Microsoft 70-642 Online Practice Questions and Exam Preparation

Microsoft 70-642 Online Questions & Answers

• Question 121:

  Your network contains two Windows Server Update Services (WSUS) servers named Server1 and Server2.

  Server1 is a member of a domain named contoso.com. Server2 is a standalone server. Server2 is configured as an autonomous downstream server.

  You need to ensure that all updates approved on Server1 are automatically approved on Server2.

  Which options should you modify?

  A. Automatic Approvals
  B. Products and Classifications
  C. Synchronization Schedule
  D. Update Source and Proxy Server
  D. Update Source and Proxy Server

• Question 122:

  Your network contains a subnet named Subnet1. You add a new subnet named Subnet2 to the network.

  Subnet1 and Subnet2 are connected by a router named Router1. You need to configure the IP addresses on Router1 to ensure that IP traffic can be routed between Subnet1 and Subnet2.

  Which IP addresses should you assign to Router1?

  To answer, drag the appropriate IP address to the correct interface in the answer area.

  Select and Place:

  

  

  ---

  Answer Area Client computers Subnet1: 10.10.10.128/25 Subnet2: 10.10.10.0/25 Client computers Router1 A5

• Question 123:

  Your network contains a single Active Directory domain named contoso.com. The domain contains a DNS server named Server1 that hosts the contoso.com zone. The network is connected to the network of a partner company. The partner company's network contains a DNS server that hosts a zone named nwtraders.com.

  You need to ensure that computers in contoso.com can resolve the names of computers in nwtraders.com. The solution must not require any changes to the zone configuration of nwtraders.com. What should you configure on Server1?

  A. a conditional forwarder
  B. a GlobalNames zone
  C. a secondary zone
  D. a zone delegation
  A. a conditional forwarder

• Question 124:

  Your network contains an Active Directory domain named contoso.com. The network has DirectAccess deployed.

  You deploy a new server named Server1 that hosts a management application. You need to ensure that Server1 can initiate connections to DirectAccess client computers. Which settings should you modify from the DirectAccess Setup console?

  A. Application Servers
  B. DirectAccess Server
  C. Infrastructure Servers
  D. Remote Clients
  C. Infrastructure Servers

  ---

  Read the guide here : http://blog.concurrency.com/infrastructure/uag-directaccess-infrastructure-servers-wizard/

• Question 125:

  Your network contains a server named Server1 that runs Windows Server 2008 R2 Service Pack (SP1).

  All users have laptops that run Windows 7. The users frequently work from network locations that only allow outbound communication to the Internet by using HTTP and HTTPS.

  You plan to configure Server1 as a VPN server.

  You need to identify which VPN protocol you should use to ensure that all of the users can establish VPN connections to Server1.

  Which VPN protocol should you identify?

  A. PPTP
  B. SSTP
  C. L2TP
  D. IKEv2
  B. SSTP

• Question 126:

  Your network contains a server named Server1 that has Windows Server 2008 R2. An administrator runs the following command on Server1:

  netsh.exe advfirewall reset

  You discover that you can no longer access Server1 on port 3389. You need to ensure that you can access Server1 on port 3389.

  Which firewall rule should you enable?

  A. File and Printer Sharing (Echo Request - ICMPv4-In)
  B. File and Printer Sharing (SMB-In)
  C. Remote Desktop (TCP-In)
  D. Remote Service Management (RPC)
  C. Remote Desktop (TCP-In)

• Question 127:

  Your network contains an Active Directory domain named contoso.com. The domain contains three VPN servers named VPN1, VPN2, and VPN3 that run Windows Server 2008 R2.

  You need to configure all of the VPN servers to use the same network policies.

  What should you configure on the VPN servers?

  A. remediation server groups
  B. the RADIUS Accounting accounting provider
  C. connection request policies
  D. the RADIUS Authentication authentication provider
  C. connection request policies

  ---

  Connection request policies are sets of conditions and settings that allow network administrators to designate which Remote Authentication Dial-In User Service (RADIUS) servers perform the authentication and authorization of connection requests that the server running Network Policy Server (NPS) receives from RADIUS clients. Connection request policies can be configured to designate which RADIUS servers are used for RADIUS accounting. Ref: http:// technet.microsoft.com/en- us/library/cc753603.aspx

• Question 128:

  Your company has computers in multiple locations that use IPv4 and IPv6. Each location is protected by a firewall that performs symmetric NAT. You need to allow peer-to-peer communication between all locations.

  What should you do?

  A. Configure dynamic NAT on the firewall.
  B. Configure the firewall to allow the use of Teredo.
  C. Configure a link local IPv6 address for the internal interface of the firewall.
  D. Configure a global IPv6 address for the external interface of the firewall.
  B. Configure the firewall to allow the use of Teredo.

  ---

  In computer networking, Teredo is a transition technology that gives full IPv6 connectivity for Ipv6-capable hosts which are on the IPv4 Internet but which have no direct native connection to an IPv6 network. Compared to other similar protocols its distinguishing feature is that it is able to perform its function even from behind network address translation (NAT) devices such as home routers. http://technet.microsoft.com/en-us/library/ee126159(v=ws.10).aspx

• Question 129:

  Your network contains an Active Directory forest. The forest contains three domain trees. Each domain tree contains multiple domains.

  You have an Active Directory-integrated DNS zone.

  You install a Web server named Web1. All of the users in the company will use Web1. You need to ensure that the users can access Web1 by using the URL http://web1. You want to achieve this goal by using the minimum amount of

  administrative effort.

  What should you do?

  A. Configure a GlobalNames zone and add a Host (A) resource record for Web1.
  B. Create an Alias (CNAME) resource record for Web1 in the forest root domain zone.
  C. Create a reverse lookup zone and add an Alias (CNAME) resource record for Web1.
  D. Create a Host Information (HINFO) resource record for Web1 in the forest root domain zone.
  B. Create an Alias (CNAME) resource record for Web1 in the forest root domain zone.

  ---

  Create an Alias (CNAME) resource record for Web1 in the forest root domain zone. Because the root zone is already AD-integrated In GLOBALNAMES zone you only add alias (cname) records not host (A) records.

• Question 130:

  Your network contains an Active Directory domain. The domain contains a DHCP server named Server1. You create a scope named Scope1 on Server1.

  You need to prevent unauthorized DHCP clients from receiving addresses from Server1.

  What should you do?

  A. From the DHCP console, configure filters.
  B. From the Local Security Policy console, modify the network settings.
  C. From the Local Users and Groups console, modify the membership of the DHCP Users group.
  D. From the Netsh tool, change to the DHCP Server context, and then run the initiate auth command.
  A. From the DHCP console, configure filters.

  ---

  On DHCP>iPv4, click on properties, then click on filters tab: