Microsoft MCSA: Windows Server 2016 070-742

A Microsoft credential carries real weight with employers, and the Microsoft Identity with Windows Server 2016 exam is the step that earns it. Getcertkey makes that step shorter with 286 expert-prepared practice questions for the 070-742 exam.

Microsoft 070-742 Exam Overview:

Certification Vendor:	Microsoft
Exam Name:	Identity with Windows Server 2016
Exam Number:	70-742
Available Languages:	Chinese (Simplified), Spanish, Japanese, English, French, Portuguese (Brazil), German
Exam Price:	USD 165 (varies by region)
Certificate Validity Period:	Retired (exam no longer available; certification retired)
Exam Duration:	120 minutes
Exam Format:	Best Answer, Multiple Choice, Case Studies, Drag and Drop, Build List
Passing Score:	700 (on 1000 scale)
Real Exam Qty:	40-60 (varies)
Related Certifications:	MCSA: Windows Server 2016
Recommended Training:	Microsoft Learn - Windows Server documentation Microsoft Official Practice Tests (historical / third-party providers)
Exam Registration:	Microsoft Certification / Exam Registration (Pearson VUE)
Sample Questions:
Exam Way:	Available via Pearson VUE testing centers or online proctored exam (where supported at time of availability; now retired).
Pre Condition:	Recommended: experience with Windows Server 2016 and knowledge of AD DS, DNS, and networking fundamentals. Typically part of MCSA: Windows Server 2016 track (with exams 70-740, 70-741, 70-742).
Official Syllabus URL:	https://learn.microsoft.com/en-us/credentials/certifications/exams/70-742

Microsoft 070-742 Exam Syllabus Topics:

070-742 Exam FAQs for 2026 Candidates

Which certification does the 070-742 exam lead to?

The 070-742 exam is the official Microsoft exam behind the MCSA: Windows Server 2016 certification, validating the skills measured by the Microsoft Identity with Windows Server 2016 credential. It sits at the Associate level of the Microsoft certification program. It also connects to MCSA: Windows Server 2016, so the knowledge you build here carries over to those tracks as well.

How many questions are on the 070-742 exam, and how much time do I get?

The 070-742 exam contains 40-60 (varies) questions to be completed within 120 minutes. Before exam day, divide the available time by the question count to work out a comfortable per-question pace, and mark any item that eats into it so you can return later instead of getting stuck. Timed sessions in the Getcertkey test engines make that pacing automatic — run at least two full-length mock exams under the clock so time pressure never becomes the reason you drop points.

What score do I need to pass the 070-742 exam, and what does it cost?

The passing score for the 070-742 exam is 700 (on 1000 scale), and the official registration fee is USD 165 (varies by region). Retakes are not discounted — every new attempt means paying the full fee again — so it pays to measure yourself before you book. Work through the 286 practice questions on Getcertkey, sit a timed practice test, and schedule your exam only when your scores are consistently comfortable. That simple habit is the cheapest exam strategy there is.

Are there any prerequisites for the 070-742 exam?

Recommended: experience with Windows Server 2016 and knowledge of AD DS, DNS, and networking fundamentals. Typically part of MCSA: Windows Server 2016 track (with exams 70-740, 70-741, 70-742). Requirements can change when Microsoft revises its certification program, so confirm the current eligibility rules on the official exam page before you register.

How do I register for the 070-742 exam?

You can book the Microsoft Identity with Windows Server 2016 exam through the official registration channels below:

• Microsoft Certification / Exam Registration (Pearson VUE)

As for delivery, the exam is offered in the following format: Available via Pearson VUE testing centers or online proctored exam (where supported at time of availability; now retired).. Choose the option that suits you best when you book your seat.

What official training is recommended for the 070-742 exam?

Microsoft recommends the following training resources for the Microsoft Identity with Windows Server 2016 exam:

• Microsoft Learn - Windows Server documentation
• Microsoft Official Practice Tests (historical / third-party providers)

Official courses build the foundation; the 286 practice questions from Getcertkey then show you how that knowledge is examined, so the two work best together.

Can I try the 070-742 practice questions before I buy?

Yes. Getcertkey provides a free 070-742 PDF demo so you can review the question style and answer quality before purchasing. Every purchase also includes 365 days of free updates — if Microsoft revises the exam during that period, the updated material reaches you at no cost. Once the free-update year ends, you can extend your update service at a 50% discount.

What if I fail the 070-742 exam, and how is my order delivered?

Every Microsoft Identity with Windows Server 2016 purchase on Getcertkey is covered by a 100% money-back guarantee with clear conditions: if you take the corresponding exam within 60 days of your purchase and do not pass, you can claim a full refund by submitting a scanned copy of your exam enrollment slip and your official score report as a PDF within two days of the exam date; claims are processed within seven days of submission. The guarantee does not apply to exams taken within three days of purchase, to material that was downloaded but never used in an exam attempt, or to free products and expired orders, and the candidate name must match the payer name. If you would rather not take a refund, you can instead exchange your purchase for two free exam preparation products of equal value and keep the update service on your original product.

Delivery is instant: your download is sent to your email within one minute of payment, with no limit on how many computers you may install the material on. If nothing arrives within two hours, check your spam folder and contact customer service for help.

What topics are covered in the 070-742 exam?

The Microsoft Identity with Windows Server 2016 exam blueprint is organized into 5 domains. The first three are:

• Install and configure Active Directory Domain Services (AD DS)
• Implement Active Directory Certificate Services (AD CS)
• Implement Active Directory Federation Services (AD FS)

For the complete domain-by-domain breakdown, scroll up to the full exam topics outline above and use it to plan how you distribute your study time.

Microsoft Identity with Windows Server 2016 Sample Questions:

Question #1
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of repeated scenario.
Your network contains an Active Directory domain named contoso.com. The domain contains a single site named Site1. All computers are in Site1.
The Group Policy objects (GPOs) for the domain are configured as shown in the exhibit. (Click the Exhibit button.)

The relevant users and client computer in the domain are configured as shown in the following table.

End of repeated scenario.
You are evaluating what will occur when you set User Group Policy loopback processing mode to Replace in A7.
Which GPO or GPOs will apply to User2 when the user signs in to Computer1 after loopback processing is configured?

A. A7 only
B. A3. Al, A5, A6, and A7
C. A3, A5, A1, and A7 only
D. A1 and A7 only

Question #2
Your network contains an Active Directory forest named contoso.com. The forest contains the root domain and two child domains named childl.contoso.com and child2.contoso.com. Child1 contains three domain controllers named DC1, DC2, and DC3. Child2 contains one domain controller named You have two accounts named Child1\Admin1 and Child2\Admin2 that you use to perform administrative tasks. Currently, the accounts can manage only the member servers in their respective domain.
You plan to demote DC3 and to remove the Child2 domain.
You need to ensure that Admin1 can demote DC3 and that Admtn2 can demote DC4. The solution must use the principle of least privilege.
To which groups should you add Admin1 and Admin2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Question #3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You network contains an Active Directory forest named contoso.com. The forest contains an Active Directory Rights Management Services (AD RMS) deployment.
Your company establishes a partnership with another company named Fabrikam, Inc. The network of Fabrikam contains an Active Directory forest named fabrikam.com and an AD RMS deployment.
You need to ensure that the users in contoso.com can access rights protected documents sent by the users in fabrikam.com.
Solution: From AD RMS in fabrikam.com, you configure contoso.com as a trusted publisher domain.
Does this meet the goal?

A. Yes
B. No

Question #4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. All the accounts of the users in the sales department are in an organizational unit (OU) named SalesOU.
An application named App1 is deployed to the user accounts in SalesOU by using a Group Policy object (GPO) named Sales GPO.
You need to set the registry value of \HKEY_CURRENT_USER\Software\App1\Collaboration to 0.
Solution: You add a user preference that has a Replace action.
Does this meet the goal?

A. Yes
B. No

Question #5
Your network contains an Active Directory forest. The forest contains a forest root domain named contoso.com and a child domain named eu.contoso.com. Each domain contains two domain controllers that run Windows Server 2012 R2.
The forest functional level is Windows Server 2008 R2. The domain functional level of contoso.com is Windows Server 2012 R2. The domain functional level of eu.contoso.com is Windows Server 2008 R2.
You need to raise the domain functional level of contoso.com to Windows Server 2016. The solution must minimize administrative effort.
What should you do before you raise the domain functional level?

A. Upgrade all of the domain controllers in the forest
B. Raise the forest functional level
C. Raise the domain functional level of eu.contoso.com
D. Upgrade all of the domain controllers in contoso.com

Solutions: