Simulation 70-741 Dumps 2021

NEW QUESTION 1
You have a Scale-Out File Server that has a share named Share1. Share1 contains a virtual disk file named Disk1.vhd.
You plan to create a guest failover cluster.
You need to ensure that you can use the virtual disk as a shared virtual disk for the gust failover cluster. Which cmdlet should you use?

• A. Optimize VHD
• B. Optimize VHDSet
• C. Convert-VHD
• D. Set-VHD

Answer: C

NEW QUESTION 2
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of the repeated scenario
Your network contains an Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2012.
The network uses an address space of 192.168.0.0/16 and contains multiple subnets. The network is not connected to the Internet.
The domain contains three servers configured as shown in the following table.

Client computers obtain TCP/IP settings from Server3.
You add a second network adapter to Server2. You connect the new network adapter to the Internet. You install the Routing role service on Server2.
Server1 has four DNS zones configured as shown in the following table.

End of the repeated scenario
You need to configure an administrator named admin@fabrikam.com as the contact person for the fabrikam.com zone.
What should you modify? To answer, select the appropriate options in the answer area.

Answer:

Explanation: References: https://www.microsoftpressstore.com/articles/article.aspx?p=2756482&seqNum=2

NEW QUESTION 3
You have a virtual machine named VM1 that runs Windows Server 2021. VM1 is a Remote Desktop Services (RDS) server.
You need to ensure that only TCP port 3389 can be used to connect to VM1 over the network.
Which command should you run on the Hyper-V host? To answer, select the appropriate options in the answer area.

Answer:

Explanation: References:
https://technet.microsoft.com/en-us/library/dn464289.aspx

NEW QUESTION 4
Your network contains an Active Directory domain named contoso.com. The domain contains a Hyper-V host named Server1 that runs Windows Server 2021.
Server1 hosts four machines that are members of the domains. The virtual machines are configured as sown in the following table.

Which virtual machines can you manage by using PowerShell Direct?

• A. Only VM2
• B. VM1, VM2, and VM4
• C. only VM4
• D. VM1, VM2, and VM3

Answer: B

NEW QUESTION 5
Your network contains an Active Directory domain named contoso.com. The domain contains three servers named Server1, Server2, and Server3 that run Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. Server2 and Server3 have the DHCP Server role installed and have several DHCP scopes configured. The IPAM server retrieves data from Server2 and Server3.
A domain user named User1 is a member of the groups shown in the following table.

On Server1, you create a security policy for User1. The policy grants the IPAM DHCP Scope Administrator Role with the Global access scope to the user.
Which actions can User1 perform? To answer, select the appropriate options in the answer area.

Answer:

Explanation: https://technet.microsoft.com/en-us/library/dn268500(v=ws.11).aspx

NEW QUESTION 6
You have a DHCP server named Server1 that runs Windows Server 2021. You run Get-DhcpServerv4Scope, and you receive the following results.

You run Get-DhcpServerv4FilterList, and you receive the following results.

You run Get-DhcpServerv4Filter, and you receive the following results.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each selection is worth one point.

Answer:

Explanation:

NEW QUESTION 7
Your company has two main offices. The offices are located in London and Seattle. All servers run Windows Server 2021.
In the Seattle office, you have a Distributed File System (DFS) server named FS1. FS1 has a folder named Folder1 that contains large Windows image files.
In the London office, you deploy a DFS server named FS2, and you then replicate Folder1 to FS2. After several days, you discover that the replication of certain files failed to complete.
You need to ensure that all of the files in Folder1 can replicate to FS2. What should you do?

• A. Modify the disk quota of the drive that contains Folder1.
• B. From a command prompt, run dfsutil /purgemupcache.
• C. Create a quota for Folder1 by using File Server Resource Manager (FSRM).
• D. Modify the size of staging area of Folder1.

Answer: C

Explanation: https://technet.microsoft.com/en-us/library/hh831487(v=ws.11).aspx

NEW QUESTION 8
Your company has a main office in London and a branch office in Seattle. The offices connect to each other by using a WAN link.
In the London office, you have a Distributed File System (DFS) server named FS1 that contains a folder named Folder1.
In the Seattle office, you have a DFS server named FS2. All servers run Windows Server 2021.
You configure replication of Folder1 to FS2.
Users in both offices frequently add files in Folder1.
You monitor DFS Replication, and you discover excessive replication over the WAN link during business hours.
You need to reduce the amount of bandwidth used for replication during business hours. The solution must ensure that the users can continue to save content to Folder1.
What should you do?

• A. Modify the quota settings on Folder1 on FS2.
• B. Modify the properties of the replication group.
• C. Configure the copy of Folder1 on FS2 as read-only.
• D. Modify the replicated folder properties of Folder1 on FS1.

Answer: B

NEW QUESTION 9
You have a DNS server named Server1 that runs Windows Server 2021. Server1 has two Active Directory-integrated zones named contoso.com and adatum.com.
All client computers run Windows 10.
Server1 recently experienced millions of erroneous DNS queries causing a denial of service.
You need to reduce the likelihood that a similar attack will cause a denial of service. The solution must ensure that Server1 continues to resolve names for clients.
What should you do?

• A. Sign both adatum.com and contoso.com zones.
• B. Implement DNS-based Authentication of named Entities (DANS).
• C. Configure DNS policies on Server1.
• D. Enable Response Rate Limiting (RRL) on Server1.

Answer: D

NEW QUESTION 10
You have multiple servers that run Windows Server 2021 and are configured as VPN servers. You deploy a server named NPS1 that has Network Policy Server (NPS) installed.
You need to configure NPS1 to accept authentication requests from the VPN servers. What should you configure on NPS1?

• A. From RADIUS Clients and Servers, add a remote RADIUS server group.
• B. From Policies, add a connection request policy.
• C. From Policies, add a network policy.
• D. From RADIUS Clients and Servers, add RADIUS clients.

Answer: D

NEW QUESTION 11
You have a DHCP server named Server1.
Server1 has an IPv4 scope that contains 100 addresses for a subnet named Subnet! Subnet1 provides guest access to the Internet. There are never more than 20 client computers on Subnet1 simultaneously; however, the computers that connect to Subnet 1 are rarely the same computers.
You discover that some client computers are unable to access the network. The computers that have the issue have IP addresses in the range of 169.254.0.0/16.
You need to ensure that all of the computers can connect successfully to the network to access the Internet. What should you do?

• A. Create a new scope that uses IP addresses in the range of 169.254.0.0/16.
• B. Modify the scope options.
• C. Modify the lease duration.
• D. Configure Network Access Protection (NAP) integration on the existing scope.

Answer: C

NEW QUESTION 12
Your network contains an Active Directory domain named contoso.com that contains a domain controller named DC1. All DNS servers for the network run BIND 10.
Your perimeter network contains a DHCP server named DHCP1 that runs Windows Server 2021. DHCP1 is a member of a workgroup named WORKGROUP. DHCP1 provides IP address leases to guests accessing the Wi-Fi network.
Several engineers access the network remotely by using a VPN connection to a remote access server that runs Windows Server 2021. All of the VPN connections use certificate-based authentication and are subject to access policies in Network Policy Server (NPS). Certificates are issued by an enterprise certification authority (CA) named CA1.
All Windows computers on the network are activated by using Key Management Service (KMS). On-premises users use Remote Desktop Services (RDS).
You plan to deploy IP Address Management (IPAM) to the network. Which action can you perform on the network by using IPAM?

• A. Audit user and device logon event from NPS.
• B. Audit logon events on the RDS server.
• C. Audit configuration changes to the remote access server.
• D. Audit certificate enrollment requests on CA1.

Answer: A

Explanation: References:
https://blogs.technet.microsoft.com/canitpro/2013/08/15/step-by-step-setup-windows-server-2012-ipam-in-your-

NEW QUESTION 13
Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2021.
You install IP Address Management (IPAM) on Server1. You select the automatic provisioning method, and then you specify a prefix of IPAM1.
Which cmdlet should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation: Invoke-IpamGpoProvisioning –Domain contoso.com –GpoPrefixName IPAM –IpamServerFqdn dc1.contoso.com

NEW QUESTION 14
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. Some question sets might
have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From Windows PowerShell on Server1, you run the Export-DnsServerDnsSecPublicKey cmdlet. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/powershell/module/dnsserver/export-dnsserverdnssecpublickey?view=win10-p

NEW QUESTION 15
You have a server named Host1 that runs Windows Server 2021.
You configure Host1 as a virtualization host and create 20 new virtual machines on Host1. You need to ensure that all of the virtual machines can connect to the Internet through Host1.
Which three actions should you perform? Each correct answer presents part of the solution.

• A. On a virtual machine, install the Remote Access server role.
• B. From the properties of each virtual machine, enable virtual LAN identification.
• C. From the properties of each virtual machine, connect to the virtual machine switch.
• D. On Host1, configure the network address translation (NAT) network.
• E. On Host1, create an internal virtual machine switch and specify an IP address for the switch.

Answer: CDE

Explanation: https://technet.microsoft.com/en-us/library/ee449441(v=ws.10).aspx

NEW QUESTION 16
You have a server named Server1 that runs Windows Server 2021. Server1 has the DHCP Server and the Windows Deployment Service server roles installed.
Server1 is located on the same subnet as client computers.
You need to ensure that clients can perform a PXE boot from Server1.
Which two IPv4 options should you configure in DHCP? Each correct answer presents part of the solution.

• A. 003 Router
• B. 066 Boot Server Host Name
• C. 015 DNS Domain Name
• D. 006 DNS Servers
• E. 060 Option 60

Answer: BE

NEW QUESTION 17
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Your network contains an Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2012.
The network uses an address space of 192.168.0.0/16 and contains multiple subnets. The network is not connected to the Internet.
The domain contains three servers configured as shown in the following table.

Client computers obtain TCP/IP settings from Server3.
You add a second network adapter to Server2. You connect the new network adapter to the Internet. You install the Routing role service on Server2.
Server1 has four DNS zones configured as shown in the following table.

You need to ensure that when a record is added dynamically to fabrikam.com, only the computer that created the record can modify the record. The solution must allow administrators to modify all of the records in fabrikam.com.
What should you do?

• A. Change fabrikam.com to an Active Directory-integrated zone.
• B. Raise the functional level of the domain.
• C. Modify the security settings of the Fabrikam.com.dns file.
• D. Modify the Start of Authority (SOA) settings of fabrikam.com

Answer: A

Explanation: https://technet.microsoft.com/en-us/library/cc753751(v=ws.11).aspx

NEW QUESTION 18
You have a remote access server named Server1 that runs Windows Server 2021. Server1 has DirectAccess enabled.
You have a proxy server named Server2. All computers on the internal network connect to the Internet by using the proxy.
On Server1, you run the command Set-DAClient -forceTunnel Enabled.
You need to ensure that when a DirectAccess client connects to the network, the client accesses all the Internet resources through the proxy.
What should you run on Server1?

• A. Set-DnsClientNrptRule
• B. Set.DANetworkLocationServer
• C. Set-DAClient
• D. Set-DAServer

Answer: C

NEW QUESTION 19
Your network contains an Active Directory forest named contoso.com. The forest contains the VPN servers configured as shown in the following table.

You are configuring a Network Policy Server (NPS) server named Server1. Server1 has the following RADIUS clients.

All three VPN servers are configured to use Server1 for RADIUS authentication. All of the users in comtoso.com are allowed to establish a VPN connection. For each of the following statements, select YES if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/vpn-deploy-

NEW QUESTION 20
You have an Active Directory domain that contains several Hyper-V hosts that run Windows Server 2021. You plan to deploy network virtualization and to centrally manage Datacenter Firewall policies.
Which component must you install for the planned deployment?

• A. the Data Center Bridging feature
• B. the Network Controller server role
• C. the Routing role service
• D. the Canary Network Diagnostics feature

Answer: B

Explanation: https://technet.microsoft.com/en-us/library/mt403307(v=ws.11).aspx#bkmk_slb