Certification exams change, and study material that was accurate last year can quietly fall behind. Lead2Passed keeps the 070-742 question bank current with 365 days of free updates, so the 286 questions you study in 2026 reflect the exam as it stands now.
Microsoft 070-742 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Implement Active Directory Certificate Services (AD CS) | - Deploy certification authorities - Manage certificates and templates |
| Implement Active Directory Federation Services (AD FS) | - Implement claims-based authentication - Configure federation trust relationships |
| Create and manage Group Policy | - Configure Group Policy Objects (GPOs) - Manage GPO scope and processing - Implement security settings using Group Policy |
| Implement identity synchronization and access solutions | - Configure directory synchronization - Manage authentication and authorization solutions |
| Install and configure Active Directory Domain Services (AD DS) | - Manage AD DS objects (users, groups, computers) - Deploy and manage domain controllers - Configure AD DS replication |
070-742 Exam FAQ: What Candidates Ask Most
The Microsoft Identity with Windows Server 2016 (exam code 070-742) is the exam you pass to earn the MCSA: Windows Server 2016 certification, a credential at the Associate level. It is also connected with related credentials such as MCSA: Windows Server 2016. If you are mapping out a certification path with Microsoft, this exam is a milestone worth planning around.
The 070-742 exam includes 40-60 (varies) questions, and you have 120 minutes to complete them. With that many questions on the clock, pacing is part of the challenge: divide your time into rough blocks as you go, and flag the items that stall you so you can circle back at the end instead of burning minutes on a single question. A week or two before your exam date, sit at least one full timed session in the Lead2Passed test engine under the same time limit, so the pace feels familiar rather than frantic on the day.
You need 700 (on 1000 scale) to pass the 070-742 exam, and the official registration fee is USD 165 (varies by region). That fee is due again in full for every retake, which makes thorough preparation the cheaper investment by far. Before you book your seat, test yourself with the Lead2Passed practice questions until you are scoring comfortably above the passing mark on a consistent basis — it is the simplest way to avoid paying for the same exam twice.
Recommended: experience with Windows Server 2016 and knowledge of AD DS, DNS, and networking fundamentals. Typically part of MCSA: Windows Server 2016 track (with exams 70-740, 70-741, 70-742).
Eligibility rules can be adjusted by Microsoft over time, so before you register, confirm the current requirements on the official exam page: view the official 070-742 exam information.
You can book the 070-742 exam through the official registration channels below:
How the exam is taken: Available via Pearson VUE testing centers or online proctored exam (where supported at time of availability; now retired)..
Microsoft lists the following official training options for candidates preparing for this exam:
- Microsoft Learn - Windows Server documentation
- Microsoft Official Practice Tests (historical / third-party providers)
Once you have worked through the training, measure your readiness with the 286 practice questions from Lead2Passed — they show you exactly which topics still need attention before you book the exam.
Yes. Lead2Passed offers a free PDF demo of the 070-742 practice questions, so you can judge the quality of the material firsthand before paying anything. Every purchase also includes 365 days of free updates — if Microsoft changes the exam during that year, your material changes with it. And when the free update period expires, you can extend it at a 50% discount from within your member zone.
Every 070-742 purchase at Lead2Passed is backed by a 100% Money Back Guarantee: if you take the corresponding exam within 60 days of your purchase and do not pass, you can apply for a full refund. The guarantee has clear conditions — it does not apply if you sit the exam within 3 days of purchase, if you downloaded the material but never actually took the exam, or to free materials and expired orders, and the candidate name must match the payer name. To file a claim, send a scan of your exam enrollment slip together with your official Score Report PDF within 2 days of the exam; claims are processed within 7 days. If you would rather not take a refund, you can exchange the product instead and receive two additional exam preparation products of equal value for free, while your original product keeps its update service. Delivery itself is instant: your material is available for download right after payment and is also sent to your email within one minute — if it has not arrived within 2 hours, contact our customer service. There is no limit on how many computers you can install it on.
The official Microsoft Identity with Windows Server 2016 outline divides the exam content into 5 main domains. The first three are:
- Implement Active Directory Federation Services (AD FS)
- Create and manage Group Policy
- Implement Active Directory Certificate Services (AD CS)
That is only the headline view — scroll back up to the Exam Topics section on this page for the complete domain-by-domain breakdown before you plan your study schedule.
Microsoft Identity with Windows Server 2016 Sample Questions:
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains the Active Directory forests and domains shown in the following table:
A two-way forest trust exists between ForestA and ForestB.
Each domain in ForestB contains user accounts that are used to manage servers.
You need to ensure that the user accounts used to manage the servers in ForestB are members of the Server Operators in ForestA.
Solution: In each domain in ForestB, you create a global group that contains the user accounts of the respective domain. You create a universal group in DomainBRoot. You add the new global groups to the new universal group. You modify the membership of the Server Operators in ForestA.
Does this meet the goal?
- A. Yes
- B. No
Correct Answer: A 🗳️
Explanation: Only visible for Lead2Passed members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com.
You deploy a standalone root certification authority (CA) named CA1.
You need to auto enroll domain computers for certificates by using a custom certificate template.
What should you do first?
- A. Modify the Exit Module for CA1.
- B. Modify the Policy Module for CA1.
- C. Install an enterprise subordinate CA.
- D. Install a standalone subordinate CA.
Correct Answer: C 🗳️
Explanation: Only visible for Lead2Passed members. You can sign-up / login (it's free).
Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest and the domains is Windows Server 2008 R2.
You have a global group named Group1 in the contoso.com domain. Group1 contains the user accounts in contoso.com.
You need to ensure that you can add the user accounts in the fabrikam.com domain to Group1.
What should you do?
- A. In both domains, run the adprep.exe command and specify the /domainprep parameter.
- B. Assign the Domain Controllers group in fabrikam.com permissions to Group1.
- C. Raise the domain functional level of contoso.com to Windows Server 2016.
- D. Modify the scope of Group1 to Universal.
Correct Answer: C 🗳️
Your network contains an Active Directory domain named contoso.com. All the accounts of the users in the sales department are in an organizational unit (OU) named SalesOU.
An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object (GPO) named Sales GPO.
You need to set the registry value of \HKEY_CURRENT_USER\Software\App1\Collaboration to 0.
Solution: You add a computer preference that has a Replace action.
Does this meet the goal?
- A. NO
- B. Yes
Correct Answer: B 🗳️
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.
The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)
The relevant users and client computer in the domain are configured as shown in the following table.
End of repeated scenario.
You are evaluating what will occur when you block inheritance on OU4.
Which GPO or GPOs will apply to User1 when the user signs in to Computer1 after block inheritance is configured?
- A. A7 only
- B. A1, A5, and A6
- C. A3 and A7 only
- D. A3, A1, A5, and A7
Correct Answer: A 🗳️
Viewing page 1 out of 58 pages.
Viewing questions 1-5 out of 286 questions.
933 Customer Reviews
