Professional means specialized: PassCollection's IT workers have studied the real Microsoft Identity with Windows Server 2016 for years and check updates daily — 286 practice questions for the 070-742 exam you can rest assured about.
Microsoft 070-742 Exam Overview:
| Certification Vendor: | Microsoft |
|---|---|
| Exam Name: | Identity with Windows Server 2016 |
| Exam Number: | 70-742 |
| Exam Duration: | 120 minutes |
| Exam Format: | Multiple choice, Drag and drop, Build list, Multiple response, Active screen, Case studies, Short answer |
| Exam Price: | USD 165 |
| Related Certifications: | 70-740 Installation, Storage, and Compute with Windows Server 2016 70-741 Networking with Windows Server 2016 |
| Certificate Validity Period: | Retired January 31, 2021; originally valid until certification retirement |
| Passing Score: | 700 / 70% |
| Real Exam Qty: | 40-60 |
| Available Languages: | Japanese, Portuguese (Brazil), German, Chinese (Traditional), Spanish, English, French, Chinese (Simplified) |
| Recommended Training: | Microsoft Learn Self-Paced Training Microsoft Official Course 20742 |
| Exam Registration: | Pearson VUE Microsoft Exam Registration |
| Sample Questions: | ![]() |
| Exam Way: | Proctored onsite at Pearson VUE centers or online proctored (before retirement) |
| Pre Condition: | No mandatory prerequisites; recommended experience with Windows Server 2016 administration; one of three exams required for MCSA: Windows Server 2016 |
| Official Syllabus URL: | https://learn.microsoft.com/en-us/credentials/certifications/exams/70-742/ |
Microsoft 070-742 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Implement Identity Federation and Access Solutions | 15-20% | - Implement Web Application Proxy - Implement hybrid identity solutions - Configure AD RMS - Install and configure AD FS |
| Manage and Maintain AD DS | 15-20% | - Configure service authentication - Monitor and troubleshoot AD DS - Manage trust relationships - Maintain AD DS database |
| Create and Manage Group Policy | 25-30% | - Configure Group Policy settings and preferences - Manage Group Policy scope and processing - Troubleshoot Group Policy application - Create and configure GPOs |
| Implement Active Directory Certificate Services (AD CS) | 10-15% | - Manage certificate templates and revocation - Manage certificate deployment and validation - Configure certificate enrollment - Install and configure AD CS |
| Install and Configure Active Directory Domain Services (AD DS) | 20-25% | - Configure DNS integration with AD DS - Create and manage AD DS objects - Configure AD DS sites and replication - Install and configure domain controllers |
Microsoft Identity with Windows Server 2016 Exam FAQ — Half the Effort
Book through the vendor's official registration channels:
The Microsoft Identity with Windows Server 2016 is delivered Proctored onsite at Pearson VUE centers or online proctored (before retirement), so pick the arrangement that fits your schedule.
Yes — download the free trial of the Microsoft Identity with Windows Server 2016 material before you buy. Members then enjoy free updating for 365 days, with new versions emailed promptly; renew afterward at 50% off.
The Microsoft Identity with Windows Server 2016 is Microsoft's certification exam for MCSA: Windows Server 2016, at the Associate level. As a major exam recognized by most companies, it proves your IT ability to employers — including the big international ones. Related credentials include 70-740 Installation, Storage, and Compute with Windows Server 2016, 70-741 Networking with Windows Server 2016.
The Microsoft Identity with Windows Server 2016 blueprint covers 5 domains — including Implement Identity Federation and Access Solutions (15-20%), Manage and Maintain AD DS (15-20%), Implement Active Directory Certificate Services (AD CS) (10-15%). Pay attention to the key points where weightings concentrate; the full outline above lists every subtopic.
USD 165 per attempt, 700 / 70% to pass. Half the effort works only with the right focus — rehearse with the 286 practice questions for the 070-742 exam at PassCollection before booking.
No mandatory prerequisites; recommended experience with Windows Server 2016 administration; one of three exams required for MCSA: Windows Server 2016 Eligibility rules are updated periodically, so verify the current requirements on the official page (official 070-742 exam page) before registering.
Files arrive by automatic email within a minute of payment — unlimited devices, and 24/7 customer assisting for any downloading or purchasing problem if nothing shows up within 2 hours. If you get a bad result on the corresponding 070-742 exam within 60 days of purchase, the money is fully refunded: send a scanned enrollment slip plus the official Score Report PDF within 2 days of the exam, processed within 7 days. Excluded: exams within 3 days of purchase, candidate names that don't match the payer, and free or expired products. You may instead exchange for two equal-value products free.
120 minutes for 40-60 questions. The online engine simulates the formal test atmosphere — practice anywhere, so the clock feels familiar on the day.
Yes:
Pair any official course with the 286 practice questions for the Microsoft Identity with Windows Server 2016 — answers expert-verified, suitable for any level of candidate.
Microsoft Identity with Windows Server 2016 Sample Questions:
Your company has two offices. The offices are located in Montreal and Seattle.
The network contains an Active Directory forest named contoso.com.
The forest contains three domain controllers configured as shown in the following table.
The company physically relocates Server2 from the Montreal office the Seattle office.
You discover that both Server1 and Server2 authenticate users who sign in to the client computers in the Montreal office. Only Server3 authentications users who sign in to the computers in the Seattle office.
You need to ensure that Server2 authenticates the users in the Seattle office during normal network operations.
What should you do?
- A. From Windows Power Shell, run the Move-AD Directory Server cmdlet.
- B. From Network Connections on Server2, modify the Internet Protocol Version 4 (TCP/IPv4) configuration.
- C. From Active Directory Users and Computers, modify the Location property of Server2.
- D. From Windows PowerShell, run the Set-ADReplicationSite cmdlet.
Correct Answer: D 🗳️
Your network contains an Active Directory domain named contoso.com. The relevant objects in the domain are configured as shown in the following table.
You have the following configurations:
* User1 is in OU1 and is a member of Group1 and Group2
* User2 is in OU2 and is a member of Group1 and Group3
* GPO1 is linked to OU1.
Server1 has three shares named Share1, Share2, and Share3. The Domain Users group permissions to all three shares.
GPO1 is configured as shown in the exhibit. (Click the Exhibit button.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Correct Answer:

Explanation
Your network contains an Active Directory forest named adatum.com.
A partner organization has an Active Directory forest named contoso.com.
Adatum.com contains an Active Directory Rights Management (AD RMS) cluster installed on a server named adat1.adatum.com.
Contoso.com contains an Active Directory Rights Management Services (AD RMS) cluster installed on a server named cont1.contoso.com.
You need to allow the AD RMS cluster in adatum.com to accept rights account certificates (RACs) from contoso.com.
What should you do?
- A. In adatum.com, import the trusted user domain file from cont1.contoso.com
- B. In contoso.com, import the trusted publishing domain file from cont1.contoso.com
- C. In contoso.com, import the trusted user domain file from adat1.adatum.com
- D. In adatum.com, import the trusted publishing domain file from adat1.adatum.com
Correct Answer: A 🗳️
Explanation: Only visible for PassCollection members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com.
You create a domain security group named Group1 and add several users to it.
You need to force all of the users in Group1 to change their password every 35 days. The solution must affect the Group1 users only.
What should you do?
- A. From Windows PowerShell, run the Set-ADDomain cmdlet, and then run the Set-ADAccountPassword cmdlet.
- B. From Active Directory Administrative Center, create a Password Setting object (PSO).
- C. Create a forms authentication provider, and then set the forms authentication credentials.
- D. Modify the Password Policy settings in a Group Policy object (GPO) that is linked to the domain, and then filter the GPO to Group1 only.
Correct Answer: B 🗳️
Your network contains an Active Directory domain named adatum.com. The domain contains the servers configured as shown in the following table:
You have a server named Server6 in the perimeter network.
Each server has the local users show in the following table.
The domain contains the users shown in the following table.
You install a Web Application Proxy on Server6.
You need to configure the Web Application proxy on Server6. The solution must use the principle of least privilege.
Which account should you specify in the Web Application Proxy Configuration Wizard? To answer, select the appropriate options in the answer are.
NOTE: Each correct selection is worth one point.
Correct Answer:

Explanation
The user account used to configure the web application proxy must have local Administrator permission on the WAP server(s), and have access to an account that have local Administrator permissions on the AD FS servers.
References:
http://www.mistercloudtech.com/2015/11/25/how-to-install-and-configure-web-application-proxy-for-adfs/
Viewing page 1 out of 58 pages.
Viewing questions 1-5 out of 286 questions.






