Last Updated: Sep 18, 2026
No. of Questions: 286 Questions & Answers with Testing Engine
Download Limit: Unlimited
Our SurePassExams 070-742 Exam Preparation materials are famous for its high pass-rate. Actual studying content will help you pass exam for sure. Also different study methods will give you different choices and different preparing experience. 070-742 exam torrent files can help you prepare easily and get doubt result with half effort. Our Soft test engine and Online test engine will provide you simulation function so that you can have a good mood after studying deeply.
SurePassExams has an unprecedented 99.6% first time pass rate among our customers.
We're so confident of our products that we provide no hassle product exchange.
Think of simulation as the slight push that sets off a butterfly effect: a few timed sessions in the Microsoft Identity with Windows Server 2016 practice engine, and the real 070-742 exam environment stops being unknown territory. In 2026, familiarity with exam-day details is one of the cheapest advantages you can buy.
| Certification Vendor: | Microsoft |
|---|---|
| Exam Name: | Identity with Windows Server 2016 |
| Exam Number: | 70-742 |
| Exam Price: | USD 165 (varies by region) |
| Real Exam Qty: | 40-60 (varies) |
| Exam Format: | Multiple Choice, Case Studies, Drag and Drop, Build List, Best Answer |
| Passing Score: | 700 (on 1000 scale) |
| Related Certifications: | MCSA: Windows Server 2016 |
| Available Languages: | Japanese, English, Spanish, French, Portuguese (Brazil), Chinese (Simplified), German |
| Exam Duration: | 120 minutes |
| Certificate Validity Period: | Retired (exam no longer available; certification retired) |
| Recommended Training: | Microsoft Learn - Windows Server documentation Microsoft Official Practice Tests (historical / third-party providers) |
| Exam Registration: | Microsoft Certification / Exam Registration (Pearson VUE) |
| Sample Questions: | DOWNLOAD DEMO |
| Exam Way: | Available via Pearson VUE testing centers or online proctored exam (where supported at time of availability; now retired). |
| Pre Condition: | Recommended: experience with Windows Server 2016 and knowledge of AD DS, DNS, and networking fundamentals. Typically part of MCSA: Windows Server 2016 track (with exams 70-740, 70-741, 70-742). |
| Official Syllabus URL: | https://learn.microsoft.com/en-us/credentials/certifications/exams/70-742 |
| Section | Objectives |
|---|---|
| Install and configure Active Directory Domain Services (AD DS) | - Configure AD DS replication - Deploy and manage domain controllers - Manage AD DS objects (users, groups, computers) |
| Implement Active Directory Certificate Services (AD CS) | - Manage certificates and templates - Deploy certification authorities |
| Implement identity synchronization and access solutions | - Configure directory synchronization - Manage authentication and authorization solutions |
| Create and manage Group Policy | - Manage GPO scope and processing - Configure Group Policy Objects (GPOs) - Implement security settings using Group Policy |
| Implement Active Directory Federation Services (AD FS) | - Implement claims-based authentication - Configure federation trust relationships |
Recommended: experience with Windows Server 2016 and knowledge of AD DS, DNS, and networking fundamentals. Typically part of MCSA: Windows Server 2016 track (with exams 70-740, 70-741, 70-742).
The 070-742 exam contains 40-60 (varies) questions with 120 minutes minutes on the clock. That combination rewards candidates who have rehearsed under realistic conditions — which is exactly what the software simulation version of the SurePassExams materials is for.
The official outline divides the 070-742 exam into weighted domains, including:
The Microsoft Identity with Windows Server 2016 question bank at SurePassExams is organized around these same objectives, and its clear layout makes the heavily weighted points easy to spot and revisit.
Microsoft provides these training resources for candidates:
Pair them with structured practice questions and simulation sessions, and you cover both the knowledge and the experience sides of exam preparation.
The passing score is 700 (on 1000 scale) and the exam fee is USD 165 (varies by region). A practical approach: keep running timed practice sets until your results sit comfortably above the passing line, then book your seat.
Because knowing the content and knowing the exam are different skills. The software version of the Microsoft Identity with Windows Server 2016 materials simulates the real 070-742 exam environment, so the interface, timing, and question flow are familiar before you sit the real thing. It is a small rehearsal with an outsized effect — candidates who have experienced the simulation handle exam-day details calmly instead of burning time on surprises.
Registration is handled through the official channels below:
Pick a date that leaves room for at least a few full simulation sessions — that final rehearsal window is where preparation consolidates.
The 070-742 exam is the official test for the Microsoft Identity with Windows Server 2016 certification from Microsoft, measuring how well you can apply the published exam objectives in realistic scenarios. The credential validates your skills against an industry-recognized standard — and because the exam has its own format and rhythm, materials that combine organized content with realistic simulation prepare you more completely than reading alone.
Three things. First, it starts with a free demo containing plenty of sample questions, so you can taste the 070-742 exam content before deciding. Second, the PDF prints cleanly, turning your screen materials into paper you can annotate — notes in the margins keep your memory of key points fresh every time you pick the pages back up. Third, it travels anywhere: no account login, no compatibility worries, just 286 practice questions for the Microsoft Identity with Windows Server 2016 exam ready whenever you are.
Your network contains an Active Directory forest. The forest contains a domain named contoso.com. The domain contains three domain controllers.
A domain controller named lon-dc1 fails. You are unable to repair lon-dc1.
You need to prevent the other domain controllers from attempting to replicate to lon-dc1.
Solution: From Active Directory Users and Computers, you remove the computer account of lon-dc1.
Does this meet the goal?
Correct Answer: B 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named TestOU that contains test computers.
You need to enable a technician named Tech1 to create Group Policy objects (GPOs) and to link the GPOs to TestOU. The solution must use the principle of least privilege.
Which two actions should you perform? Each correct answer presents part of the solution.
Correct Answer: C,D 🗳️
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016.
Server1 has IP Address Management (IPAM) installed. Server2 has Microsoft System Center 2016 Virtual Machine Manager (VMM) installed.
You need to integrate IPAM and VMM.
Which types of objects should you create on each server? To answer, drag the appropriate object types to the correct servers. Each object type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:

Explanation
Server 1 (IPAM): Access Policy
VMM must be granted permission to view and modify IP address space in IPAM, and to perform remote management of the IPAM server. VMM uses a "Run As" account to provide these permissions to the IPAM network service plugin. The "Run As" account must be configured with appropriate permission on the IPAM server.
To assign permissions to the VMM user account
In the IPAM server console, in the upper navigation pane, click ACCESS CONTROL, right-click Access Policies in the lower navigation pane, and then click Add AccessPolicy.
Etc.
Server 2 (VMM) #1: Network Service
Server 2 (VMM) #2: Run As Account
Perform the following procedure using the System Center VMM console.
To configure VMM (see step 1-3, step 6-7)
Etc.
References: https://technet.microsoft.com/en-us/library/dn783349(v=ws.11).aspx
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains the Active Directory forests and domains shown in the following table:
A two-way forest trust exists between ForestA and ForestB.
Each domain in ForestB contains user accounts that are used to manage servers.
You need to ensure that the user accounts used to manage the servers in ForestB are members of the Server Operators in ForestA.
Solution: You create a universal group in DomainBRoot. You add users to the new group. You modify the membership of the Server Operators in ForestA.
Does this meet the goal?
Correct Answer: A 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.
The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)
The relevant users and client computer in the domain are configured as shown in the following table.
End of repeated scenario.
You plan to enforce the GPO link for A6.
Which five GPOs will apply to User1 in sequence when the user signs in to Computer1 after the link is enforced? To answer, move the appropriate GPOs from the list of GPOs to the answer area and arrange them in the correct order.
Correct Answer:

Explanation
Natividad
Ruth
Veromca
Amos
Berger
Christian
SurePassExams is the world's largest certification preparation company with 99.6% Pass Rate History from 58866+ Satisfied Customers in 148 Countries.
Over 58866+ Satisfied Customers
