Windows Server 2016 70-741 - Simulado III

Question #01 HOTSPOT - You have a DirectAccess server that is accessible by using the name directaccess.fabrikam.com. On the DirectAccess server, you install a new server certificate that has a subject name of directaccess.contoso.com, and then you configure DNS records for directaccess.contoso.com. You need to change the endpoint name for DirectAccess to directaccess.contoso.com. What command should you run? To answer, select the appropriate options in the answer area. Hot Area:

Question #02 You have a server named Server1 that runs Windows Server 2016. Server1 has two network cards. One network card connects to your internal network and the other network card connects to the Internet. You plan to use Server1 to provide Internet connectivity for client computers on the internal network. You need to configure Server1 as a network address translation (NAT) server. Which server role or role service should you install on Server1 first?

Question #03 DRAG DROP - You are deploying DirectAccess to a server named DA1. DA1 will be located behind a firewall and will have a single network adapter. The intermediary network will be IPv4. You need to configure the firewall to support DirectAccess. Which firewall rules should you create for each type of traffic? To answer, drag the appropriate ports and protocols to the correct traffic types. Each port and protocol may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Select and Place:

Question #04 HOTSPOT - Your network contains an Active Directory forest named contoso.com. The forest contains a Network Policy Server (NPS) server named Radius1 that runs Windows Server 2016. You need to create a new connection request policy that will allow only Secure Socket Tunneling Protocol (SSTP) connections. Radius1 will manage all authentication requests. Which NAS port type and which authentication method should you configure in the connection request policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question #05 Your network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server1 that runs Windows Server 2016. You have a DHCP scope for the 10.0.0.0/24 IP subnet. One hundred and fifty clients reside in the subnet. Fifty of the DHCP clients are NOT domain-joined. You need to ensure that DHCP clients without a configured DNS suffix register automatically in a DNS zone named workgroup.contoso.com. The other DHCP clients must register in the DNS zone of their respective domain. What should you do?

Question #06 You have two DNS servers named Server1 and Server2. All client computers run Windows 10 and are configured to use Server1 for DNS name resolution. Server2 hosts a primary zone named contoso.com. Your network recently experienced several DNS spoofing attacks on the contoso.com zone. You need to prevent further attacks from succeeding. What should you do on Server2?

Question #07 You have a Microsoft Azure subscription and an on-premises network. To the on-premises network, you deploy a new server named Server1 that runs Windows Server 2016. In Azure, you configure a virtual gateway on an Azure virtual network. You need to ensure that the computers on the on-premises network can access virtual machines on the Azure virtual network. What should you do on Server1?

Question #08 Your network contains an Active Directory domain. The domain contains a certification authority (CA) and a Network Policy Server (NPS) server. You plan to deploy Remote Access Always On VPN. Which authentication method should you use?

Question #09 You have a DNS server named Server1 that runs Windows Server 2016. Server1 has an Active Directory-integrated zone named adatum.com. All client computers run Windows 10. You recently encountered unexpected responses to DNS client queries in the adatum.com zone. You need to log all the records written to the zone. Which cmdlet should you run?

Question #10 You have a DHCP server named Server1 that runs Windows Server 2016. You plan to implement IPv6 on your network. You need to configure Server1 for stateless DHCPv6. What should you do from the DHCP console?

Question #11 HOTSPOT - Your company has a branch office that has three floors. The office currently uses a different subnet on each floor. The subnets are configured as shown in the following table. You have been asked to use reconfigure the network to use one subnet that encompasses all three floors. The new subnet will come from the 192.168.0.0/16 address space. You need to identify which IP address and which subnet mask to use for the default gateway. The solution must meet the following requirements: ✑ Use the first available subnet ✑ Use a single subnet for all three floors ✑ Use the first available IP address on the segment for the default gateway ✑ Minimize the number of unused IP addresses Which IP address and which subnet mask should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question #12 Your company has three offices. The offices are located in Seattle, Chicago, and Montreal. You are configuring a new WAN link between the three offices by using the Remote Access server role in Windows Server 2016. You will use Border Gateway Protocol (DGP) as a routing protocol between the sites. You need to configure the server in the Seattle office for BGP routing. What should you do first?

Question #113Topic 1 HOTSPOT - You have a DHCP server named Server1 that runs Windows Server 2016. You run Get-DhcpServerv4Scope, and you receive the following results. You run Get-DhcpServerv4FilterList, and you receive the following results. You run Get-DhcpServerv4Filter, and you receive the following results. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each selection is worth one point. Hot Area:

Question #14 You have two servers named Server1 and Server2 that run Windows Server 2016. Both servers have the DHCP Server server role installed. Server1 has a DHCP scope named Scope1. Server2 has a DHCP scope named Scope2. You need to ensure that client computers can get an IP address if a single DHCP server fails. You must be able to control the percentage of requests to which each DHCP server responds during normal network operations. What should you do?

Question #15 You are implementing a new network. The network contains a DHCP server named DHCP1 that runs Windows Server 2016. DHCP1 contains a scope named Scope1 for the 192.168.0/24 subnet. Your company has the following policy for allocating IP addresses: ✑ All server addresses must be excluded from DHCP scopes ✑ All client computers must receive IP addresses from Scope1 ✑ All Windows servers must have IP addresses in the range of 192.168.0.200 to 192.168.0.240 ✑ All other network devices must have IP addresses in the range of 192.168.0.180 to 192.168.0.199 You deploy a print device named Print1. You need to ensure that Print1 adheres to the policy for allocating IP addresses. Which command should you use?

Question #16 Your network contains an Active Directory domain named contoso.com that contains a domain controller named DC1. All DNS servers for the network run BIND 10. Your perimeter network contains a DHCP server named DHCP1 that runs Windows Server 2016. DHCP1 is a member of a workgroup named WORKGROUP. DHCP1 provides IP address leases to guests accessing the Wi-Fi network. Several engineers access the network remotely by using a VPN connection to a remote access server that runs Windows Server 2016. All of the VPN connections use certificate-based authentication and are subject to access policies in Network Policy Server (NPS). Certificates are issued by an enterprise certification authority (CA) named CA1. All Windows computers on the network are activated by using Key Management Service (KMS). On-premises users use Remote Desktop Services (RDS). You plan to deploy IP Address Management (IPAM) to the network. Which action can you perform on the network by using IPAM?

Question #17 HOTSPOT - Your company has a testing environment that contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. Server1 has IP Address Management (IPAM) installed. IPAM has the following configuration. The IPAM Overview page from Server Manager is shown in the IPAM Overview exhibit. (Click the Exhibit button.) The group policy configurations are shown in the GPO exhibit. (Click the Exhibit button.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. Hot Area:

Question #18 HOTSPOT - Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2016. Server1 has IP Address Management (IPAM) installed. IPAM users a Windows Internal Database. You install Microsoft SQL Server on Server1. You plan to move the IPAM database to SQL Server. You need to create a SQL server login for the IPAM service account. For which user should you create the login? To answer, select the appropriate options in the answer area. Hot Area:

Question #19 You have a server named Server1 that runs Windows Server 2016. Server1 is an IP Address Management (IPAM) server that collects DHCP and DNS logs and events for your entire network. You need to get the IP addresses that were assigned to a client computer named Computer1 during the last week. What should you do on Server1?

Question #20 HOTSPOT - Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. Server1 is configured to use a forwarder named Server2 that has an IP address of 10.0.0.10. Server2 can resolve names hosted on the Internet successfully. Server2 hosts a primary DNS zone named adatum.com. On Server1, you have the following zone configuration. The "." zone contains the following records. For each of the following statements, select Yes if the statement is true. Otherwise, select No. Hot Area:

Question #21 You have multiple servers that run Windows Server 2016 and are configured as VPN servers. You deploy a server named NPS1 that has Network Policy Server (NPS) installed. You need to configure NPS1 to accept authentication requests from the VPN servers. What should you configure on NPS1?

Question #22 You are deploying a small network that has 30 client computers. The network uses the 192.168.1.0/24 address space. All computers obtain IP configurations from a DHCP server named Server1. You install a server named Server2 that runs Windows Server 2016. Server2 has two network adapters named Internal and Internet. Internet connects to an Internet Service Provider (ISP) and obtains the 131.107.0.10 IP address. Internal connects to the internal network and is configured to use the 192.168.1.250 IP address. You need to provide Internet connectivity for the client computers. What should you do?

Question #23 You have a DHCP server named Server1 that runs Windows Server 2016. You have a single IP subnet. Server1 has an IPv4 scope named Scope1. Scope1 has an IP address range of 10.0.1.10 to 10.0.1.200 and a length of 24 bits. You need to create a second logical IP network on the subnet. The subnet will use an IP address range of 10.0.2.10 to 10.0.2.200 and a length of 24 bits. What should you do?

Question #24 HOTSPOT - Your network contains an Active Directory domain named contoso.com. The domain contains a domain-based Distributed File System (DFS) namespace named Namespace1. You need to view the shares to which users will be redirected when the users attempt to connect to a folder named Folder1 in the DFS namespace. What cmdlet should you run? To answer, select the appropriate options in the answer area. Hot Area:

Question #25 You have a virtual machine named VM1 that runs Windows Server 2016. VM1 hosts a service that requires high network throughput. VM1 has a virtual network adapter that connects to a Hyper-V switch named vSwitch1. vSwitch1 has one network adapter. The network adapter supports Remote Direct Memory Access (RDMA), the single root I/O virtualization (SR-IOV) interface, Quality of Service (QoS), and Receive Side Scaling (RSS). You need to ensure that the traffic from VM1 can be processed by multiple networking processors. Which Windows PowerShell command should you run on the host of VM1?

Question #26Topic 1 Your network contains an Active directory forest named contoso.com. The forest has a Distributed File System (DFS) namespace named \\contoso.com \namespace1. The domain contains a file server named Server1 that runs Windows Server 2016. You create a folder named Folder1 on Server1. Which two cmdlets should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Question #27 Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question. Your network contains Windows and non-Windows devices. You have a DHCP server named Server1 that has an IPv4 scope named Scope1. You need to prevent a client computer that uses the same name as an existing registration from updating the registration. What should you do?

Question #28 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named contoso.com. You need to create a Nano Server image named Nano1 that will be used as a virtualization host. The windows server 2016 source files are located in drive D. Solution: You run the following cmdlet. New-NanoServerImage Edition Datacenter DeploymentType Host Package Microsoft-NanoServerSCVMM-Package MediaPath D:\ -TargetPath C: \nano1\Nano1.wim ComputerName Nano1 Domainname Contoso.com Does this meet the goal?

Question #29 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named contoso.com. You need to create a Nano Server image named Nano1 that will be used as a virtualization host. The windows server 2016 source files are located in drive D. Solution: You run the following cmdlet. New-NanoServerImage -Edition Datacenter -DeploymentType Host -Package Microsoft-NanoServerCompute-Package -MediaPath D:\ -TargetPath C:\Nano1\Nano1.wim -ComputerName Nano1 -DomainName Contoso.com Does this meet the goal?

Question #30 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named contoso.com. You need to create a Nano Server image named Nano1 that will be used as a virtualization host. The windows server 2016 source files are located in drive D. Solution: You run the following cmdlet. New-NanoServerImage -Edition Datacenter -DeploymentType Host -Compute -Media D:\ -TargetPath c:\Nano1\Nano1.wim -ComputerName Nano1 -DomainName Contoso.com Does this meet the goal?

Question #31 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Hyper-V host named Server1 that hosts a virtual machine named VM1. Server1 and VM1 run Windows Server 2016. The settings for VM1 are configured as shown in the exhibit below. You need to ensure that you can use the Copy-VMFile cmdlet on Server1 to copy files from VM1. Solution: You need to enable the Data Exchange integration service for VM1. Does this meet the goal?

Question #33 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Hyper-V host named Server1 that hosts a virtual machine named VM1. Server1 and VM1 run Windows Server 2016. The settings for VM1 are configured as shown in the exhibit below. You need to ensure that you can use the Copy-VMFile cmdlet on Server1 to copy files from VM1. Solution: You start the Hyper-V Guest Service Interface service on VM1. Does this meet the goal?

Question #33 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Hyper-V host named Server1 that hosts a virtual machine named VM1. Server1 and VM1 run Windows Server 2016. The settings for VM1 are configured as shown in the exhibit below. You need to ensure that you can use the Copy-VMFile cmdlet on Server1 to copy files from VM1. Solution: You start the Hyper-V Guest Service Interface service on VM1. Does this meet the goal?

Question #34 You have two Hyper-V hosts named Server1 and Server2 that run windows server 2012 R2. The servers are nodes in a failover cluster named Cluster1. You perform a rolling upgrade of the cluster nodes to Windows Server 2016. You need to ensure that you can implement the Virtual Machine Load Balancing feature. Which cmdlet should you use?

Question #35 You have a Scale-Out File Server that has a share named Share1. Share1 contains a virtual disk file named Disk1.vhd. You plan to create a guest failover cluster. You need to ensure that you can use the virtual disk as a shared virtual disk for the guest failover cluster. Which cmdlet should you use?

Question #136Topic 1 Your network contains an Active Directory domain named contoso.com. The domain contains a Hyper-V host named Server1 that runs Windows Server 2016. Server1 hosts four machines that are members of the domain. The virtual machines are configured as shown in the following table. Which virtual machines can you manage by using PowerShell Direct?

Question #37 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. Refer to exhibit: Server1 has two virtual machines named VM1 and VM2 that run Windows Server 2016. VM1 connects to Private1. VM2 has two network adapters. You need to ensure that VM1 connects to the corporate network by using NAT. Solution: You connect VM1 to Inernal1. You run the New-NetNatIpAddress and the New-NetNat cmdlets on Server1. You configure VM1 to use VM2 as the default gateway. Does this meet the goal?

Question #38 A company named Contoso, Ltd has five Hyper-V hosts that are configured as shown in the following table. What are two valid live migration scenarios for virtual machines in your environment? (Choose two.)

Question #39 DRAG DROP - Your network contains an Active Directory domain named contoso.com. The functional level of the forest and the domain is Windows Server 2008 R2. All servers in the domain run Windows Server 2016 Standard. The domain contains 300 client computers that run either Windows 8.1 or Windows 10. The domain contains nine servers that are configured as shown in the following table. The virtual machines are configured as follows: ✑ Each virtual machine has one virtual network adapter. ✑ VM1 and VM2 are part of a Network Load Balancing (NLB) cluster. ✑ All of the servers on the network can communicate with all of the virtual machines. You need to install the correct edition of Windows Server 2016 to support the planned changes for Server2, Server3, Server4, and Server6. Which edition or editions should you choose for each server? To answer, drag the appropriate editions to the correct servers. Each edition may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Select and Place:

Question #40 HOTSPOT - You have an Active Directory domain named Contoso.com. The domain contains Hyper-V hosts named Server1 and Server2 that run Windows Server 2016. The Hyper-V hosts are configured to use NVGRE for network virtualization. You have six virtual machines that are connected to an external switch. The virtual machines are configured as shown in the following table. To which virtual machine or virtual machines can VM1 and VM3 connect? To answer, select the appropriate options in the answer area. Hot Area:

Question #41 You need to implement network virtualization. On which object should you configure the virtual subnet ID?

Question #42 HOTSPOT - You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is a Remote Desktop Services (RDS) server. You need to ensure that only TCP port 3389 can be used to connect to VM1 over the network. Which command should you run on the Hyper-V host? To answer, select the appropriate options in the answer area. Hot Area:

Question #43 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest named contoso.com. The forest has three sites located in London, Paris, and Berlin. The London site contains a web server named Web1 that runs Windows Server 2016. You need to configure Web1 as an HTTP content server for the hosted cache servers located in the Paris and Berlin sites. Solution: You install the DFS Replication role service, and then you start the Network Connections service. Does this meet the goal?

Question #44 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that runs Windows Server 2016. Server1 is configured as a VPN server. Server1 is configured to allow domain users to establish VPN connections from 06:00 to 18:00 everyday of the week. You need to ensure that domain users can establish VPN connections only between Monday and Friday. Solution: From Active Directory Users and Computers, you modify the Dial-in Properties of the user accounts. Does this meet the goal?

Question #45 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that runs Windows Server 2016. Server1 is configured as a VPN server. Server1 is configured to allow domain users to establish VPN connections from 06:00 to 18:00 everyday of the week. You need to ensure that domain users can establish VPN connections only between Monday and Friday. Solution: From Server Manager, you modify the Access Policies on Server1. Does this meet the goal?

Question #46 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a server named Server1 that runs Windows Server 2016. Server1 is configured as a VPN server. Server1 is configured to allow domain users to establish VPN connections from 06:00 to 18:00 everyday of the week. You need to ensure that domain users can establish VPN connections only between Monday and Friday. Solution: From Routing and Remote Access, you configure the Properties of Server1. Does this meet the goal?

Question #47 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10. On Server1, you have the following zone configuration. You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace. Solution: From a Group Policy object (GPO) in the domain, you modify the Network List Manager Policies. Does this meet the goal?

Question #48 You have 2000 devices. One hundred of the devices are mobile devices that have physical addresses beginning with 98-5F. You have a DHCP server named Server1. You need to ensure that the mobile devices register their host name by using a DNS suffix of mobile.contoso.com.

Question #49 HOTSPOT - Your network is configured as shown in the network diagram. Hot Area:

Question #50 HOTSPOT - You have a RADIUS server named RADIUS1. RADIUS1 is configured to use an IP address of 172.23.100.101. You add a wireless access point (wap) named WAP-Secure to your network. You configure WAP-Secure to use an IP address of 10.0.100.101. You need to ensure that WAP-Secure can authenticate to RADIUS1 by using a shared secret key. What command should you run? To answer, select the appropriate options in answer area. Hot Area: