Best Quality 70-741 Dumps 2021

NEW QUESTION 1
Your network contains an Active Directory domain. The domain contains a certification authority (CA) and a Network Policy Server (NPS) server.
You plan to deploy Remote Access Always On VPN. Which authentication method should you use?

• A. Microsoft: EAP-TTLS
• B. Microsoft: Secured password
• C. Microsoft: Protected EAP
• D. Microsoft: EAP-AKA

Answer: C

NEW QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server 2021. Server1 is configured as a VPN server. Server1 is configured to allow domain users to establish VPN connections from 06:00 to 18:00 everyday of the week.
You need to ensure that domain users can establish VPN connections only between Monday and Friday.
Solution: From Server Manager, You modify the Access Policies on Server1.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 3
You are implementing a secure network. The network contains a DHCP server named Server1 that runs Windows Server 2021.
You create a DHCP allow filter that contains all of the computers on the network that are authorized to receive IP addresses.
You discover that unauthorized computers can obtain an IP address from Server1.
You need to ensure that only authorized computers can receive an IP address from Server1. Solution: You run the following command.
Add-DHCPServer4Filter -ComputerName Server1 -MacAddress -List Allow Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation: References:
https://docs.microsoft.com/en-us/powershell/module/dhcpserver/add-dhcpserverv4filter?view=win10-ps

NEW QUESTION 4
Your company owns the public Internet IP address range of 131.107.20.0 to 131.107.20.255.
You need to create a subnet that supports four hosts. The solution must minimize the number of addresses available to the subnet.
Which subnet should you use?

• A. 131.107.20.16/28
• B. 131.107.20.16/30
• C. 131.107.20.0/29
• D. 131.107.20.0 with subnet mask 255.255.255.224

Answer: C

Explanation: http://jodies.de/ipcalc?host=131.107.20.0&mask1=29&mask2=

NEW QUESTION 5
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From a Group Policy object (GPO) in the domain, you modify the Network List Manager Policies. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: Network List Manager Policies are security settings that you can use to configure different aspects of how networks are listed and displayed on one computer or on many computers.
Network List Manager Policies are not related to DNSSEC.
References: https://technet.microsoft.com/en-us/library/jj966256(v=ws.11).aspx

NEW QUESTION 6
On a DNS server that runs Windows Server 2021, you plan to create two new primary zones named adatum.com and contoso.com. You have the following requirements for the zones:
• Ensure that computers on your network can register records automatically in the adatum.com zone.
• Ensure that records that are stale for two weeks are purged automatically from the contoso.com zone. What command should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation: Set-DnsServerForwarder –UseRootHint $false
References:
https://docs.microsoft.com/en-us/powershell/module/dnsserver/set-dnsserverforwarder?view=win10-ps

NEW QUESTION 7
You have a DirectAccess Server that is accessible by using the name directaccess.fabrikam.com. On the DirectAccess server, you install a new server certificate that has a subject name of
directaccess.contoso.com, and then you configure DNS records for directaccess.contoso.com
You need to change the endpoint name for DirectAccess to directaccess.contoso.com
What command should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 8
You company has a main office in London. The company has 1,000 users who are located in many countries. You plan to deploy a large remote access solution for the company.
The London office has three servers named Server1, Server2, and Server3 that run Windows Server 2021. You plan to use Server1 as a VPN server, Server2 as a RADIUS proxy, and Server3 as a RADIUS server. You need to configure Server2 to support the planned deployment.
Which three actions should you perform on Server2? Each correct answer presents part of the solution.

• A. Create a connection request policy.
• B. Deploy a Windows container.
• C. Add a RADIUS client.
• D. Create a network policy.
• E. Create a remote RADIUS server group.

Answer: ACE

Explanation: https://ittrainingday.com/2014/01/03/how-to-configure-radius-proxy-servers/

NEW QUESTION 9
You plan to deploy several Hyper-V hosts that run Windows Server 2021. The deployment will use Software defined Networking (SDN) and VXLAN.
Which server role should you install on the network to support the planned deployment?

• A. Network Controller
• B. Network Policy and Access Services
• C. Remote Access
• D. Host Guardian Service

Answer: A

NEW QUESTION 10
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:

Server1 has two virtual machines named VM1 and VM that run Windows Server 2021. VM1 connects to Private VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM2 to private1 and External1. You install the Remote Access Serverrole on VM2, and you configure NAT in the Routing and Remote Access console. You configure VM1 to use VM2 as the default gateway.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 11
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:

Server1 has two virtual machines named VM1 and VM that run Windows Server 2021. VM1 connects to Private VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM1 to Internal1. You run the New-NetNatIpAddress and the New-NetNat cmdlets on Server1. You configure VM1 to use VM2 as the default gateway.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 12
You have two servers named Server1 and Server2. Server1 is a DNS server. Server2 is configured to use Server1 as the primary DNS server. You run ipconfig /displaydns on Server2 and receive the following output.

An administrator modifies the records in adatum.com as shown in the Adatum.com Zone exhibit. (Click the Exhibit button.)

The properties of the DNS record for ComputerA are shown in the ComputerA exhibit. (Click the Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 13
You have a server named Server1 that runs Windows Server 2021. Server1 is a Hyper-V host that hosts a virtual machine named VM1.
Server1 has three network adapter cards that are connected to virtual switches named vSwitch1, vSwitch2 and vSwitch3.
You configure NIC Teaming on VM1 as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that VM1 will retain access to the network if a physical network adapter card fails on Server1.
What should you do?

• A. From Windows PowerShell on VM1, run the Set-VmNetworkAdapterTeamMapping cmdlet.
• B. From Windows PowerShell on Server1, run the Set-VmNetworkAdapter cmdlet.
• C. From Windows PowerShell on Server1, run the Set-VmSwitch cmdlet.
• D. From Windows PowerShell on Server1, run the Set-VmNetworkAdapterFailoverConfigurationcmdlet

Answer: A

NEW QUESTION 14
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Your network contains an Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2012.
The network uses an address space of 192.168.0.0/16 and contains multiple subnets. The network is not connected to the Internet.
The domain contains three servers configured as shown in the following table.

Client computers obtain TCP/IP settings from Server3.
You add a second network adapter to Server2. You connect the new network adapter to the Internet. You install the Routing role service on Server2.
Server1 has four DNS zones configured as shown in the following table.

You need to ensure that when a record is added dynamically to fabrikam.com, only the computer that created the record can modify the record. The solution must allow administrators to modify all of the records in fabrikam.com.
What should you do?

• A. Change fabrikam.com to an Active Directory-integrated zone.
• B. Raise the functional level of the domain.
• C. Modify the security settings of the Fabrikam.com.dns file.
• D. Modify the Start of Authority (SOA) settings of fabrikam.com

Answer: A

Explanation: https://technet.microsoft.com/en-us/library/cc753751(v=ws.11).aspx

NEW QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that has the Network Policy and Access Services server role installed. You create a Shared Secret Network Policy Server (NPS) template named Template1.
You need to view the shared secret string used for Template1.
Solution: From the Network Policy Server console, you export the templates, and you view the exported XML file.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 16
You have a server named Server1 that runs Windows Server 2021 and is configured as a domain controller. You install the DNS Server server role on Server1.
You plan to store a DNS zone in a custom Active Directory partition. You need to create a new Active Directory partition for the zone. What should you use?

• A. Set-DnsServer
• B. Active Directory Sites and Services
• C. Dns.exe
• D. Dnscmd.exe

Answer: D

Explanation: https://technet.microsoft.com/en-us/library/ee649181(v=ws.10).aspx

NEW QUESTION 17
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:

Server1 has two virtual machines named VM1 and VM that run Windows Server 2021. VM1 connects to Private VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM2 to private1 and External1. You run the New-NetNatIpAddress and the New-NetNat cmdlets on VM2. You configure VM1 to use VM2 as the default gateway.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 18
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Hyper-V host named Server 1. The network adapters on Server1 have single root I/O virtualization (SR-IOV) enabled.
Server1 hosts a virtual machine named VM1 that runs Windows Server 2021. You need to identify whether SR-IOV is used by VM1.
Solution: On Server1, you open Hyper-V Manager and view the Integration Services settings of VM1.
Does this meet the goal?

• A. Yes
• B. No

Answer: B