Microsoft 70-743
Upgrading Your Skills to MCSA: Windows Server 2016
Microsoft 70-743 Dumps Available Here at:
http://blog.giftovus.com/?tell=microsoft-exam/70-743-dumps.html
Enrolling now you will get access to 97 questions in a unique set of 70- 743 dumps
Question 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration:
- You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.
You need to configure Active Directory to support the planned deployment.
Solution: You run adprep.exe from the Windows Server 2016 installation media.
Does this meet the goal?
Options:
A. Yes
B. No Answer: B
Explanation:
Adprep just prepares the domain for Window Server 2016, it does not actually raise the domain functional level to Windows Server 2016, which is required for Device Registration.
Note: Adprep.exe is a command-line tool that is included on the installation disk of each version of Windows Server. Adprep.exe performs operations that must be completed on the domain controllers that run in an existing Active Directory environment before you can add a domain controller that runs that
 https://www.certification-questions.com

Microsoft 70-743
version of Windows Server.
Adprep.exe commands run automatically as needed as part of the AD DS installation process on servers that run Windows Server 2012 or later. The commands need to run in the following cases:
- Before you add the first domain controller that runs a version of Windows Server that is later than the latest version that is running in your existing domain.
- Before you upgrade an existing domain controller to a later version of Windows Server, if that domain controller will be the first domain controller in the domain or forest to run that version of Windows
Server.
References:
https://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/operations/configure-device-based- conditional-access-on-premises
Question 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.
- You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From Windows PowerShell on Server1, you run the Add-DnsServertrustAnchor cmdlet. Does this meet the goal?
Options:
A. Yes
B. No Answer: B
Explanation:
The Add-DnsServerTrustAnchor command adds a trust anchor to a DNS server. A trust anchor (or trust "point"?) is a public cryptographic key for a signed zone. Trust anchors must be configured on every non- authoritative DNS server that will attempt to validate DNS data. Trust Anchors have no direct relation to DSSEC validation.
References: https://technet.microsoft.com/en-us/library/jj649932.aspx https://technet.microsoft.com/en-us/library/dn593672(v=ws.11).aspx
Question 3
 https://www.certification-questions.com

Microsoft 70-743
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.
- You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From a Group Policy object (GPO) in the domain, you add a rule to the Name Resolution Policy Table (NRPT).
Does this meet the goal?
Options:
A. Yes
B. No Answer: A
Explanation:
The NRPT stores configurations and settings that are used to deploy DNS Security Extensions (DNSSEC), and also stores information related to DirectAccess, a remote access technology.
Note: The Name Resolution Policy Table (NRPT) is a new feature available in Windows Server 2008 R2. The NRPT is a table that contains rules you can configure to specify DNS settings or special behavior for names or namespaces. When performing DNS name resolution, the DNS Client service checks the NRPT before sending a DNS query. If a DNS query or response matches an entry in the NRPT, it is handled according to settings in the policy. Queries and responses that do not match an NRPT entry are processed normally.
References: https://technet.microsoft.com/en-us/library/ee649207(v=ws.10).aspx
Question 4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.
- You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From a Group Policy object (GPO) in the domain, you modify the Network List Manager Policies. Does this meet the goal?
Options:
 https://www.certification-questions.com

Microsoft 70-743
A. Yes
B. No Answer: B
Explanation:
Network List Manager Policies are security settings that you can use to configure different aspects of how networks are listed and displayed on one computer or on many computers.
Network List Manager Policies are not relatged to DN SSEC.
References: https://technet.microsoft.com/en-us/library/jj966256(v=ws.11).aspx
Question 5
You have a server named Server1 that runs Windows Server 2016. You need to configure Server1 as a multitenant RAS Gateway. What should you install on Server1?
Options:
A. the Network Controller server role
B. the Remote Access server role
C. the Data Center Bridging feature
D. the Network Policy and Access Services server role Answer: B
Explanation:
RAS Gateway - Multitenant. You can deploy RAS Gateway as a multitenant, software-based edge gateway and router when you are using Hyper-V Network Virtualization or you have VM networks deployed with virtual Local Area Networks (VLANs). With the RAS Gateway, Cloud Service Providers (CSPs) and Enterprises can enable datacenter and cloud network traffic routing between virtual and physical networks, including the Internet. With the RAS Gateway, your tenants can use point-so-site VPN connections to access their VM network resources in the datacenter from anywhere. You can also provide tenants with site-to-site VPN connections between their remote sites and your CSP datacenter. In addition, you can configure the RAS Gateway with BGP for dynamic routing, and you can enable Network Address Translation (NAT) to provide Internet access for VMs on VM networks.
References: https://technet.microsoft.com/en-us/windows-server-docs/networking/remote-access/remote-access
Question 6
You have an Active Directory domain that contains several Hyper-V hosts that run Windows Server 2016. You plan to deploy network virtualization and to centrally manage Datacenter Firewall policies.
Which component must you install for the planned deployment?
 https://www.certification-questions.com

Microsoft 70-743
Options:
A. the Routing role service
B. the Canary Network Diagnostics feature C. the Network Controller server role
D. the Data Center Bridging feature Answer: C
Explanation:
Using Windows PowerShell, the REST API, or a management application, you can use Network Controller to manage the following physical and virtual network infrastructure:
* Datacenter Firewall
This Network Controller feature allows you to configure and manage allow/deny firewall Access Control rules for your workload VMs for both East/West and North/South network traffic in your datacenter. The firewall rules are plumbed in the vSwitch port of workload VMs, and so they are distributed across your workload in the datacenter. Using the Northbound API, you can define the firewall rules for both incoming and outgoing traffic from the workload VM. You can also configure each firewall rule to log the traffic that was allowed or denied by the rule.
* Hyper-V VMs and virtual switches
* Remote Access Service (RAS) Multitenant Gateways, Virtual Gateways, and gateway pools * Load Balancers
References: https://technet.microsoft.com/en-us/library/dn859239.aspx
Question 7
You have a virtual machine named VM1 that runs Windows Server 2016. VM1 hosts a service that requires high network throughput.
VM1 has a virtual network adapter that connects to a Hyper-V switch named vSwitch1. vSwitch1 has one network adapter. The network adapter supports Remote Direct Memory Access (RMDA), the Single Root I/ O Virtualization (SR-IOV) interface, Quality of Service (QoS), and Receive Side Scaling (RSS).
You need to ensure that the traffic from VM1 can be processed by multiple networking processors.
Which Windows PowerShell command should you run on the host of VM1?
Options:
A. Set-NetAdapterRss B. Set-NetAdapterRdma C. Set-NetAdapterSriov D. Set-NetAdapterQoS Answer: A
Explanation:
 https://www.certification-questions.com

Microsoft 70-743
The Set-NetAdapterRss cmdlet sets the receive side scaling (RSS) properties on a network adapter. RSS is a scalability technology that distributes the receive network traffic among multiple processors by hashing the header of the incoming packet. Without RSS Windows Server 2012/2016; network traffic is received on the first processor which can quickly reach full utilization limiting receive network throughput. Many properties can be configured using the parameters to optimize the performance of RSS. The selection of the processors to use for RSS is an important aspect of load balancing. Most of the parameters for this cmdlet help to determine the processors used by RSS.
Question 8
You have a server named Server1 that runs Windows Server 2016. Server1 is a Hyper-V host that hosts a virtual machine named VM1.
Server1 has three network adapter cards that are connected to virtual switches named vSwitch1, vSwitch2 and vSwitch3.
You configure NIC Teaming on VM1 as shown in the exhibit. (Click the Exhibit button.)
- You need to ensure that VM1 will retain access to the network if a physical network adapter card fails on Server1.
What should you do?
Options:
A. From Hyper-V Manager on Server1, modify the settings of VM1.
B. From Windows PowerShell on VM1, run the Set-VmNetworkAdapterTeamMapping cmdlet. C. From Windows PowerShell on Server1, run the Set-VmNetworkAdapterFailoverConfiguration
cmdlet.
D. From Hyper-V Manager on Server1, modify the properties of vSwitch1. Answer: A
Explanation:
You can configure NIC teaming in the Guest OS; however, before NIC teaming will work in a virtual machine, you need to enable NIC teaming in the Advanced Features section of the VM settings.
Question 9
You have a server named Server1 that runs Windows Server 2016.
The disk configuration for Server1 is shown in the exhibit. (Click the Exhibit button.)
- You add Server1 to a cluster.
You need to ensure that you can use Disk 1 for Storage Spaces Direct. What should you do first?
 https://www.certification-questions.com

Microsoft 70-743
Options:
A. Set Disk 1 to offline.
B. Convert Partition (E:) to ReFS.
C. Convert Disk 1 to a dynamic disk.
D. Delete Partition (E:).
Answer: D
Explanation:
The disks used in Storage Spaces Direct cannot contain existing partitions.
Question 10
Your network contains three Hyper-V hosts. You add all of the hosts to a cluster.
You need to create highly available storage spaces that connect to directly attached storage on the hosts. Which cmdlet should you use?
Options:
A. Update-ClusterVirtualMachineConfiguration B. Enable-ClusterStorageSpacesDirect
C. Set-StoragePool
D. Add-ClusterDisk
Answer: B
Explanation:
The Enable-ClusterStorageSpacesDirect cmdlet enables highly available Storage Spaces that use directly attached storage Storage Spaces Direct (S2D) on a cluster.
Would you like to see more? Don't miss our 70-743 PDF file at:
http://blog.giftovus.com/?tell=microsoft-pdf/70-743-pdf.html
 https://www.certification-questions.com