2017 May Microsoft Official New Released 70-743 Dumps in Lead2pass.com!
100% Free Download! 100% Pass Guaranteed!
Test your preparation for Microsoft 70-743 with these actual 70-743 new questions below. Exam questions are a sure method to validate one’s preparation for actual certification exam.
Following questions and answers are all new published by Microsoft Official Exam Center: http://www.lead2pass.com/70-743.html
QUESTION 41
Your network contains an Active Directory forest named contoso.com.
The forest contains a member server named Server1 that runs Windows Server 2016 Server1 is located in the perimeter network.
You install the Active Directory Federation Services server role on Server1.
You create an Active Directory Federation Services (ADFS) farm by using a certificate that has a subject name of sts.contoso.com.
You need to enable certificate authentication from the Internet on Server1.
Which two inbound TCP ports should you open on the firewall? Each correct answer presents part of the solution?
A. 389
B. 443
C. 3389
D. 8531
E. 49443
Answer: BE
Explanation:
Configuring the following network services appropriately is critical for successful deployment of AD FS in your organization:
Configuring Corporate Firewall
* Both the firewall located between the Web Application Proxy and the federation server farm and the firewall between the clients and the Web Application Proxy must have TCP port 443 enabled inbound.
* In addition, if client user certificate authentication (clientTLS authentication using X509 user certificates) is required, AD FS in Windows Server 2012 R2 requires that TCP port 49443 be enabled inbound on the firewall between the clients and the Web Application Proxy. This is not required on the firewall between the Web Application Proxy and the federation servers).
References: https://technet.microsoft.com/en-us/library/dn554247(v=ws.11).aspx
QUESTION 42
Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
You have three servers named Server1, Server2. Server3 that run Windows Server 2016 Server1 and Server2 have the Hyper-V server role installed.
Server3 has the iSCSI Target Server role service installed.
You need to create a Hyper-V cluster.
Which tool should you use first?
A. the clussvc.exe command
B. the cluster.exe command
C. the Computer Management console
D. the configurehyperv.exe command
E. the Disk Management console
F. the Failover Cluster Manager console
G. the Hyper-V Manager console
H. the Server Manager Desktop app
Answer: H
QUESTION 43
Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
You have two servers named Server1 and Server2 that run Windows Server 2016 Server1 and Server2 have the Hyper-V server role installed.
An iSCSI SAN connects to the network.
You create a LUN on the SAN and configure both servers to connect to the iSCSI target.
You create a failover cluster and add Server1 and Server2 to the cluster.
You connect both servers to the iSCSI target and format the shared storage.
You need to add the shared storage to the cluster. The solution must ensure that virtual machines running on both nodes can access the shared storage simultaneously.
Which tool should you use?
A. the clussvc.exe command
B. the cluster.exe command
C. the Computer Management console
D. the configurehyperv.exe command
E. the Disk Management console
F. the Failover Cluster Manager console
G. the Hyper-V Manager console
H. the Server Manager Desktop app
Answer: F
QUESTION 44
Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
You have a two-node Hyper-V cluster named Cluster1 at a primary location and a stand-alone Hyper-V host named Server1 at a secondary location.
A virtual machine named VM1 runs on Cluster1.
You configure a Hyper-V Replica of VM1 to Server1.
You need to perform a Test Fai lover of VM1.
Which tool should you use?
A. the clussvc.exe command
B. the cluster.exe command
C. the Computer Management console
D. the configurehyperv.exe command
E. the Disk Management console
F. the Failover Cluster Manager console
G. the Hyper-V Manager console
H. the Server Manager Desktop app
Answer: G
QUESTION 45
Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
You have an Active Directory domain that contains two Hyper-V servers named Server1 and Server2. Server1 has Windows Server 2016 installed.
Server2 has Windows Server 2012 R2 installed. Each Hyper-V server has three network cards. Each network card is connected to a different subnet.
Server1 contains a dedicated migration network.
Server2 contains a virtual machine named VM5.
You plan to perform a live migration of VM5 to Server1.
You need to ensure that Server1 uses all available networks to perform the live migration of VM5.
What should you run1?
A. the Mount-VHD cmdlet
B. the Diskpart command
C. the Set-VHD cmdlet
D. the Set-VM cmdlet
E. the Set-VMHost cmdlet
F. the Set-VMProcessor cmdlet
G. the Install-Windows Feature cmdlet
H. the Optimize-VHD cmdlet
Answer: E
Explanation:
Set-VMHost -UseAnyNetworkForMigration
Specifies how networks are selected for incoming live migration traffic. If set to $True, any available network on the host can be used for this traffic. If set to $False, incoming live migration traffic is transmitted only on the networks specified in the MigrationNetworks property of the host.
References: https://technet.microsoft.com/en-us/library/hh848524.aspx
QUESTION 46
Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
You have a Hyper-V host named Server1 that runs Windows Server 2016. Server1 contains a virtual machine named VM1.
You need to ensure that you can use nested virtualization on VM1.
What should you run on Server1?
A. the Mount-VHD cmdlet
B. the Diskpart command
C. the Set-VHD cmdlet
D. the Set-VM cmdlet
E. the Set-VMHost cmdlet
F. the Set-VMProcessor cmdlet
G. the Install-Windows Feature cmdlet
H. the Optimize-VHD cmdlet
Answer: F
Explanation:
Configure Nested Virtualization
1. Create a virtual machine.
2. While the virtual machine is in the OFF state, run the following command on the physical Hyper-V host. This enables nested virtualization for the virtual machine.
Set-VMProcessor -VMName <VMName> -ExposeVirtualizationExtensions $true
Etc.
References: https://msdn.microsoft.com/en-us/virtualization/hyperv_on_windows/user_guide/nesting
QUESTION 47
Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
You have a Hyper-V host named Server1 that runs Windows Server 2016.
Server1 has a dynamically expanding virtual hard disk (VHD) file that is 900 GB The VHD contains 400 GB of free space.
You need to reduce the amount of disk space used by the VHD.
What should you run?
A. the Mount-VHD cmdlet
B. the Diskpart command
C. the Set-VHD cmdlet
D. the Set-VM cmdlet
E. the Set-VMHost cmdlet
F. the Set-VMProcessor cmdlet
G. the Install-Windows Feature cmdlet
H. the Optimize-VHD cmdlet
Answer: H
Explanation:
https://technet.microsoft.com/en-us/library/hh848458.aspx
QUESTION 48
Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
You have a Hyper-V host named Server1 that runs Windows Server 2016.
You plan to deploy several shielded virtual machines on Server1.
You deploy a Host Guardian on a new server
You need to ensure that Server1 can host shielded virtual machines.
What should you run first?
A. the Mount-VHD cmdlet
B. the Diskpart command
C. the Set-VHD cmdlet
D. the Set-VM cmdlet
E. the Set-VMHost cmdlet
F. the Set-VMProcessor cmdlet
G. the Install-Windows Feature cmdlet
H. the Optimize-VHD cmdlet
Answer: G
Explanation:
Installing Host Guardian Service (HGS) Role
On a machine running Windows Server 2016, install the Host Guardian Service role using Server Manager or Windows PowerShell.
From the command line issue the following command:
Install-WindowsFeature HostGuardianServiceRole –IncludeManagementTools
References: https://blogs.technet.microsoft.com/datacentersecurity/2016/03/16/windows-server-2016-and-host-guardian-service-for-shielded-vms/
QUESTION 49
Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
You have a Hyper-V host named Server1 that runs Windows Server 2016.
Server1 has a virtual machine named VM1 that uses a single VHDX file.
VM1 is configured shown in the following table
You plan to use VM1 as a virtual Machine Template to deploy shielded virtual machines.
You need to ensure that VM1 can be used to deploy shielded virtual machines.
What should you run?
A. the Mount-VHD cmdlet
B. the Diskpart command
C. the Set-VHD cmdlet
D. the Set-VM cmdlet
E. the Set-VMHost cmdlet
F. the Set-VMProcessor cmdlet
G. the Install-Windows Feature cmdlet
H. the Optimize-VHD cmdlet
Answer: B
QUESTION 50
In this section, you’ll see one or more sets of questions with the same scenario and problem.
Each question presents a unique solution to the problem, and you must determine whether the solution meets the stated goals Any of the solutions might solve the problem.
It is also possible that none of the solutions solve the problem.
Once you answer a question in this section, you will NOT be able to return to it As a result.
These questions will not appear in the review screen.
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution Determine whether the solution meets the stated goals.
Your network contains an Active Directory forest named contoso.com.
The forest contains a member server named Server1 that runs Windows Server 2016.
All domain controllers run Windows Server 2012 R2.
Contoso com has the following configuration.
You plan to deploy an Active Directory Federation Services (AD FS) farm on Served and to configure device registration.
You need to configure Active Directory to support the planned deployment.
Solution: You upgrade a domain controller to Windows Server 2016.
Does this meet the goal?
A. Yes
B. No
Answer: A
Explanation:
Windows Server 2016 Domain controller is required for Device Registration for Servers that run Windows Server 2016.
References: https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/operations/configure-device-based-conditional-access-on-premises
QUESTION 51
In this section, you’ll see one or more sets of questions with the same scenario and problem.
Each question presents a unique solution to the problem, and you must determine whether the solution meets the stated goals Any of the solutions might solve the problem.
It is also possible that none of the solutions solve the problem.
Once you answer a question in this section, you will NOT be able to return to it.
As a result. These questions will not appear in the review screen.
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution Determine whether the solution meets the stated goals.
Your network contains an Active Directory forest named contoso.com.
The forest contains a member server named Server1 that runs Windows Server 2016.
All domain controllers run Windows Server 2012 R2.
Contoso com has the following configuration
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.
You need to configure Active Directory to support the planned deployment.
Solution: You run adprep.exe from the Windows Server 2016 installation media.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
Adprep just prepares the domain for Window Server 2016, it does not actually raise the domain functional level to Windows Server 2016, which is required for Device Registration.
Note: Adprep.exe is a command-line tool that is included on the installation disk of each version of Windows Server. Adprep.exe performs operations that must be completed on the domain controllers that run in an existing Active Directory environment before you can add a domain controller that runs that version of Windows Server.
Adprep.exe commands run automatically as needed as part of the AD DS installation process on servers that run Windows Server 2012 or later. The commands need to run in the following cases:
* Before you add the first domain controller that runs a version of Windows Server that is later than the latest version that is running in your existing domain.
* Before you upgrade an existing domain controller to a later version of Windows Server, if that domain controller will be the first domain controller in the domain or forest to run that version of Windows Server.
References:
https://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx
https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/operations/configure-device-based-conditional-access-on-premises
QUESTION 52
Hotspot Question
You have a server named Server1 that runs Windows Server 2016.
Server1 has the Web Application Proxy role service installed.
You publish an application named App1 by using the Web Application Proxy.
You need to change the URL that users use to connect to App1 when they work remotely.
Which command should you run? To answer, select the appropriate options in the answer area
Answer:
QUESTION 53
You have a failover cluster named Cluster!
A virtual machine named VM1 is a highly available virtual machine that runs on Cluster1.
A custom application named App1 runs on VM1.
You need to configure monitoring of VM1. If App1 adds an error entry to the Application event log, VM1 should be automatically rebooted and moved to another cluster node.
Which tool should you use?
A. Hyper-V Manager
B. Failover Cluster Manager
C. Server Manager
D. Resource Monitor
Answer: B
Explanation:
Do you have a large number of virtualized workloads in your cluster? Have you been looking for a solution that allows you to detect if any of the virtualized workloads in your cluster are behaving abnormally? Would you like the cluster service to take recovery actions when these workloads are in an unhealthy state? In Windows Server 2012/2016, there is a great new feature, in Failover Clustering called “VM Monitoring”, which does exactly that – it allows you monitor the health state of applications that are running within a virtual machine and then reports that to the host level so that it can take recovery actions.
VM Monitoring can be easily configured using the Failover Cluster Manager through the following steps:
Right click on the Virtual Machine role on which you want to configure monitoring
Select “More Actions” and then the “Configure Monitoring” options
You will then see a list of services that can be configured for monitoring using the Failover
Cluster Manager.
References: https://blogs.msdn.microsoft.com/clustering/2012/04/18/how-to-configure-vm-monitoring-in-windows-server-2012/
QUESTION 54
Hotspot Question
Your network contains an Active Directory domain named contoso com.
The domain contains tour servers named Server 1, Server2, Server3 and Server4 that run Windows Server 2016.
Server 1 and Server2 are nodes in Hyper-V cluster named Cluster1.
You have a highly available virtual machine named VM1.
Server1 is the owner node of VM1 Server3 and Server4 are nodes of a scale-out file server named Cluster2,
The storage on Server1 is configured as shown in the following table
You need to move the virtual disk of VM1 to a different location.
What should you do? To answer, select the appropriate options in the answer area
Answer:
QUESTION 55
You are configuring a Windows Server 2016 failover cluster in a workgroup.
Before installing one of the nodes, you run the ipconfig /all command and receive the following output
You need to ensure that Server 1 can be added as a node in the cluster.
What should you do?
A. Assign a static IP address
B. Change the Node Type to Broadcast
C. Configure a DNS suffix
D. Enable NetBIOS over TCP/IP
Answer: C
QUESTION 56
You have a server named Server 1 that runs Windows Server 2016.
The disk configuration for Served is shown in the exhibit
You add Server1 to a cluster.
You need to ensure that you can use Disk1 (or Storage Spaces Direct).
What should you do first?
A. Delete Partition (E:)
B. Set Disk1 to offline.
C. Convert Disk 1 to a dynamic disk
D. Convert Partition (E:) to ReFS
Answer: A
QUESTION 57
Hotspot Question
Your network contains an Active Directory forest named contoso.com.
The forest contains an Active Directory Federation Services (AD FS) farm.
You install Windows Server 2016 on a server named Server2.
You need to configure Server2 as a node in the federation server farm.
Which cmdlets should you run? To answer, select the appropriate options in the answer area.
Answer:
QUESTION 58
Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
You have a Hyper-V host named Server1 that runs Windows Server 2016 and a two-node scale-out file server cluster named Cluster1.
A virtual machine named VM1 runs on Server1.
You need to migrate the storage on VM1 to Cluster1.
Which tool should you use?
A. the clussvc.exe command
B. the cluster.exe command
C. the Computer Management console
D. the configurehyperv.exe command
E. the Disk Management console
F. the Failover Cluster Manager console
G. the Hyper-V Manager console
H. the Server Manager Desktop app
Answer: G
QUESTION 59
Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series.
Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
You have a two-node Hyper-V cluster named Cluster1.
As virtual machine named VM1 runs on Cluster1.
You need to configure monitoring of VM1.
The solution must move VM1 to a different node if the Print Spooler service on VM1 stops unexpectedly.
Which tool should you use?
A. the clussvc.exe command
B. the cluster.exe command
C. the Computer Management console
D. the configurehyperv.exe command
E. the Disk Management console
F. the Failover Cluster Manager console
G. the Hyper-V Manager console
H. the Server Manager Desktop app
Answer: F
QUESTION 60
In this section, you’ll see one or more sets of questions with the same scenario and problem.
Each question presents a unique solution to the problem, and you must determine whether the solution meets the stated goals. Any of the solutions might solve the problem.
It is also possible that none of the solutions solve the problem.
Once you answer a question in this section, you will NOT be able to return to it.
As a result, these questions will not appear in the review screen.
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com.
The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration
You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1 must resolve queries from all other DNS clients.
Solution: From a Group Policy object (GPO) in the domain, you modify the Network List Manager Policies.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
Network List Manager Policies are security settings that you can use to configure different aspects of how networks are listed and displayed on one computer or on many computers.
Network List Manager Policies are not relatged to DN SSEC.
References: https://technet.microsoft.com/en-us/library/jj966256(v=ws.11).aspx
These Microsoft 70-743 exam questions are all a small selection of questions. If you want to practice more questions for actual 70-743 exam, use the links at the end of this document. Also you can find links for 70-743 VCE software that is great for preparation and self-assessment for Microsoft 70-743 exam.
Microsoft 70-743 new questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDWGpUeXZ3ZE9ZX3c
2017 Microsoft 70-743 exam dumps (All 97 Q&As) from Lead2pass:
http://www.lead2pass.com/70-743.html [100% Exam Pass Guaranteed]