Updated 70-741 Secret 2021

NEW QUESTION 1
You are implementing a secure network. The network contains a DHCP server named Server1 that runs Windows Server 2021.
You create a DHCP allow filter that contains all of the computers on the network that are authorized to receive IP addresses.
You discover that unauthorized computers can obtain an IP address from Server1.
You need to ensure that only authorized computers can receive an IP address from Server1. Solution: You run the following command.
Add-DHCPServer4Filter -ComputerName Server1 -MacAddress -List Allow Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation:
References:
https://docs.microsoft.com/en-us/powershell/module/dhcpserver/add-dhcpserverv4filter?view=win10-ps

NEW QUESTION 2
Refer to Exhibit:

\Server1.adatum.comnamespace1 has a folder target maned Folder1. A user named User1 has Full Control share and NTFS permissions to Folder1.
Folder1 contains a file named File1.doc. User1 has only Write NTFS permissions to File1.doc.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 3
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1.
Server1 configured to use a forwarder named server2.contoso.com that has an IP address of 10.0.0.10. You need to prevent Server1 from using root hints if the forwarder is unavailable.
What command should you run? To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 4
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2021.
Server1 has Microsoft System Center 2021 Virtual Machine Manager (VMM) installed. Server2 has IP Address Management (IPAM) installed.
You create a domain user named User1.
You need to integrate IPAM and VMM. VMM must use the account of User1 to manage IPAM. The solution must use the principle of least privilege.
What should you do on each server? To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
On Server1: Create a Run As Account that uses User1.
On Server2: Add User1 to IPAM ASM Administrator Role. https://technet.microsoft.com/en-us/library/dn783349(v=ws.11).aspx https://technet.microsoft.com/en-us/library/jj878348(v=ws.11).aspx

NEW QUESTION 5
You have a Scale-Out File Server that has a share named Share1. Share1 contains a virtual disk file named Disk1.vhd.
You plan to create a guest failover cluster.
You need to ensure that you can use the virtual disk as a shared virtual disk for the gust failover cluster. Which cmdlet should you use?

• A. Optimize VHD
• B. Optimize VHDSet
• C. Convert-VHD
• D. Set-VHD

Answer: C

NEW QUESTION 6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com
You need to create a Nano Server image named Nano1 that will be used as a virtualization host. The windows server 2021 source files are located in drive D.
Solution: You run the following cmdlet.
New-NanoServerImage –Edition Datacenter –DeploymentType Host –Package
Microsoft-NanoServerSCVMM-Package –MediaPath ‘D: -TargetPath C:nano1Nano1.wim
–ComputerName Nano1 – Domainname Contoso.com
Does this meet the goal?

• A. Yes
• B. NO

Answer: B

NEW QUESTION 7
You have a virtual machine named VM1 that runs Windows Server 2021, VM1 hosts a service that requires high network throughput.
VM1 has a virtual network adapter that connects to a Hyper-V switch named vSwitch1. vSwitch1 has one network adapter. The network adapter supports Remote Direct Memory Access (RDMA), the single root I/O virtualization (SR-IOV) interface, Quality of Service? (QoS), and Receive Side Scaling (RSS).
You need to ensure that the traffic from VM1 can be processed by multiple networking processors. Which Windows PowerShell command should you run on the host of VM1?

• A. Set-NetAdapterRss
• B. Set-NetAdapterRdma
• C. Set-NetAdapterQos
• D. Set-NetAdapterSriov

Answer: A

NEW QUESTION 8
You have an Active Directory domain named Contoso.com. The domain contains Hyper-V hosts named Server1 and Server2 that run Windows Server 2021. The Hyper-V hosts are configured to use NVGRE for network virtualization.
You have six virtual machines that are connected to an external switch. The virtual machines are configured as shown.

To which virtual machine or virtual machines can VM1 and VM3 connect? To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
The GRE keys must match.
To separate the traffic between the two virtualized networks, the GRE headers on the tunneled packets include a GRE Key that provides a unique Virtual Subnet ID for each virtualized network.
References:
https://blogs.technet.microsoft.com/keithmayer/2012/10/08/step-by-step-hyper-v-network-virtualization-31-days

NEW QUESTION 9
You have a DHCP server named Server1 that runs Windows Server 2021. You plan to implement IPv6 on your network.
You need to configure Server1 for stateless DHCPv6. What should you do from the DHCP console?

• A. Configure the Advanced Properties for Server1
• B. Configure the IPv6 Server Options
• C. Create an IPv6 scope
• D. Configure the General IPv6 Properties

Answer: B

NEW QUESTION 10
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that has the Network Policy and Access Services server role installed. You create a Shared Secret Network Policy Server (NPS) template named Template1.
You need to view the shared secret string used for Template1.
Solution: From the Network Policy Server console, you export the configuration, and you view the exported XML file.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 11
You have an IP Address Management (IPAM) server named IPAM1 that runs Window Server 2021. IPAM1 manages all of the DHCP servers on your network.
You are troubleshooting an issue for a client that fails to receive an IP address from DHCP.
You need to ensure that from IPAM1, you can view all of the event data for the DHCP leases from the last 24 hours.
Solution: From Server Manager, you run Retrieve Event Catalog Data. Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation:
References:
http://www.techblogopedia.com/blog/ip-address-managementipam-windows-server-2012-r2-part-3/

NEW QUESTION 12
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named adatum.com. The domain contains two DHCP servers named Server1 and Server2.
Server1 has the following IP configuration.

Server2 has the following IP configuration.

Some users report that sometimes they cannot access the network because of conflicting IP addresses. You need to configure DHCP to avoid leasing addresses that are in use already.
Solution: On Server1, you modify the ActivatePolicies setting of the scope. Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 13
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server 2021. Server1 is configured as a VPN server. Server1 is configured to allow domain users to establish VPN connections from 06:00 to 18:00 everyday of the week.
You need to ensure that domain users can establish VPN connections only between Monday and Friday. Solution: From Active Directory Users and Computers, you modify the Dial-in Properties of the user accounts. Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 14
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Hyper-V host named Server 1. The network adapters on Server1 have single root I/O virtualization (SR-IOV) enabled.
Server1 hosts a virtual machine named VM1 that runs Windows Server 2021. You need to identify whether SR-IOV is used by VM1.
Solution: On Server1, you open Hyper-V Manager and view the Integration Services settings of VM1.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Hyper-V host named Server1 that hosts a virtual machine named VM1. Server1 and VM1 run Windows Server 2021.
The settings for VM1 are configured as shown in the exhibit below.

You need to ensure that you can use the Copy-VMFile cmdlet on Server1 to copy files from VM1.
Solution: You need to enable the Data Exchange integration service for VM1. Does this meet the goal?

• A. YES
• B. NO

Answer: B

NEW QUESTION 16
Scenario:
You are a network administrator for a company named Contoso,Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured.
*Network address translation (NAT)
*The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to server2 You identify the following requirements:
* Add 28 devices to subnet2 for a temporary project.
* Configure Server2 to accept VPN connections from the internet.
* Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
End of Scenario:
What should you do to meet the DHCP connectivity requirement for Subnet2?

• A. Install the Routing role service on Server2.
• B. Install the IP address Management (IPAM) Server feature on Server2.
• C. Install the Routing role service on Server1.
• D. Install the DHCP Server server role on Server1.

Answer: C

NEW QUESTION 17
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2021 and has the DNS Server role installed. Automatic scavenging of state records is enabled and the scavenging period is set to 10 days.
All client computers dynamically register their names in the contoso.com DNS zone on Server1.
You discover that the names of multiple client computers that were removed from the network several weeks ago can still be resolved.
You need to configure Server1 to automatically remove the records of the client computers that have been offline for more than 10 days.
Solution: You run the dnscmd.exe command and specify the /AgeAllRecords parameter for the zone. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
https://technet.microsoft.com/en-us/library/cc772069(v=ws.11).aspx

NEW QUESTION 18
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:

Server1 has two virtual machines named VM1 and VM that run Windows Server 2021. VM1 connects to Private1. VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM2 to Private1 and External1. You install the Remote Access server on VM2, and you configure NAT in the Routing and Remote Access console. You configure VM1 and VM2 as the default gateway.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 19
Your network contains an Active Directory forest named contoso.com.
The forest contains five domains. You manage DNS for the contoso.com domain only. You are not responsible for managing DNS for the child domains.
The DNS servers in a child domain named research.contoso.com are reconfigured often.
You need to ensure that clients in contoso.com can resolve addresses in research.contoso.com. The solution must minimize zone replication traffic.
What should you do?

• A. Create a primary zone for research.contoso.com on the DNS servers of contoso.com
• B. Create a secondary zone for research.contoso.com on the DNS servers of contoso.com
• C. Create a stub zone for research.contoso.com on the DNS servers of contoso.com
• D. Create a delegation for research.contoso.com

Answer: D

Explanation:
References:
https://blogs.msmvps.com/acefekay/2010/10/01/dns-parent-child-dns-delegation-how-to-create-a-dns-delegation

NEW QUESTION 20
Your network contains an Active Directory domain named contoso.com. The domain contains a Hyper-V host named Server1 that runs Windows Server 2021.
Server1 hosts four machines that are members of the domains. The virtual machines are configured as sown in the following table.

Which virtual machines can you manage by using PowerShell Direct?

• A. Only VM2
• B. VM1, VM2, and VM4
• C. only VM4
• D. VM1, VM2, and VM3

Answer: B

NEW QUESTION 21
You have a DirectAccess Server that is accessible by using the name directaccess.fabrikam.com. On the DirectAccess server, you install a new server certificate that has a subject name of
directaccess.contoso.com, and then you configure DNS records for directaccess.contoso.com
You need to change the endpoint name for DirectAccess to directaccess.contoso.com
What command should you run? To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 22
You have an internal network that contains multiple subnets.
You have a Microsoft Azure subscription that contains multiple virtual networks.
You need to deploy a hybrid routing solution between the network and the Azure subscription. The solution must ensure that the computers on all of the networks can connect to each other.
You install RAS Gateway and enable BGP routing on the network and in Azure.
Which three actions should you perform next in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-bgp-resource-manager-ps#enablebgp

NEW QUESTION 23
Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and litwareinc.com.
Your company recently deployed DirectAccess for the members of a group named DA_Computers. All client computers are members of DA_Computers.
You discover that DirectAccess clients can access the resources located in the contoso.com domain only. The clients can access the resources in the litwareinc.com domain by using an L2TP VPN connection to the network.
You need to ensure that the DirectAccess clients can access the resources in the litwareinc.com domain. What should you do?

• A. From a Group Policy object (GPO), modify the Name Resolution Policy Table (NRPT).
• B. From the properties of the servers in litwareinc.com, configure the delegation settings.
• C. On an external DNS server, create a zone delegation for litwareinc.com.
• D. Add the servers in litwareinc.com to the RAS and IAS Servers group.

Answer: A

Explanation:
https://blogs.technet.microsoft.com/tomshinder/2010/04/01/directaccess-client-location-awareness-nrpt-name-re

NEW QUESTION 24
Your company has three offices. The offices are located in Seattle, Chicago, and Montreal.
You are configuring a new WAN link between the three offices by using the Remote Access server role in Windows Server 2021. You will use Border Gateway Protocol (DGP) as a routing protocol between the sites.
You need to configure the server in the Seattle office for BGP routing. What should you do first?

• A. From Routing and Remote Access, add a new IPv4 routing protocol
• B. From Windows PowerShell, run the Add-BgpPeer cmdlet and specify the –LocalASN parameter
• C. From Routing and Remote Access, add a new IPv6 routing protocol
• D. From Windows PowerShell, run the Add-BgpRouter cmdlet and specify the –LocalASN parameter

Answer: D

NEW QUESTION 25
You have multiple subnets.
On one of the subnets, you install a server named Server1 that runs Windows Server 2021. Server1 has the following IPv6 addresses:
ff00:e378:8000::63bf:3fff:fdd2
fe80::200:5aee:feaa:20a2
fc00:fdf8:f53b:82e4::53
2000:1516::6c:2348
Which IPv6 address is used when Server1 communicates with different hosts? To answer, select the appropriate options in the answer area.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
References: https://technet.microsoft.com/pt-pt/library/cc757359(v=ws.10).aspx

NEW QUESTION 26
......