Microsoft 70-642 Online Practice Questions and Exam Preparation

Microsoft 70-642 Online Questions & Answers

• Question 161:

  You network contains an Active Directory forest named Contoso.com. The forest contains two domains named Contoso.com and child.contoso.com.

  The Contoso.com domain contains a server named Server1. Server1 has the Network Policy and Access Services (NPAS) server role instead.

  You need to ensure that Server1 can read the dial-in properties of user accounts in the child.contoso.com domain.

  Which tool should you use?

  A. Netcfg
  B. Active Directory Users and Computers
  C. Useraccountcontrolsettings
  D. Authorization manager
  B. Active Directory Users and Computers

• Question 162:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 hosts a custom application named App1. App1 is accessible on TCP port 5000.

  You need to encrypt App1 data on the network. What should you do?

  A. From the Local Security Policy console, configure the Security Options.
  B. From the Local Security Policy console, configure the Application Control Policies.
  C. From the Windows Firewall with Advanced Security console, create an inbound rule.
  D. From the Windows Firewall with Advanced Security console, create a connection security rule.
  D. From the Windows Firewall with Advanced Security console, create a connection security rule.

  ---

  Inbound rule cannot encrypt data. Therefore answer is D.

• Question 163:

  Your company has a main office and a branch office. The main office has a domain controller named DC1 that hosts a DNS primary zone. The branch office has a DNS server named SRV1 that hosts a DNS secondary zone. All client computers are configured to use their local server for DNS resolution. You change the IP address of an existing server named SRV2 in the main office. You need to ensure that SRV1 reflects the change immediately.

  What should you do?

  A. Restart the DNS Server service on DC1.
  B. Run the dnscmd command by using the /zonerefresh option on DC1.
  C. Run the dnscmd command by using the /zonerefresh option on SRV1.
  D. Set the refresh interval to 10 minutes on the Start of Authority (SOA) record.
  C. Run the dnscmd command by using the /zonerefresh option on SRV1.

  ---

  dnscmd ServerName /zonerefresh ZoneName - Forces a secondary DNS zone to update from the master. Parameters ServerName: Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host

  name. If omitted, the local server is used.

  ZoneName: Specifies the name of the zone to be refreshed.

  Remarks:

  The zonerefresh operation forces a check of the version number in the master's SOA record. If the version number on the master is higher than the secondary's version number, then a zone transfer is initiated, updating the secondary server.

  If the version number is the same, no zone transfer occurs. *The forced check occurs by default every 15 minutes. To change the default, use the dnscmd config refreshinterval operation.

  http://technet.microsoft.com/en-us/library/cc772069(v=ws.10).aspx#BKMK_30

• Question 164:

  Your network contains a file server named Server1 that runs Windows Server 2008 R2. On Server1, you create a disk quota for volume E that limits storage to 200 MB for all users.

  You need to ensure that a user named User1 can store files that are larger than 200 MB on volume E.

  What should you do?

  A. From File Server Resource Manager, create a file screen exception.
  B. From a command prompt, run dirquota.exe.
  C. From Disk Management, create a new quota entry.
  D. From Windows Explorer, modify the security properties of the volume.
  C. From Disk Management, create a new quota entry.

  ---

  You can set quota limits on individual users, or you can have limits apply equally to all non- administrative users. Unfortunately, you can't set limits on groups of users. And any users who already own files on the disk will have their quotas

  initially disabled. New users will have the default quotas for the disk applied as you would expect when they first save a file on the disk.

  To set the quotas for individual users, follow these steps:

  In Disk Management, right-click a drive letter and open the properties of that drive. Click the Quota tab, and then click Show Quota Settings to bring up the Quota Settings dialog box for that disk.

  Click Quota Entries to open the Quota Entries dialog box for the disk.

  -

  To create a quota for a user who doesn't have one yet, and who needs a quota different from the default for the disk, click New Quota Entry.

  -

  To modify the quota for a user already listed, select the user and then click Properties to open the quota settings for that user. Set the quota for the user and click OK to return to the Quota Entries dialog box.

• Question 165:

  Your company runs Windows Server Update Services (WSUS) on a server named Server1. Server1 runs Windows Server 2008 R2. Server1 is located on the company intranet.

  You configure the WSUS Web site to use SSL.

  You need to configure a Group Policy object (GPO) to specify the intranet update locations.

  Which URLs should you use?

  A. http: //SERVER1
  B. http: //SERVER1:8080
  C. https: //SERVER1
  D. https: //SERVER1:8080
  C. https: //SERVER1

• Question 166:

  Your network contains an Active Directory forest. The forest contains two domains named contoso.com and eu.contoso.com. You install a Network Policy Server (NPS) named Server1 in the contoso.com domain. You need to ensure that Server1 can read the dial-in properties of the user accounts in the eu.contoso.com domain.

  What should you do?

  A. In the contoso.com domain, add Server1 to the RAS and IAS Servers group.
  B. In the contoso.com domain, add Server1 to the Windows Authorization Access group.
  C. In the eu.contoso.com domain, add Server1 to the RAS and IAS Servers group.
  D. In the eu.contoso.com domain, add Server1 to the Windows Authorization Access group.
  C. In the eu.contoso.com domain, add Server1 to the RAS and IAS Servers group.

  ---

  C is correct, Servers in this group can access remote access properties of users

• Question 167:

  Your network contains a DNS server that hosts a zone for contoso.com. Dynamic updates are enabled on the zone. The network contains a Web server named webl.contoso.com. Webl.contoso.com uses the 10.10.10.10 IP address. Webl.contoso.com hosts three websites. The websites are configured as shown in the following table.

  

  You change the IP address of the Web server to 10.10.10.11.

  After the change, users report that they fail to access the Sales website and the Finance website.

  The users can access the Intranet website.

  You change the IP address of webl.contoso.com to 10.10.10.10.

  The users report that they can access all three websites.

  You need to ensure that when you change the IP address of webl.contoso.com, the users can access all three websites.

  What should you do?

  A. Change the host (A) records of sales.contoso.com and finance.contoso.com to canonical name (CNAME) records.
  B. Restart the DNS Client service on webl.contoso.com after you change the IP address.
  C. Change the host (A) records of sales.contoso.com and finance.contoso.com to service location (SRV) records.
  D. Restart the Netlogon service on webl.contoso.com after you change the IP address.
  A. Change the host (A) records of sales.contoso.com and finance.contoso.com to canonical name (CNAME) records.

• Question 168:

  Your network contains a server named Server1.contoso.com. Server1 is located on the internal network. You have a client computer named Computer1 that runs Windows 7. Computer1 is located on a public network that is connected to the Internet. Computer1 is enabled for DirectAccess.

  You need to verify whether Computer1 can resolve Server1 by using DirectAccess.

  Which command should you run on Computer1?

  A. nbtstat.exe -a server1.contoso.com
  B. netsh.exe dnsclient show state
  C. nslookup.exe server1.contoso.com
  D. ping.exe server1.contoso.com
  D. ping.exe server1.contoso.com

• Question 169:

  Your network contains an Active Directory forest. The forest contains the member servers configured as shown in the following table.

  

  All servers run Windows Server 2008 R2.

  You deploy a new server named Server1.

  You need to configure Server1 to provide central authentication for all dial-up connections and all VPN connections.

  What should you install on Server1?

  A. Active Directory Lightweight Directory Services (AD LDS)
  B. Active Directory Federation Services (AD FS)
  C. Network Policy Server (NPS)
  D. Routing and Remote Access service (RRAS)
  C. Network Policy Server (NPS)

  ---

  Ref: http://www.windowsnetworking.com/articles_tutorials/understanding-new-windows-server- 2008- networkpolicy-server.html

• Question 170:

  Your network contains an Active Directory domain. The domain contains DNS servers that run Windows Server 2008 R2. The network has two external links. One link connects to the Internet. The other link directly connects to the network of a partner company. The partner companys network is not connected to the Internet. You need to ensure that users on your network can access resources on the partner companys network. The solution must ensure that the users on your network can continue to access resources on the Internet. Which two actions should you perform on the DNS servers? (Each correct answer presents a complete solution. Choose two.)

  A. Configure conditional forwarding.
  B. Add a stub zone.
  C. Modify the root hints.
  D. Add a reverse lookup zone.
  E. Add a trust anchor.
  A. Configure conditional forwarding.
  C. Modify the root hints.