQ) enabled. The network adapter connects at 10 Gbps and has an IPV4 address.
Server1 hosts a virtual machine named VM1. VM1 has a single network adapter and four processors.
You need to distribute the network processing load across the VM1 processors.
What should you do?

Select one of the following:

From Device Manager on Server1, configure TCP Checksum Offload (IPv4).
From Windows PowerShell on VM1, run the Enable-NetAdapterRSS cmdlet.
From Windows PowerShell on Server1, run the Enable-NetAdapterPacketDirect cmdlet.
From Windows PowerShell on VM1, run the Enable-NetAdapterPacketDirect cmdlet.

Explanation

Question 18 of 57

20

Question #18

Your network contains an Active Directory domain named contoso.com. The domain contains a Hyper-V host.
You are deploying Software Defined Network (SDN) by using Windows Server 2016.
You deploy a virtual machine that runs Windows Server 2016, and you install the Network Controller server role.
You need to configure the virtual machine as the network controller.
What should you do?

Select one of the following:

Run the Install-NetworkControllerCluster cmdlet and set ClientAuthentication to X509.
Run the Install-NetworkController cmdlet and set ClientAuthentication to None.
Run the Install-NetworkControllerCluster cmdlet and set ClientAuthentication to None.
Run the Install-NetworkController cmdlet and set ClientAuthentication to Kerberos.

Explanation

Question 19 of 57

20

Question #19

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
Your company has five departments, including a web research department.
You have a DHCP server named Server1 and two DNS servers named DNS1 and DNS2.
Server1 has an Ipv4 scope named Scope1. All client computers are configured to use DNS1 for name resolution.
You need to ensure that users in the web research department use DNS2 for name resolution.
What should you do on Server1?

Select one of the following:

From the properties of Scope1, modify the Conflict detection attempts setting.
From the properties of Scope1, configure Name Protection.
From the properties of IPv4, configure the bindings.
From IPv4, create a new filter.
From the properties of Scope1, create an exclusion range.
From IPv4, run the DHCP Policy Configuration Wizard.
From Control Panel, modify the properties of Ethernet.
From Scope1, create a reservation.

Explanation

Question 20 of 57

20

Question #20

You have an IP Address Management (IPAM) server named Server1 that runs Windows Server 2016. You have five DHCP servers. Server1 manages all of the
DHCP servers.
On Server1, an administrator uses Purge Event Catalog Data to remove all of the events from the last 30 days.
You need to view all of these lease requests that were denied during the last two days.
What should you do?

Select one of the following:

On each DHCP server, run the \Microsoft\Windows\Server Manager\CleanUpOldPerfLogs scheduled task, and then review the event catalog on Server1.
On Server1, run the Purge Event Catalog Data action and then open Event Viewer on Server1.
Review the log data in C:\Windows\System32\ipam\Database on Server1.
On each DHCP server, review the DHCP Server operational event log.

Explanation

Question 21 of 57

20

Question #21

You have Hyper-V host named Server1.
Server1 has a network adapter that has virtual machine queue (VMQ) enabled. The network adapter connects at 10 Gbps and has an IPV4 address.
Server1 hosts a virtual machine named VM1. VM1 has a single network adapter and four processors.
You need to distribute the network processing load across the VM1 processors.
What should you do?

Select one of the following:

From Windows PowerShell on Server1, run the Enable-NetAdapterPacketDirect cmdlet.
From Windows PowerShell on VM1, run the Enable-NetAdapterPacketDirect cmdlet.
From Device Manager on VM1, configure Receive Side Scaling.
From Windows PowerShell on Server1, run the Enable-NetAdapterRSS cmdlet.

Explanation

Question 22 of 57

20

Question #22

You have a server named Server1 that runs Windows Server 2016. Server1 is an IP Address Management (IPAM) server that collects DHCP and DNS logs and events for your entire network.
You need to get the IP addresses that were assigned to a client computer named Computer1 during the last week.
What should you do on Server1?

Select one of the following:

From the IPAM node in Server Manager, click Event Catalog, and then review the IP Address Tracking.
Open Event Viewer and click Windows Logs. Filter the Security log for Computer1.
Run the Export-IpamAddress cmdlet.
From the IPAM node in Server Manager, click IP Address Space, and then review the IP Address Inventory.
Run the Get-IpamDhcpConfigurationEvent cmdlet.
Run the Get-IpamAddress cmdlet.

Explanation

Question 23 of 57

20

Question #23

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an IP Address Management (IPAM) server named IPAM1 that runs Windows Server 2016. IPAM1 manages all of the DHCP servers on your network.
You are troubleshooting an issue for a client that fails to receive an IP address from DHCP.
You need to ensure that from IPAM1, you can view all of the event data for the DHCP leases from the last 24 hours.
Solution: From Task Scheduler, you run the Microsoft\Windows\IPAM\Audit task.
Does this meet the goal?

Select one of the following:

True
False

Explanation

Question 24 of 57

20

Question #24

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an IP Address Management (IPAM) server named IPAM1 that runs Windows Server 2016. IPAM1 manages all of the DHCP servers on your network.
You are troubleshooting an issue for a client that fails to receive an IP address from DHCP.
You need to ensure that from IPAM1, you can view all of the event data for the DHCP leases from the last 24 hours.
Solution: From Windows PowerShell, you run the Invoke-IpamServerProvisioning cmdlet.
Does this meet the goal??

Select one of the following:

True
False

Explanation

Question 25 of 57

20

Question #25

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an IP Address Management (IPAM) server named IPAM1 that runs Windows Server 2016. IPAM1 manages all of the DHCP servers on your network.
You are troubleshooting an issue for a client that fails to receive an IP address from DHCP.
You need to ensure that from IPAM1, you can view all of the event data for the DHCP leases from the last 24 hours.
Solution: From Windows PowerShell, you run the Set-IpamDHCPServer cmdlet.
Does this meet the goal?

Select one of the following:

True
False

Explanation

Question 26 of 57

20

Question #26

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are implementing a secure network. The network contains a DHCP server named Server1 that runs Windows Server 2016.
You create a DHCP allow filter that contains all of the computers on the network that are authorized to receive IP addresses.
You discover that unauthorized computers can obtain an IP address from Server1.
You need to ensure that only authorized computers can receive an IP address from Server1.
Solution: You run the following command: Set-DhcpServerv4FilterList ""ComputerName Server1 ""Allow False ""Deny True
Does this meet the goal?

Select one of the following:

True
False

Explanation

Question 27 of 57

20

Question #27

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are implementing a secure network. The network contains a DHCP server named Server1 that runs Windows Server 2016.
You create a DHCP allow filter that contains all of the computers on the network that are authorized to receive IP addresses.
You discover that unauthorized computers can obtain an IP address from Server1.
You need to ensure that only authorized computers can receive an IP address from Server1.
Solution: You run the following command: Add-DHCPServerv4Filter ""ComputerName Server1 ""MacAddress * -List Deny
Does this meet the goal?

Select one of the following:

True
False

Explanation

Question 28 of 57

20

Question #28

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are implementing a secure network. The network contains a DHCP server named Server1 that runs Windows Server 2016.
You create a DHCP allow filter that contains all of the computers on the network that are authorized to receive IP addresses.
You discover that unauthorized computers can obtain an IP address from Server1.
You need to ensure that only authorized computers can receive an IP address from Server1.
Solution: You run the following command: Add-DHCPServerv4Filter ""ComputerName Server1 ""MacAddress * -List Allow
Does this meet the goal?

Select one of the following:

True
False

Explanation

Question 29 of 57

20

Question #29

You have a virtual machine named Server1 that runs Windows Server 2016.
You plan to use Server1 as part of a Software Defined Networking (SDN) solution.
You need to implement the Border Gateway Protocol (BGP) on Server1.
What should you install?

Select one of the following:

the Peer Name Resolution Protocol (PNRP) feature
the Routing role service
the Network Device Enrollment Service role service
the Network Policy and Access Services server role

Explanation

Question 30 of 57

20

Question #30

You are deploying Software Defined Networking (SDN) by using Windows Server 2016.
You plan to deploy a three-node Network Controller cluster. You plan to use virtual machines for the network controller and the management client. The virtual machines will NOT be domain-joined.
You need to configure authentication for the cluster.
Which command should you run?

Select one of the following:

Install-NetworkController ""Node @{Node1, Node2, Node3} ""ClientAuthentication X509
Install-NetworkControllerCluster ""Node @{Node1, Node1, Node3} ""ClientAuthentication Kerberos
Install-NetworkControllerCluster ""Node @{Node1, Node1, Node3} ""ClientAuthentication X509
Install-NetworkControllerCluster ""Node @{Node1, Node1, Node3} ""ClientAuthentication None
Install-NetworkController ""Node @{Node1, Node2, Node3} ""ClientAuthentication Kerberos

Explanation

Question 31 of 57

20

Question #31

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an IP Address Management (IPAM) server named IPAM1 that runs Windows Server 2016. IPAM1 manages all of the DHCP servers on your network.
You are troubleshooting an issue for a client that fails to receive an IP address from DHCP.
You need to ensure that from IPAM1, you can view all of the event data for the DHCP leases from the last 24 hours.
Solution: From Server Manager, you run Retrieve Event Catalog Data.
Does this meet the goal?

Select one of the following:

True
False

Explanation

Question 32 of 57

20

Question #32

You implement Software Defined Networking (SDN) by using the Network Controller server role.
You have a virtual network named VNET1 that contains servers used by developers.
You need to ensure that only devices from the 192.168.0.0/24 subnet can access the virtual machine in VNET1.
What should you configure?

Select one of the following:

a network security group (NSG)
role-based access control
a universal security group
Dynamic Access Control

Explanation

Question 33 of 57

20

Question #33

You have a DNS server named Server1 that runs Windows Server 2016. Server1 has two Active Directory-integrated zones named contoso.com and adatum.com.
All client computers run Windows 10.
Server1 recently experienced millions of erroneous DNS queries causing a denial of service.
You need to reduce the likelihood that a similar attack will cause a denial of service. The solution must ensure that Server1 continues to resolve names for clients.
What should you do?

Select one of the following:

Implement DNS-based Authentication of Named Entities (DANE)
Enable Response Rate Limiting (RRL) on Server1
Configure DNS policies on Server1
Sign both adatum.com and contoso.com zones

Explanation

Question 34 of 57

20

Question #34

Your network contains an Active Directory forest named contoso.com.
The forest contains five domains. You manage DNS for the contoso.com domain only.
You are not responsible for managing DNS for the child domains.
The DNS servers in a child domain named research.contoso.com are reconfigured often.
You need to ensure that clients in contoso.com can resolve addresses in research.contoso.com. The solution must minimize zone replication traffic.
What should you do?

Select one of the following:

Create a primary zone for research.contoso.com on the DNS servers of contoso.com
Create a secondary zone for research.contoso.com on the DNS servers of contoso.com
Create a stub zone for research.contoso.com on the DNS servers of contoso.com
Create a delegation for research.contoso.com

Explanation

Question 35 of 57

20

Question #35

You have a server named Server1 that runs Windows Server 2016.
Server1 is in a workgroup and has the DNS Server role installed.
You need to enable DNS analytical diagnostic logging on Server1.
What should you do?

Select one of the following:

From Local Group Policy Editor, configure Audit Policy.
From DNS Manager, configure Monitoring.
From Windows PowerShell, run the Enable-DnsServerPolicy cmdlet.
From DNS Manager, configure Event Logging.
From Event Viewer, configure DNS-Server Applications and Services Logs.

Explanation

Question 36 of 57

20

Question #36

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
Server1 has IP Address Management (IPAM) installed. IPAM is configured to use the Group Policy based provisioning method. The prefix for the IPAM Group
Policy objects (GPOs) is IP.
From Group Policy Management, you manually rename the IPAM GPOs to have a prefix of IPAM.
You need to modify the GPO prefix used by IPAM.
What should you do?

Select one of the following:

Click Configure server discovery in Server Manager.
Run the Set-IpamConfiguration cmdlet.
Click Provision the IPAM server in Server Manager.
Run the Invoke-IpamGpoProvisioning cmdlet.

Explanation

Question 37 of 57

20

Question #37

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Hyper-V host named Server 1. The network adapters on Server1 have single root I/O virtualization (SR-IOV) enabled.
Server1 hosts a virtual machine named VM1 that runs Windows Server 2016.
You need to identify whether SR-IOV is used by VM1.
Solution: You sign in to VM1. You run the Get-NetAdapterSriov cmdlet.
Does this meet the goal?

Select one of the following:

True
False

Explanation

Question 38 of 57

20

Question #38

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Hyper-V host named Server 1. The network adapters on Server1 have single root I/O virtualization (SR-IOV) enabled.
Server1 hosts a virtual machine named VM1 that runs Windows Server 2016.
You need to identify whether SR-IOV is used by VM1.
Solution: You sign in to VM1. You view the properties of the network connections.
Does this meet the goal?

Select one of the following:

True
False

Explanation

Question 39 of 57

20

Question #39

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Hyper-V host named Server1. The network adapters on Server1 have single root I/O virtualization (SR-IOV) enabled.
Server1 hosts a virtual machine named VM1 that runs Windows Server 2016.
You need to identify whether SR-IOV is used by VM1.
Solution: On Server1, you open Hyper-V Manager and view the Integration Services settings of VM1.
Does this meet the goal?

Select one of the following:

True
False

Explanation

Question 40 of 57

20

Question #40

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Hyper-V host named Server 1. The network adapters on Server1 have single root I/O virtualization (SR-IOV) enabled.
Server1 hosts a virtual machine named VM1 that runs Windows Server 2016.
You need to identify whether SR-IOV is used by VM1.
Solution: You sign in to VM1. You open Device Manager and view the properties of the network adapters.
Does this meet the goal?

Select one of the following:

True
False

Explanation

Question 41 of 57

20

Question #41

You are deploying a small network that has 30 client computers. The network uses the 192.168.1.0/24 address space. All computers obtain IP configurations from a DHCP server named Server1.
You install a server named Server2 that runs Windows Server 2016. Server2 has two network adapters named Internal and Internet. Internet connects to an
Internet Service Provider (ISP) and obtains the 131.107.0.10 IP address. Internal connects to the internal network and is configured to use the 192.168.1.250 IP address.
You need to provide Internet connectivity for the client computers.
What should you do?

Select one of the following:

On Server1, stop the DHCP server. On the Internal network adapter on Server2, enable Internet Connection Sharing (ICS).
On Server2 run the New-NetNat ""Name NAT1 -InternalIPInterfaceAddressPrefix 192.168.1.0/24 cmdlet. Configure Server1 to provide the 003 Router option of 192.168.1.250.
On Server1, stop the DHCP server. On the Internet adapter on Server2, enable internet Connection Sharing (ICS).
Recreate the DHCP scope on Server1 to lease addresses from the 131.107.0.0/24 address space. On Server2, change the IP address of the internal network adapter to 131.107.0.1. Configure Server1 to provide the 003 Router option of 131.107.0.1.
Install the Routing role service on Server2 and configure the NAT routing protocol. Configure Server1 to provide the 003 Router option of 192.168.1.250.

Explanation

Question 42 of 57

20

Question #42

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server2 that runs Windows Server 2016.
The DHCP Server server role is installed on Server2. The DNS server role is installed on a server named Server3.
The network contains 500 non-Windows devices that are registered in the DNS zone of contoso.com.
You configure Server2 to lease IP addresses to the non-Windows devices.
You need to prevent Server2 from overwriting the host (A) records for the non-Windows devices.
What should you run?

Select one of the following:

dism.exe
dns.exe
dnscmd.exe
netsh.exe
Set-DhcpServerDatabase
Set-DhcpServerv4DnsSetting
Set-DhcpServerv6DnsSetting
Set-DNSServerSetting

Explanation

Question 43 of 57

20

Question #43

You have a server named Server1 that runs Windows Server 2016.
Server1 is an IP Address Management (IPAM) server that collects DHCP and DNS logs and events for your entire network.
You need to enable a user named TECH1 to create pointer (PTR), host (A) and service location (SRV) records on all of the DNS servers on the network.
What should you do on Server1?

Select one of the following:

Run the Set-IpamRange cmdlet, and then run the Set-IpamAddressSpace cmdlet.
Run the Set-IpamCustomField cmdlet, and then run the Set-IpamAccessScope cmdlet.
From the IPAM node in Server Manager, assign the IPAM DNS Administrator Role to TECH1 and create a new access policy.
From the IPAM node in Server Manager, assign the IPAM DNS Administrator Role to TECH1 and create a new access scope.

Explanation

Question 44 of 57

20

Question #44

You have a server named Server1 that has a Server Core installation of Windows Server 2016. Server1 is configured to obtain an IP address automatically.
You need to configure the IPv4 address, netmask, and default gateway manually for a network interface named Ethernet on Server1.
What should you run?

Select one of the following:

ipconfig.exe
New-NetIPAddress
Set-NetAdapter
Set-NetIPv4Protocol

Explanation

Question 45 of 57

20

Question #45

You have a server named Server1 that connects directly to multiple networks.
You need to configure Server1 as a BGP router.
What should you install on Server1?

Select one of the following:

the MultiPoint Services server role
the Network Policy and Access Services server role
the Network Controller server role
the Routing role service

Explanation

Question 46 of 57

20

Question #46

You have an Active Directory forest that contains 30 servers and 6,000 client computers.
You deploy a new DHCP server that runs Windows Server 2016.
You need to retrieve the list of the authorized DHCP servers.
Which command should you run?

Select one of the following:

Get-ADResourceProperty ""Filter DHCP
Netsh DHCP show server
Netsh DHCP server initiate auth
Get-DHCPServerSetting
Netstat ""p IP ""s -a

Explanation

Question 47 of 57

20

Question #47

You have a server named Server1 that runs Windows Server 2016.
Server1 is an IP Address Management (IPAM) server that collects DHCP and DNS logs and events for your entire network.
You need to enable a user named TECH1 to create pointer (PTR), host (A) and service location (SRV) records on all of the DNS servers on the network.
What should you do on Server1?

Select one of the following:

Run the Set-IpamCustomField cmdlet, and then run the Set-IpamAddressSpace cmdlet.
Run the Set-IpamCustomField cmdlet, and then run the Set-IpamAccessScope cmdlet.
From the IPAM node in Server Manager, assign the IPAM DNS Administrator Role to TECH1 and create a new access policy.
Run the Set-IpamRange cmdlet, and then run the Set-IpamAccessScope cmdlet.

Explanation

Question 48 of 57

20

Question #48

HOTSPOT -
You have a Remote Access infrastructure.
You plan to implement DirectAccess.
Which type of certificate should you install on each DirectAccess server? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

The options aret:

Remote Access Server:
Client Authentication
IP Security IKE intermediate
Server Authentication

Network location server:
Client Authentication
IP Security IKE intermediate
Server Authentication

Select one of the following:

Server Authentication / Server Authentication.
Client Authentication / Server Authentication.
IP Security IKE intermediate / Server Authentication.
Server Authentication / Client Authentication
Server Authentication / IP Security IKE intermediate
Client Authentication / IP Security IKE intermediate
IP Security IKE intermediate / Client Authentication
IP Security IKE intermediate / IP Security IKE intermediate
Client Authentication / Client Authentication

Explanation

Question 49 of 57

20

Question #49

You plan to deploy a Software Defined Networking (SDN) infrastructure.
Which service provides name resolution for the virtual machines on a tenant network?

Select one of the following:

a smart host
Network Controller
iDNS
iSNS

Explanation

Question 50 of 57

20

Question #50

You have a data center. The data center contains Hyper-V hosts that run Windows Server 2016.
You plan to host virtual machines for several customers. The virtual machines will run across any Hyper-V host. The network traffic of each customer will be isolated from the traffic of other customers.
You plan to use Software Defined Networking (SDN).
You need to recommend how to deploy Network Controller to support the planned deployment.
What should you include in the recommendation?

Select one of the following:

On the Hyper-V hosts, deploy the Network Controller server role to a virtual machine. Run the Set-NetworkControllerNode cmdlet on the hosts.
On the Hyper-V hosts, deploy the Network Controller server role. Add every virtual machine by running the New-NetworkControllerServer cmdlet.
On the Hyper-V hosts, deploy the Network Controller server role. Run the cmdlet on every virtual machine. Set-NetworkControllerNode
On the Hyper-V hosts, deploy the Network Controller server role to a virtual machine. Add the hosts by running the New-NetworkControllerServer cmdlet.

Explanation

Question 51 of 57

20

Question #51

You network contains an Active Directory domain. The domain contains two DNS servers named Server1 and Server2.
Server1 has a DNS zone named contoso.com that has the following configurations:
✑ Dynamic updates: Secure only
✑ Scavenge stale resource records: Enabled
✑ Scavenging period: 1 day
✑ No-refresh interval: 3 days
✑ Refresh interval: 7 days
After how many days will a dynamic record become stale if the timestamp is NOT updated?

Select one of the following:

1 day
3 days
7 days
10 days
11 days

Explanation

Question 52 of 57

20

Question #52

You have two servers named Server1 and Server2.
Server1 contains a folder named D:\Videos that contains large video files.
You configure a replication of D:\Videos to Server2 by using Distributed File System (DFS) Replication.
You need to increase the size of the staging area for the replicated folder.
Which cmdlet should you run?

Select one of the following:

Set-DfsrConnection
Set-DfsrMembership
Set-DfsrReplicatedFolder
Set-DfsrServiceConfiguration

Explanation

Question 53 of 57

20

Question #53

You have servers that run Windows Server 2016 and devices that run Windows 10 Enterprise.
You have a certification authority (CA) that issued computer certificates to all the servers and devices.
You plan to allow the Windows 10 devices to connect to the network remotely by using VPN device tunnels.
You install the Remote Access server role on a server. From the Routing and Remote Access console, you configure the server for the VPN role.
You need to ensure that the Windows 10 devices can establish the VPN tunnel before users sign in to the devices.
What should you do on the VPN server?

Select one of the following:

From Authentication Methods, select Allow machine certificate authentication for IKEv2.
Modify the ports properties and add additional SSTP ports.
From Authentication Methods, select Extensible authentication protocol (EAP).
Modify the ports properties and add additional IKEv2 ports.

Explanation

Question 54 of 57

20

Question #54

Your company has three offices. The offices are located in Seattle, Chicago, and Montreal.
You are configuring a new WAN link between the three offices by using the Remote Access server role in Windows Server 2016. You will use Border Gateway
Protocol (DGP) as a routing protocol between the sites.
You need to configure the server in the Seattle office for BGP routing.
What should you do first?

Select one of the following:

From Routing and Remote Access, add a new IPv4 routing protocol
From Windows PowerShell, run the Add-BgpPeer cmdlet and specify the ""LocalASN parameter
From Routing and Remote Access, add a new IPv6 routing protocol
D. From Windows PowerShell, run the Add-BgpRouter cmdlet and specify the ""LocalASN parameter

Explanation

Question 55 of 57

20

Question #55

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
You have 2000 devices. One hundred of the devices are mobile devices that have physical addresses beginning with 98-5F.
You have a DHCP server named Server1.
You need to ensure that the mobile devices register their host name by using a DNS suffix of mobile.contoso.com.
What should you do on Server1?

Select one of the following:

From the properties of IPv4, modify the Conflict detection attempts setting.
From the properties of Scope1, configure Name Protection.
From the Properties of IPv4, configure the bindings.
From IPv4, create a new filter.
From the properties of Scope1, create an exclusion range.
From IPv4, run the DHCP Policy Configuration Wizard.
From Control Panel, modify the properties of Ethernet.
From Scope1, create a reservation

Explanation

Question 56 of 57

20

Question #56

Your network contains an Active Directory domain. The domain contains two domain controllers named DC1 and DC2. DC1 and DC2 host an Active Directory- integrated DNS zone named contoso.com.
You have two DNS Client Subnets named Subnet1 and Subnet2.
You plan to create two DNS records for www.contoso.com. One record will point to 10.1.2.3, and the other record will point to 172.23.6.5.
You need to ensure that www.contoso.com resolves to:
✑ 10.1.2.3 from Subnet1
✑ 172.23.6.5 from Subnet2
What should you create?

Select one of the following:

One DNS recursion policy, two DNS zone delegations, and the DNS records
One DNS zone scope, two DNS query resolution policies, and the DNS records
One DNS query resolution policy, two DNS zone delegations, and the DNS records
Two DNS zone scopes, two DNS query resolution policies, and the DNS records

Explanation

Question 57 of 57

20

Question #57

You have a DNS server named DNS1 that hosts several forward lookup zones.
You discover that dynamic records exist for computers that there were removed from your network several months ago.
You need to ensure that the records are removed automatically.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Select one or more of the following:

From the Start of Authority (SOA) settings of each zone, configure the Retry interval setting and the Minimum (default) TTL setting.
For each zone, set Dynamic updates to Secure only.
From the Start of Authority (SOA) settings of each zone, configure the Refresh interval setting and the Expires after setting.
For each zone, select Scavenge stale resource records.
From the Advanced settings of the DNS server properties, select Enable automatic scavenging of state records.

	Created by gabriel ribeiro over 4 years ago

Simulado do exame em ingles para realização da certificação do windows server 2016 MCSA e MCSE.

Windows Server 2016 70-741 - Simulado IV

Question 1 of 57

Select one of the following:

Explanation

Question 2 of 57

Select one of the following:

Explanation

Question 3 of 57

Select one of the following:

Explanation

Question 4 of 57

Select one of the following:

Explanation

Question 5 of 57

Select one of the following:

Explanation

Question 6 of 57

Select one of the following:

Explanation

Question 7 of 57

Select one of the following:

Explanation

Question 8 of 57

Drag an answer into the correct orange point.

Explanation

Question 9 of 57

Question #09 You plan to deploy several Hyper-V hosts that run Windows Server 2016. The deployment will use Software defined Networking (SDN) and VXLAN. Which server role should you install on the network to support the planned deployment?

Select one of the following:

Explanation

Question 10 of 57

Select one of the following:

Explanation

Question 11 of 57

Select one of the following:

Explanation

Question 12 of 57

Select one of the following:

Explanation

Question 13 of 57

Question #13 You have an Active Directory forest that contains 30 servers and 6,000 client computers. You deploy a new DHCP server that runs Windows Server 2016. You need to retrieve the list of the authorized DHCP servers. Which command should you run?

Select one of the following:

Explanation

Question 14 of 57

Select one of the following:

Explanation

Question 15 of 57

Select one of the following:

Explanation

Question 16 of 57

Question #16 You have a server named Server1 that runs Windows Server 2016. Server1 will be used as a VPN server. You need to configure Server1 to support VPN Reconnect. Which VPN protocol should you use?

Select one of the following:

Explanation

Question 17 of 57

Select one of the following:

Explanation

Question 18 of 57

Select one of the following:

Explanation

Question 19 of 57

Select one of the following:

Explanation

Question 20 of 57

Select one of the following:

Explanation

Question 21 of 57

Select one of the following:

Explanation

Question 22 of 57

Select one of the following:

Explanation

Question 23 of 57

Select one of the following:

Explanation

Question 24 of 57

Select one of the following:

Explanation

Question 25 of 57

Select one of the following:

Explanation

Question #09

You plan to deploy several Hyper-V hosts that run Windows Server 2016. The deployment will use Software defined Networking (SDN) and VXLAN.
Which server role should you install on the network to support the planned deployment?

Question #13

You have an Active Directory forest that contains 30 servers and 6,000 client computers.
You deploy a new DHCP server that runs Windows Server 2016.
You need to retrieve the list of the authorized DHCP servers.
Which command should you run?

Question #16

You have a server named Server1 that runs Windows Server 2016. Server1 will be used as a VPN server. You need to configure Server1 to support VPN
Reconnect.
Which VPN protocol should you use?

Question #29

You have a virtual machine named Server1 that runs Windows Server 2016.
You plan to use Server1 as part of a Software Defined Networking (SDN) solution.
You need to implement the Border Gateway Protocol (BGP) on Server1.
What should you install?

Question #35

You have a server named Server1 that runs Windows Server 2016.
Server1 is in a workgroup and has the DNS Server role installed.
You need to enable DNS analytical diagnostic logging on Server1.
What should you do?