Exam 70-741 All Questions

View all questions & answers for the 70-741 exam

Exam 70-741 topic 1 question 81 discussion

Actual exam question from Microsoft's 70-741

Question #: 81
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that has the Network Policy and Access Services server role installed.
You create a Shared Secret Network Policy Server (NPS) template named Template1.
You need to view the shared secret string used for Template1.
Solution: From the Network Policy Server console, you export the configuration, and you view the exported XML file.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️

by dritter at Feb. 26, 2019, 2:30 p.m.

Comments

Submit Cancel

dritter

Highly Voted 6 years, 4 months ago

The XML gives you the string for the shared secret. [...] <RADIUS_Shared_Secrets_Templates name="RADIUS_Shared_Secrets_Templates"> <Children> <mySharedSecretTemplate name="mySharedSecretTemplate"> <Properties> <RADIUS_Shared_Secret dt:dt="string" xmlns:dt="urn:schemas-microsoft-com:datatypes">mJHzn!9GVB@ZkpFKYfiDLBE4baVinJe$edlgEqPEH0NCHygDUWSi$wlv65fwdhMl</RADIUS_Shared_Secret> [...]

upvoted 12 times

josevirtual

4 years, 5 months ago

Answer is no (B). You can get that by exporting the templates, but not the whole NPS configuration.

upvoted 2 times

...

Person

Highly Voted 5 years, 8 months ago

The proposed solution is: "From the Network Policy Server console, you export the configuration, and you view the exported XML file." In export configuration XML the shared secret is in plain text, but we cant export configuration in NPS console.... Microsoft say: Applies To: Windows Server 2016 You can export the entire NPS configuration from one NPS for import on another NPS. Use one of the following tools to export the NPS configuration: In Windows Server 2016, Windows Server 2012 R2, and Windows Server 2012, you can use Netsh, or you can use Windows PowerShell. In Windows Server 2008 R2 and Windows Server 2008, use Netsh. https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-manage-export So, for me the answer is B-No.

upvoted 6 times

Person

5 years, 7 months ago

My mistake, the correct answer is A.-Yes.

upvoted 4 times

...

Gary

5 years, 7 months ago

what are you talking about？？

upvoted 5 times

...

panda

Most Recent 4 years, 5 months ago

Following questions, including this question, have common preconditions. But each question isn't same. page16/question80:You can view shared password.(*1) page17/question81:You can't. page17/question82:You can't. (*1)You can view it by using Export-NpsConfiguration or Get-NpsSharedSecretTemplate. That is: You can view it by using powershell. You can view it by console.

upvoted 1 times

...

lofzee

4 years, 6 months ago

Ok so, done this in the lab. If you create a shared secret template and then export the NPS Configuration by right clicking NPS (Local) - Export Configuration, open the file up and try search for the secret, it will not be there. If you create a RADIUS client and then 'select an existing shared secret template' or create a new shared secret and THEN export the NPS (Local) Configuration, your shared secret WILL be there. I am going to go with No, simply because the question is saying 'You created a template. You then export the configuration' If you performed these exact steps, the shared secret will not be in the exported configuration.

upvoted 2 times

...

ykarma

4 years, 6 months ago

Had this set of series on my exam. November 27th 2020

upvoted 2 times

...

RVGiancarlo

4 years, 7 months ago

This answer is WRONG. Exporting the configuration DOES NOT YIELD the shared secrets. You must "Export Templates to a File". The output dritter provides is from the Templates Management node, right click and select Export Templates to a File. This particular question is referring to right clicking NPS (Local) and selecting Export Configuration. I repeat, this DOES NOT YIELD the Shared Secrets in the output. Pay attention to the question, what it is asking, and more specifically, what it is proposing as a solution.

upvoted 3 times

...

alexnt

4 years, 11 months ago

B. No Correct answer should be: Solution: From the Network Policy Server console, you export the templates, and you view the exported XML file.

upvoted 3 times

...

promaster

4 years, 11 months ago

Answer NO.....I tested exporting in a lab, no shared secret showing at all, not encrypted nor in plaintext.

upvoted 2 times

...

GenjamBhai

5 years, 2 months ago

Exporting config does not include the templates (or their Shared Secrets), exported XML contains Shared Secret used only in the config itself as plain text. Exporting template contains the Shared Secret as plain text in the XML file. Tested on lab.

upvoted 3 times

GenjamBhai

5 years, 2 months ago

So answer is NO.

upvoted 3 times

...

xziomal9

5 years, 6 months ago

Correct answer: B (No)

upvoted 2 times

...

Ozguraydin

5 years, 7 months ago

Answer is correct.

upvoted 1 times

PatS

5 years, 7 months ago

No, is wrong. Try it. Firstly I think that is "YES" but I tested it and when I exported whole configuration Templates are excluded. Only Powershell and export direct templates are correct. Configuration export only secret for client so when you created template and attached to any client. secret will be exported. But this case is not situation.

upvoted 2 times

...

PatS

5 years, 7 months ago

1) Solution: From the Network Policy Server console, you export the templates, and you view the exported XML - RIGHT ANSWER 2) Solution: From Windows PowerShell, you run Get-NpsSharedSecretTemplate -Name Template1. - RIGHT ANSWER

upvoted 1 times

coleman

5 years, 7 months ago

https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-manage-export When you use the netsh nps export command, you are required to provide the command parameter exportPSK with the value YES. This parameter and value explicitly state that you understand that you are exporting the NPS configuration, and that the exported XML file contains unencrypted shared secrets for RADIUS clients and members of remote RADIUS server groups.

upvoted 2 times

...

PatS

5 years, 7 months ago

@krj you have RIGHT my previous answer was wrong! Export NPS configuration exporting only shared secret string for client only not for template! When we would like to see shared secret string for template which not used for any client ,we have to export shared secret template to file or use Get-NpsSharedSecretTemplate! Correct answer is B. Sorry for my mistake.

upvoted 5 times

...

coleman

5 years, 7 months ago

Reference: https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-manage-export

upvoted 3 times

...

krj

5 years, 7 months ago

For me it looks like B is the correct answer. When exporting server configuration I don't see shared secret for a template I created. I can see a shared secret used for clients though. When importing the same server configuration it doesn't add templates either. To see a shared secret for a template I had to export templates to a file. Or alternatively you can use Get-NpsSharedSecretTemplate. I don't get it why you guys are so sure about A being the correct answer.

upvoted 5 times

drhousedk

4 years, 5 months ago

A bit late to the party. I just tested it on my lab. If you export the whole configuration, the Shared Secret IS NOT present in the XML file. Which is weird, granted, as it actually warns you that you are about to export the shared secrets.

upvoted 1 times

...

PatS

5 years, 7 months ago

A is correct on 100%. Tested in lab. Export configuration and template secret passwords are available plaintext in XML file.

upvoted 3 times

...

TMW

6 years ago

this one is indeed correct. I just opened the exported xml, and can see the secret. Trust thru verification.

upvoted 4 times

...

Load full discussion...