High Quality Exam Training Materials – Pass4itsure

How to pass Microsoft Exam in 15 days?The exam is indeed challenging, and the only way to pass the exam is to study hard! You will find free Microsoft dumps here.https://www.pass4itsure.com/microsoft.html make sure you give the exam your best shot!The purpose of this article is to link to all resources used for the exam.

70-740 Microsoft Exam Info and Free Practice Test

Installation, Storage, and Compute with Windows Server 2016

The official 70-740 exam page https://www.microsoft.com/en-us/learning/exam-70-740.aspx

Microsoft MCSA 70-740 Test Questions – 70-740 Exam PDF Dumps

[drive] 70-740 Exam PDF Dumps Free

Try, latest real Microsoft 70-480 dumps, 70-483 dumps, 70-486 dumps, 70-487 dumps free

QUESTION 1
You need to ensure that VM1 and VM2 can communicate with each other only. The solution must prevent VM1 and
VM2 from communicating with Server1. Which cmdlet should you use?
A. Set-NetNeighbor
B. Remove-VMSwitchTeamMember
C. Set-VMSwitch
D. Enable-VMSwitchExtension
Correct Answer: C

QUESTION 2
You have a Network Load Balancing (NLB) cluster that contains two nodes named Server1 and Server2. The nodes run
Windows Server 2016.
The NLB cluster has the following configuration.

You deploy the Web Server (IIS) server role identically to both servers.
You need to configure NLB to load balance requests between the web servers. HTTP requests must be stateless.
HTTPS requests must be stateful.
What should you do? Each correct answer presents part of the solution.
A. Modify the Cluster operation mode.
B. Suspend the cluster.
C. Drainstop the cluster.
D. Add a new port rule.
E. Edit the existing port rule.
Correct Answer: CD
References:
https://www.ntweekly.com/2017/09/04/failover-nlb-cluster-host-member/
https://docs.microsoft.com/en-us/windows-server/networking/technologies/network-load-balancing

QUESTION 3
You have a server named Server1 that runs Windows Server 2016 You install the Docker daemon on Server1 You need
to configure the Docker daemon to accept connections only on TCP port 64500. What should you do?
A. Run theNew-NetFirewallRulecmdlet
B. Run theSet-ServiceWindows PowerShell cmdlet.
C. Run the sc config command.
D. Run the sc control command.
Correct Answer: C
The preferred method for configuring the Docker Engine on Windows is using a configuration file. The configuration file
can be found at \\’C:\ProgramData\Docker\config\daemon.json\\’. If this file does not already exist, it can be created.
The Docker Engine can also be configured by modifying the Docker service using the sc config command.
References:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configure-docker-daemon

QUESTION 4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one
correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You network contains an Active Directory domain named contoso.com.
You need to create a Nano Server image named Nano1 that will be used as a virtualization host. The Windows Server 2016 source files are located in drive D.

Solution: You run the following cmdlet.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B

QUESTION 5
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You network contains an Active Directory domain named contoso.com.
You need to create a Nano Server image named Nano1 that will be used as a virtualization host. The Windows Server
2016 source files are located in drive D.
Solution: You run the following cmdlet.

Does this meet the goal?
A. Yes
B. No
Correct Answer: B

See more https://www.pass4itsure.com/70-740.html

70-741 Microsoft Exam Info and Free Practice Test

Networking with Windows Server 2016

The official 70-741 exam page https://www.microsoft.com/en-us/learning/exam-70-741.aspx

Microsoft MCSA 70-741 Test Questions – 70-741 Exam PDF Dumps

[drive] 70-741 Exam PDF Dumps Free

QUESTION 1
Your network contains an Active Directory domain named contoso.com. The domain
contains a domain-based Distributed File System (DFS) namespace named Namespace1.
You need to view the shares to which users will be redirected when the users attempt to connect to a folder named
Folder1 in the DFS namespace.
What cmdlet should you run? To answer, select the appropriate options in the answer area.
Hot Area:

Correct Answer:

QUESTION 2
Your network contains an Active Directory domain named contoso.com. The domain contains a member server named
Server1 that runs Windows Server 2016.
You install IP Address Management (IPAM) on Server1. You select the automatic provisioning method, and then you
specify a prefix of IPAM1.
Which cmdlet should you run? To answer, select the appropriate options in the answer area.
Hot Area:

Correct Answer:

Invoke-IpamGpoProvisioning –Domain contoso.com –GpoPrefixName IPAM –IpamServerFqdn dc1.contoso.com

QUESTION 3
You have a server named Server1 that runs Windows Server 2016 and is configured as a domain controller.
You install the DNS Server server role on Server1.
You plan to store a DNS zone in a custom Active Directory partition.
You need to create a new Active Directory partition for the zone.
What should you use?
A. Set-DnsServer
B. DNS Manager
C. New-ADObject
D. Ntdsutil.exe
E. Active Directory Sites and Services
Correct Answer: B
https://www.businessnewsdaily.com/11019-set-up-configure-dns-on-windows-server-2016.html

QUESTION 4
Your network contains an Active Directory forest named contoso.com.
The forest contains five domains. You manage DNS for the contoso.com domain only.
You are not responsible for managing DNS for the child domains.
The DNS servers in a child domain named research.contoso.com are reconfigured often.
You need to ensure that clients in contoso.com can resolve addresses in research.contoso.com. The solution must
minimize zone replication traffic.
What should you do?
A. Create a primary zone for research.contoso.com on the DNS servers of contoso.com
B. Create a secondary zone for research.contoso.com on the DNS servers of contoso.com
C. Create a stub zone for research.contoso.com on the DNS servers of contoso.com
D. Create a delegation for research.contoso.com
Correct Answer: D
References: https://blogs.msmvps.com/acefekay/2010/10/01/dns-parent-child-dns-delegation-how-to-create-a-dnsdelegation/

QUESTION 5
Your network contains an Active Directory domain named contoso.com that contains a domain controller named DC1.
All DNS servers for the network run BIND 10.
Your perimeter network contains a DHCP server named DHCP1 that runs Windows Server 2016. DHCP1 is a member
of a workgroup named WORKGROUP. DHCP1 provides IP address leases to guests accessing the Wi-Fi network.
Several engineers access the network remotely by using a VPN connection to a remote access server that runs
Windows Server 2016. All of the VPN connections use certificate-based authentication and are subject to access
policies in
Network Policy Server (NPS). Certificates are issued by an enterprise certification authority (CA) named CA1.
All Windows computers on the network are activated by using Key Management Service (KMS). On-premises users use
Remote Desktop Services (RDS). You plan to deploy IP Address Management (IPAM) to the network. Which action can
you perform on the network by using IPAM?
A. Manage the DNS zones on the DNS servers.
B. Audit logon events on the RDS server.
C. Audit authentication events from DC1.
D. Manage activations on the KMS server.
Correct Answer: C

See more https://www.pass4itsure.com/70-741.html

70-742 Microsoft Exam Info and Free Practice Test

Identity with Windows Server 2016

The official 70-742 exam page https://www.microsoft.com/en-us/learning/exam-70-742.aspx

Microsoft MCSA 70-742 Test Questions – 70-742 Exam PDF Dumps

[drive] 70-742 Exam PDF Dumps Free

See more https://www.pass4itsure.com/70-742.html

QUESTION 1
Your network contains an Active Directory domain named contoso.com.
You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)

You discover that some of the settings configured in the A1 Group Policy object (GPO) fail to apply to the users in the
OU1 organizational unit (OU).
You need to ensure that all of the settings in A1 apply to the users in OU1.
What should you do?
A. Enable loopback policy processing in A1.
B. Block inheritance on OU1.
C. Modify the policy processing order for OU1.
D. Modify the GPO Status of A1.
E. Modify Security Settings for A1
Correct Answer: C
Reference: https://blogs.technet.microsoft.com/musings_of_a_technical_tam/2012/02/15/group-policy-basicspart-2-understanding-which-gpos-to-apply/

QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain.
You have a user account that is a member of the Domain Admins group.
You have 100 laptops that have a standard corporate image installed. The laptops are in workgroups and have random
names.
A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each
laptop must be in an organizational unit (OU) that is associated to the department of the user who will use the laptop.
The
laptop names must start with four characters indicating the department, followed by a four-digit number.
Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops.
You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and
the computer accounts of the laptops are in the correct OUs.
Solution: You instruct Tech1 to sign in to each laptop, to rename each laptop by using System in Control Panel, and
then to join each laptop to the domain by using the Netdom join command.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A

QUESTION 3
Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Server1 that runs Windows Server 2016.
Server1 has IP Address Management (IPAM) installed. IPAM is configured to use the Group Policy based provisioning
method.
The prefix for the IPAM Group Policy objects (GPOs) is IP.
From Group Policy Management, you manually rename the IPAM GPOs to have a prefix of IPAM.
You need to modify the GPO prefix used by IPAM.
What should you do?
A. Click Configure server discovery in Server Manager.
B. Run the Set-IpamConfiguration cmdlet.
C. Run the Invoke-IpamGpoProvisioning cmdlet.
D. Click Provision the IPAM server in Server Manager.
Correct Answer: B
The Set-IpamConfiguration cmdlet modifies the configuration for the computer that runs the IPAM server.
The -GpoPrefix parameter specifies the unique Group Policy object (GPO) prefix name that IPAM uses to create the
group policy objects. Use this parameter only when the value of the ProvisioningMethod parameter is set to
Automatic.
References: https://docs.microsoft.com/en-us/powershell/module/ipamserver/set-ipamconfiguration?view=win10-ps

QUESTION 4
Your network contains an Active Directory domain named contoso.com. The domain contains servers that run Windows
Server 2016. The servers are configured as shown in the following table:

You have a research department. The computers in the research department are not domain-joined.
You need to ensure that the research department computers can use automatic certificate enrollment to receive and
renew certificates from the CA.
Which two role services should you install and configure on CA? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Certificate Enrollment Policy Web Service
B. Certificate Authority Web Enrollment
C. Online Responder
D. Certificate Enrollment Web Service
E. Network Device Enrollment Service
Correct Answer: AB
References: https://www.ejbca.org/docs/Part_2__Microsoft_Certification_Authority_and_Group_Policies.html

QUESTION 5
Your network contains an Active Directory domain.
You have a user account that is a member of the Domain Admins group.
You have 100 laptops that have a standard corporate image installed. The laptops are in workgroups and have random
names.
A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each
laptop must be in an organizational unit (OU) that is associated to the department of the user who will use the laptop.
The
laptop names must start with four characters indicating the department, followed by a four-digit number.
Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops.
You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and
the computer accounts of the laptops are in the correct OUs.
Solution: You script the creation of files domain join, and then you give the files to Tech1.
You instruct Tech1 to sign in to each laptop, and then to run djoin.exe.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B

70-743 Microsoft Exam Info and Free Practice Test

Upgrading Your Skills to MCSA: Windows Server 2016

The official 70-743 exam page https://www.microsoft.com/en-us/learning/exam-70-743.aspx

Microsoft MCSA 70-743 Test Questions – 70-743 Exam PDF Dumps

[drive] 70-743 Exam PDF Dumps Free

QUESTION 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions,
while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You have a server named Server1 that runs Windows Server 2016.
Server1 is configured as a VPN server. Server1 is configured to allow domain users to establish VPN connections from
06:00 to 18:00, every day of the week.
You need to ensure that domain users can establish VPN connections only between Monday and Friday.
Solution: From Active Directory Users and Computers, you modify the Dial-in properties of the user accounts.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B

QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You are a server administrator at a company named Contoso, Ltd.
Contoso has a Windows Server 2016 Hyper-V environment configured as shown in the following table.

All of the virtual switches are of the external type.
You need to ensure that you can move virtual machines between the hosts without causing the virtual machines to
disconnect from the network.
Solution: You implement live migration by using Host1 and Host3.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Live migration is a Hyper-V feature that allows you to transparently move running Virtual Machines from one Hyper-V
host to another without perceived downtime.
Common requirements for any form of live migration: Two (or more) servers running Hyper-V that:
-Support hardware virtualization.
-Use processors from the same manufacturer. For example, all AMD or all Intel.
-Belong to either the same Active Directory domain, or to domains that trust each other.
Virtual machines must be configured to use virtual hard disks or virtual Fibre Channel disks (no physical disks).
Use of an isolated network, physically or through another networking technology such as VLANs, is recommended for
live migration network traffic.
References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windowsserver-2012-R2-and-2012/hh831435(v=ws.11)

QUESTION 3
You have a server named Server1 that runs Windows Server 2016. Server1 is a Hyper-V host. You run the commands
shown in the following graphic:

Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic.
Hot Area:

Correct Answer:

QUESTION 4
You are deploying a small network that has 30 client computers. The network uses the 192.168.1.0/24 address space.
All computers obtain IP configurations from a DHCP server named Server1.
You install a server named Server2 that runs Windows Server 2016. Server2 has two network adapters named internal
and Internet. Internet connects to an Internet service provider (ISP) and obtains the 131.107.0.10 IP address. Internal
connects to the internal network and is configured to use the 192.168.1.250 IP address.
You need to provide Internet connectivity for the client computers. What should you do?
A. On Server2, select the Internet and Internal network adapters and bridge the connections. From the DHCP console
on Server1, authorize Server2.
B. On Server1, stop the DHCP server. On the Internal network adapter on Server 2, enable Internet Connection Sharing
(ICS).
C. On Server2 run the New-NetNat -Name NAT1 -InternalIPInterfaceAddressPrefix 1 92.168.1.0/24 cmdlet. Configure
Server1 to provide the 003 Router option of 1 31.107.0.10.
D. Install the Routing role service on Server2 and configure the NAT routing protocol. Configure Server1 to provide the
003 Router option of 192.168.1.250.
Correct Answer: B
References: https://en.wikipedia.org/wiki/Internet_Connection_Sharing

QUESTION 5
Your network contains a new Active Directory domain named contoso.com.
You have a security policy that states that new servers should run Nano Server whenever possible.
Which server role can be deployed on a Nano Server?
A. DHCP Server
B. Network Policy and Access Services
C. Remote Desktop Services
D. DNS Server
E. Active Directory Certificate Services
Correct Answer: D
References: https://docs.microsoft.com/en-us/windows-server/get-started/getting-started-with-nano-server

See more https://www.pass4itsure.com/70-743.html

70-744 Microsoft Exam Info and Free Practice Test

Securing Windows Server 2016

The official 70-744 exam page https://www.microsoft.com/en-us/learning/exam-70-744.aspx

Microsoft MCSE 70-744 Test Questions – 70-744 Exam PDF Dumps

[drive] 70-744 Exam PDF Dumps Free

See more https://www.pass4itsure.com/70-744.html

QUESTION 1
Your network contains an internal network and a perimeter network. The internal network contains an Active Directory
forest named contoso.com. You deploy five servers to the perimeter network.
All of the servers run Windows Server 2016 and are the members of a workgroup.
You need to apply a security baseline named Perimeter.inf to the servers in the perimeter network.
What should you use to apply Perimeter.inf?
A. Local Computer Policy
B. Security Configuration Wizard (SCW)
C. Group Policy Management
D. Server Manager
Correct Answer: A
https://docs.microsoft.com/en-us/windows-server/get-started/deprecated-features
https://blogs.technet.microsoft.com/secguide/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0/
https://msdn.microsoft.com/en-us/library/bb742512.aspx

QUESTION 2
Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server
2012. All servers run Windows Server 2016. You create a new bastion forest named admin.contoso.com. The forest
functional level of admin.contoso.com is Windows Server 2012 R2.
You need to implement a Privileged Access Management (PAM) solution.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Raise the forest functional level of admm.contoso.com.
B. Deploy Microsoft Identify Management (MIM) 2016 to admin.contoso.com.
C. Configure contoso.com to trust admin.contoso.com.
D. Deploy Microsoft Identity Management (MIM) 2016 to contoso.com.
E. Raise the forest functional level of contoso.com.
F. Configure admin.contoso.com to trust contoso.com.
Correct Answer: BC
https://docs.microsoft.com/en-us/microsoft-identity-manager/pam/deploy-pam-with-windows-server-2016
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/windows-server-2016-functional-levels

For the bastion forest which deploys MIM, you should raise the Forest Functional Level to “Windows Server

QUESTION 3
You network contains an Active Directory forest named contoso.com.
All domain controllers run Windows Server 2016 Member servers run either Windows Server 2012 R2 or Windows
Server 2016.
Client computers run either Windows 8.1 or Windows 10.
You need to ensure that when users access files in shared folders on the network, the files are encrypted when
they are transferred over the network.
Solution: You enable access-based enumeration on all the file shares. Does this meet the goal?
A. Yes
B. No
Correct Answer: B
Access-Based Enumeration does not help encrypting network file transfer.

QUESTION 4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1
that runs Windows Server 2016.
You need to prevent NTLM authentication on Server1.
Solution: From a Group Policy, you configure the Kerberos Policy. Does this meet the goal?
A. Yes
B. No
Correct Answer: B
References: https://www.rootusers.com/implement-ntlm-blocking-in-windows-server-2016/

QUESTION 5
You plan to use the Security and Audit solution in Microsoft Operations Management Suite (OMS) to monitor servers
that run Windows Server 2016. The servers are prevented from accessing the Internet.
You create an OMS workspace and add the Security and Audit solution.
You need to ensure that you can monitor the servers.
What should you do first?
A. From Connected Sources, click Download OMS Gateway.
B. From Accounts, modify the Azure Subscription and Data Plan setting.
C. From Accounts, add an Automation Account.
D. From Connected Sources, click Download Windows Agent (32 bit).
Correct Answer: B

Summary

Assuming you are ready to study very hard, you can pass the Microsoft exam in 15 days. There are many training resources available for free here, and there are online training providers that can also help you (https://www.pass4itsure.com/microsoft.html).