Simulation 70-741 Dumps 2021

NEW QUESTION 1
You have two servers named Server1 and Server2 that run Windows Server 2021. Server1 and Server2 have the Network Policy Server role service installed.
Server1 is configured to forward connection requests to Server2.
Incoming connection requests to Server1 contain the User Name attribute. The User Name attribute does not contain the domain name suffix.
You need to ensure that the User Name attribute will be replaced by using a format of username@contoso.com.
How should you configure the attribute manipulation role on Server1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 2
Your company owns the public Internet IP address range of 131.107.20.0 to 131.107.20.255.
You need to create a subnet that supports four hosts. The solution must minimize the number of addresses available to the subnet.
Which subnet should you use?

• A. 131.107.20.16/28
• B. 131.107.20.16/30
• C. 131.107.20.0/29
• D. 131.107.20.0 with subnet mask 255.255.255.224

Answer: C

Explanation: http://jodies.de/ipcalc?host=131.107.20.0&mask1=29&mask2=

NEW QUESTION 3
You have an IP Address Management (IPAM) server named IPAM1 that runs Window Server 2021. IPAM1 manages all of the DHCP servers on your network.
You are troubleshooting an issue for a client that fails to receive an IP address from DHCP.
You need to ensure that from IPAM1, you can view all of the event data for the DHCP leases from the last 24 hours.
Solution: From Server Manager, you run Retrieve Event Catalog Data. Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation: References:
http://www.techblogopedia.com/blog/ip-address-managementipam-windows-server-2012-r2-part-3/

NEW QUESTION 4
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. You enable Response Rate Limiting on Server1. You need to prevent Response Rate Limiting from applying to hosts that reside on the network of 10.0.0.0/24. Which cmdlets should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation: Set-DnsServerResponseRateLimiting
Add-DnsServerResponseRateLimitingExceptionlist
https://docs.microsoft.com/en-us/powershell/module/dnsserver/set-dnsserverresponseratelimiting?view=win10-p

NEW QUESTION 5
On a DNS server that runs Windows Server 2021, you plan to create two new primary zones named adatum.com and contoso.com. You have the following requirements for the zones:
• Ensure that computers on your network can register records automatically in the adatum.com zone.
• Ensure that records that are stale for two weeks are purged automatically from the contoso.com zone. What command should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation: Set-DnsServerForwarder –UseRootHint $false
References:
https://docs.microsoft.com/en-us/powershell/module/dnsserver/set-dnsserverforwarder?view=win10-ps

NEW QUESTION 6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are a network administrator for a company named Contoso, Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured:
Network address translation (NAT)
The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to Server2. You identify the following requirements:
Add 28 devices to subnet2 for a temporary project.
Configure Server2 to accept VPN connections from the internet.
Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
You deploy a computer named ComputerA to Subnet1. ComputerA has an IP address of 10.10.0.129 and a subnet mask of 255.255.255.0.
You plan to use ComputerA to access the resources on Web1.
Which IP address should you use as the default gateway on ComputerA?

• A. 10.10.1.1
• B. 10.10.0.224
• C. 131.107.0.223
• D. 172.16.128.193

Answer: B

NEW QUESTION 7
Refer to Exhibit:

You plan to implement a VPN. FabRA1 will use the RADIUS proxy for authentication.
You need to ensure that VPN clients can be authenticated and can access internal resources. The solution must ensure that FabRS1 is used as a RADIUS server and FabRPl is used as a RADIUS proxy.
Which two actions should you perform? Each correct answer presents part of the solution.

• A. Create a connection request policy on FabRSl.
• B. Create a connection request policy on FabRPl.
• C. Create a network policy on FabRSl.
• D. Delete the default connection request policy on FabRSl.
• E. Create a network policv on FabRPl.

Answer: BC

NEW QUESTION 8
You have 2000 devices, One hundred of the devices are mobile devices that have physical addresses beginning with 98-5F.
You have a DHCP server named Server1.
You need to ensure that the mobile devices register their host name by using a DNS suffix of mobile.contoso.com

• A. From the properties of Scopte1, Modify the Conflict detection attempts setting.
• B. From the properties of Scope1, Configure Name Protection.
• C. From the Properties of IPV4, configure the bindings.
• D. From IPV4, create a new filter.
• E. From the properties of Scope1, create an exclusion range.
• F. From IPv4, run the DHCP Policy Configuration Wizard.
• G. From Control Panel, modify the properties of Ethernet.
• H. From Scope1, create a reservation

Answer: F

NEW QUESTION 9
You have an IP Address Management (IPAM) deployment that is used to manage all of the DNS servers on your network. IPAM is configured to use Group Policy provisioning.
You discover that a user adds a new mail exchanger (MX) record to one of the DNS zones. You want to identify which user added the record.
You open Event Catalog on an IPAM server, and you discover that the most recent event occurred yesterday. You need to ensure that the operational events in the event catalog are never older than one hour.
What should you do?

• A. From the properties on the DNS zone, modify the refresh interval.
• B. From an IPAM_DNS Group Policy object (GPO), modify the Group Policy refresh interval.
• C. From Task Scheduler, modify the MicrosoftWindowsIPAMAudit task.
• D. From Task Scheduler, create a scheduled task that runs the Update-IpamServer cmdlet.

Answer: C

NEW QUESTION 10
Scenario:
You are a network administrator for a company named Contoso,Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured.
*Network address translation (NAT)
*The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to server2 You identify the following requirements:
* Add 28 devices to subnet2 for a temporary project.
* Configure Server2 to accept VPN connections from the internet.
* Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
End of Scenario:
What should you do to meet the DHCP connectivity requirement for Subnet2?

• A. Install the Routing role service on Server2.
• B. Install the IP address Management (IPAM) Server feature on Server2.
• C. Install the Routing role service on Server1.
• D. Install the DHCP Server server role on Server1.

Answer: C

NEW QUESTION 11
You have a server named Server1 that runs Windows Server 2021 and is configured as a domain controller. You install the DNS Server server role on Server1.
You plan to store a DNS zone in a custom Active Directory partition. You need to create a new Active Directory partition for the zone. What should you use?

• A. Set-DnsServer
• B. Active Directory Sites and Services
• C. Dns.exe
• D. Dnscmd.exe

Answer: D

Explanation: https://technet.microsoft.com/en-us/library/ee649181(v=ws.10).aspx

NEW QUESTION 12
You have a Microsoft Azure subscription and an on-premises network.
To the on-premises network, you deploy a new server named Server1 that runs Windows Server 2021. In Azure, you configure a virtual gateway on an Azure virtual network.
You need to ensure that the computers on the on-premises network can access virtual machines on the Azure virtual network.
What should you do on Server1?

• A. Install the Remote Access server rol
• B. From the Routing and Remote Access Server Setup Wizard, select Secure connection between two private networks.
• C. Install the Data Center Bridging (DCB) feature, and then run the Install-RemoteAccess cmdlet.
• D. Install the Remote Access server rol
• E. From the Routing and Remote Access Server Setup Wizard, select Virtual private network (VPN) access and NAT.
• F. Install the Data Center Bridging (DCB) feature, and then run the E nable-RemoteAccessRoutingDomain cmdlet.

Answer: A

NEW QUESTION 13
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. Server2 has the DHCP Server role installed. The IPAM server retrieves data from Server2.
You create a domain user account named User1.
You need to ensure that User1 can use IPAM to manage DHCP.
Which command should you run on Server1? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 14
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. IPAM is configured to use the Group Policy based provisioning method. The prefix for the IPAM Group Policy objects (GPOs) is IP.
From Group Policy Management, you manually rename the IPAM GPOs to have a prefix of IPAM. You need to modify the GPO prefix used by IPAM.
What should you do?

• A. Click Configure server discovery in Server Manager.
• B. Run the Set-IpamConfiguration cmdlet.
• C. Click Provision the IPAM server in Server Manager.
• D. Run the Invoke-IpamGpoProvisioning cmdlet.

Answer: B

Explanation: The Set-IpamConfiguration cmdlet modifies the configuration for the computer that runs the IPAM server. The -GpoPrefix<String> parameter specifies the unique Group Policy object (GPO) prefix name that IPAM
uses to create the group policy objects. Use this parameter only when the value of the ProvisioningMethod parameter is set to Automatic.
References:
https://technet.microsoft.com/en-us/library/jj590816.aspx

NEW QUESTION 15
You have a Hyper-V host named Server1 that runs Windows Server 2021. Server1 has a virtual switch named Switch1.
Server1 hosts the virtual machines configured as shown in the following table.

Windows Firewall on VM1 and VM2 is configured to allow ICMP traffic. VM1 and VM2 connect to Switch1. You fail to ping VM1 from VM2.
You need to view the VirtualSubnetId to which VM1 connects.
Which cmdlet should you run on Server1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 16
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From a Group Policy object (GPO) in the domain, you add a rule to the Name Resolution Policy Table (NRPT).
Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation: The NRPT stores configurations and settings that are used to deploy DNS Security Extensions (DNSSEC), and also stores information related to DirectAccess, a remote access technology.
Note: The Name Resolution Policy Table (NRPT) is a new feature available in Windows Server 2008 R2. The NRPT is a table that contains rules you can configure to specify DNS settings or special behavior for names or namespaces. When performing DNS name resolution, the DNS Client service checks the NRPT before sending a DNS query. If a DNS query or response matches an entry in the NRPT, it is handled according to settings in the policy. Queries and responses that do not match an NRPT entry are processed normally.
References: https://technet.microsoft.com/en-us/library/ee649207(v=ws.10).aspx

NEW QUESTION 17
Your network contains an Active Directory domain named contoso.com. The functional level of the forest and the domain is Windows Server 2008 R2. All servers in the domain run Windows Server 2021 Standard. The domain contains 300 client computers that run either Windows 8.1 or Windows 10.
The domain contains nine servers that are configured as shown in the following table.

The virtual machines are configured as follows:
Each virtual machine has one virtual network adapter.
VM1 and VM2 are part of a Network Load Balancing (NLB) cluster.
All of the servers on the network can communicate with all of the virtual machines.
You need to install the correct edition of Windows Server 2021 to support the planned changes for Server2, Server3, Server4, and Server6.
Which edition or editions should you choose for each server? To answer, drag the appropriate editions to the correct servers. Each edition may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation:

NEW QUESTION 18
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Your network contains an Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2012.
The network uses an address space of 192.168.0.0/16 and contains multiple subnets. The network is not connected to the Internet.
The domain contains three servers configured as shown in the following table.

Client computers obtain TCP/IP settings from Server3.
You add a second network adapter to Server2. You connect the new network adapter to the Internet. You install the Routing role service on Server2.
Server1 has four DNS zones configured as shown in the following table.

What should you do to enable Server2 as a NAT server?

• A. From Routing and Remote Access, add an interface.
• B. From Windows PowerShell, run the New-RoutingGroupConnector cmdlet.
• C. From Routing and Remote Access, add a routing protocol.
• D. From Windows PowerShell, run the Install-WindowsFeature cmdlet.

Answer: A

Explanation: https://technet.microsoft.com/en-us/library/dd469812(v=ws.11).aspx

NEW QUESTION 19
Your network contains an Active Directory forest. The forest contains a domain named contoso.com.
All of the DHCP servers and the DNS servers in the forest are managed by using an IP Address Management (IPAM) server named Cont-IPAM1.
You acquire a new company that has an Active Directory forest. The forest contains a domain named fabrikam.com.
You have six servers that are configured as shown in the following table.

You need to ensure that all of the DHCP and DNS servers in both of the forests can be managed by using Cont_IPAM1. The solution must use the principle of least privileges.
Which two actions should you perform? Each correct answer presents part of the solution.

• A. Upgrade Fabr_DNS1 to Windows Server 2021.
• B. Upgrade Fabr_DHCP1 to Windows Server 2021.
• C. Create an outgoing forest trust from contoso.com to fabrikam.com.
• D. Upgrade Cont_IPAM1 to Windows Server 2021.
• E. Create a two-way forest trust between contoso.com and fabrikam.com

Answer: DE

Explanation: References:
https://github.com/MicrosoftDocs/windowsserverdocs/blob/master/WindowsServerDocs/networking/technologi
Tomsho, Greg, MCSA Guide to Networking with Windwos Server 2021, Exam 70-741, Cengage Learning, Boston, 2021, p. 223

NEW QUESTION 20
You have a server named Server1 that has a Server Core installation of Windows Server 2021. Server! is configured to obtain an IP address automatically.
You need to configure the IPv4 address, netmask, and default gateway manually for a network interface named Ethernet on Server1.
What should you run?

• A. ipconfig.exe
• B. netsh.exe
• C. Set-NetNat
• D. Set-NetIPv4Protocol

Answer: C