Windows Server 2016 70-741 - Simulado II

Question #01 You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1 must resolve queries from all other DNS clients. Solution: From the Security setting of each zone on Server1, you modify the permissions. Does this meet the goal?

Question #02 HOTSPOT - You have a DNS server named Server1 that runs Windows Server 2016. Server1 has network interfaces that have the following IP addresses: ✑ 10.0.0.100 ✑ 131.107.0.100 The internal network uses an IP address space of 10.0.0.0/16. Server1 provides DNS name resolution to both internal and external clients. Server1 hosts the primary zone for contoso.com. You need to configure Server1 to meet the following requirements: ✑ Internal clients must be able to use Server1 to resolve Internet-based DNS names. ✑ External clients must not be able to use Server1 to resolve Internet-based DNS names. ✑ External clients must be able to use Server1 to resolve names in the contoso.com zone. Which commands should you run on Server1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question #03 You have an IP Address Management (IPAM) server named IPAM1 that runs Windows Server 2016. IPAM1 manages 10 DHCP servers. You need provide a user with the ability to track which clients receive which IP addresses from DHCP. The solution must minimize administrative privileges.

Question #04 You have an IP Address Management (IPAM) deployment that is used to manage all of the DNS servers on your network. IPAM is configured to use Group Policy provisioning. You discover that a user adds a new mail exchanger (MX) record to one of the DNS zones. You want to identify which user added the record. You open Event Catalog on an IPAM server, and you discover that the most recent event occurred yesterday. You need to ensure that the operational events in the event catalog are never older than one hour. What should you do?

Question #05 You have a remote access server named Server1 that runs Windows Server 2016. Server1 has DirectAccess enabled. You have a proxy server named Server2. All computers on the internet connect to the Internet by using the proxy. On Server1, you run the command Set-DAClient -Force Tunnel Enabled. You need to ensure that when a Direct Access client connects to the network, the client accesses all the Internet resources through the proxy. What should you run on Server1?

Question #06 HOTSPOT - On a DNS server that runs Windows Server 2016, you plan to create two new primary zones named adatum.com and contoso.com. You have the following requirements for the zones: ✑ Ensure that computers on your network can register records automatically in the adatum.com zone. ✑ Ensure that records that are stale for two weeks are purged automatically from the contoso.com zone. What should you configure for each zone? To answer, select the appropriate options in the answer area. Hot Area:

Question #07 HOTSPOT - Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. Server1 is configured to use a forwarder named server2.contoso.com that has an IP address of 10.0.0.10. You need to prevent Server1 from using root hints if the forwarder is unavailable. What command should you run? To answer, select the appropriate options in the answer area. Hot Area:

Question #08 HOTSPOT - You have two servers named Server1 and Server2 that run Windows Server 2016. Server1 has the DNS Server role installed. The advanced DNS properties for Server1 are shown in the Advanced DNS exhibit. (Click the Exhibit button.) Server 2 is configured to use Server1 as a DNS server. Server2 has the following IP configuration.

Question #09 HOTSPOT - Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. You enable Response Rate Limiting on Server1. You need to prevent Response Rate Limiting from applying to hosts that reside on the network of 10.0.0.0/24. Which cmdlets should you run? To answer, select the appropriate options in the answer area. Hot Area:

Question #10 You have a server named Server1 that runs Windows Server 2016. Server1 has the DHCP Server and the Windows Deployment Service server roles installed. Server1 is located on the same subnet as client computers. You need to ensure that clients can perform a PXE boot from Server1. Which two IPv4 options should you configure in DHCP? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Question #11 HOTSPOT - Your network contains an Active Directory forest named adatum.com. The forest contains a server named Server1. Server1 has the DFS Namespaces role service installed and is configured as shown in the following exhibit. \\Server1.adatum.com\namespace1 has a folder target named Folder1. A user named User1 has Full Control share and NTFS permissions to Folder1. Folder1 contains a file named File1.doc. User1 has only Write NTFS permissions to File1.doc. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area:

Question #12 You plan to implement a VPN. FabRA1 will use the RADIUS proxy for authentication. You need to ensure that VPN clients can be authenticated and can access internal resources. The solution must ensure that FabRS1 is used as a RADIUS server and FabRP1 is used as a RADIUS proxy. Which two actions should you perform? Each correct answer presents part of the solution.

Question #13 HOTSPOT - You have a Hyper-V host named Server1 that runs Windows Server 2016. Server1 has two network adaptors named NIC1 and NIC2. Server1 has two virtual switches named vSwitch1 and vSwitch2. NIC1 connects to vSwitch1. NIC2 connects to vSwitch2. Server1 hosts a virtual machine named VM1. VM1 has two network adapters named vmNIC1 and vmNIC2. VmNIC1 connects to vSwitch1. VmNIC2 connects to vSwitch2. You need to create a NIC team on VM1. What should you run on VM1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question #14 You have a test environment that includes two servers named Server1 and Server2. The servers run Windows Server 2016. You need to ensure that you can implement SMB Direct between the servers. Which feature should the servers support?

Question #15 You have a Hyper-V server named Server1 that runs Windows Server 2016. Server1 has an IP address of 192.168.1.78. Server1 has a container named Container1 that hosts a web application on port 84. Container1 has an IP address of 172.16.5.6. Container1 has a port mapping from port 80 on Server1 to port 84 on Container1. You have a server named Server2 that has an IP address of 192.168.1.79. You need to connect to the web application from Server2. To which IP address and port should you connect?

Question #16 You have a DHCP server named Server1. Server1 has an IPv4 scope that serves 75 client computers that run Windows 10. When you review the address leases in the DHCP console, you discover several leases for devices that you do not recognize. You need to ensure that only the 75 Windows 10 computers can obtain a lease from the scope. What should you do?

Question #17 You have a DHCP server named Server1. Server1 has an IPv4 scope that contains 100 addresses for a subnet named Subnet1. Subnet1 provides guest access to the Internet. There are never more than 20 client computers on Subnet1 simultaneously; however, the computers that connect to Subnet1 are rarely the same computers. You discover that some client computers are unable to access the network. The computers that have the issue have IP addresses in the range of 169.254.0.0/16. You need to ensure that all of the computers can connect successfully to the network to access the Internet. What should you do?

Question #18 You have an Active Directory forest that contains 30 servers and 6,000 client computers. You deploy a new DHCP server that runs Windows Server 2016. You need to retrieve the list of the authorized DHCP servers. Which command should you run?

Question #19 HOTSPOT - You are configuring internal virtual networks to support multitenancy communication between tenant virtual machine networks and remote sites. You have a tenant named Tenant1. You need to enable Border Gateway Protocol (BGP) for Tenant1. Which commands should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question #20 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. Refer to exhibit: Server1 has two virtual machines named VM1 and VM that run Windows Server 2016. VM1 connects to Private1. VM2 has two network adapters. You need to ensure that VM1 connects to the corporate network by using NAT. Solution: You connect VM2 to Private1 and External1. You run the New-NetNatIpAddress and the New-NetNat cmdlets on VM2. You configure VM1 to use VM2 as the default gateway. Does this meet the goal?

Question #21 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. Refer to exhibit: Server1 has two virtual machines named VM1 and VM that run Windows Server 2016. VM1 connects to Private1. VM2 has two network adapters. You need to ensure that VM1 connects to the corporate network by using NAT. Solution: You connect VM1 to Inernal1. You run the New-NetNatIpAddress and the New-NetNat cmdlets on Server1. You configure VM1 to use Server1 as the default gateway. Does this meet the goal?

uestion #12 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. Refer to exhibit: Server1 has two virtual machines named VM1 and VM that run Windows Server 2016. VM1 connects to Private1. VM2 has two network adapters. You need to ensure that VM1 connects to the corporate network by using NAT. Solution: You connect VM2 to Private1 and External1. You install the Remote Access server on VM2, and you configure NAT in the Routing and Remote Access console. You configure VM1 and VM2 as the default gateway. Does this meet the goal?

Question #23 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named adatum.com. The domain contains two DHCP servers named Server1 and Server2. Server1 has the following IP configuration. Some users report that sometimes they cannot access the network because of conflicting IP addresses. You need to configure DHCP to avoid leasing addresses that are in use already. Solution: On Server1, you modify the ActivatePolicies setting of the scope. Does this meet the goal?

Question #24 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named adatum.com. The domain contains two DHCP servers named Server1 and Server2. Server1 has the following IP configuration. Some users report that sometimes they cannot access the network because of conflicting IP addresses. You need to configure DHCP to avoid leasing addresses that are in use already. Solution: On Server1, you modify the EndRange IP address of the scope. Does this meet the goal?

Question #25 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named adatum.com. The domain contains two DHCP servers named Server1 and Server2. Server1 has the following IP configuration. Some users report that sometimes they cannot access the network because of conflicting IP addresses. You need to configure DHCP to avoid leasing addresses that are in use already. Solution: On Server2, you modify the ConflictDetectionAttempts value for IPv4. Does this meet the goal?

Question #26 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest named contoso.com. The forest has three sites located in London, Paris, and Berlin. The London site contains a web server named Web1 that runs Windows Server 2016. You need to configure Web1 as an HTTP content server for the hosted cache servers located in the Paris and Berlin sites. Solution: You install the Static Content role service, and then you restart the IIS Admin Service. Does this meet the goal?

Question #24 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest named contoso.com. The forest has three sites located in London, Paris, and Berlin. The London site contains a web server named Web1 that runs Windows Server 2016. You need to configure Web1 as an HTTP content server for the hosted cache servers located in the Paris and Berlin sites. Solution: You install the BranchCache feature, and then you start the BranchCache service. Does this meet the goal?

Question #28 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest named contoso.com. The forest has three sites located in London, Paris, and Berlin. The London site contains a web server named Web1 that runs Windows Server 2016. You need to configure Web1 as an HTTP content server for the hosted cache servers located in the Paris and Berlin sites. Solution: You install the Deployment Server role service, and then you restart the World Wide Web Publishing Service. Does this meet the goal?

Question #29 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2016 and has the DNS Server server role installed. Automatic scavenging of stale records is enabled and the scavenging period is set to 10 days. All client computers dynamically register their names in the contoso.com DNS zone on Server1. You discover that the names of multiple client computers that were removed from the network several weeks ago can still be resolved. You need to configure Server1 to automatically remove the records of the client computers that have been offline for more than 10 days. Solution: You set the Expires after value of the zone. Does this meet the goal?

Question #30 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that has the Network Policy and Access Services server role installed. You create a Shared Secret Network Policy Server (NPS) template named Template1. You need to view the shared secret string used for Template1. Solution: From Windows PowerShell, you run Get-NpsSharedSecretTemplate -Name Template1. Does this meet the goal?

Question #31 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that has the Network Policy and Access Services server role installed. You create a Shared Secret Network Policy Server (NPS) template named Template1. You need to view the shared secret string used for Template1. Solution: From the Network Policy Server console, you export the configuration, and you view the exported XML file. Does this meet the goal?

Question #32 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that has the Network Policy and Access Services server role installed. You create a Shared Secret Network Policy Server (NPS) template named Template1. You need to view the shared secret string used for Template1. Solution: From the Network Policy Server console, you view the properties of Template1. Does this meet the goal?

Question #33 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server2 than runs Windows Server 2016. Users report that their client computers fail to obtain an IP address. You open the DHCP console as shown in the Exhibit. (Click the Exhibit button.) Scope1 has an address range of 172.16.0.10 to 172.16.0.100 and a prefix length of 23 bits. You need to ensure that all of the client computers on the network can obtain an IP address from Server2. Solution: You run the Set-DhcpServerv4MulticastScope cmdlet. Does this meet the goal?

Question #34 You manage a Windows Server 2016 software-defined network. Network Controller is installed on a three-node domain-joined cluster of virtual machines. You need to add a new access control list (ACL) for the network controller to the network interface on a tenant virtual machine. The ACL will have only one rule that prevents only outbound traffic from the 10.10.10.0/24 subnet. You plan to run the following Windows PowerShell commands. $ruleproperties = new-object Microsoft.Windows.NetworkController.AclRuleProperties $ruleproperties.SourcePortRange = "0-65535" $ruleproperties.DestinationPortRange = "0-65535" $ruleproperties.Action = "Deny" $ruleproperties.Priority = "100" $ruleproperties.Type = "Outbound" $ruleproperties.Logging = "Enabled" Which three remaining properties should you add to the rule? Each correct answer presents part of the solution. (Choose three.) NOTE: Each correct selection is worth one point.

Question #35 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. Refer to exhibit: Server1 has two virtual machines named VM1 and VM that run Windows Server 2016. VM1 connects to Private1. VM2 has two network adapters. You need to ensure that VM1 connects to the corporate network by using NAT. Solution: You connect VM2 to Private1 and External1. You install the Remote Access server on VM2, and you configure NAT in the Routing and Remote Access console. You configure VM1 to use VM2 as the default gateway. Does this meet the goal?

Question #36 DRAG DROP - Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series. Your network contains an Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2012. The network uses an address space of 192.168.0.0/16 and contains multiple subnets. The network is not connected to the Internet. The domain contains three servers configured as shown in the following table. Client computers obtain TCP/IP setting from Server3. You add a second network adapter to Server2. You connect the new network adapter to the Internet. You install the Routing role service on Server2. Server1 has four DNS zones configured as shown in the following table. You need to ensure that computers in the domain can resolve the following: ✑ The name server2.contoso.com to the name nat.contoso.com ✑ The 192.168.10.50 IP address to the name host7.fabrikam.com ✑ The name server7.tailspintoys.com to the 192.168.100.101 IP address Which types of DNS records should you use? To answer, drag the appropriate DNS record types to the correct requirements. Each DNS record type may be used once, more than one, or not at all. You may need to drag the split bar between panes or scroll to view content. Select and Place:

Question #37 Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question. You have multiple servers that run Windows Server 2016. You have a server named Server1 that is configured as a domain controller and a DNS server. You need to create an Active Directory-integrated zone on Server1. What should you run?

Question #38 Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question. Your network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server2 that runs Windows Server 2016. Server2 has 10 IPv4 scopes. You need to ensure that the scopes are backed up every 30 minutes to the folder D:\DHCPBackup. What should you run?

Question #39 Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question. You have multiple servers that run Windows Server 2016. The DNS Server server role is installed on a server named Server1. You need to configure Server1 to use a DNS forwarder that has an IP address of 192.168.10.15. What should you run?

Question #40 Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question. You have a server named Server1 that runs Windows Server 2016. You install the DHCP Server server role on Server1. You need to authorize DHCP on Server1. What should you run?

Question #41 Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question. You have multiple servers that run Windows Server 2016. You need to install the DNS Server server role on one of the servers. What should you run?

Question #42 HOTSPOT - You have a Hyper-V host named Server1 that runs Windows Server 2016. Server1 has a virtual switch named Switch1. Server1 hosts the virtual machines configured as shown in the following table. Windows Firewall on VM1 and VM2 is configured to allow ICMP traffic. VM1 and VM2 connect to Switch1. You fail to ping VM1 from VM2. You need to view the VirtualSubnetId to which VM1 connects. Which cmdlet should you run on Server1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question #43 You have a server named Server1 that runs Windows Server 2016. You need to configure Server1 as a multitenant RAS Gateway. What should you install on Server1?

Question #44 DRAG DROP - You have a server named Server1 that runs Windows Server 2016. You need to deploy the first node cluster of a Network Controller cluster. Which four cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to answer area and arrange them in the correct order. Select and Place:

Question #45 You have a server named Server1 that runs Windows Server 2016. You install the Hyper-V server role on Server1. Server1 has eight network adapters that are dedicated to virtual machines. The network adapters are Remote Direct Memory Access (RDMA)-enabled. You plan to use Software Defined Networking (SDN). You will host the virtual machines for multiple tenants on the Hyper-V host. You need to ensure that the network connections for the virtual machines are resilient if one or more physical network adapters fail. What should you implement?

Question #46 You have a Hyper-V host named Server1 that runs Windows Server 2016. Server1 has two network adapters that are Remote Direct Memory Access (RDMA)- enabled. You need to verify whether Switch Embedded Teaming (SET) is enabled. Which cmdlet should you use?

Question #47 HOTSPOT - You are implementing IPv6 addressing for your company by using the following specifications: ✑ The global address space is 2001:db8:1234. ✑ The company has 100 locations worldwide. ✑ Each location has up to 300 subnets. ✑ 64 bits will be used for hosts. You need to identify how many bits to use for the locations and the subnets. How many bits should you identify? To answer, drag the appropriate amounts to the correct targets. Each amount may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Hot Area:

Question #48 HOTSPOT - You run Get-NetIPAddress and receive the output shown in the following exhibit: Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area:

Question #49 HOTSPOT - You have an IP Filters Network Policy Server (NPS) template that is used by an NPS policy. The IP filters are configured as shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: each correct selection is worth one point. Hot Area:

Question #50 You have three servers named Server1, Server2, and Server3 that run Windows Server 2016. On all three servers, Windows Firewall is configured to allow ICMP traffic. Server2 has two network adapters named NIC1 and NIC2. Your network is configured as shown in the exhibit. (Click the Exhibit button.) The parameters for NIC2 on Server1 are shown in the following output. Which ping request will result in a reply from the destination host?