Last Updated: Oct 08, 2026
No. of Questions: 286 Questions & Answers with Testing Engine
Download Limit: Unlimited
The comprehensive Exam4Labs 070-742 valid study torrent can satisfy your needs to conquer the actual test. 070-742 free demo questions allow you to access your readiness and teach you what you need to know to pass the 070-742 actual test. With the Microsoft 070-742 test engine, you can simulate the real test environment. We ensure you 100% pass with our 070-742 training torrent.
Exam4Labs has an unprecedented 99.6% first time pass rate among our customers.
We're so confident of our products that we provide no hassle product exchange.
Knowing your weak domains before the exam is worth more than any last-minute review. The Exam4Labs engines score every session, turning 286 practice questions into a map of your strengths and gaps.
| Certification Vendor: | Microsoft |
|---|---|
| Exam Name: | Identity with Windows Server 2016 |
| Exam Number: | 70-742 |
| Exam Price: | USD 165 (varies by region) |
| Available Languages: | Chinese (Simplified), Spanish, Japanese, German, French, Portuguese (Brazil), English |
| Certificate Validity Period: | Retired (exam no longer available; certification retired) |
| Exam Duration: | 120 minutes |
| Related Certifications: | MCSA: Windows Server 2016 |
| Passing Score: | 700 (on 1000 scale) |
| Exam Format: | Multiple Choice, Best Answer, Build List, Drag and Drop, Case Studies |
| Real Exam Qty: | 40-60 (varies) |
| Recommended Training: | Microsoft Official Practice Tests (historical / third-party providers) Microsoft Learn - Windows Server documentation |
| Exam Registration: | Microsoft Certification / Exam Registration (Pearson VUE) |
| Sample Questions: | DOWNLOAD DEMO |
| Exam Way: | Available via Pearson VUE testing centers or online proctored exam (where supported at time of availability; now retired). |
| Pre Condition: | Recommended: experience with Windows Server 2016 and knowledge of AD DS, DNS, and networking fundamentals. Typically part of MCSA: Windows Server 2016 track (with exams 70-740, 70-741, 70-742). |
| Official Syllabus URL: | https://learn.microsoft.com/en-us/credentials/certifications/exams/70-742 |
| Section | Objectives |
|---|---|
| Implement Active Directory Certificate Services (AD CS) | - Manage certificates and templates - Deploy certification authorities |
| Create and manage Group Policy | - Configure Group Policy Objects (GPOs) - Manage GPO scope and processing - Implement security settings using Group Policy |
| Install and configure Active Directory Domain Services (AD DS) | - Deploy and manage domain controllers - Manage AD DS objects (users, groups, computers) - Configure AD DS replication |
| Implement identity synchronization and access solutions | - Configure directory synchronization - Manage authentication and authorization solutions |
| Implement Active Directory Federation Services (AD FS) | - Configure federation trust relationships - Implement claims-based authentication |
Three versions of the same study materials: a printable, expert-prepared PDF with free demo download and instant access; a Desktop Test Engine for Windows with customizable simulation and timed modes that works offline; and an Online Test Engine for any browser on Windows, Mac, Android, and iOS with test history and performance review. All 286 practice questions are identical across versions. Every purchase includes 365 days of free updates, a 50% renewal discount afterward, and unlimited computer installations.
The Microsoft Identity with Windows Server 2016 exam contains 40-60 (varies) to complete within 120 minutes. Timed simulation in the Exam4Labs Desktop Test Engine teaches that rhythm before exam day does.
The official Microsoft Identity with Windows Server 2016 outline defines 5 domains. The leading three are Install and configure Active Directory Domain Services (AD DS), Implement identity synchronization and access solutions, and Implement Active Directory Certificate Services (AD CS). The full list is in the topics section above, and Exam4Labs's 286 practice questions cover each one.
Recommended: experience with Windows Server 2016 and knowledge of AD DS, DNS, and networking fundamentals. Typically part of MCSA: Windows Server 2016 track (with exams 70-740, 70-741, 70-742). Since requirements change over time, confirm the latest on the official Microsoft exam page before scheduling.
The Microsoft Identity with Windows Server 2016 exam requires 700 (on 1000 scale) to pass, and registration costs USD 165 (varies by region). A failed attempt means paying the same fee again — a readiness check with the Exam4Labs engines before booking is the cheaper option.
The 070-742 exam is a Microsoft certification exam validating the Microsoft Identity with Windows Server 2016 syllabus shown above. It belongs to these credential paths: MCSA: Windows Server 2016. Candidates in 2026 start with Exam4Labs's 286 practice questions, available as a printable PDF, a Windows Desktop Test Engine, and an Online Test Engine — three versions of the same materials.
Microsoft recommends these training resources for the Microsoft Identity with Windows Server 2016 exam:
Follow the training with steady self-testing — the 286 practice questions from Exam4Labs help you apply theory and fill any gaps the training leaves.
Exam4Labs issues a full refund if you take the Microsoft Identity with Windows Server 2016 exam within 60 days of purchase and do not pass. The policy does not apply if the exam is taken within 3 days of purchase, if the exam was never actually taken, or to free materials or expired orders, and the candidate name must match the payer name. Submit a scan of your enrollment slip and the official Score Report PDF within 2 days of the exam; claims are processed within 7 days. Alternatively, exchange for two free exam products of equal value and keep your original update service. Orders arrive by email within 1 minute — contact support if nothing arrives within 2 hours.
Available via Pearson VUE testing centers or online proctored exam (where supported at time of availability; now retired). Register for the Microsoft Identity with Windows Server 2016 exam through these official channels:
After booking, Exam4Labs delivers your practice questions within 1 minute — preparation starts the same day.
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016.
Server1 has IP Address Management (IPAM) installed. Server2 has Microsoft System Center 2016 Virtual Machine Manager (VMM) installed.
You need to integrate IPAM and VMM.
Which types of objects should you create on each server? To answer, drag the appropriate object types to the correct servers. Each object type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:

Explanation
Server 1 (IPAM): Access Policy
VMM must be granted permission to view and modify IP address space in IPAM, and to perform remote management of the IPAM server. VMM uses a "Run As" account to provide these permissions to the IPAM network service plugin. The "Run As" account must be configured with appropriate permission on the IPAM server.
To assign permissions to the VMM user account
In the IPAM server console, in the upper navigation pane, click ACCESS CONTROL, right-click Access Policies in the lower navigation pane, and then click Add AccessPolicy.
Etc.
Server 2 (VMM) #1: Network Service
Server 2 (VMM) #2: Run As Account
Perform the following procedure using the System Center VMM console.
To configure VMM (see step 1-3, step 6-7)
Etc.
References: https://technet.microsoft.com/en-us/library/dn783349(v=ws.11).aspx
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016. The computer accounts of Server1 and Server2 are in the Computers container.
A Group Policy object (GPO) named GPO1 is linked to the domain. GPO1 has multiple computer settings defined and has following the configurations.
An administrator discovers that GPO1 is not applied to Served. GPO1 is applied to Server2. Which configuration possibly prevents GPO1 from being applied to Server1?
Correct Answer: B 🗳️
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2.
DC1 holds the RID master operations role. DC1 fails and cannot be repaired. You need to move the RID role to DC2.
Solution: On DC2, you open Active Directory Users and Computers, click Operations Masters.., verify that dc2.contoso.com is listed on the RID tab, and click Change.
Does this meet the goal?
Correct Answer: A 🗳️
Explanation: Only visible for Exam4Labs members. You can sign-up / login (it's free).
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
You work for a company named Contoso, Ltd.
The network contains an Active Directory forest named contoso.com. A forest trust exists between contoso.com and an Active Directory forest named adatum.com.
The contoso.com forest contains the objects configured as shown in the following table.
Group1 and Group2 contain only user accounts.
Contoso hires a new remote user named User3. User3 will work from home and will use a computer named Computer3 that runs Windows 10. Computer3 is currently in a workgroup.
An administrator named Admin1 is a member of the Domain Admins group in the contoso.com domain.
From Active Directory Users and Computers, you create an organizational unit (OU) named OU1 in the contoso.com domain, and then you create a contact named Contact1 in OU1.
An administrator of the adatum.com domain runs the Set-ADUser cmdlet to configure a user named User1 to have a user logon name of [email protected].
End or repeated scenario.
You need to ensure that Admin1 can add Group2 as a member of Group3.
What should you modify?
Correct Answer: D 🗳️
Your network contains an Active Directory domain named contoso.com. The domain contains servers that run Windows Server 2016 and client computers that run Windows 10. The naming conventions for the computers and the servers is inconsistent.
You plan to create a Group Policy object (GPO) named GPO1 and to link GPO1 to the domain. GPO1 will contain custom Group Policy preference settings.
You need to ensure that the preference settings in GPO1 will apply only to member servers. GPO1 must NOT apply to domain controllers or client computers.
Which type of item level targeting should you use?
Correct Answer: B 🗳️
Explanation: Only visible for Exam4Labs members. You can sign-up / login (it's free).
Harriet
Kelly
Merry
Poppy
Tammy
Abraham
Exam4Labs is the world's largest certification preparation company with 99.6% Pass Rate History from 58960+ Satisfied Customers in 148 Countries.
Over 58960+ Satisfied Customers
