Microsoft 70-743 Exam Questions and Answers 2021

NEW QUESTION 1
DRAG DROP
You have a file server named Server1 that runs Windows Server 2021.
You need to create a report that lists all of the sharp permissions assigned to the security principals on Server1.
How should you complete the command? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: PS C:UsersUser1> Get-SmbShare Name ScopeName Path Description
---- --------- ---- -----------
ADMIN$ * C:Windows Remote Admin C$ * C: Default share
IPC$ * Remote IPC Users * C:Users
References: https://technet.microsoft.com/en-us/library/jj635704(v=wps.630).aspx PS C:UsersUser1> Get-SmbClientConfiguration ConnectionCountPerRssNetworkInterface : 4
DirectoryCacheEntriesMax : 16
DirectoryCacheEntrySizeMax : 65536
DirectoryCacheLifetime : 10 EnableBandwidthThrottling : True EnableByteRangeLockingOnReadOnlyFiles : True EnableLargeMtu : True
EnableMultiChannel : True DormantFileLimit : 1023 EnableSecuritySignature : True ExtendedSessionTimeout : 1000
FileInfoCacheEntriesMax : 64
FileInfoCacheLifetime : 10
FileNotFoundCacheEntriesMax : 128
FileNotFoundCacheLifetime : 5
KeepConn : 600
MaxCmds : 50
MaximumConnectionCountPerServer : 32 OplocksDisabled : False RequireSecuritySignature : False SessionTimeout : 60
UseOpportunisticLocking : True WindowSizeThreshold : 8
References: https://technet.microsoft.com/en-us/library/jj635708(v=wps.630).aspx

NEW QUESTION 2
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
You have a Hyper-V host named Server1 that runs Windows Server 2021 and a two-node scale-out file server cluster named Cluster1.
A virtual machine named VM1 runs on Server1. You need to migrate the storage on VM1 to Cluster1. Which tool should you use?

• A. the clussvc.exe command
• B. the cluster.exe command
• C. the Computer Management snap-in
• D. the configurehyperv.exe command
• E. the Disk Management snap-in
• F. the Failover Cluster Manager snap-in
• G. the Hyper-V Manager snap-in
• H. the Server Manager app

Answer: G

NEW QUESTION 3
HOT SPOT
You have a DNS server named Server1 that runs Windows Server 2021. Server1 has network interfaces that have the following IP addresses:
✑ 10.0.0.100
✑ 131.107.0.100
The internal network uses an IP address space of 10.0.0.0/16.
Server1 provides DNS name resolution to both internal and external clients. Server1 hosts the primary zone for contoso.com.
You need to configure Server1 to meet the following requirements:
* Internal clients must be able to use Server 1 to resolve internal-based DNS names.
* External clients must not be able to use Server1 to resolve Internal-based DNS names.
* External clients must able to use Server1 to resolve names in the contoso.com zone.
Which commands should you run on Server1.? To answer select the appropriate option in answer area.

Answer:

Explanation:

NEW QUESTION 4
You have a server named Server1 that runs Windows Server 2021. You install the Docker daemon on Server1.
You need to configure the Docker daemon to accept connections only on TCP port 64500. What should you do?

• A. Edit the configuration.json file.
• B. Run the Set-ServiceWindows PowerShell cmdlet.
• C. Edit the daemon.json file.
• D. Modify the routing table on Server1.

Answer: C

Explanation: Configure Docker with Configuration File
The preferred method for configuring the Docker Engine on Windows is using aconfiguration file. The configuration file can be found at 'c:ProgramDatadockerconfigdaemon.json'.
Only the desired configuration changes need to be added to the configuration file. For example, this sample configures the Docker Engine to accept incoming connections onport 64500. All other configuration options will use default values.
{
"hosts": ["tcp://0.0.0.0:64500"]
}
References: https://msdn.microsoft.com/enus/
virtualization/windowscontainers/docker/configure_docker_daemon

NEW QUESTION 5
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
In this section, you’ll see one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem, and you must determine whether the solution meets the stated goals. Any of the solutions might solve the problem. It is also possible that none of
the solutions solve the problem.
Once you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1.
All client computers run Windows 10.
On Server1, you have the following zone configuration.

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1 must resolve queries from all other DNS clients.
Solution: From Windows Firewall with Advanced Security on Server1, you create an inbound rule. Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 6
A company named Contoso, Ltd has five Hyper-V hosts that are configured as shown in the following table.

What are two valid live migration scenarios for virtual machines in your environment? Each correct answer presents a complete solution.

• A. from Server4 to Server5
• B. from Server1 to Server5
• C. from Server3 to Server4
• D. from Server2 to Server3

Answer: BD

Explanation: References:
https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v/deploy/set-up-hosts-forlive- migration-without-failover-clustering

NEW QUESTION 7
You have a server named Server1 that runs Windows Server 2021. You need to configure Server1 as a Web Application Proxy. Which server role or role service should you install on Server1?

• A. Web Server (IIS)
• B. Network Policy and Access Services
• C. Direct Access and VPN (RAS)
• D. Active Directory Federation Services
• E. Remote Access

Answer: E

NEW QUESTION 8
You have a server named Server1 that runs Windows Server 2021. The Docker daemon runs on Server1.
You need to ensure that members of a security group named Docker Administrators can administer Docker.
What should you do?

• A. Edit the Configuration.json file.
• B. Modify the Security settings of Docker.exe.
• C. Run the Set-Service cmdlet.
• D. Run the sc config comman

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configuredocker- daemon

NEW QUESTION 9
HOTSPOT
You have a server named Server1 that runs Windows Server 2021. Server1 has the Web Application Proxy role service installed.
You are publishing an application named App1 that will use Integrated Windows authentication as shown in the following graphic.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

Answer:

Explanation: Publish an Integrated Windows authenticated-based Application for WebBrowser Clients Step 1: (configure the Backend server SPN – see first bulleted item below)
Before you begin, make sure that you have done the following: Step 2: http//server2.contoso.com/publish/app1
Use the same URL as the backend server URL.
Web Application Proxy can translate host names in URLs, but cannot translate path names. Therefore, you can enter different host names, but you must enter the same path name. For example, you can enter an external URL of https://apps.contoso.com/app1/ and a backend server URL of http://app-server/app1/. However, you cannot enter an external URL of https://apps.contoso.com/app1/ and a backend server URL of https://apps.contoso.com/internalapp1/. References:
https://technet.microsoft.com/en-us/library/dn383640(v=ws.11).aspx

NEW QUESTION 10
HOT SPOT
You have a DirectAccess Server that is accessible by using the name directaccess.fabrikam.com On the DirectAccess server, you install a new server certificate that has a subject name of directaccess.contoso.com, and then you configure DNS records for directaccess.contoso.com
You need to change the endpoint name for DirectAccess to directaccess.contoso.com
What command should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation: Set-DaClient-ComputerName directaccess.contoso.com

NEW QUESTION 11
You have a Hyper-V server named Server1 that runs Windows Server 2021. Server1 has an IP address of 192.168.1.78. Server1 has a container named Container1 that hosts a web application on port 84. Container1 has an IP address of 172.16.5.6. Container1 has a port mapping from port 80 on Server1 to port 84 on Container1. You have a server named Server2 that has an IP address of 192.168.1.79, You need to connect to the web application from Server2. To which IP address and port should you connect?

• A. 172.16.5.6:80
• B. 192.168.1.78:80
• C. 172.16.5.6:84
• D. 192.168.1.78:84

Answer: C

NEW QUESTION 12
HOT SPOT
You have a Hyper-V host named Server1 that runs Windows Server 2021. Server1 has two network adaptors named NK1 and NIC2. Server2 has two virtual switches named vSwitch1 and vSwitch2. N1C1 connects to vSwitch1. NIC2 connects to vSwitch2
Server1 hosts a virtual machine named VM1. VM1 has two network adapters named vmNIC1 and vmNIC1. VmNIC1 connects to vSwitch1. VmNIC2 connects to vSwitch2.
You need to create a NIC team on VM1.
What should you run on VM1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation: Name NICTEAM1 TeamMembers vmNIC1, vmNIC2 –TeamingMode $var1 –LoadBalancingAlgorithm
$var2

NEW QUESTION 13
Active Directory Recycle Bin is enabled. You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago. You need to restore the membership of Group1.
What should you do?

• A. Perform tombstone reanimation.
• B. Export and import data by using Dsamain.
• C. Perform a non-authoritative restore.
• D. Recover the items by using Active Directory Recycle Bi

Answer: B

Explanation: A group has been modified. Nothing has been deleted. Therefore, answers A and D will not work. Answer C would work if it was an authoritative restore, but not a non-authoritative restore.
The solution is to recover an earlier copy of the group from a backup or active directory snapshot by using DSadmain.
https://technet.microsoft.com/en-us/library/cc753609(v=ws.10)

NEW QUESTION 14
You have a Hyper-V host named Server1 that runs Windows Server 2021. Server1 contains four virtual machines that are configured as shown in the following table.

To which machine or machines can you connect by using Virtual Machine Connection from Hyper-V Manager?

• A. VM1, VM2, VM3 and VM4
• B. VM4 only
• C. VM1 and VM2 only
• D. VM3 and VM4 only
• E. VM2 only

Answer: D

NEW QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2021. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration:

You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.
You need to configure Active Directory to support the planned deployment. Solution: You upgrade a domain controller to Windows Server 2021. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: Device registration requires a forest functional level of Windows Server 2012 R2. References:
https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/deployment/configure-afederation- server-with-device-registration-service
https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/design/ad-fsrequirements

NEW QUESTION 16
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server 2021. Server1 is configured as a VPN server.
Server1 is configured to allow domain users to establish VPN connections from 06:00 to 18:00 everyday of the week.
You need to ensure that domain users can establish VPN connections only between Monday and Friday.
Solution: From Active Directory Users and Computers, you modify the Dial-in Properties of the user accounts.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 17
HOT SPOT
You are configuring internal virtual networks to support multitenancy communication between tenant virtual machine networks and remote sites.
You have a tenant named Tenant1.
You need to enable Border Gateway Protocol (BGP) for Tenant1.
Which commands should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 18
HOTSPOT
You have a server named Server1 that runs Windows Server 2021. Server1 has the Web Application Proxy role service installed.
You need to publish Microsoft Exchange Server 2013 services through the Web Application Proxy. The solution must use preauthentication whenever possible.
How should you configure the preauthentication method for each service? To answer, select the appropriate options in the answer area.

Answer:

Explanation: Box 1: Pass-through
Box 2: Active Directory Federation Services (ADFS) Box 3: Pass-through
The following table describes the Exchange services that you can publish through Web Application Proxy and the supported preauthentication for these services:

References:
https://technet.microsoft.com/en-us/library/dn528827(v=ws.11).aspx

NEW QUESTION 19
You have a server named Server1.
You enable BitLocker Drive Encryption (BitLocker) on Server1.
You need to change the password for the Trusted Platform Module (TPM) chip. What should you run on Server1?

• A. Initialize-Tpm
• B. Import-TpmOwnerAuth
• C. repair-bde.exe
• D. bdehdcfg-exe

Answer: B