Microsoft 70-642 Online Practice Questions and Exam Preparation

Microsoft 70-642 Online Questions & Answers

• Question 141:

  Your network contains an Active Directory domain named contoso.com. The functional level of the domain and the functional level of the forest are Windows Server 2003. All domain controllers run Windows Server 2008.

  You have a member server that runs Windows Server 2008 R2 named Server1. You install the Distributed Scan Server role service on Server1. From the Scan Management console, you attempt to add a scan process and you receive the following error.

  

  You need to ensure that you can add a scan process. What should you do?

  A. Install the Fax Server role.
  B. Install the Print Server role service.
  C. Update the Active Directory schema.
  D. Set the functional level of the forest to Windows Server 2008.
  C. Update the Active Directory schema.

  ---

  In order to use DSM its needed to upgrade the AD Schema thats found here - http://www.microsoft.com/en-us/download/details.aspx?id=9494 http://blogs.technet.com/b/askperf/archive/2009/10/11/windows-7-windows-server-2008-r2distributedscanmanagement.aspx http://blogs.technet.com/b/print/archive/2009/10/22/distributed-scan-management.aspx

• Question 142:

  Your network contains a DNS server named DNS1 that runs Windows Server 2008 R2. DNS1 is configured as the DNS server for contoso.com. All client computers are configured to use DNS1 for name resolution.

  From a client computer, you run the Ping tool as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that users can use the Ping tool to resolve the IP addresses of internal servers to fully qualified domain names (FQDNs). What should you do?

  A. Create a GlobalNames zone.
  B. Create a reverse lookup zone.
  C. Create a forward lookup zone.
  D. Enable zone transfers on the contoso.com zone.
  B. Create a reverse lookup zone.

• Question 143:

  You are planning the network for a branch office. The branch office will contain 100 IPv4 hosts. You need to recommend a subnet mask for the branch office. The subnet mask must minimize the number of unused IP addresses. Which subnet mask should you use?

  A. 255.255.255.0
  B. 255.255.255.128
  C. 255.255.0.0
  D. 255.255.128.0
  B. 255.255.255.128

  ---

  http://www.pantz.org/software/tcpip/subnetchart.html

• Question 144:

  Your network contains two Active Directory domains named contoso.com and fabrikam.com. Each domain contains several domain controllers. All of the domain controllers are configured as DNS servers for their respective domain.

  From a client computer in contoso.com, you discover that you cannot resolve host names in fabrikam.com. You need to ensure that the client computers in contoso.com can resolve host names in fabrikam.com. What should you do in contoso.com?

  A. Create a conditional forwarder.
  B. Disable forwarders.
  C. Modify the DNS suffix search order on all of the DNS servers.
  D. Create a reverse lookup zone.
  A. Create a conditional forwarder.

• Question 145:

  Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2008 R2. All client computers run Windows 7.

  You discover that users can use Encrypting File System (EFS) when the smart cards on their computers are removed.

  You need to prevent the users from accessing EFS-encrypted files when their smart cards are removed. From the EFS properties, you click Require a smart card for EFS.

  What should you do next?

  A. Set the Elliptic Curve Cryptography to Allow.
  B. Set the Elliptic Curve Cryptography to Require.
  C. Disable the Allow delegating saved credentials setting.
  D. Disable the Create caching-capable user key from smart card option.
  D. Disable the Create caching-capable user key from smart card option.

  ---

  

• Question 146:

  Your network contains an Active Directory domain named fabrikam.com. The domain contains five domain controllers named DC1, DC2, DC3, DC4, and DC5. All domain controllers run Windows Server 2008 R2 and have the DNS server role installed.

  On DC5, you create a new Active Directory-integrated DNS zone named adatum.com. You need to ensure that the adatum.com DNS zone is only replicated to DC5 and DC2. The solution must ensure that all zone replication traffic is encrypted.

  What should you do first?

  A. Create an application directory partition.
  B. Create a primary zone.
  C. Modify the zone transfer settings.
  D. Change the zone replication scope.
  A. Create an application directory partition.

• Question 147:

  You have an application server that runs Windows Server 2008 R2. You need to configure Windows Firewall to allow communications on the server as shown in the following table.

  

  What is the minimum number of firewall rules you should create?

  A. 4
  B. 2
  C. 1
  D. 3
  B. 2

• Question 148:

  Your network contains an Active Directory forest. The forest contains a member server named Server1 that runs Windows Server 2008 R2.

  You need to create folder quotas on Server1.

  Which server role, role service, or feature should you install?

  A. Routing and Remote Access service (RRAS)
  B. Health Registration Authority (HRA)
  C. Network Load Balancing (NLB)
  D. File Server Resource Manager (FSRM)
  E. Windows Server Update Services (WSUS)
  F. Connection Manager Administration Kit (CMAK)
  G. Wireless LAN Service
  H. Windows Internal Database
  I. Network Policy Server (NPS)
  J. Group Policy Management
  D. File Server Resource Manager (FSRM)

  ---

  http://technet.microsoft.com/en-us/library/cc770989(v=ws.10).aspx By using File Server Resource Manager (FSRM) to create a quota for a volume or folder, you can limit the disk space that is allocated for it. The quota limit applies to the

  entire folder subtree.

  You can create either a hard quota or a soft quota:

  A hard quota prevents users from saving files after the space limit is reached and generates notifications when the volume of data reaches each configured threshold. A soft quota does not enforce the quota limit but generates all configured

  notifications.

• Question 149:

  Your network contains an Active Directory domain. The domain contains a Windows Server Update Services (WSUS) server named Server1. A Group Policy object (GPO) named GPO1 configures all computers in the domain to use Server1 for Windows Update.

  You add a new Windows 7 computer named Computer1 to the domain.

  From the Update Services console, you discover that Computer1 is not listed as a member of any computer groups.

  You verify that GPO1 is applied to Computer1.

  You need to ensure that Computer1 is available in the Update Services console. What should you do?

  A. On Computer1, run wuauclt.exe /detectnow.
  B. On Computer1, run wuauclt.exe /reportnow.
  C. On Server1, run wsusutil.exe reset.
  D. On Server1, run wsusutil.exe listinactiveapprovals.
  A. On Computer1, run wuauclt.exe /detectnow.

  ---

  Automatic Updates Behavior Using Command-line Options There are two documented command-line options used for manipulating Automatic Updates behavior. These options are meant to be run from a command prompt. They are helpful for testing and troubleshooting client computers. For comprehensive troubleshooting information for problems with both the WSUS server and client computers, see "Microsoft Windows Server Update Services Operations Guide."

  Detectnow Option Because waiting for detection to start can be a time-consuming process, an option has been added to allow you to initiate detection right away. On one of the computers with the new Automatic Update client installed, run the following command at the command prompt: wuauclt.exe /detectnow Resetauthorization Option WSUS uses a cookie on client computers to store various types of information, including computer group membership when client-side targeting is used. By default this cookie expires an hour after WSUS creates it. If you are using client-side targeting and change group membership, use this option in combination with detectnow to expire the cookie, initiate detection, and have WSUS update computer group membership.

  Note that when combining parameters, you can use them only in the order specified as follows: wuauclt.exe /resetauthorization /detectnow http://technet.microsoft.com/en-us/library/cc708617(v=WS.10).aspx

• Question 150:

  Your network contains a file server that runs Windows Server 2008 R2. You create a shared folder on the server.

  You need to ensure that an administrator is notified whenever a user saves .exe files to the shared folder. What should you do?

  A. Configure access-based enumeration (ABE).
  B. Create a file screen.
  C. Modify the NTFS permissions and the share permissions.
  D. Create a soft quota.
  B. Create a file screen.

  ---

  http://technet.microsoft.com/en-us/library/cc732349(WS.10).aspx