70-741 Quiz 3

QUESTION 157 You have a Hyper-V host named Server1 that runs Windows Server 2016. Server1 has two network adapters that are Remote Direct Memory Access (RDMA)-enabled. You need to verify whether Switch Embedded Teaming (SET) is enabled. Which cmdlet should you use?

• A. Get-NetworkSwitchFeature
• B. Get-VMNetworkAdapter
• C. Get-VMSwitch
• D. Get-VMNetworkAdapterFailoverConfiguration

QUESTION 159 Your network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server1 that runs Windows Server 2016. You have a DHCP scope for the 10.0.0.0/24 IP subnet. One hundred and fifty clients reside in the subnet. Fifty of the DHCP clients are NOT domain-joined. You need to ensure that DHCP clients without a configured DNS suffix register automatically in a DNS zone named workgroup.contoso.com. The other DHCP clients must register in the DNS zone of their respective domain. What should you do?

• A. Configure the 015 DNS Domain Name scope option in the 10.0.0.0/24 DHCP scope.
• B. Configure the DNS properties of the 10.0.0.0/24 DHCP scope.
• C. Create a DHCP policy that has a condition based on the fully qualified domain name (FQDN) criterion.
• Configure the IP address range properties of the policy.
• D. Create a DHCP policy that has a condition based on the fully qualified domain name (FQDN) criterion.

QUESTION 160 You have two DNS servers named Server1 and Server2. All client computers run Windows 10 and are configured to use Server1 for DNS name resolution. Server2 hosts a primary zone named contoso.com. Your network recently experienced several DNS spoofing attacks on the contoso.com zone. You need to prevent further attacks from succeeding. What should you do on Server2?

• A. Sign the contoso.com zone.
• B. Configure Response Rate Limiting (RRL).
• C. Configure DNS-based Authentication of Named Entities (DANE) for the contoso.com zone.
• D. Configure the contoso.com zone to be Active Directory-integrated.

QUESTION 161 You have a Microsoft Azure subscription and an on-premises network. To the on-premises network, you deploy a new server named Server1 that runs Windows Server 2016. In Azure, you configure a virtual gateway on an Azure virtual network. You need to ensure that the computers on the on-premises network can access virtual machines on the Azure virtual network. What should you do on Server1?

• A. Install the Remote Access server role. From the Routing and Remote Access Server Setup Wizard, select Secure connection between two private networks.
• B. Install the Data Center Bridging (DCB) feature, and then run the Install-RemoteAccess cmdlet.
• C. Install the Remote Access server role. From the Routing and Remote Access Server Setup Wizard, select Virtual private network (VPN) access and NAT.
• D. Install the Data Center Bridging (DCB) feature, and then run the Enable- RemoteAccessRoutingDomain cmdlet.

QUESTION 162 Your network contains an Active Directory domain. The domain contains a certification authority (CA) and a Network Policy Server (NPS) server. You plan to deploy Remote Access Always On VPN. Which authentication method should you use?

• A. Microsoft: EAP-TTLS
• B. Microsoft: Secured password
• C. Microsoft: Protected EAP
• D. Microsoft: EAP-AKA

QUESTION 163 You have a DNS server named Server1 that runs Windows Server 2016. Server1 has an Active Directory- integrated zone named adatum.com. All client computers run Windows 10. You recently encountered unexpected responses to DNS client queries in the adatum.com zone. You need to log all the records written to the zone. Which cmdlet should you run?

• A. Add-DnsServerQueryResolutionPolicy
• B. Set-DnsServerDsSetting
• C. Set-DnsServerDiagnostics
• D. Set-DnsServer

QUESTION 164 You have a DHCP server named Server1 that runs Windows Server 2016. You plan to implement IPv6 on your network. You need to configure Server1 for stateless DHCPv6. What should you do from the DHCP console?

• A. Configure the Advanced Properties for Server1
• B. Configure the IPv6 Server Options
• C. Create an IPv6 scope
• D. Configure the General IPv6 Properties

QUESTION 165 Your company has three offices. The offices are located in Seattle, Chicago, and Montreal. You are configuring a new WAN link between the three offices by using the Remote Access server role in Windows Server 2016. You will use Border Gateway Protocol (BGP) as a routing protocol between the sites. You need to configure the server in the Seattle office for BGP routing. What should you do first?

• A. From Routing and Remote Access, add a new IPv4 routing protocol
• B. From Windows PowerShell, run the Add-BgpPeer cmdlet and specify the -LocalASN parameter
• C. From Routing and Remote Access, add a new IPv6 routing protocol
• D. From Windows PowerShell, run the Add-BgpRouter cmdlet and specify the -LocalASN parameter

QUESTION 166 You have two servers named Server1 and Server2 that run Windows Server 2016. Both servers have the DHCP Server server role installed. Server1 has a DHCP scope named Scope1. Server2 has a DHCP scope named Scope2. You need to ensure that client computers can get an IP address if a single DHCP server fails. You must be able to control the percentage of requests to which each DHCP server responds during normal network operations. What should you do?

• A. Add Server1 and Server2 as nodes in a failover cluster, and then configure the DHCP Server server role.
• B. Add Server1 and Server2 as nodes in a failover cluster, and then configure the quorum mode.
• C. On Server1 and Server2, configure DHCP failover for Scope1 and Scope2.
• D. Add Server1 and Server2 as nodes in a failover cluster, and then configure port rules for UDP 67 and UDP 68.

QUESTION 167 Your network contains an Active Directory domain named contoso.com that contains a domain controller named DC1. All DNS servers for the network run BIND 10. Your perimeter network contains a DHCP server named DHCP1 that runs Windows Server 2016. DHCP1 is a member of a workgroup named WORKGROUP. DHCP1 provides IP address leases to guests accessing the Wi-Fi network. Several engineers access the network remotely by using a VPN connection to a remote access server that runs Windows Server 2016. All of the VPN connections use certificate-based authentication and are subject to access policies in Network Policy Server (NPS). Certificates are issued by an enterprise certification authority (CA) named CA1. All Windows computers on the network are activated by using Key Management Service (KMS). On- premises users use Remote Desktop Services (RDS). You plan to deploy IP Address Management (IPAM) to the network. Which action can you perform on the network by using IPAM?

• A. Manage the DNS zones on the DNS servers.
• B. Audit logon events on the RDS server.
• C. Audit authentication events from DC1.
• D. Manage activations on the KMS server.