Free VCE and PDF Exam Dumps from PassLeader
Vendor: Microsoft Exam Code: 70-642
Exam Name: TS: Windows Server 2008 Network Infrastructure, Configuring
Question 51 -- Question 100
Visit PassLeader and Download Full Version 70-642 Exam Dumps QUESTION 51 Your company has a single Active Directory domain named contoso.com. All servers run Windows Server 2008. You have a public DNS server named Server1, and an e-mail server named Server2. Client computers outside the company domain are unable to send e-mail messages to contoso.com You verify that the host (A) DNS record for Server2 is availible to external client computers. You need to ensure Server2 can receive e-mail messages from external client computers. How should you configure the contoso.com DNS zone? A. Add a Mail Exchange (MX) record for Server2 B. Add a Mailbox (MB) record for Server2. Set the Mailbox Host setting to Server2 C. Add a Canonical (CNAME) record that maps Server2 to contoso.com D. Add a Service Locator (SRV) record for Server2. Set the Service field to _smtp. Set the Protocol field to _tcp. Set the Port Number to 25. Answer: A QUESTION 52 Your company has a domain controller that runs Windows Server 2008 and the DNS role. The DNS domain is named contoso.com You need to ensure that inquries about contoso.com are sent to dnsadmin@contoso.com What should you do? A. B. C. D.
Create a signature (SIG) record for the domain controller Modify the Name Server (NS) record for the domain controller Modify the Service Locator (SRV) record for the domain controller Modify the Start of Authority (SOA) record ont he domain controller
Answer: D QUESTION 53 Your company has servers that run Windows Server 2008. All client computers run Windows XP Service Pack 2 (SP2). Windows 2003 Professional, or Windows Vista. You need to ensure all computers can use the IPv6 protocol. What should you do? 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader A. B. C. D.
Install Serivce Pack 4 on all Windows 2000 Professional computers Upgrade the Windows 2000 professional computers to Windows XP SP2 Run the IPv6.exe tool on the Windows 200 Professional and Windows XP computers Install Active Directory Client extention (DSClient.exe) on the Windows 2000 Professional and Windows XP computers.
Answer: B QUESTION 54 Your company has a single Active Directory domain. All servers run Windows Server 2008. The company network has servers that perform as Web Servers. All confidential files are located on a server named FSS1. The company security policy states that all confidential data must be transmitted in the most secure manner. When you monitor the network you notice that the confidential files stored on FSS1 server are being transmitted over the network without encryption. You need to ensure that encryption is always used when the confidential files on the FSS1 server are transmitted over the network. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.) A. Deactivate all LM and NTLM authentication methods on FSS1 server B. Use IIS to publish the confidential files, activate SSL on the IIS server, and then open the files as a web folder C. Use IPsec encryption between the FSS1 server and the computers of the users who need to access the confidential files. D. Use the Server Message Block (SMB) signing between the FSS1 server and the computers of the users who want to access the confidential files. E. Activate offline files for the confidential files that are stored on the FSS1 server. In the Folder Advanced Properties box, select the Encrypt contents to secure data optiion Answer: BC QUESTION 55 Your company has an Active Directory domain. A server named Server1 runs the Network Access Policy server role. You need to disable IPv6 for all connections except for the tunnel interface and the IPv6 Loopback interface. What should you do? A. B. C. D.
Run the netsh ras ipv6 set command Run the netsh interface ipv6 delete command Run ipv6.exe and remove the IPv6 Protocol From the Local Area Connection Properties, uncheck Internet Protocol Version 6 (TCP/IPv6)
Answer: D QUESTION 56 Your company has a single Active Directory domain. The domain runs at the functional level of Windows Server 2003. You install the DHCP service on a server named DHCP1. You attempt to start the DHCP service, but it does not start. 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader You need to ensure that the DHCP service starts. What should you do? A. B. C. D.
Restart DHCP1 Configure a scope on DHCP1 Activate the scope on DHCP1 Authorize DHCP1 in the Active Directory domain
Answer: D QUESTION 57 You configure a new file server that runs Windows Server 2008. Users access shared files on the file server. Users report that they are unable to access the shared files. The TCP/IP properties for the file server are configured as shown in the following exhibit. You need to ensure that users are able to access the shared files. How should you configure the TCP/IP properties in the file server?
A. B. C. D.
Configure a static IP address Configure the default gateway Configure the DNS server address Add the domain to the DNS suffix on the network interface
Answer: A QUESTION 58 Your company has Active Directory Certificate Services (AD CS) and Network Access Protection (NAP) deployed on the network. You need to configure the wireless network to accept smart cards. What should you do? A. Configure the wireless network to use WPA2, PEAP, and MSCHAP v2 B. Configure the wireless network to use WPA2, 802.1X authentication and EAP-TLS C. Configure the wireless network to use WEP, 802.1X authentication, PEAP, and MSCHAP v2 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader D. Configure the wireless network to use WPA, PEAP, and MSCHAP v2 and also require strong user passwords. Answer: B QUESTION 59 Your company has users who connect remotely to the main office though a Windows Server 2008 VPN server. You need to ensure that users cannot access the VPN server remotely from 22:00 to 05:00. What should you do? A. Create a network policy for VPN connections. modify the Day and time restrictions. B. Create a network policy for VPN connections. apply an ip filter to deny access to the corporate network. C. Modify the Logon hours for all users objects to specify only the VPN server otn he computer restrictions option D. Modify the Logon hours for the default domain policy to enable the Force logoff when logon hours expire option,. Answer: A QUESTION 60 You have a server that runs Windows Server 2008. You need to configure the server as a VPN server. What should you installed on the server? A. Windows Deployment Serivces role and Deployment Server role service B. Windows Deployment Services role and Deployment Transport Role Service C. Network Policy and Access Services role and Routing and Remote Access Services role service. D. Network Policy and Access Services role and Routing and Host Credential Authorization Protocolr ole service. Answer: C QUESTION 61 You manage a server that runs Windows Server 2008 R2. The D:\Payroll folder is corrupted. The most recent backup version is 10/29/2007-09:00. You need to restore all the files in the D:\Payroll folder back to the most recent backup version without affecting other folders on the server. What should you do on the server? A. Run the Recover d:\payroll command. B. Run the Wbadmin restore catalog-backuptarget:D: -version:10/29/2007-09:00-quiet command. C. Run the Wbadmin start recovery-backuptarget:D: -version:10/29/2007-09:00-overwrite-quiet command. D. Run the Wbadmin start recovery-version: 10/29/2007-09:00-itemType:File-items:d:\Payroll-overwrite-recursive-quiet command. Answer: D 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader QUESTION 62 Your company has a server named Server1 that runs Windows Server 2008 R2. The Windows Server Backup feature is installed on Server1. Server1 fails. You install a new server named Server2 that runs Windows Server 2008 R2. You need to restore the company's Windows SharePoint Services (WSS) site to Server2. What should you do? A. B. C. D.
Use Wbadmin to restore the system state from backup. Run Wbadmin with the Get Versions option. Install WSS. Run Wbadmin with the Start Recovery option. Install WSS. Use Wbadmin to restore the application and the sites from backup.
Answer: D QUESTION 63 You have a server that runs Windows Server 2008 R2. You create a new quota template. You apply quotas to 100 folders by using the quota template. You need to modify the quota settings for all 100 folders. You must achieve this goal by using the minimum amount of administrative effort. What should you do? A. Modify the quota template. B. Delete and recreate the quota template. C. Create a new quota template. Modify the quota for each folder. D. Create a file screen template. Apply the file screen template to the root of the volume that contains the folders. Answer: A Explanation: When you make changes to a quota template, you have the option of extending those changes to quotas that were created from the original quota template. You can choose to modify only those quotas that still match the original template or all quotas that were derived from the original template, regardless of any modifications that were made to the quotas since they were created. This feature simplifies the process of updating the properties of your quotas by providing one central point where you can make all the changes. To edit quota template properties 1- In Quota Templates, select the template that you want to modify. 2- Right-click the quota template, and then click Edit Template Properties (or in the Actions pane, under Selected Quota Templates, select Edit Template Properties). This opens the Quota Template Properties dialog box. 3- Perform all necessary changes. The settings and notification options are identical to those that you can set when you create a quota template. Optionally, you can copy the properties from a different template and modify them for this one. 4- When you are finished editing the template properties, click OK. This will open the Update Quotas Derived from Template dialog box. 5- Select the type of update that you want to apply: - If you have quotas that have been modified since they were created with the original template, and you do not want to change them, select Apply template only to derived quotas that match the original template. This option will update only those quotas that have not been edited since they 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader were created with the original template. - If you want to modify all existing quotas that were created from the original template, select Apply template to all derived quotas. - If you want to keep the existing quotas unchanged, select Do not apply template to derived quotas. 6- Click ok. http://technet.microsoft.com/en-us/library/cc754716.aspx QUESTION 64 You have a file server that runs Windows Server 2008 R2. You configure quotas on the server. You need to view each user's quota usage on a per folder basis. What should you do? A. B. C. D.
From File Server Resource Manager, create a File Screen. From File Server Resource Manager, create a Storage Management report. From the command prompt, run dirquota.exe quota list. From the properties of each volume, review the Quota Entries list.
Answer: B QUESTION 65 Your company has a server named SRV1 that runs Windows Server 2008 R2. The default Print Services server role is installed on SRV1. The company wants to centralize printing on SRV1 for both UNIX and Windows users. You need to provide support to the UNIX users who print on SRV1. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution.Choose two.) A. B. C. D.
Install the Internet Printing role service on SRV1. Install the Line Printer Daemon (LPD) Services role service on SRV1. Configure the printers on SRV1 to use Line Printer Remote printing. Install the File Services server role on SRV1 and activate the Services for Network File System role service.
Answer: AB Explanation: Line Printer Daemon (LPD)-A service on a print server that receives print jobs from Line Printer Remote (LPR) tools that are running on client computers. Internet Printing Protocol (IPP)-The protocol that uses the Hypertext Transfer Protocol (HTTP) to send print jobs to printers throughout the world. http://technet.microsoft.com/en-us/library/cc783789(v=ws.10).aspx QUESTION 66 Your company has a server named Printer1 that runs Windows Server 2008 R2. Printer1 has the Print and Document Services server role installed. You need to reduce the number of events registered in the system log on Printer1. What should you do? A. Open the Event Viewer console. Create a custom view for the system log. Exclude the events that are notified by Event ID 10 from the filter. B. Open the Print Management console. Open the properties of Printer1 and clear the Log spooler information events option. 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader C. Open the Print Management console. Open the properties of Printer1 and clear the Show informational notifications for network printers option. D. Open the Print Management console. Open the properties of each individual printer on Printer1 and clear the Enable advanced printing features option. Answer: B Explanation: See sample below:
QUESTION 67 Your company has a main office and one branch office. The main office has a print server named Printer1. The branch office has a print server named Printer2. Printer1 manages 15 printers and Printer2 manages seven printers. You add Printer2 to the Print Management console on Printer1. You need to send an automatic notification when a printer is not available. What should you do? A. B. C. D.
Configure an e-mail notification for the Printers With Jobs printer filter. Configure an e-mail notification for the Printers Not Ready printer filter. Enable the Show informational notifications for local printers option on both print servers. Enable the Show informational notifications for network printers option on both print servers.
70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader Answer: B QUESTION 68 Your company runs Windows Server Update Services (WSUS) on a server named Server1. Server1 runs Windows Server 2008 R2. Server1 is located on the company intranet. You configure the WSUS Web site to use SSL. You need to configure a Group Policy object (GPO) to specify the intranet update locations. Which URLs should you use? A. B. C. D.
http://SERVER1 http://SERVER1:8080 https://SERVER1 https://SERVER1:8080
Answer: C QUESTION 69 You have 10 standalone servers that run Windows Server 2008 R2. You install the Windows Server Update Services (WSUS) server role on a server named Server1. You need to configure all of the servers to receive updates from Server1. What should you do? A. B. C. D.
Configure the Windows Update settings on each server by using the Control Panel. Run the wuauclt.exe /detectnow command on each server. Run the wuauclt.exe /reauthorization command on each server. Configure the Windows Update settings on each server by using a local group policy.
Answer: D Explanation: In a non-Active Directory environment, you can configure Automatic Updates by using any of the following methods: - Using Group Policy Object Editor and editing the Local Group Policy object (Computer Configuration > = Administrative Templates > Windows Components > Windows Update. ) - Editing the registry directly by using the registry editor (Regedit.exe) - Centrally deploying these registry entries by using System Policy in Windows NT 4.0 style QUESTION 70 Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. You have a server named Server1 that hosts shared documents. Users report extremely slow response times when they try to open the shared documents on Server1. You log on to Server1 and observe real-time data indicating that the processor is operating at 100 percent of capacity. You need to gather additional data to diagnose the cause of the problem. What should you do? A. In the Performance Monitor console, create a counter log to track processor usage. B. In Event Viewer, open and review the application log for Performance events. C. In Resource Monitor, use the Resource View to see the percentage of processor capacity used by each application. 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader D. In Performance Monitor, create performance counter alert that will be triggered when processor usage exceeds 80 percent for more than five minutes on Server1. Answer: C QUESTION 71 Your company has a network that has 100 servers. You install a new server that runs Windows Server 2008 R2. The server has the Web Server (IIS) server role installed. After a week, you discover that the Reliability Monitor has no data, and that the Systems Stability chart has never been updated. You need to configure the server to collect the Reliability Monitor data. What should you do? A. B. C. D.
Run the perfmon.exe /sys command on the server. Configure the Task Scheduler service to start automatically. Configure the Remote Registry service to start automatically. Configure the Secondary Logon service to start automatically.
Answer: B Explanation: Information that Reliability Monitor displays is provided by the RacTask task. By default, the RacTask task runs one time that is about one hour after you install the operating system. In Windows Server 2008 and in Windows Server 2008 R2, the trigger that regularly starts the RacTask task is disabled after the RacTask task runs for the first time. To resolve this issue, follow these steps: 1- Click Start, type Task Scheduler in the Search box, and then click Task Scheduler. 2- Enable the trigger that regularly starts the RacTask task. a- In Task Scheduler, expand Task Scheduler Library, expand Microsoft, and then expand Windows. b- Right-click RAC, click View, and then click to select the Show Hidden Tasks command. Note If the Show Hidden Tasks command is already selected, go to step 2c. c- Double-click RacTask. d- In the RacTask Properties dialog box, click the Triggers tab. e- On the Triggers tab, double-click the One time trigger. f- In the Edit Trigger dialog box, click to select the Enabled option, and then click OK. g- In the RacTask Properties dialog box, click OK. h- Close Task Scheduler. 3- Update a registry setting. a- Click Start, type Regedit in the Search box, and then click Regedit. b- In Registry Editor, set the value of the following registry entry to 1: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Reliability Analysis\WMI\WMIEnable 4- Restart the computer. http://support.microsoft.com/kb/983386/en-us QUESTION 72 Your company has a network that has 100 servers. A server named Server1 is configured as a file server. Server1 is connected to a SAN and has 15 logical drives. You want to automatically run a data archiving script if the free space on any of the logical drives is below 30 percent. You need to automate the script execution. You create a new Data Collector Set. What should you do next? 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader A. B. C. D.
Add the Event trace data collector. Add the Performance counter alert. Add the Performance counter data collector. Add the System configuration information data collector.
Answer: B Explanation: You can create a custom Data Collector Set containing performance counters and configure alert activities based on the performance counters exceeding or dropping below limits you define. After creating the Data Collector Set, you must configure the actions the system will take when the alert criteria are met. http://technet.microsoft.com/en-us/library/cc722414.aspx QUESTION 73 Your company has an Active Directory domain named ad.contoso.com The company also has a public namespace named contoso.com. You need to ensure that public DNS zone records cannot be copied. You must achieve this goal without impacting the functionality of public DNS name resolutions. What should you do? A. B. C. D.
Disable the notify feature for the contoso.com zone. Disable the Allow-Read permission for the Everyone group on the contoso.com DNS domain. Configure the All domain controllers int he domain zone replication option on ad.contoso.com. Configure the Allow zone transfers only to servers listed on the Name Servers option on contoso.com
Answer: D QUESTION 74 Your company has a DNS server named Server1. Your partner company has a DNS server named Server2. You create a stub zone on Server1. The master for the stub zone is Server2. Server2 fails. You discover that users are not able to resolve names for the partner company. You need to ensure that users are able to resolve names for the partner company in the event that Server2 fails. What should you do? A. Change the stub zone to a secondary zone on Server1 B. Open the SOA record for the zone on Server2. Change the Minimum (default) TTL setting to 12 hours. C. Open the DNS zone for the partner company on Server2. Create a new Route Through (RT) record and a new host (A) record for Server1. D. Open the primary DNS zone on Server2. Create a new Service Locator (SRV) record and a new host (A) record for Server1. Answer: A QUESTION 75 Your company has a single Active Directory forest that has an Active Directory domain named na.contoso.com A member server named Server2 runs the DNS server role. 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader The Server2 DNS service hosts multiple secondary zones including na.contoso.com. You need to reconfigure Server2 as a caching-only DNS server. What should you do? A. B. C. D.
Uninstall and reinstall the DNS service on Server2 Change all the DNS zones on Server2 to stub zones Disable and then enable the DNS service on Server2 Delete the na.contoso.com DNS zone domain from Server2. Restart the DNS service on Server2.
Answer: A QUESTION 76 Your company has an Active Direcotry forest that has five domains. All DNS servers are domain controllers. You need to ensure that users from all domains are able to access a Web server named App1 by browsing http://App1. What should you do? A. Configure and enable DFS-R on the Appl1 Web Server B. Create a host (AAAA) record for the App1 Web server in the DNS zone for the forest root domain C. Create a zone named GlobalNames on a DNS server. Replicate the GlobalNames zone to all domain controllers int he forest. Create a host (A) record for the App1 Web server in the zone D. Create a zone named LegacyWINS on a DNS server. Replicated the LegacyWINS zone to all domain controlelrs in the forest. Create a host (A) record for the Appl1 Web server in the zone. Answer: C QUESTION 77 Your company has recently deployed a server that runs Windows Server 2008. The server has the IP information shown below. - IP address 192.168.46.186 - Subnet mask: 255.255.255.192 - Default gateway: 192.168.46.1 Users on remote subnets report that they are unable to connect to the server. You need to ensure all users are able to connect to the server. What should you do? A. B. C. D.
Change the IP address to 192.168.46.129 Change the IP address to 192.168.46.200 Change the subnet mask to a 24-bit mask Change the subnet mask to a 27-bit mask.
Answer: C QUESTION 78 Your company has a main office and a branch office. Users in the branch office report that they are unable to access shared resources in the main office. You discover that computers in the branch office have IP addresses in the range of 169.254.x.x You need to ensure that computers can connect to shared resources in both the main office and the branch office. 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader What should you do? A. Configure a DHCP relay agent on a member server in the main office B. Configure a DHCP relay agent on a member server in the branch office C. Configure the Broadcast Address DHCP server option to include the main offices DHCP server address D. Configure the Resource Location Servers DHCP server option to include the main offices server ip addresses. Answer: B QUESTION 79 Your company has an Active Directory domain. A server named Server1 runs the Network Access Policy server role. You need to disable IPv6 for all connections except for the tunnel interface and the IPv6 Loopback interface. What should you do? A. B. C. D.
Run the netsh ras ipv6 set command Run the netsh interface ipv6 delete command Run ipv6.exe and remove the IPv6 protocol From the Local Area connection Properties, uncheck Internet Protocol Versions 6 (TCP/IPv6)
Answer: D QUESTION 80 Your company has a single Active Directory domain. All servers run Windows Server 2008. The company network has 10 servers that perform as Web servers. All confidential files are located on a server named FSS1. The company security policy states that all confidential data must be transmitted in the most secure manner. When you monitor the network, you notice that the confidential files are stored on the FSS1 server are being transmitted over the network without encryption. You need to ensure taht encryption is always used when the confidential files on the FSS1 server are transmitted over the network. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose Two) A. Deactivate all LM and NTLM authentication methods on the FSS1 server B. Use IIS to publish the confidentials files. activate SSL on the ISS server, and then open the files as a web folder. C. Use IPSec encryption between the FSS1 server and the computers of the users who need to access the confidential files D. Use the Server Message Block (SMB) signing between the FSS1 server and the computers of the users who want to access the confidential files. E. Activate offline files for the confidential files that are stored on the FSS1 server. In the Folder Advanced Properties dialog box, select the Encrypt contents to secure data option. Answer: BC QUESTION 81 Your company has an Active Directory forest. 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader The corporate network uses DHCP to configure client computer IP addresses. The DHCP server has a DHCP client reservation for a portable computer named WKS1. You install a second DHCP server on the network. You need to ensure that WKS1 receives the DHCP reservation from the DHCP service. What should you do? A. B. C. D.
Run the ipconfig /renew command on WKS1 Run the netsh add helper command on WKS1 Add the DHCP reservation for WKS1 to the second DHCP server Add both DHCP servers to the RAS and IAS Servers group in the Active Directory domain
Answer: C QUESTION 82 Your company has an Active Directory domain. The company also has a server named Server1 that runs Windows Server 2008. You install the File Server role on Server1. You create a shared folder named AcctgShare on Server1. The permissions for the shared folder are configured as shown in the following table. You need to ensure members of the managers group can only view and open files in the shared folder. A. B. C. D.
Modify the share permissions for the Managers group to Reader. Modify the share permissions for the Accounting Users group to Contributer Modify the NTFS permissions for the Managers group to Modify Modify the NTFS permissions for the Authenticated Users group to Modify and the share permissions to Contributer
Answer: A QUESTION 83 You have a file server that runs Windows Server 2008. A user restores a large file by using the Previous Versions tab. You need to view the progress of the file restoration. What should you do? A. B. C. D.
From the command prompt, run shadow.exe /v From the command prompt, run vssadmin.exe query reverts From Computer Management, click on the Shared Folders node and then click on Sessions. From Computer Management, click on the Shared Folders node and then click on Open Files.
Answer: B QUESTION 84 You have two servers that run Windows Server 2008 named Server1 and Server2. You install WSUS on both servers. You need to configure WSUS on Server1 to receive updates from Server2. What should you do on Server1? A. Configure a proxy server B. Configure a upstream server C. Create a new replica group 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader D. Create a new computer group Answer: B QUESTION 85 You install WSUS on a server that runs Windows Server 2008. You need to ensure taht the traffic between the WSUS administrative website and the server administrators computer is encrypted. What should you do? A. Configure SSL encryption on the WSUS server website. B. Run the netdom trust /SecurePasswordPrompt command on the WSUS server C. Configure the NTFS permissions on the content directory to Deny Full Controll permission to the Everyone group D. Configure the WSUS server to require Integrated Windows Authentication (IWA) when users connect to the WSUS server. Answer: A QUESTION 86 Your company has a single Active Directory domain and an enterprise root certifficate authority. The company plans to use Network Access Protection (NAP) to protect the VPN connections. You build two servers named NPS1 and VPN1. You configure the following functions on the two servers as shown in the following table. You need to ensure that the system health policy is applied to all client computers that attempt VPN connections. What should you do?
A. B. C. D.
Reconfigure NPS1 as a radius client Reconfigure VPN1 as a radius client Add the NAP role to a domain controller Add the NAP role to an Enterrpise Certificate server.
Answer: B QUESTION 87 You deploy Network Access Protection (NAP) on your network. An administrator configures a network policy as shown in the exhibit. (Click the Exhibit button.) You discover that noncompliant client computers cannot access the remediation network. You need to configure the network policy to ensure that noncompliant client computers can access the remediation network. What should you do?
70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
A. In Access Permission, select the Grant access. Grant access if the connection request matches this policy option button. B. In the Type of network access server list, click HCAP Server. C. In the Type of network access server list, click Health Registration Authority. D. In Access Permission, select the Ignore user account dial-in properties check box. Answer: A QUESTION 88 Your network contains a server named Server1 that runs Windows Server 2008 R2 Service Pack 1 (SP1). You need to configure Server1 to use a static IP address. Which Netsh context should you use? A. B. C. D.
lan dhcpclient interface netio
Answer: B
70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader QUESTION 89 Your network contains a server named Server1 that runs Windows Server 2008 R2. The network for Server1 is configured as shown in the table. You plan to deploy DirectAccess on Server1. You need to configure the network interfaces on Server1 to support DirectAccess. What should you do?
A. Add the IP address of 10.1.2.2 to LAN1. B. Remove the IP address of 131.107.1.13 from Internet2, and then add the address to LAN1. C. Remove the IP of address 131.107.1.13 from Internet2, and then add the address to Internet1. D. Add the default gateway of 131.107.1.1 to Internet2. Answer: C QUESTION 90 You need to use link-local IPv6 addresses to perform multicasting. Which IPv6 prefix should you use? A. B. C. D.
FF00::/8 FD00::/8 FE80::/10 FEC0::/10
Answer: A Explanation: IPv6 multicast addresses have the first eight bits fixed at 1111 1111. Therefore the address prefix for all IPv6 multicast addresses is FF00::/8. Beyond the first eight bits, multicast addresses include additional structure to identify flags, their scope, and the multicast group. http://technet.microsoft.com/en-us/library/bb726995.aspx QUESTION 91 Your network contains a server named Server1 that runs a Server Core installation of Windows Server 2008 R2. The network contains a client computer named Computer1 that runs Windows 7. You need to ensure that you can collect events from Server1 on Computer1. What should you run on Server1? A. wecutil cs B. eventcreate/so 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader C. winrm quickconfig D. net config server Answer: C Explanation: http://technet.microsoft.com/en-us/library/cc748890(v=WS.10).aspx QUESTION 92 Your network contains a Windows Server Update Services (WSUS) server named Server1. You discover that certain updates listed in the WSUS administrative console are unavailable on Server1. You need to ensure that all of the updates listed in the WSUS administrative console are available on Server1. What should you do on Server1? A. B. C. D.
Restart the Update Services service. Run wsusutil.exe and specify the reset parameter. Run wsusutil.exe and specify the deleteunneededrevisions parameter. Run wuauclt.exe and specify the /detectnow parameter.
Answer: B Explanation: wsusutil /reset: Checks that every update metadata row in the database has corresponding update files stored in the file system. If update files are missing or have been corrupted, WSUS downloads the update files again. http://technet.microsoft.com/en-us/library/cc720466%28WS.10%29.aspx QUESTION 93 Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2008 R2. The network contains a DHCP server named DHCP1 on a subnet named Subnet1. You implement a new subnet named Subnet2. Subnet2 contains a server named Server1. On DHCP1, you create a DHCP scope for Subnet2. You need to configure Server1 to ensure that the client computers on Subnet2 can receive IP addresses from DHCP1. What should you install on Server1? A. B. C. D.
the Application Server server role the DHCP server role the Network Policy Server (NPS) role service the Routing and Remote Access service (RRAS) role service
Answer: D QUESTION 94 Your network contains an Active Directory domain named fabrikam.com. The domain contains a DNS server named Server1. Server1 hosts the DNS zone for fabrikam.com. You have a client computer named Computer1 that runs Windows 7. You need to ensure that, from Computer1, you can enumerate all of the records in the fabrikam.com DNS zone. What should you modify? 70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader A. B. C. D.
the forwarders of Server1 the root hints of Server1 the security settings of the fabrikam.com DNS zone the zone transfer settings of the fabrikam.com DNS zone
Answer: D QUESTION 95 Your network contains a server named Server1 that runs Windows Server 2008 R2. You need to ensure that you can log performance counter data from Server1 to a SQL database. Which tool should you use? A. B. C. D.
Component Services Data Sources (ODBC) Share and Storage Management Storage Explorer
Answer: B QUESTION 96 Your network contains an Active Directory domain. The network contains a standalone server that runs Windows Server 2008 R2. The server has a static IP address. You need to configure the server as a DHCP Relay Agent. What should you do first? A. B. C. D.
Install the Health Registration Authority (HRA) role service on the server. Configure the server to use a dynamic IP address. Install the Routing and Remote Access service (RRAS) role service on the server. Join the server to the domain.
Answer: C QUESTION 97 Your network contains a server that runs Windows Server 2008 R2. You create a User Defined Data Collector Set (DCS) named Set1. You need to ensure that the reports generated for Set1 are stored for at least one year. What should you do? A. B. C. D.
From the properties of Set1, modify the Schedule settings. From Data Manager for Set1, modify the Actions settings. From the properties of Set1, modify the Task settings. From Data Manager for Set1, modify the Data Manager settings.
Answer: B Explanation: The time before a log shall be deleted settings are in the Data Manager's "Actions Tab" of the custom/user defined DSC.
70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
QUESTION 98 Your network contains an Active Directory domain named contoso.com. An administrator named Admin1 plans to install the Routing and Remote Access service (RRAS) role service on a server named Server1. Admin1s user account is not a member of the Domain Admins group. You need to ensure that Server1 can authenticate users from Active Directory by using Windows authentication. What should you do? A. B. C. D.
Install the Active Directory Lightweight Directory Services (AD LDS) role on Server1. Add the computer account for Server1 to the RAS and IAS Servers group. Install the Network Policy Server (NPS) role service on a domain controller. Add the computer account for Server1 to the Windows Authorization Access Group.
Answer: B Explanation: Not sure if I am right on this one, since not all question is shown ;)) But I guess that after adding the role by the Admin1 it says that he is not in Domain Admins group and RRAS server wont be added automatically to the RAS and IAS group, so it has to be added manually by a member of that group so server could authenticate users. QUESTION 99 You have an application server that runs Windows Server 2008 R2. You need to configure Windows Firewall to allow communications on the server as shown in the following table. What is the minimum number of firewall rules you should create?
70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps
Free VCE and PDF Exam Dumps from PassLeader
A. B. C. D.
4 2 1 3
Answer: B QUESTION 100 Your network is configured as shown in the exhibit. (Click the Exhibit button.) The network contains a server named TMG1. TMG1 runs Microsoft Forefront Threat Management Gateway (TMG) 2010 and has a default gateway of 131.107.1.2. You need to ensure that TMG1 can connect to the Internet and to the client computers in all of the internal subnets. What should you do on TMG1?
A. B. C. D.
Run route-p add 192.168.1.0 netmask 255.255.255.0 192.168.2.1. Change the default gateway to 192.168.1.1. Run route-p add 192.168.2.0 netmask 255.255.255.0 192.168.1.1. Change the default gateway to 192.168.2.1.
Answer: A Explanation: For example, to add a static route to the 10.0.0.0 network that uses a subnet mask of 255.0.0.0, a gateway of 192.168.0.1, you type the following at a command prompt: Route add 10.0.0.0 mask 255.0.0.0 192.168.0.1 http://technet.microsoft.com/en-us/library/cc757323.aspx
Visit PassLeader and Download Full Version 70-642 Exam Dumps
70-642 Exam Dumps
70-642 Exam Questions
70-642 PDF Dumps
http://www.passleader.com/70-642.html
70-642 VCE Dumps