Upgrading Your Skills to MCSA Windows Server 2016

Here you have the best Microsoft 70-743 practice exam questions

  • You have 231 total questions across 47 pages (5 per page)
  • These questions were last updated on February 4, 2026
  • This site is not affiliated with or endorsed by Microsoft.
Question 1 of 231
Note: This question is part of a series of a questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration.
Exam 70-743: Question 1 - Image 1
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.
You need to configure Active Directory to support the planned deployment.
Solution: You upgrade a domain controller to Windows Server 2016.
Does this meet the goal?
Suggested Answer: B

The proposed solution does not meet the goal. While upgrading a domain controller to Windows Server 2016 does update the schema, it does not automatically upgrade the forest or domain functional level. Device Registration in Active Directory Federation Services (AD FS) requires at least a forest functional level of Windows Server 2012 R2. Since the provided configuration shows the forest and domain functional levels are both set to Windows Server 2008 R2, simply upgrading one domain controller to Windows Server 2016 does not satisfy the requirements for configuring device registration. Therefore, the solution does not meet the goal.

Community votes

No votes yet

Question 2 of 231
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration:
Exam 70-743: Question 2 - Image 1
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.
You need to configure Active Directory to support the planned deployment.
Solution: You raise the forest functional level to Windows Server 2012 R2.
Does this meet the goal?
Suggested Answer: B

Raising the forest functional level to Windows Server 2012 R2 does not meet the goal of deploying an Active Directory Federation Services (AD FS) farm on Server1 running Windows Server 2016 and configuring device registration. AD FS 2016 requires the Active Directory 2016 schema, not just the 2012 R2 schema. Therefore, to support the planned deployment, the Active Directory schema would need to be updated to at least the 2016 version.

Community votes

No votes yet

Question 3 of 231
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration:
Exam 70-743: Question 3 - Image 1
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.
You need to configure Active Directory to support the planned deployment.
Solution: You run adprep.exe from the Windows Server 2016 installation media.
Does this meet the goal?
Suggested Answer: A

For deploying AD FS 2016 and configuring device registration, the requirement is to have the Active Directory schema updated to a level that supports these features. Running adprep.exe from the Windows Server 2016 installation media will extend the schema to the necessary version. This operation prepares the domain for deploying AD FS 2016 by updating the schema to the required version, albeit without necessarily raising the domain and forest functional levels. Therefore, running adprep.exe will meet the goal.

Community votes

No votes yet

Question 4 of 231
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.
Exam 70-743: Question 4 - Image 1
You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From Windows PowerShell on Server1, you run the Add-DnsServertrustAnchor cmdlet.
Does this meet the goal?
Suggested Answer: B

The Add-DnsServerTrustAnchor cmdlet is used to add a trust anchor, which is necessary for DNSSEC validation as it provides a public cryptographic key for a DNSSEC-signed zone. However, running this cmdlet alone on Server1 does not ensure that all client computers in the domain perform DNSSEC validation for the fabrikam.com namespace. The clients also need to be configured to use DNSSEC and trust the DNS server's trust anchors. Therefore, this solution does not fully meet the goal.

Community votes

No votes yet

Question 5 of 231
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.
Exam 70-743: Question 5 - Image 1
You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From a Group Policy object (GPO) in the domain, you add a rule to the Name Resolution Policy Table (NRPT).
Does this meet the goal?
Suggested Answer: A

Community votes

No votes yet

About the Microsoft 70-743 Certification Exam

About the Exam

The Microsoft 70-743 (Upgrading Your Skills to MCSA Windows Server 2016) validates your knowledge and skills. Passing demonstrates proficiency and can boost your career prospects in the field.

How to Prepare

Work through all 231 practice questions across 47 pages. Focus on understanding the reasoning behind each answer rather than memorizing responses to be ready for any variation on the real exam.

Why Practice Exams?

Practice exams help you familiarize yourself with the question format, manage your time, and reduce anxiety on the test day. Our 70-743 questions are regularly updated to reflect the latest exam objectives.