Upgrading Your Skills to MCSA: Windows Server 2016 v1.0 (70-743)

Page:    1 / 18   
Total 263 questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
In this section, you"™ll see one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem, and you must determine whether the solution meets the stated goals. Any of the solutions might solve the problem. It is also possible that none of the solutions solve the problem.
Once you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.


You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1 must resolve queries from all other DNS clients.
Solution: From windows PowerShell on Server1, you run the Add-DnsServerTrustAnchor cmdlet.
Does this meet the goal?

  • A. Yes
  • B. No


Answer : B

Explanation:
The Add-DnsServerTrustAnchor command adds a trust anchor to a DNS server. A trust anchor (or trust "point") is a public cryptographic key for a signed zone.
Trust anchors must be configured on every nonauthoritative DNS server that will attempt to validate DNS data. Trust Anchors have no direct relation to DSSEC validation.
References:
https://docs.microsoft.com/en-us/powershell/module/dnsserver/add-dnsservertrustanchor?view=win10-ps https://technet.microsoft.com/en-us/library/dn593672(v=ws.11).aspx

Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration


You need to prevent Server1 from resolving queries from DNS clients located on Subnet4.
Server1 must resolve queries from all other DNS clients.
Solution: From Windows PowerShell on Server1, you run the Export-DnsServerDnsSecPublicKey cmdlet.
Does this meet the goal?

  • A. Yes
  • B. No


Answer : B

Explanation:
Example: Export a trust anchor to a file share
This command exports the trust anchor (DS record) for Contoso.com to a file share. A DNS administrator runs this command from the DNS server that hosts the zone Contoso.com and specifies that the zone signing key uses the SHA-1 algorithm to create the DS record.
PS C:\> Export-DnsServerDnsSecPublicKey -ComputerName "DNSDC1.Contoso.com" -ZoneName "Contoso.com" -Path "\\MyDNSKeyShare\keys" -PassThru -
DigestType "Sha1"

Your Network contains one Active Directory domain named contoso.com.
You pilot DirectAccess on the network.
During the pilot deployment, you enable DirectAccess only for a group Contoso\Test Computers.
Once the pilot is complete, you need to enable DirectAccess for all the client computers in the domain.
What should you do?

  • A. From Windows PowerShell, run the Set-DAClient cmdlet.
  • B. From Windows PowerShell, run the Set-DirectAccess cmdlet.
  • C. From Active Directory Users and Computers, modify the membership of the Windows Authorization Access Group.
  • D. From Group Policy Management, modify the security filtering of an object named Direct Access Client Setting Group Policy.


Answer : D

You have a server named Server1.
You enable BitLocker Drive Encryption (BitLocker) on Server1.
You need to change the password for the Trusted Platform Module (TPM) chip.
What should you run on Server1?

  • A. Initialize-Tpm
  • B. Import-TpmOwnerAuth
  • C. repair-bde.exe
  • D. bdehdcfg-exe


Answer : B

https://technet.microsoft.com/en-us/library/jj603118(v=wps.630).aspx

You have two servers named Server1 and Server2. A firewall exists between Server1 and Server2.
Both servers run Windows Server Update Services (WSUS). Server1 downloads updates from Microsoft update.
Server2 must synchronize updates from Server1.
Which port should to open on the firewall?

  • A. 80
  • B. 443
  • C. 3389
  • D. 8530


Answer : D

Explanation -
On WSUS 6.2 and later (at least Windows Server 2012), port 8530 for HTTP and 8531 for HTTPS
References:
https://technet.microsoft.com/en-us/library/hh852346(v=ws.11).aspx

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com.
You need to identify which server is the schema master.
Solution: You open Active Directory Users and Computers, right-click contoso.com in the console tree, and then click Operations Master.
Does this meet the goal?

  • A. Yes
  • B. No


Answer : B

Explanation:
This solution only shows the domain FSMO roles, not the forest FSMO roles.
References:
https://blogs.technet.microsoft.com/mempson/2007/11/08/how-to-find-out-who-has-your-fsmo-roles/

This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After your answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com.
You need to identify which server is the schema master.
Solution: From a command prompt, you run netdom query fsmo.
Does this meet the goal?

  • A. Yes
  • B. No


Answer : A

Explanation:

Windows PowerShell -
Copyright (C) 2016 Microsoft Corporation. All rights reserved.
PS C:\Windows\system32> netdom query fsmo
Schema master dc10.contoso.com
Domain naming master dc10.contoso.com
PDC dc10.contoso.com
RID pool manager dc10.contoso.com
Infrastructure master dc10.contoso.com
The command completed successfully.
References:
https://blogs.technet.microsoft.com/mempson/2007/11/08/how-to-find-out-who-has-your-fsmo-roles/

This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After your answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com.
You need to identify which server is the schema master.
Solution: From Windows PowerShell, you run Get-ADDomainController -Discover -Service 2.
Does this meet the goal?

  • A. Yes
  • B. No


Answer : B

Explanation:



References:
https://blogs.technet.microsoft.com/mempson/2007/11/08/how-to-find-out-who-has-your-fsmo-roles/ http://www.markou.me/2016/10/get-list-fsmo-role-holders-using-powershell-one-liners/ https://technet.microsoft.com/en-us/itpro/powershell/windows/addsadministration/get-addomaincontroller?f=255&MSPPError=-2147217396

You have a server named Server1 that runs Windows Server 2016. The Docker daemon runs on Server1.
You need to configure the Docker daemon to accept connections only on TCP port 64500.
What should you do?

  • A. Run the sc control command.
  • B. Run the New-NetFirewallRule cmdlet.
  • C. Modify the routing table on Server1.
  • D. Run the sc config command.
  • E. Edit the configuration.json file
  • F. Run the Set-Service Windows PowerShell cmdlet


Answer : D

Explanation:
The preferred method for configuring the Docker Engine on Windows is using a configuration file. The configuration file can be found at 'C:\ProgramData\Docker
\config\daemon.json'. If this file does not already exist, it can be created.
Note: The Docker Engine can also be configured by modifying the Docker service using the sc config command.
References:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configure-docker-daemon

DRAG DROP -
You have a server named Server1 that runs Windows Server 2016.
On Server1 you use the Basic template to create a new Data Collector Set named CollectorSet1.
You need to configure data collection for the performance counters.
The configuration must support the following requirements:
✑ Data collection must run on a schedule.
✑ Data collection must stop if there is less than 1 GB of free disk space.
What should you modify to meet each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or nor at all. You may need to drag the Split bar between panes or scroll to view content.
Select and Place:




Answer :

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After your answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com.
You need to identify which server is the schema master.
Solution: You open Active Directory Domains and Trusts, right-click Active Directory Domains and Trust in the console tree, and then click Operations Master.
Does this meet the goal?

  • A. Yes
  • B. No


Answer : B

Explanation:
This solution only shows the Domain Naming Master.

You have a server named Server1 that runs Windows Server 2016. The Docker daemon runs on Server1.
You need to ensure that members of a security group named Docker Administrators can administer Docker.
What should you do?

  • A. Run the Set-Service cmdlet.
  • B. Modify the Security settings of Dockerd.exe.
  • C. Edit the Daemon.json file.
  • D. Modify the Security settings of Docker.exe.
  • E. Add Docker Administrators to the local Administrators group.
  • F. Run the sc privs command.


Answer : C

Explanation:
References:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configure-docker-daemon

HOTSPOT -
You have a server named Server1 that runs Windows Server 2016 server.
Server1 has the Docker daemon configured and has a container named Container1.
You need to mount the folder C:\Folder1 on Server1 to C:\ContainerFolder in Container1.
Which command should you run? To answer, select the appropriate options in the answer area.
Hot Area:




Answer :

You have a Hyper-V host that runs Windows Server 2016. The host contains a virtual machine named VM1. VM1 has resource metering enabled.
You need to use resource metering to track the amount of network traffic that VM1 sends to the 10.0.0.0/8 network.
Which cmdlet should you run?

  • A. New-VMResourcePool
  • B. Set-VMNetworkAdapter
  • C. Add-VMNetworkAdapterAcl
  • D. Set-VMNetworkAdapterRoutingDomainMapping


Answer : C

Explanation:
References:
https://technet.microsoft.com/itpro/powershell/windows/hyper-v/add-vmnetworkadapteracl

DRAG DROP -
You have a physical server named Server1 that runs Windows Server 2016. Server1 is a Hyper-V host.
On Server1, you create a virtual machine named VM1 that runs Windows Server 2016.
You plan to install the Hyper-V server role on VM1.
You need to ensure that you can configure VM1 to host virtual machines.
How should you compete the Windows PowerShell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Select and Place:




Answer :

Explanation:
Before you install Hyper-V on the virtual machine , you must provide its virtual processor with access to the virtualization technology on the physical computer
Set-VMProcessor -VMName VM1 -ExposeVirtualizationExtensions $true -Count 2 on the memory page , disable Dynamic Memory
Set-VMMemory -VMName VM1 -DynamicMemoryEnabled $false

Page:    1 / 18   
Total 263 questions