exam questions

Exam 70-742 All Questions

View all questions & answers for the 70-742 exam

Exam 70-742 topic 1 question 265 discussion

Actual exam question from Microsoft's 70-742
Question #: 265
Topic #: 1
[All 70-742 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012 R2.
Contoso.com has the following configuration.
PS C:\> (Get-ADForest).ForestMode

Windows2008R2Forest -
PS C:\> (Get-ADDomain).DomainMode

Windows2008R2Domain -
PS C:\>
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure device registration.
You need to configure Active Directory to support the planned deployment.
Solution: You upgrade a domain controller to Windows Server 2016.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
Device Registration requires Windows Server 2012 R2 forest schema. Upgrading a domain controller will run adprep.exe to upgrade the schema as part of the upgrade process.
References:
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/configure-a-federation-server-with-device-registration-service https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers-to-windows-server-2012-r2-and-windows-server-2012

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
khalid86
Highly Voted 4 years, 11 months ago
I agree with @Gary, The correct answer is NO. Here is the proof: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers The above document says: "If you are doing an in-place upgrade of an existing domain controller to the Windows Server 2016 operating system, you will need to run adprep /forestprep and adprep /domainprep manually." It means that upgrading a domain controller does not upgrade schema. https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/overview/ad-fs-requirements#BKMK_4 and the above document says: "New installations of AD FS 2016 require the Active Directory 2016 schema (minimum version 85)."
upvoted 7 times
Sham
4 years, 5 months ago
you can't do in-place upgrade for DC without extend the schema using adprep
upvoted 1 times
alexnt
4 years, 5 months ago
I think that's what he said. So answer is NO. What is your answer?
upvoted 1 times
...
...
...
Gary
Highly Voted 5 years, 5 months ago
Hi guys, I believe this is a wrong answer. I upgrade my lab dc to windows server 2016 before,but the schema level keep stay at 2012 until I manually upgrade it.
upvoted 6 times
...
kostask
Most Recent 4 years, 3 months ago
Answer is B No. https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers#adprep-and-domainprep
upvoted 1 times
...
lofzee
4 years, 3 months ago
Aye, the answer is no. MS docs clearly tell you: If you are doing an in-place upgrade of an existing domain controller to the Windows Server 2016 operating system, you will need to run adprep /forestprep and adprep /domainprep manually. Also, adding a 2016 DC to a forest with a level of 2008 r2 does not automatically upgrade the forest or domain functional level.
upvoted 3 times
...
murinha10
4 years, 4 months ago
The correct option is NO
upvoted 1 times
...
sudarshankarki
4 years, 4 months ago
I think stated answer is correct. We cannot upgrade to 2016 without extending Ad schema. so doing an in-place upgrade to 2016 means upgrading schema also.
upvoted 1 times
...
promaster
4 years, 6 months ago
"If you are doing an in-place upgrade of an existing domain controller to the Windows Server 2016 operating system, you will need to run adprep /forestprep and adprep /domainprep manually." ... https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers
upvoted 2 times
jam7272
4 years, 6 months ago
promaster is correct... as per the link above, if this is an in-place upgrade from a 2012R2 server (and the question suggests it is) you need to run adprep /forestprep once for the entire forest and then run adprep /domainprep on the server (and repeat for any other servers your upgrade). This only applies to in-place OS upgrades. For DC promotions adprep is not needed as is indeed automatic.
upvoted 2 times
alexnt
4 years, 5 months ago
So it B. No
upvoted 1 times
...
...
...
dbeast420
4 years, 7 months ago
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/upgrade-domain-controllers If you are doing an in-place upgrade of an existing domain controller to the Windows Server 2016 operating system, you will need to run adprep /forestprep and adprep /domainprep manually. Adprep /forestprep needs to be run only once in the forest. Adprep /domainprep needs to be run once in each domain in which you have domain controllers that you are upgrading to Windows Server 2016. If you are promoting a new Windows Server 2016 server you do not need to run these manually. These are integrated into the PowerShell and Server Manager experiences.
upvoted 3 times
...
Kamikazekiller
4 years, 9 months ago
answer is: A. YES
upvoted 1 times
...
Dexvex
4 years, 10 months ago
also Adprep is for when you are upgrading the OS of a DC(which MS of course recommends against). It extends schema but doesn't update the function level.
upvoted 2 times
...
Dexvex
4 years, 10 months ago
Installing a new level of domain controller does NOT autoupgrade the schema or functional level, because you will always need to support the oldest DC and alot of older DCs will work alongside Server 2016. I know because I've recently dealt with this in the real word with a 2008 level domain that had 2016 DCs. You actually have to remove all the older DCs and then run the function level update.
upvoted 2 times
...
ShockwaveXYZ
5 years, 1 month ago
Since this is a new installation of adfs on a windows server 2016 server the schema needs to be upgraded. device registration only requires server 2012 adfs, but since you are installing adfs on a server 2016 server you need to upgrade a domain controller to the same level as the new adfs server. "Schema requirements "New installations of AD FS 2016 require the Active Directory 2016 schema (minimum version 85). Raising the AD FS farm behavior level (FBL) to the 2016 level requires the Active Directory 2016 schema (minimum version 85)." https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/overview/ad-fs-requirements
upvoted 1 times
...
[Removed]
5 years, 3 months ago
The correct answer is A, but the stated reason is wrong. Device Registration requires 2012 R2 schema, but this has already been done by adding at least one domain controller with a Windows Server 2012 R2 OS. The focus here should be on the "new AD FS deployment on Windows Server 2016" as per the following link "New installations of AD FS 2016 require the Active Directory 2016 schema": https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/overview/ad-fs-requirements#BKMK_4 So adding a DC with a Windows Server 2016 OS will automatically update the schema to the 2016 schema version.
upvoted 2 times
MentalG
5 years, 2 months ago
The wizard now does this automatically during the setup. The equivalent of running adprep. So if you already promoted the 2016 machines you are already running the current schema.
upvoted 3 times
...
...
coleman
5 years, 4 months ago
i believe it is correct
upvoted 1 times
...
TMW
5 years, 5 months ago
In the official exam guide, in the implement and configure device registration section has an exam note that mentions the need to know about device registration requiring a Server 2016 Forest functional level. specifically device registration with Microsoft passport. NOTE: FOREST FUNCTIONAL LEVEL Your AD DS forest functional-level must be Windows Server 2016 to support device registration and integration with Microsoft Passport. What it doesn't say in the book, is that adprep is part of the upgrade process. I am wondering if that is an automated/requirement in the process of upgrading to 2016. If it is, that would make this answer correct.
upvoted 1 times
...
Honken
5 years, 5 months ago
This is from the book "Your AD DS forest functional-level must be Windows Server 2016 to support device registration and integration with Microsoft Passport". Now, does this mean device registration in general or specifically used with "Microsoft Passport"? If it is in general, then upgrading a DC to Server 2016 does not raise the forest functional level, but has to be done manually (preferably after removing the older DCs).
upvoted 1 times
Honken
5 years, 5 months ago
However, this link says that the requirement for device registration is Server 2012 R2 schema so I'm guessing it's "device registration with Microsoft Passport" that requires 2016 schema. https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/configure-a-federation-server-with-device-registration-service
upvoted 1 times
...
christovski
5 years, 5 months ago
So Id take it as dont assume so it doesnt mention Microsoft passport therefore Im going with in general. Second upgrading a DC to Server 2016 doesnt raise the functional level but does raise the forest schema which is the requirement for this. "In Windows 2008 R2 and lower, to successfully add the controller running a newer version of the OS – you have to manually update the forest and the domain schema version. In Windows Server 2012 and later, when you add a new domain controller, the schema is automatically updated." Given Answer is correct
upvoted 3 times
...
...
panda
5 years, 6 months ago
At first I have understood that Device registration requires Windows server 2012 forest.So I think that the object should be upgrated is not the domain controller but the forest. And Windows 10 may use Device registration on AD FS server running 2012 ? From this point, I think that it is no need to upgrade domain conctroller to 2016.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago