Microsoft 70-741 Practice 2021

NEW QUESTION 1
You have a network policy server (NPS) server named NPS1. One network policy is enabled on NPS1. The policy is configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information in the graphic.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:

Server1 has two virtual machines named VM1 and VM that run Windows Server 2021. VM1 connects to Private VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM1 to Internal1. You run the New-NetNatIpAddress and the New-NetNat cmdlets on Server1. You configure VM1 to use VM2 as the default gateway.
Does this meet the goal?

• A. Yes


• B. No

Answer: A

NEW QUESTION 3
You have a server named Server1 that has a Server Core installation of Windows Server 2021. Server! is configured to obtain an IP address automatically.
You need to configure the IPv4 address, netmask, and default gateway manually for a network interface named Ethernet on Server1.
What should you run?

• A. ipconfig.exe


• B. netsh.exe


• C. Set-NetNat


• D. Set-NetIPv4Protocol

Answer: C

NEW QUESTION 4
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Your network contains an Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2012.
The network uses an address space of 192.168.0.0/16 and contains multiple subnets. The network is not connected to the Internet.
The domain contains three servers configured as shown in the following table.

Client computers obtain TCP/IP settings from Server3.
You add a second network adapter to Server2. You connect the new network adapter to the Internet. You install the Routing role service on Server2.
Server1 has four DNS zones configured as shown in the following table.

You need to ensure that when a computer is removed from the network, the associated records are deleted automatically after 15 days.
Which two actions should you perform? Each correct answer presents part of the solution.

• A. Create a scheduled task that runs the Remove-Computer cmdlet.


• B. Modify the Zone Aging/Scavenging Properties of the zone.


• C. Modify the Time to live (TTL) value of the start of authority (SOA) record.


• D. Set the Scavenging period of Server1.


• E. Modify the Expires after value of the start of authority (SOA) record.

Answer: BD

Explanation:
https://technet.microsoft.com/en-us/library/cc771362(v=ws.10).aspx

NEW QUESTION 5
You have an application named App1. App1 is distributed to multiple Hyper-V virtual machines in a multitenant environment.
You need to ensure that the traffic is distributed evenly among the virtual machines that host App1.
What should you include in the environment?

• A. Network Controller and Windows Server Network Load Balancing (NLB) nodes


• B. an RAS Gateway and Windows Server Software Load Balancing (SLB) nodes


• C. an RAS Gateway and Windows Server Network Load Balancing (NLB) nodes


• D. Network Controller and Windows Server Software Load Balancing (SLB) nodes

Answer: B

Explanation:
https://technet.microsoft.com/en-us/library/mt403307(v=ws.11).aspx#bkmk_slb

NEW QUESTION 6
Your network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server1 that runs Windows Server 2021.
You have a DHCP scope for the 10.0.0.0/24 IP subnet. One hundred and fifty clients reside in the subnet. Fifty of the DHCP clients are NOT domain-joined.
You need to ensure that DHCP clients without a configured DNS suffix register automatically in a DNS zone named workgroup.contoso.com. The other DHCP clients must register in the DNS zone of their respective domain.
What should you do?

• A. Configure the DNS properties of the 10.0.0.0/24 DHCP scope.


• B. Create a DHCP policy that has a condition based on the fully qualified domain name (FQDN) criterion.Configure the IP address range properties of the policy.


• C. Create a DHCP policy that has a condition based on the fully qualified domain name (FQDN) criterion.Configure the DNS properties of the policy.


• D. Configure the 015 DNS Domain Name scope option in the 10.0.0.0/24 DHCP scope.

Answer: C

NEW QUESTION 7
You have a Microsoft Azure subscription and an on-premises network.
To the on-premises network, you deploy a new server named Server1 that runs Windows Server 2021. In Azure, you configure a virtual gateway on an Azure virtual network.
You need to ensure that the computers on the on-premises network can access virtual machines on the Azure virtual network.
What should you do on Server1?

• A. Install the Remote Access server rol


• B. From the Routing and Remote Access Server Setup Wizard, select Secure connection between two private networks.


• C. Install the Data Center Bridging (DCB) feature, and then run the Install-RemoteAccess cmdlet.


• D. Install the Remote Access server rol


• E. From the Routing and Remote Access Server Setup Wizard, select Virtual private network (VPN) access and NAT.


• F. Install the Data Center Bridging (DCB) feature, and then run the E nable-RemoteAccessRoutingDomain cmdlet.

Answer: A

NEW QUESTION 8
You have a Hyper-V host named Server1 that runs Windows Server 2021. Server1 has two network adaptors named NK1 and NIC2. Server2 has two virtual switches named vSwitch1 and vSwitch2. N1C1 connects to vSwitch1. NIC2 connects to vSwitch2
Server1 hosts a virtual machine named VM1. VM1 has two network adapters named vmNIC1 and vmNIC1. VmNIC1 connects to vSwitch1. VmNIC2 connects to vSwitch2.
You need to create a NIC team on VM1.
What should you run on VM1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:
Name NICTEAM1 TeamMembers vmNIC1, vmNIC2 –TeamingMode $var1 –LoadBalancingAlgorithm $var2

NEW QUESTION 9
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server2 than runs Windows Server 2021.
Users report that their client computers fail to obtain an IP address.
You open the DHCP console as shown in the Exhibit. (Click the Exhibit button.)

Scope1 has an address range of 172.16.0.10 to 172.16.0.100 and a prefix length of 23 bits.
You need to ensure that all of the client computers on the network can obtain an IP address from Server2. Solution: You run the Set-DhcpServerv4Scope cmdlet.
Does this meet the goal?

• A. Yes


• B. No

Answer: A

Explanation:
https://technet.microsoft.com/itpro/powershell/windows/dhcp-server/set-dhcpserverv4scope

NEW QUESTION 10
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
You have a DHCP server named Server1 that has an IPv4 scope named Scope1.
Users report that when they turn on their client computers, it takes a long time to access the network. You validate that it takes a long time for the computers to receive an IP address from Server1.
You monitor the network traffic and discover that Server1 issues five ping commands on the network before leasing an IP address.
You need to reduce the amount of time it takes for the computers to receive an IP address. What should you do?

• A. From the properties of Scope1, modify the Conflict detection attempts setting.


• B. From the properties of Scope1, configure Name Protection.


• C. From the properties of IPv4, configure the bindings.


• D. From IPv4, create a new filter.


• E. From the properties of Scope1, create an exclusion range.


• F. From IPv4, run the DHCP Policy Configuration Wizard.


• G. From Control Panel, modify the properties of Ethernet.


• H. From Scope1, create a reservation.

Answer: A

Explanation:
https://technet.microsoft.com/en-us/library/ee941125(v=ws.10).aspx

NEW QUESTION 11
You have a server named Server1 that runs Windows Server 2021 and is configured as a domain controller.
You install the DNS Server server role on Server1.
You plan to store a DNS zone in a custom Active Directory partition. You need to create a new Active Directory partition for the zone. What should you use?

• A. Set-DnsServer


• B. DNS Manager


• C. New-ADObject


• D. Ntdsutil.exe


• E. Active Directory Sites and Services

Answer: B

Explanation:
References:
https://www.businessnewsdaily.com/11019-set-up-configure-dns-on-windows-server-2021.html

NEW QUESTION 12
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
You have a DHCP server named Server1 that has three network cards. Each network card is configured to use a static IP address. Each network card connects to a different network segment.
Server1 has an IPv4 scope named Scope1.
You need to ensure that Server1 only uses one network card when leasing IP addresses in Scope1.
What should you do?

• A. From the properties of Scope1, modify the Conflict detection attempts setting.


• B. From the properties of Scope1, configure Name Protection.


• C. From the properties of IPv4, configure the bindings.


• D. From IPv4, create a new filter.


• E. From the properties of Scope1, create an exclusion range.


• F. From IPv4, run the DHCP Policy Configuration Wizard.


• G. From Control Panel, modify the properties of Ethernet.


• H. From Scope1, create a reservation.

Answer: C

Explanation:
https://technet.microsoft.com/en-us/library/cc770650(v=ws.11).aspx

NEW QUESTION 13
Your network contains three subnets, a production subnet that contains production servers, a development network that contains development servers, and a client network that contains client computers.
The development network is used to test applications and reproduces servers that are located on the production network. The development network and the production network use the same IP address range.
A developer has a client computer on the client network. The developer reports that when he attempts to connect to the IP address 10.10.1.6 from his computer, he connects to a server on the production network.
You need to ensure that when the developer connects to 10.10.1.6, he connects to a sever on the development network
Which cmdlet should you use?

• A. New-NetNeighbor


• B. New-NetRoute


• C. Set-NetTcpSetting


• D. Set-NetNeighbir

Answer: B

NEW QUESTION 14
You are deploying DirectAccess to a server named DA1. DA1 will be located behind a firewall and will have a single network adapter. The intermediary network will be IPv4.
You need to configure the firewall to support DirectAccess.
Which firewall rules should you create for each type of traffic? To answer, drag the appropriate ports and protocols to the correct traffic types. Each port and protocol may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 15
You have an Active Directory domain named Contoso.com. The domain contains Hyper-V hosts named Server1 and Server2 that run Windows Server 2021. The Hyper-V hosts are configured to use NVGRE for network virtualization.
You have six virtual machines that are connected to an external switch. The virtual machines are configured as shown.

To which virtual machine or virtual machines can VM1 and VM3 connect? To answer, select the appropriate options in the answer area.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:
The GRE keys must match.
To separate the traffic between the two virtualized networks, the GRE headers on the tunneled packets include a GRE Key that provides a unique Virtual Subnet ID for each virtualized network.
References:
https://blogs.technet.microsoft.com/keithmayer/2012/10/08/step-by-step-hyper-v-network-virtualization-31-days

NEW QUESTION 16
You have two servers named Server1 and Server2 that run Windows Server 2021. Both servers have the DHCP Server server role installed.
Server1 has a DHCP scope named Scope1. Server2 has a DHCP scope named Scope2.
You need to ensure that client computers can get an IP address if a single DHCP server fails. You must be able to control the percentage of requests to which each DHCP server responds during normal network operations.
What should you do?

• A. Add Server1 and Server2 as nodes in a failover cluster, and then configure the DHCP Server server role.


• B. Add Server1 and Server2 as nodes in a failover cluster, and then configure the quorum mode.


• C. On Server1 and Server2, configure DHCP failover for Scope1 and Scope2.


• D. Add Server1 and Server2 as nodes in a failover cluster, and then configure port rules for UDP 67 and UDP 68.

Answer: C

NEW QUESTION 17
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that has the Network Policy and Access Services server role installed. You create a Shared Secret Network Policy Server (NPS) template named Template1.
You need to view the shared secret string used for Template1.
Solution: From the Network Policy Server console, you export the configuration, and you view the exported XML file.
Does this meet the goal?

• A. Yes


• B. No

Answer: A

NEW QUESTION 18
Your network contains an Active Directory forest. The forest contains a domain named contoso.com.
All of the DHCP servers and the DNS servers in the forest are managed by using an IP Address Management (IPAM) server named Cont-IPAM1.
You acquire a new company that has an Active Directory forest. The forest contains a domain named fabrikam.com.
You have six servers that are configured as shown in the following table.

You need to ensure that all of the DHCP and DNS servers in both of the forests can be managed by using Cont_IPAM1. The solution must use the principle of least privileges.
Which two actions should you perform? Each correct answer presents part of the solution.

• A. Upgrade Fabr_DNS1 to Windows Server 2021.


• B. Upgrade Fabr_DHCP1 to Windows Server 2021.


• C. Create an outgoing forest trust from contoso.com to fabrikam.com.


• D. Upgrade Cont_IPAM1 to Windows Server 2021.


• E. Create a two-way forest trust between contoso.com and fabrikam.com

Answer: DE

Explanation:
References:
https://github.com/MicrosoftDocs/windowsserverdocs/blob/master/WindowsServerDocs/networking/technologi
Tomsho, Greg, MCSA Guide to Networking with Windwos Server 2021, Exam 70-741, Cengage Learning, Boston, 2021, p. 223

NEW QUESTION 19
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of the repeated scenario
Your network contains an Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2012.
The network uses an address space of 192.168.0.0/16 and contains multiple subnets. The network is not connected to the Internet.
The domain contains three servers configured as shown in the following table.

Client computers obtain TCP/IP settings from Server3.
You add a second network adapter to Server2. You connect the new network adapter to the Internet. You install the Routing role service on Server2.
Server1 has four DNS zones configured as shown in the following table.

End of the repeated scenario
You need to configure an administrator named admin@fabrikam.com as the contact person for the fabrikam.com zone.
What should you modify? To answer, select the appropriate options in the answer area.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:
References: https://www.microsoftpressstore.com/articles/article.aspx?p=2756482&seqNum=2

NEW QUESTION 20
Your network contains an Active Directory domain named contoso.com. The domain contains a domain-based Distributed File System (DFS) namespace named Namespace1.
You need to view the shares to which users will be redirected when the users attempt to connect to a folder named Folder1 in the DFS namespace.
What cmdlet should you run? To answer, select the appropriate options in the answer area.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 21
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. Some question sets might
have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From Windows PowerShell on Server1, you run the Export-DnsServerDnsSecPublicKey cmdlet. Does this meet the goal?

• A. Yes


• B. No

Answer: B

Explanation:
References:
https://docs.microsoft.com/en-us/powershell/module/dnsserver/export-dnsserverdnssecpublickey?view=win10-p

NEW QUESTION 22
Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. IPAM users a Windows Internal Database. You install Microsoft SQL Server on Server1.
You plan to move the IPAM database to SQL Server.
You need to create a SQL server login for the IPAM service account.
For which user should you create the login? To answer, select the appropriate options in the answer area.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 23
You have a server named Host1 that runs Windows Server 2021.
You configure Host1 as a virtualization host and create 20 new virtual machines on Host1. You need to ensure that all of the virtual machines can connect to the Internet through Host1.
Which three actions should you perform? Each correct answer presents part of the solution.

• A. On a virtual machine, install the Remote Access server role.


• B. From the properties of each virtual machine, enable virtual LAN identification.


• C. From the properties of each virtual machine, connect to the virtual machine switch.


• D. On Host1, configure the network address translation (NAT) network.


• E. On Host1, create an internal virtual machine switch and specify an IP address for the switch.

Answer: CDE

Explanation:
https://technet.microsoft.com/en-us/library/ee449441(v=ws.10).aspx

NEW QUESTION 24
You have an Active Directory forest that contains 30 servers and 6,000 Client computers. You deploy a new DHCP server that runs Windows Server 2021. You need to retrieve the list of the authorized DHCP servers. Which command should you run?

• A. Get-DHCPServerDatabase


• B. Netstat -p IP -s -a


• C. Get-DHCPServerInDc


• D. Show-ADAuthenticationPolicyExpression -AllowedToAuthenticateTo

Answer: C

Explanation:
To get all authorized DHCP servers in Active Directory, you can use the following PowerShell cmdlet:
Get-DhcpServerinDC

NEW QUESTION 25
You need to implement network virtualization.
On which object should you configure the virtual subnet ID?

• A. Virtual switch


• B. Hyper-V server


• C. VM


• D. Virtual network adapter

Answer: D

NEW QUESTION 26
You have a server named Server1 that runs Windows Server 2021. You install the Hyper-V server role on Server1. Server1 has eight network adapters that are dedicated to virtual machines. The network adapters are Remote Direct Memory Access (RDMA)-enabled.
You plan to use Software Defined Networking (SDN). You will host the virtual machines for multiple tenants on the Hyper-V host.
You need to ensure that the network connections for the virtual machines are resilient if one or more physical network adapters fail.
What should you implement?

• A. single root I/O virtualization (SR-IOV)


• B. NIC Teaming on the Hyper-V host


• C. virtual Receive-side Scaling (vRSS)


• D. Switch Embedded Teaming (SET)

Answer: D

NEW QUESTION 27
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Hyper-V host named Server1 that hosts a virtual machine named VM1. Server1 and VM1 run Windows Server 2021.
The settings for VM1 are configured as shown in the exhibit below.

You need to ensure that you can use the Copy-VMFile cmdlet on Server1 to copy files from VM1.
Solution: You start the Hyper-V Guest Service Interface service on VM1. Does this meet the goal?

• A. YES


• B. NO

Answer: B

NEW QUESTION 28
You have a virtual machine named Server1 that runs Windows Server 2021.
You plan to use Server1 as part of a Software Defined Networking (SDN) solution.
You need to implement the Border Gateway Protocol (BGP) on Server1. What should you install?

• A. the peer Name Resolution Protocol (PNRP)feature


• B. the Routing role service


• C. the Network Device Enrollment Service role service


• D. the Network Policy and access Services server role

Answer: B

Explanation:
References:
https://docs.microsoft.com/en-us/windows-server/remote/remote-access/bgp/border-gateway-protocol-bgp

NEW QUESTION 29
You have a DNS server named Server1 that runs Windows Server 2021. Server1 has network interfaces that have the following IP addresses:
-10.0.0.100
-131.107.0.100
The internal network uses an IP address space of 10.0.0.0/16.
Server1 provides DNS name resolution to both internal and external clients. Server1 hosts the primary zone for contoso.com.
You need to configure Server1 to meet the following requirements:
* Internal clients must be able to use Server 1 to resolve internal-based DNS names.
* External clients must not be able to use Server1 to resolve Internal-based DNS names.
* External clients must able to use Server1 to resolve names in the contoso.com zone.
Which commands should you run on Server1.? To answer select the appropriate option in answer area.

• A. Mastered


• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 30
You have an IP Address Management (IPAM) server named Server1 that runs Windows Server 2021. You have five DHCP servers. Server1 manages all of the DHCP servers.
On Server1, an administrator uses Purge Event Catalog Data to remove all of the events from the last 30 days. You need to view all of the lease requests that were denied during the last two days.
What should you do?

• A. On each DHCP server, run the MicrosoftWindowsServer ManagerCleanUpOldPerfLogs scheduled task, and then review the event catalog on Server1.


• B. On Server1, run the Purge Event Catalog Data action and then open Event Viewer on Server1.


• C. Review the log data in C:WindowsSystem32ipamDatabase on Server1.


• D. On each DHCP server, review the DHCP Server operational event log.

Answer: C

NEW QUESTION 31
......