Microsoft 70-642 Online Practice Questions and Exam Preparation

Microsoft 70-642 Online Questions & Answers

• Question 1:

  Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2. The service location (SRV) records for both of the domain controllers have default values.

  An SRV record for DC1 is shown in the exhibit. (Click the Exhibit button.)

  

  You need to modify the SRV records to ensure that DC2 is contacted for authentication only when DC1 is unavailable.

  What should you do?

  A. Increase the weight value of the SRV records for DC2.
  B. Increase the weight value of the SRV records for DC1.
  C. Increase the priority value of the SRV records for DC1.
  D. Increase the priority value of the SRV records for DC2.
  D. Increase the priority value of the SRV records for DC2.

  ---

  Priority The priority of the server. Clients attempt to contact the server with the lowest priority. Weight A load-balancing mechanism that is used when selecting a target host from those that have the same priority. Clients randomly choose SRV records that specify target hosts to be contacted, with probability proportional to the weight http://technet.microsoft.com/en-us/library/cc961719.aspx

• Question 2:

  Your network contains a server named Server1. You plan to deploy the Windows Server update Services (WSUS) server role on Server1.

  You need to minimize the amount of disk space used to store updates on Server1.

  What should you do on Server1?

  A. Disable Quality of Service (QoS).
  B. Enable Quality of Service (QoS).
  C. Disable express installation files.
  D. Enable express installation files.
  C. Disable express installation files.

• Question 3:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that has Microsoft SQL Server 2008 R2 installed. You need to configure the Windows Firewall on Server1 to allow client computers access to the SQL Server installation.

  Which port or ports should you allow through Windows Firewall?

  A. TCP 1433
  B. TCP 587 and UDP 587
  C. UDP 67 and UDP 68
  D. TCP 53 and UDP 53
  E. TCP 546 and TCP 547
  F. UDP 546 and UDP 547
  G. TCP 636
  H. UDP 1433
  I. TCP 995
  J. UDP 995
  A. TCP 1433

  ---

  SQL Server is a Winsock application that communicates over TCP/IP by using the sockets network library. SQL Server listens for incoming connections on a particular port. The default port for SQL Server is 1433. The port doesn't need to be 1433, but 1433 is the official Internet Assigned Number Authority (IANA) socket number for SQL Server. http://support.microsoft.com/kb/287932/EN-US

• Question 4:

  Your network contains a server named Server1.

  An administrator named Admin1 installs the Windows Server Update Services (WSUS) server role on Server1. You open the Windows Server Update Services console and view the Products and Classifications options as shown in the

  exhibit. (Click the Exhibit button.)

  

  You need to ensure that you can select updates for Windows Server 2008 R2 Service Pack 1 (SP1) from the Products and Classifications options.

  What should you do?

  A. Add your user account to the WSUS Administrators group.
  B. Synchronize Server1 to the Microsoft Update servers.
  C. Configure a server that runs Windows Server 2008 R2 SP1 to download updates from Server1.
  D. Restart the Update Services service.
  B. Synchronize Server1 to the Microsoft Update servers.

  ---

  Ref: http://www.networkinghints.com/administrator/windows-server/can%C2%B4t-find-windows-7- servicepack-1-in-wsus/ http://windowsteamblog.com/windows/b/bloggingwindows/archive/2011/03/08/windows-7-sp1- available-viawsus.aspx

• Question 5:

  You have a file server that runs Windows Server 2008 R2.

  You configure quotas on the server.

  You need to view each user's quota usage on a per folder basis.

  What should you do?

  A. From File Server Resource Manager, create a File Screen.
  B. From File Server Resource Manager, create a Storage Management report.
  C. From the command prompt, run dirquota.exe quota list.
  D. From the properties of each volume, review the Quota Entries list.
  B. From File Server Resource Manager, create a Storage Management report.

  ---

  

• Question 6:

  Your network contains an Active Directory domain named fabrikam.com. The domain contains a DNS server named Server1. Server1 hosts the DNS zone for fabrikam.com.

  You have a client computer named Computer1 that runs Windows 7. You need to ensure that, from Computer1, you can enumerate all of the records in the fabrikam.com DNS zone.

  What should you modify?

  A. the forwarders of Server1
  B. the root hints of Server1
  C. the security settings of the fabrikam.com DNS zone
  D. the zone transfer settings of the fabrikam.com DNS zone
  D. the zone transfer settings of the fabrikam.com DNS zone

• Question 7:

  Your company uses DHCP to lease IPv4 addresses to computers at the main office. A WAN link connects the main office to a branch office. All computers in the branch office are configured with static IP addresses. The branch office does not use DHCP and uses a different subnet. You need to ensure that the portable computers can connect to network resources at the main office and the branch office.

  How should you configure each portable computer?

  A. Use a static IPv4 address in the range used at the branch office.
  B. Use an alternate configuration that contains a static IP address in the range used at the main office.
  C. Use the address that was assigned by the DHCP server as a static IP address.
  D. Use an alternate configuration that contains a static IP address in the range used at the branch office.
  D. Use an alternate configuration that contains a static IP address in the range used at the branch office.

• Question 8:

  Your network contains a Windows Server Update Services (WSUS) server named Server1. Server1 provides updates to client computers in two sites named Site1 and Site2. A WSUS computer group named Group1 is configured for automatic approval.

  You need to ensure that new client computers in Site2 are automatically added to Group1.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Create a new automatic approval update rule.
  B. Modify the Computers Options in the Update Services console.
  C. Modify the Automatic Approvals options in the Update Services console.
  D. Configure a Group Policy object (GPO) that enables client-side targeting.
  B. Modify the Computers Options in the Update Services console.
  D. Configure a Group Policy object (GPO) that enables client-side targeting.

  ---

  Reference: http://technet.microsoft.com/en-us/library/cc720433(WS.10).aspx Explanation: WSUS enables you to target updates to groups of client computers. This capability can help you ensure that specific computers get the right updates at the most convenient times on an ongoing basis. For example, if all computers in one department of your organization have a specific configuration (such as all computers in the Accounting team), you can determine what updates those computers get, at what time, and then use WSUS reporting features to evaluate the success of update activity for that computer group. By default, each computer is already assigned to the All Computers group. Computers will also be assigned to the Unassigned Computers group until you assign them to another group. Regardless of the group you assign a computer to, it will also remain in the All Computers group. A computer can be in only one other group in addition to the All Computers group. You can assign computers to computer groups by using one of two methods, server-side targeting or client side targeting, depending on whether or not you want to automate the process. With server-side targeting, you use the Move the selected computer task on the Computers page to move one or more client computers to one computer group at a time. With client-side targeting, you use Group Policy or edit the registry settings on client computers to enable those computers to automatically add themselves into the computer groups. You must specify which method you will use by selecting one of the two options on the Computers Options page.

  Note If your WSUS server is running in replica mode, you will not be able to create computer groups on that server, you will only inherit the computer groups created on the administration server from which your server inherits its settings. For more information about replica mode, see Running in Replica Mode. Server-side Targeting With server-side targeting, you use the WSUS console to both create groups and then assign computers to the groups. Server-side targeting is an excellent option if you do not have many client computers to update and you want to move client computers into computer groups manually.

  To enable server-side targeting on your WSUS server, click the Use the Move computers task in Windows Server Update Services option on the Computers Options page. Client-side Targeting With client-side targeting, you enable client-computers to add themselves to the computer groups you create in the WSUS console. You can enable client-side targeting through Group Policy (in an Active Directory network environment) or by editing registry entries (in a non-Active Directory network environment) for the client computers. When the client computers connect to the WSUS server, they will add themselves into the correct computer group. Client-side targeting is an excellent option if you have many client computers and want to automate the process of assigning them to computer groups. To enable client-side targeting on your WSUS server, click the Use Group Policy or registry settings on client computers option on the Computers Options page.

• Question 9:

  Your network contains an Active Directory domain. The domain contains a server named Server1 that runs Windows Server 2008 R2.

  Server1 contains a folder named Folder1. A domain user named User1 does not have NTFS Read permission for Folder1.

  You need User1 to create a backup copy of Folder1. User1 must NOT be able to restore the backup copy on Server1. What should you do?

  To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  This user right determines which users can bypass file and directory, registry, and other persistent object permissions for the purposes of backing up the system. Specifically, this user right is similar to granting the following permissions to the user or group in Question on all files and folders on the system: Traverse Folder/Execute File List Folder/Read Data Read Attributes Read Extended Attributes Read Permissions http://technet.microsoft.com/en-us/library/cc787956(v=ws.10).aspx

• Question 10:

  You need to ensure that only the members of the Power Users group and the members of the Administrators group can view the events in the System log. Which tools should you use?

  A. Wecutil
  B. Event Viewer
  C. Cacls
  D. Wevtutil
  D. Wevtutil

  ---

  If you need to define access to just the System event log on our Windows 2008 Server.

  1.

  open the command prompt, and run the following command to dump out the SDDL for the System log out to a txt file.wevtutil gl system > C:\temp\out.txt

  2.

  Open the text file and copy out the channelAccess: entry channelAccess: O:BAG:SYD:

  (A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x5;;;SO)(A;;0x1;;;IU)(A;;0x1;;;AU)(A;;0x1;;;SU) (A;;0x1;;;S-1-5-3)(A;;0x2;;;LS)(A;;0x2;;;NS)(A;;0x2;;;S-1-5-33)(A;;0x1;;;S-1-5-32- 573) )

  3.

  Copy the Interactive User (IU) rights and add your user or group to them.

  O:BAG:SYD:(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x5;;;SO)(A;;0x1;;;IU)(A;;0x1;;;AU) (A;;0x1;;;SU)(A;;0x1;;;S-1-5-3)(A;;0x2;;;LS)(A;;0x2;;;NS)(A;;0x2;;;S-1-5-33) (A;;0x1;;;S-1-5- 32-573) (A;;0x1;;; S-1-5-3-3127463467463)) Last we need to apply

  the new SDDL. Just replace the O:BAG:XXXX with your SDDL String you created in the previous step.

  wevtutil sl System /ca:O:BAG:XXXX

  In addition you can remove access for the Event Log Readers group from event log in question by removing the (A;;0x1;;;S-1-5-32-573) entry from the respective log SDDL String. http://blogs.technet.com/b/janelewis/archive/2010/04/30/ giving-non-administrators-permission-to-read- eventlogs-windows-2003-and-windows- 2008.aspx