70-743 Free Practice Test

You have an Active Directory domain named contoso.com. The domain contains servers named Server1 and Server2 that run Windows Server 2016. You install the Remote Access server role on Server1. You install the Network Policy and Access Services server role on Server2. You need to configure Server1 to use Server2 as a RADIUS server. What should you do?

1. A. From Routing and Remote Access, configure the authentication provider.
2. B. From the Connection Manager Administration Kit, create a Connection Manager profile.
3. C. From Server Manager, create an Access Policy.
4. D. From Active Directory Users and Computers, modify the Delegation settings of the Server1 computer account.

Correct Answer: A

Active Directory Recycle Bin is enabled. You discover that a support technician accidentally removed 100 users from an Active Directory group named Group1 an hour ago. You need to restore the membership of Group1.
What should you do?

1. A. Perform tombstone reanimation.
2. B. Export and import data by using Dsamain.
3. C. Perform a non-authoritative restore.
4. D. Recover the items by using Active Directory Recycle Bi

Correct Answer: B
A group has been modified. Nothing has been deleted. Therefore, answers A and D will not work. Answer C would work if it was an authoritative restore, but not a non-authoritative restore.
The solution is to recover an earlier copy of the group from a backup or active directory snapshot by using DSadmain.
https://technet.microsoft.com/en-us/library/cc753609(v=ws.10)

You have 2000 devices, One hundred of the devices are mobile devices that have physical addresses beginning with 98-5F.
You have a DHCP server named Server1.
You need to ensure that the mobile devices register their host name by using a DNS suffix of mobile.contoso.com

1. A. From the properties of Scopte1, Modify the Conflict detection attempts setting.
2. B. From the properties of Scope1, Configure Name Protection.
3. C. From the Properties of IPV4, configure the bindings.
4. D. From IPV4, create a new filter.
5. E. From the properties of Scope1, create an exclusion range.
6. F. From IPv4, run the DHCP Policy Configuration Wizard.
7. G. From Control Panel, modify the properties of Ethernet.
8. H. From Scope1, create a reservation

Correct Answer: F

Your network contains an Active Directory domain. The domain contains two Hyper-V hosts. You plan to perform live migrations between the hosts.
You need to ensure that the live migration traffic is authenticated by using Kerberos. What should you do first?

1. A. From Server Manager, install the Host Guardian Service server role on a domain controller.
2. B. From Active Directory Users and Computers, add the computer accounts for both servers to the Cryptographic Operators group.
3. C. From Active Directory Users and Computers, modify the Delegation properties of the computer accounts for both servers.
4. D. From Server Manager, install the Host Guardian Service server role on both server

Correct Answer: C
If you have decided to use Kerberos to authenticate live migration traffic, configure constrained delegation before you proceed to the rest of the steps.
To configure constrained delegation

You need to implement network virtualization.
On which object should you configure the virtual subnet ID?

1. A. Virtual switch
2. B. Hyper-V server
3. C. VM
4. D. Virtual network adapter

Correct Answer: A