Vivid 70-743 Exam Questions 2021

NEW QUESTION 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2021. All domain controllers run Windows Server
2012 R2.
Contoso.com has the following configuration:

You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.
You need to configure Active Directory to support the planned deployment. Solution: You raise the forest (domain) functional level to Windows Server 2012 R2. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: For a Windows Server 2012 R2 AD FS server, this solution would work. However, new installations of AD FS 2021 require the Active Directory 2021 schema (minimum version 85).
References:
https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/operations/configuredevice- based-conditional-access-on-premises

NEW QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com
You need to create a Nano Server image named Nano1 that will be used as a virtualization host. The windows server 2021 source files are located in drive D.
Solution: You run the following cmdlet.
New-NanoServerImage –Edition Datacenter –DeploymentType Host –Package Microsoft- NanoServer-Compute-Package –MediaPath ‘D:’ –TargetPath C:Nano1Nano1.wim – ComputerName Nano1 –DomainName Contoso.com
Does this meet the goal?

• A. Yes
• B. NO

Answer: A

NEW QUESTION 3
DRAG DROP
You have a server named Server1 that runs Windows Server 2021.
You plan to deploy Internet Information Services (IIS) in a Windows container. You need to prepare Server1 for the planned deployment.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 4
You have a Hyper-V host named Server1 that runs Windows Server 2021. Server1 has two virtual machines named VM1 and VM2.
You discover that VM1 and VM2 can communicate with Server1 over the network.
You need to ensure that VM1 and VM2 can communicate with each other only. The solution must prevent VM1 and VM2 from communicating with Server1.
Which cmdlet should you use?

• A. Enable-VMSwitchExtention
• B. Set-NetNeighbor
• C. Set-VMSwitch
• D. Remove-VMSwitchTeamMember

Answer: C

Explanation: The virtual switch needs to be configured as an “Private” switch.
What you need is a private switch to insure VM1 and VM2 can talk to each other, but not the host. The difference between this and an Internal switch is that VM1 and VM2 can talk to the host and each other. Regardless the command is the same:
Set-VMSwitch (switchname)-SwitchType Private
https://technet.microsoft.com/en-us/itpro/powershell/windows/hyper-v/set-vmswitch

NEW QUESTION 5
Your network contains a new Active Directory domain named contoso.com.
You have a security policy that states that new servers should run Nano Server whenever possible. Which server role can be deployed on a Nano Server?

• A. Web Server (IIS)
• B. Active Directory Certificate Services
• C. Remote Desktop Services
• D. Windows Server Update Services

Answer: A

Explanation: References: https://docs.microsoft.com/en-us/windows-server/get-started/iis-on-nano-server

NEW QUESTION 6
You have a server that runs Windows Server 2021.
The server contains a storage pool named Pool1. Pool1 contains five physical disks named Disk1, Disk2, Disk3, Disk4, and Disk5.
A virtual disk named VirtualDisk1 is stored in Pool1. VirtualDisk1 uses the parity storage layout. Disk3 fails.
You need to remove Disk3 from Pool1.
Which two commands should you run? Each correct answer presents part of the solution.

• A. Update-StoragePool –FriendlyName Pool1
• B. Set-ResiliencySetting –StoragePool Pool1 –PhysicalDiskRedundancyDefault 4
• C. Reset-PhysicalDisk –FriendlyName Disk3
• D. Remove-PhysicalDisk –FriendlyName Disk3
• E. Set-PhysicalDisk –FriendlyName Disk3 –Usage Retired

Answer: DE

NEW QUESTION 7
HOTSPOT
You have a server named Server1 that runs Windows Server 2021. Server1 has the Windows Application Proxy role service installed.
You need to publish Microsoft Exchange ActiveSync services by using the Publish New Application Wizard. The ActiveSync services must use preauthentication.
How should you configure Server1? To answer, select the appropriate options in the answer area.

Answer:

Explanation: Box 1: Active Directory Federation Services (ADFS)
The well-known HTTP basic authentication that you can use in scenarios such as ExchangeActive Sync (ActiveSync). This is a new capability included in this release of Web Application Proxy. For the ActiveSync scenario, the authentication process includes four core steps:
Box 2: HTTP Basic
The well-known HTTP basic authentication that you can use in scenarios such as Exchange Active Sync (ActiveSync).

NEW QUESTION 8
You have a server named Server1 that runs Windows Server 2021. The Docker daemon runs on Server1.
You need to ensure that members of a security group named Docker Administrators can administer Docker.
What should you do?

• A. Run theSet-Service cmdlet.
• B. Modify the Security settings of Dockerd.exe.
• C. Edit the Daemon.json file.
• D. Modify the Security settings of Docker.ex

Answer: C

Explanation: References:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configuredocker- daemon
The preferred method for configuring the Docker Engine on Windows is using a configuration file. The configuration file can be found at ‘c:ProgramDatadockerconfigdaemon.json’. If this file does not already exist, it can be created.
This sample configures the Docker Engine to accept incoming connections on port 2375. All other configuration options will use default values.
{
“hosts”: [“tcp://0.0.0.0:2375”]
}
this sample configures the Docker daemon to only accept secured connections over port 2376.
{
“hosts”: [“tcp://0.0.0.0:2376”, “npipe://”], “tlsverify”: true,
“tlscacert”: “C:\ProgramData\docker\certs.d\ca.pem”, “tlscert”: “C:\ProgramData\docker\certs.d\server-cert.pem”, “tlskey”: “C:\ProgramData\docker\certs.d\server-key.pem”,
}
Source: https://docs.microsoft.com/en-us/virtualization/windowscontainers/managedocker/ configure-docker-daemon

NEW QUESTION 9
Server1 download update from Microsoft update.
You have Server2 that must synchronize update from Server1. Have firewall separate between Server1 and Server2.
Which port should to open on Server2 to synchronize?

• A. 80
• B. 443
• C. 3389
• D. 8530

Answer: D

NEW QUESTION 10
You have two Hyper-V hosts named Server1 and Server2 that run Windows Server 2021. The hosts are nodes in failover cluster.
You have a virtual machine named VM1. VM1 connects to a virtual switch named vSwitch1. You discover that VM1 automatically live migrates when vSwitch temporarily disconnects. You need to prevent VM1 from being live migrated when vSwitch1 temporarily disconnects. What should you do?

• A. From the network adapter setting of VM1, disable the Protected network setting.
• B. From the network adapter setting of VM1, disable the Heartbeat integration service.
• C. Run the Set-VMNetworkAdapter cmdlet and set IsmanagementOS to False.
• D. Run the Set-VMNetworkAdapter cmdlet and set StormLimit to 0.

Answer: A

NEW QUESTION 11
HOT SPOT
On a DNS server that runs Windows Server 2021, you plan to create two new primary zones named adatum.com and contoso.com. You have the following requirements for the zones:
• Ensure that computers on your network can register records automatically in the adatum.com zone.
• Ensure that records that are stale for two weeks are purged automatically from the contoso.com zone.
What should you configure for each zone? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 12
You have a server named Server1 that runs Windows Server 2021.
Server1 has two network cards. One network card connects to your internal network and the other network card connects to the Internet.
You plan to use Server1 to provide Internet connectivity for client computers on the internal network.
You need to configure Server1 as a network address translation (NAT) server. Which server role or role service should you install on Server1 first?

• A. Network Controller
• B. Web Application Proxy
• C. Routing
• D. DirectAccess and VPN (RAS)

Answer: C

NEW QUESTION 13
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named Server1 and a member server named Server2.
Server1 has the DNS Server role installed. Server2 has IP Address Management (IPAM) installed. The IPAM server retrieves zones from Server1 as shown in the following table.

The IPAM server has one access policy configured as shown in the exhibit. (Click the Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Answer:

Explanation: Box 1: Yes
As a member of the IPAM DNS Administrator Role of the ADatum zone, User1 can add DNS records to it. Box 2: Yes
As a member of the DNS Record Administrator Role of the Fabrikam zone, User1 can add DNS records to it. Box 3: No
DNS Record Administrators cannot delete zones, only administer DNS records. References:
https://technet.microsoft.com/en-us/library/hh831353(v=ws.11).aspx

NEW QUESTION 14
DRAG DROP
You have a server that runs Windows Server 2021. You install three additional disks named Disk1, Disk2, and Disk3. You plan to use these physical disks to store data.
You need to create a volume to store data. The solution must prevent data loss in the event of a
single disk failure.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: Step 1: Create a Storage Pool
First we create a Storage Pool. We specify which disks should be included in the storage pool. Example:

Step 2: Create a Virtual Disk
After creating the storage pool now start creating a virtual disk for the pool you had created.

Step 3: Create a Volume
After creating the virtual disk, create a volume with the NewVolume Wizard. You create the volume on the Virtual Disk you created in Step 2.

References:
http://www.tactig.com/create-a-storage-pool-windows-server/

NEW QUESTION 15
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
Your network contains Windows and non-Windows devices.
You have a DHCP server named Server1 that has an IPv4 scope named Scope1.
You need to prevent a client computer that uses the same name as an existing registration from updating the registration.
What should you do?

• A. From the properties of Scope1, modify the Conflict detection attempts setting.
• B. From the properties of Scope1, configure Name Protection.
• C. From the properties of IPv4, configure the bindings.
• D. From IPv4, create a new filter.
• E. From the properties of Scope1, create an exclusion range.
• F. From IPv4 run the DHCP Policy Configuration Wizard.
• G. From Control Panel, modify the properties of Ethernet.
• H. From Scope1, create a reservatio

Answer: F

NEW QUESTION 16
You have a Hyper-V host named Server1 that runs Windows Server 2021. Server1 connects to your corporate network. The Corporate network uses the 10.10.0.0/16 address space.
Server1 hosts a virtual machine named VM1, VM1 is configured to have an IP addresses of 172.16.1.54/16.
You need to ensure that VM1 can access the resources on the corporate network. What should you do? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 17
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains four servers named Server1, Server2, Server3, and Server4 that run Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. Server2, Server3, and Server 4 have the DHCP Server role installed. IPAM manages Server2, Server3, and Server4.
A domain user named User1 is a member of the groups shown in the following table.

Which actions can User1 perform? To answer, select the appropriate options in the answer area.

Answer:

Explanation: Box 1: Can be performed by User1
DHCP Administrators can create DHCP scopes. Box 2: Cannot be performed by User1
DHCP Users cannot create scopes. Box 3: Cannot be performed by User1 IPAM users cannot creates copes. References:
https://technet.microsoft.com/en-us/library/dn741281(v=ws.11).aspx#create_access_scope

NEW QUESTION 18
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

You have the following subnets defined on Server1.

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1 must resolve queries from all other DNS clients.
Solution: From the Security Setting of each zone on Server1, you modify the permissions. Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 19
You have a server named Server1 that runs Windows Server 2021. Server1 is a Hyper-V host that hosts a virtual machine named VM1.
Server1 has three network adapter cards that are connected to virtual switches named vSwitch1, vSwitch2 and vSwitch3.
You configure NIC Teaming on VM1 as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that VM1 will retain access to the network if a physical network adapter card fails on Server1.
What should you do?

• A. From the properties of the NIC team on VM1, change the load balancing of the NIC team.
• B. From Hyper-V Manager on Server1, modify the settings of VM1.
• C. From Windows PowerShell on Server1, run the Set- VmNetworkAdapterFailoverConfigurationcmdlet.
• D. From Hyper-V Manager on Server1, modify the properties of vSwitch1.

Answer: B

Explanation: You can configure NIC teaming in the Guest OS; however, before NIC teaming will work in a virtual machine, you need to enable NIC teaming in the Advanced Features section of the VM settings.