Refined 70-741 Exam Questions and Answers 2021

NEW QUESTION 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2021 and has the DNS Server role installed. Automatic scavenging of state records is enabled and the scavenging period is set to 10 days.
All client computers dynamically register their names in the contoso.com DNS zone on Server1.
You discover that the names of multiple client computers that were removed from the network several weeks ago can still be resolved.
You need to configure Server1 to automatically remove the records of the client computers that have been offline for more than 10 days.
Solution: You set the Time to live (TTL) value of all of the records in the zone. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: https://technet.microsoft.com/en-us/library/cc958972.aspx

NEW QUESTION 2
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Your network contains an Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2012.
The network uses an address space of 192.168.0.0/16 and contains multiple subnets. The network is not connected to the Internet.
The domain contains three servers configured as shown in the following table.

Client computers obtain TCP/IP settings from Server3.
You add a second network adapter to Server2. You connect the new network adapter to the Internet. You install the Routing role service on Server2.
Server1 has four DNS zones configured as shown in the following table.

You need to ensure that when a computer is removed from the network, the associated records are deleted automatically after 15 days.
Which two actions should you perform? Each correct answer presents part of the solution.

• A. Create a scheduled task that runs the Remove-Computer cmdlet.
• B. Modify the Zone Aging/Scavenging Properties of the zone.
• C. Modify the Time to live (TTL) value of the start of authority (SOA) record.
• D. Set the Scavenging period of Server1.
• E. Modify the Expires after value of the start of authority (SOA) record.

Answer: BD

Explanation: https://technet.microsoft.com/en-us/library/cc771362(v=ws.10).aspx

NEW QUESTION 3
You have a server named Server1 that runs Windows Server 2021. Server1 is located on the perimeter network, and only inbound TCP port 443 is allowed to connect Server1 from the Internet.
You install the Remote Access server role on Server1.
You need to configure Server1 to accept VPN connections over port 443.
Which VPN protocol should you use?

• A. PPTP
• B. SSTP
• C. L2TP
• D. IKEv2

Answer: B

Explanation: https://technet.microsoft.com/en-us/library/dd458955(v=ws.10).aspx

NEW QUESTION 4
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. IPAM is configured to use the Group Policy based provisioning method. The prefix for the IPAM Group Policy objects (GPOs) is IP.
From Group Policy Management, you manually rename the IPAM GPOs to have a prefix of IPAM. You need to modify the GPO prefix used by IPAM.
What should you do?

• A. Click Configure server discovery in Server Manager.
• B. Run the Set-IpamConfiguration cmdlet.
• C. Click Provision the IPAM server in Server Manager.
• D. Run the Invoke-IpamGpoProvisioning cmdlet.

Answer: B

Explanation: The Set-IpamConfiguration cmdlet modifies the configuration for the computer that runs the IPAM server. The -GpoPrefix<String> parameter specifies the unique Group Policy object (GPO) prefix name that IPAM
uses to create the group policy objects. Use this parameter only when the value of the ProvisioningMethod parameter is set to Automatic.
References:
https://technet.microsoft.com/en-us/library/jj590816.aspx

NEW QUESTION 5
Your network contains an Active Directory forest. The forest contains a domain named contoso.com.
All of the DHCP servers and the DNS servers in the forest are managed by using an IP Address Management (IPAM) server named Cont-IPAM1.
You acquire a new company that has an Active Directory forest. The forest contains a domain named fabrikam.com.
You have six servers that are configured as shown in the following table.

You need to ensure that all of the DHCP and DNS servers in both of the forests can be managed by using Cont_IPAM1. The solution must use the principle of least privileges.
Which two actions should you perform? Each correct answer presents part of the solution.

• A. Upgrade Fabr_DNS1 to Windows Server 2021.
• B. Upgrade Fabr_DHCP1 to Windows Server 2021.
• C. Create an outgoing forest trust from contoso.com to fabrikam.com.
• D. Upgrade Cont_IPAM1 to Windows Server 2021.
• E. Create a two-way forest trust between contoso.com and fabrikam.com

Answer: DE

Explanation: References:
https://github.com/MicrosoftDocs/windowsserverdocs/blob/master/WindowsServerDocs/networking/technologi
Tomsho, Greg, MCSA Guide to Networking with Windwos Server 2021, Exam 70-741, Cengage Learning, Boston, 2021, p. 223

NEW QUESTION 6
Your network contains an Active Directory domain named contoso.com. The domain contains a domain-based Distributed file System (DFS) namespace named Namespace1 that has access-based enumeration enabled. Namespace1 has a folder named folder1. Folder1 has a target of \Server1Folder1.
The Permission for folder1 are configured as shown in the following table.

Access-based enumeration is disabled for the share of Folder1.
You need to ensure that both User1 and User2 can see Folder1 when they access \Contoso.comNameSpace1 What should you do?

• A. Enable access-based enumeration for Folder1.
• B. Disable access-based enumeration for Namespace1.
• C. Assign User1 the read NTFS permission to folder1
• D. Deny User1 the read DFS permission to Folder1.

Answer: C

NEW QUESTION 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:

Server1 has two virtual machines named VM1 and VM that run Windows Server 2021. VM1 connects to Private1. VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM2 to Private1 and External1. You install the Remote Access server on VM2, and you configure NAT in the Routing and Remote Access console. You configure VM1 and VM2 as the default gateway.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 8
You have a network policy server (NPS) server named NPS1. One network policy is enabled on NPS1. The policy is configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information in the graphic.

Answer:

Explanation:

NEW QUESTION 9
Scenario:
You are a network administrator for a company named Contoso,Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured.
*Network address translation (NAT)
*The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to server2 You identify the following requirements:
* Add 28 devices to subnet2 for a temporary project.
* Configure Server2 to accept VPN connections from the internet.
* Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
End of Scenario:
You need to identify which subnet mask you must use for subnet2. The solution must minimize the number of available IP addresses on Subnet2.
What subnet mask should you identify? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 10
You have an Active Directory domain named contoso.com. The domain contains servers named Server1 and Server2 that run Windows Server 2021. You install the Remote Access server role on Server1. You install the Network Policy and Access Services server role on Server2. You need to configure Server1 to use Server2 as a RADIUS server. What should you do?

• A. From Routing and Remote Access, configure the authentication provider.
• B. From the Connection Manager Administration Kit, create a Connection Manager profile.
• C. From Server Manager, create an Access Policy.
• D. From Active Directory Users and Computers, modify the Delegation settings of the Server1 computer account.

Answer: A

NEW QUESTION 11
You have a remote access server named Server1 that runs Windows Server 2021. Server1 has DirectAccess enabled.
You have a proxy server named Server2. All computers on the internal network connect to the Internet by using the proxy.
On Server1, you run the command Set-DAClient -forceTunnel Enabled.
You need to ensure that when a DirectAccess client connects to the network, the client accesses all the Internet resources through the proxy.
What should you run on Server1?

• A. Set-DnsClientGlobalSetting
• B. Set-DAEntryPoint
• C. Set-DnsClientNrptRule
• D. Set-DnsClientNrptGlobal

Answer: B

NEW QUESTION 12
You have a server named Server1 that runs Windows Server 2021. Server1 has the DHCP Server and the Windows Deployment Service server roles installed.
Server1 is located on the same subnet as client computers.
You need to ensure that clients can perform a PXE boot from Server1.
Which two IPv4 options should you configure in DHCP? Each correct answer presents part of the solution.

• A. 003 Router
• B. 066 Boot Server Host Name
• C. 015 DNS Domain Name
• D. 006 DNS Servers
• E. 060 Option 60

Answer: BE

NEW QUESTION 13
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. You enable Response Rate Limiting on Server1. You need to prevent Response Rate Limiting from applying to hosts that reside on the network of 10.0.0.0/24. Which cmdlets should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation: Set-DnsServerResponseRateLimiting
Add-DnsServerResponseRateLimitingExceptionlist
https://docs.microsoft.com/en-us/powershell/module/dnsserver/set-dnsserverresponseratelimiting?view=win10-p

NEW QUESTION 14
You have a server named Server1 that runs Windows Server 2021.
You need to deploy the first node cluster of a Network Controller cluster.
Which four cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 15
You have a server named Server1 that runs Windows Server 2021. Server1 has the following routing table.

What will occur when Server1 attempts to connect to a host that has an IP address of 172.20.10.50?

• A. Server1 will attempt to connect directly to 172.20.10.50.
• B. Server1 will route the connection to 10.10.0.2.
• C. Server1 will silently drop the connection attempt.
• D. Server1 will route the connection to 192.168.2.1.

Answer: D

Explanation: http://www.techrepublic.com/article/understanding-routing-tables/

NEW QUESTION 16
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server1. All client computers run Windows 10 and are configured as DHCP clients.
Your helpdesk received calls today from users who failed to access the network from their Windows 10 computer.
You open the DHCP console as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that all of the Windows 10 computers can receive a DHCP lease. Solution: You start the DHCP Server service.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: https://technet.microsoft.com/en-us/library/dd183581(v=ws.10).aspx

NEW QUESTION 17
You are configuring the network for a small branch office. Currently, the branch office does not connect directly to the Internet.
In the branch office, you deploy a new server named Server1 that has a server Core installation of Windows Server 2021. Server1 has two network adapters configured as shown in the following table.

You plan to use Server1 to provide Internet connectivity for the branch office.
Routing and Remote Access (RRAS) in installed and configured for VPN remote access on Server1. You need to configure RRAS on Server1 to provide network address translation (NAT).
Which command or cmdlet should you use first?

• A. New-NetNat Nat1 -ExternalIPInterfaceaddressPrefix 131.107.10.1/29
• B. netsh.exe routing ip nat install
• C. route.exe add 192.168.1.1 255.255.255.0 131.107.10.1 metric 1
• D. Enable-NetNatTransitionConfiguration

Answer: B

Explanation: References:
https://social.technet.microsoft.com/Forums/exchange/en-US/5cd50748-af62-4d29-ab92-1a010b9a1a9f/how-to-

NEW QUESTION 18
You have an Active Directory domain named Contoso.com. The domain contains Hyper-V hosts named Server1 and Server2 that run Windows Server 2021. The Hyper-V hosts are configured to use NVGRE for network virtualization.
You have six virtual machines that are connected to an external switch. The virtual machines are configured as shown.

To which virtual machine or virtual machines can VM1 and VM3 connect? To answer, select the appropriate options in the answer area.

Answer:

Explanation: The GRE keys must match.
To separate the traffic between the two virtualized networks, the GRE headers on the tunneled packets include a GRE Key that provides a unique Virtual Subnet ID for each virtualized network.
References:
https://blogs.technet.microsoft.com/keithmayer/2012/10/08/step-by-step-hyper-v-network-virtualization-31-days