No.# Not 70-741

Answer is B though

No.# The correct answer is: A.

IKEv2 supports VPN Reconnect.
Source: https://searchwindowsserver.techtarget.com/definition/VPN-Reconnect

No.# The correct answer is:
- TCP
- rejected
The IP address 192.168.10.100 does not fit in the subnet range that was mentioned in the inbound filter: 192.168.0.0/24. Therefor, this filter rule does not apply to 192.168.10.100.

No.# The correct answer is:
- Add-NetNatStaticMapping
- 131.107.50.1
- 10.0.0.211
The server app.fabrikam.com will connect to the outside of the NAT server if it wants to connect to WEB1. The NAT1 server has to translate its external address to the internal address of WEB1.

No.# The correct answer is:
- 2000:1516::6c:2348
- fe80::200:5aee:feaa:20a2

The Global Unicast addresses are unique on the internet and start with a 2 or a 3.
The Link Local Unicast addresses are non-routable for internal use and start with FE80
The Unique Local Unicast addresses are routable private IP ranges and start with FD
The Multicast addresses start with FF
FC is undefined.

No.# The correct answer is:
- Failover cluster
- None of the mentioned options

User1 will only be able to:
- Create files / write data
- Write attributes
- Write extended attributes
User1 will NOT be able to delete the file...

No.# The correct answer is: D.

In the DHCP console, you can add a new MAC address to the deny filter and it allows you to use wildcards, so you can add the MAC address range 985F* to the deny list (notice the asterisk * at the end of the MAC address).

No.# The correct answer is: B.

This command generates an error, because it misses an argument for the -Macaddress. But even if you'd add a MAC address to the command, it only generates an allow filter, but it does not enable the filter.
Apparently, the filter isn't enabled, so you should enable the ipv4 allow filter:
Set-DhcpServerv4FilterList -Allow $true

No.# The correct answer is:
From Server1, you can successfully ping: 172.16.0.1 and 10.10.0.1 only
From Server3, you can successfully ping: 10.10.0.1 only

Server 1 is able to send queries to other subnets, because he has a gateway to Server2. Server2 is able to send a reply back from it's 10.10.0.1 NIC.
Server1 is NOT able to receive answers from Server3, because server3 does not know the route back to Server1. So, when Server1 sends a ping packet to the ip address ip Server3, it will be routed by Server2, will be received by Server3, but Server3 will not be able to answer it because the route back to Server1 is unknown.

Server3 does not have a gateway and therefor is only able to ping ip addresses in it's own subnet.

No.# The correct answer is: netsh
netsh interface ipv4 add address 1.2.3.4 etcetera

set-netnat is for configuring an existing NAT switch in Hyper-V.

No.# The correct answer is:
Find: $
Replace with: @contoso.com

The ^ sign is to search for the beginning of a string, but we want to find the end of the string (in this case the end of the username) and add "@contoso.com" to it.
The $ sign is to search for the end of a string.

Source: https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-crp-reg-expressions

No.# The correct answer is: YES.

I tested it by creating a new shared secret template. Then I exported it to a .xml file and the password was in plaintext in the file!

No.# The correct answer is: No, Yes, No.

The server VPN3 has another IP address then configured in Server1.

No.# This question asks for a white list. You need to enable the Allow List and add the MAC addresses of the 75 computers to this list.
The correct answer is: B.