Microsoft 70-642 Online Practice Questions and Exam Preparation

Microsoft 70-642 Online Questions & Answers

• Question 181:

  Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Network Access Protection (NAP) is deployed on Server1. Server2 has the Routing and Remote Access service (RRAS) role service installed.

  You need to configure Server2 to use NAP VPN enforcement. Which authentication method should you enable on Server2?

  A. Microsoft encrypted authentication version 2 (MS-CHAP v2)
  B. Extensible authentication protocol (EAP)
  C. Allow machine certificate authentication for IKEv2
  D. Encrypted authentication (CHAP)
  B. Extensible authentication protocol (EAP)

• Question 182:

  Your network contains a Windows Server Update Services (WSUS) server. All computers on the network are configured to download and install updates once a week.

  You need to deploy a critical update to a WSUS client as soon as possible. Which command should you run?

  A. dism.exe /online /check-apppatch
  B. gpupdate.exe /force
  C. secedit.exe /refreshpolicy
  D. wuauclt.exe /detectnow
  D. wuauclt.exe /detectnow

  ---

  Manipulate Automatic Updates Behavior Using Command-line Options There are two documented commandline options used for manipulating Automatic Updates behavior. These options are meant to be run from a command prompt. They are helpful for testing and troubleshooting client computers. For comprehensive troubleshooting information for problems with both the WSUS server and client computers, see "Microsoft Windows Server Update Services Operations Guide."

  Detectnow Option Because waiting for detection to start can be a time-consuming process, an option has been added to allow you to initiate detection right away. On one of the computers with the new Automatic Update client installed, run the following command at the command prompt: wuauclt.exe /detectnow

• Question 183:

  Your network contains a server named Server1.

  An administrator named Admin1 installs the Windows Server Update Services (WSUS) server role on Server1. You open the Windows Server Update Services console and view the Products and Classifications options as shown in the

  exhibit. (Click the Exhibit button.)

  

  You need to ensure that you can select updates for Windows Server 2008 R2 Service Pack 1 (SP1) from the Products and Classifications options. What should you do?

  A. From a command prompt, run gpudate /force.
  B. From the WSUS Administration console, synchronize Server.
  C. From the Service console, restart the Update Services service.
  D. From a command prompt, run wuauclt /detectnow.
  B. From the WSUS Administration console, synchronize Server.

  ---

  *

  During synchronization, a WSUS server downloads updates (update metadata and files) from an update source. It also downloads any new product classifications and categories. When a WSUS server synchronizes for the first time, it downloads all of the updates that were specified in the synchronization options. After the first synchronization, a WSUS server downloads only updates from the update source, metadata revisions for existing updates, and expirations to updates.

  *

  To specify update products and classifications for synchronization

  1. On the WSUS console toolbar, click Options, and then click Synchronization Options. Etc.

• Question 184:

  Your network contains a DNS zone for contoso.com.

  All servers register their host names in DNS by using dynamic updates.

  The network contains a server named server1.contoso.com.

  From a computer named Computer1 that runs Windows 7, you successfully resolve serverl.contoso.com to an IP address.

  You change the IP address of serverl.contoso.com.

  From Computer1, you discover that serverl.contoso.com still resolves to the old IP address. You successfully connect to serverl.contoso.com by using the new IP address. You need to ensure that you can immediately resolve

  serverl.contoso.com to the new IP address.

  What should you do on Computer1?

  A. Restart the Network Location Awareness service.
  B. Run dnscacheugc.exe.
  C. Restart the Computer Browser service.
  D. Restart the DNS Client service.
  D. Restart the DNS Client service.

  ---

  Have you ever had an issue where you continually get DNS errors while trying to browse, but another computer on the same network is working just fine? The problem is most likely that you need to reload your DNS cache on that machine. You can tackle this problem two ways, first by just clearing the cache, but also by restarting the DNS client service, which handles caching of DNS lookups.

  Either:

  *

  Clear DNS Cache ipconfig /flushdns or

  *

  net stop dnscache net start dnscache

  

• Question 185:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has Microsoft Exchange Server 2010 deployed.

  You schedule a backup of the server.

  You discover that the Exchange Server 2010 transaction log files are purged during the backup. You need to prevent the Exchange Server 2010 transaction log files from being purged.

  What should you do?

  A. From the properties of the backup, add an exclusion.
  B. From the properties of the backup, modify the VSS settings.
  C. From Windows PowerShell, run the New-WBFileSpec cmdlet.
  D. From Windows PowerShell, run the New-WBBackupTarget cmdlet.
  B. From the properties of the backup, modify the VSS settings.

  ---

  

• Question 186:

  Your network contains an Active Directory domain. The domain contains two DHCP servers named DHCP1 and DHCP2.

  On DHCP1, you create a scope named Scope1.

  You configure Scope1 as a split scope and add DHCP2 as an additional DHCP server. You need to ensure that DHCP1 and DHCP2 can issue IP addresses.

  What should you do from the DHCP console?

  A. Reconcile Scope1 on DHCP2.
  B. Activate Scope1 on DHCP2.
  C. Restart the DHCP Server service on DHCP2.
  D. Update the range of IP addresses on DHCP1.
  B. Activate Scope1 on DHCP2.

  ---

  http://technet.microsoft.com/en-us/library/ee405264(WS.10).aspx

• Question 187:

  Your company has a server named SRV1 that runs Windows Server 2008 R2. The default Print Services server role is installed on SRV1. The company wants to centralize printing on SRV1 for both UNIX and Windows users. You need to provide support to the UNIX users who print on SRV1. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

  A. Install the Internet Printing role service on SRV1.
  B. Install the Line Printer Daemon (LPD) Services role service on SRV1.
  C. Configure the printers on SRV1 to use Line Printer Remote printing.
  D. Install the File Services server role on SRV1 and activate the Services for Network File System role service.
  A. Install the Internet Printing role service on SRV1.
  B. Install the Line Printer Daemon (LPD) Services role service on SRV1.

  ---

  Line Printer Daemon (LPD) - A service on a print server that receives print jobs from Line Printer Remote (LPR) tools that are running on client computers. Internet Printing Protocol (IPP) - The protocol that uses the Hypertext Transfer Protocol (HTTP) to send print jobs to printers throughout the world. http://technet.microsoft.com/en-us/library/cc783789(v=ws.10).aspx

• Question 188:

  Your network contains a Network Policy Server (NPS) named NPS1. NPS1 is configured for remote access account lockout.

  A domain user named User1 has been locked out by NPS1.

  You need to unlock the User1 user account on NPS1.

  What should you use?

  A. the Netsh tool
  B. the Network Policy Server console
  C. the Registry Editor
  D. the Routing and Remote Access console
  C. the Registry Editor

  ---

  Manually Unlock a Remote Access Client

  If the account is locked out, the user can try to log on again after the lockout timer has run out, or you can delete the DomainName:UserName value in the following registry key:

  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\ AccountLockout registry key. To manually unlock an account, follow these steps:

  Click Start, click Run, type regedit in the Open box, and then press ENTER.

  Locate and then click the following registry key:

  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters \ AccountLockout Find the Domain Name:User Name value, and then delete the entry.

  Quit Registry Editor.

  Test the account to confirm that it is no longer locked out.

  http://support.microsoft.com/kb/816118

• Question 189:

  Your network contains an Active Directory domain named contoso.com. The network is configured to use ISATAP.

  You have a server named Server1 that runs Windows Server 2008 R2. On Server1, you discover that a tunnel adapter named isatap.contoso.com has a Media State of "Media disconnected".

  You confirm that Server1 has a valid network connection and can query the DNS server. You need to ensure that the isatap.contoso.com tunnel adapter has an IPv6 address.

  What should you do?

  A. Start the IP Helper service.
  B. Start the IPsec Policy Agent service.
  C. Add a new rule to Windows Firewall.
  D. Add an entry for ISATAP to the Hosts file.
  A. Start the IP Helper service.

  ---

  The IP Helper service service must be running for IPv6 transition technologies such as ISATAP, Teredo, and 6to4 to function on the computer. This service provides automatic IPv6 connectivity over an IPv4 network, and if the service is stopped, the computer will have only IPv6 connectivity if it is connected to a native IPv6 network. Therefore, if your network is not native IPv6, disabling this service on Windows Server 2008 computers effectively disables IPv6 on them.

• Question 190:

  Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2.

  The domain contains three domain controllers named DC1, DC2, and DC3. All of the domain controllers have the DNS server role installed.

  You create a new Active Directory-integrated DNS zone on DC1. You need to ensure that the zone is only replicated to DC1 and DC3. The solution must ensure that all zone replication traffic is encrypted.

  What should you do?

  To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area and arrange them in the correct order.

  Select and Place: