Microsoft 70-642 Online Practice Questions and Exam Preparation

Microsoft 70-642 Online Questions & Answers

• Question 201:

  Your network contains a server that has the Network Policy Server (NPS) role service installed. You plan to configure Network Access Protection (NAP) to use the DHCP enforcement method. You need to configure a network policy that will

  apply only to clients that receive an IP address from a specific DHCP scope.

  Which condition should you configure?

  A. Service Type
  B. NAS Port Type
  C. Framed Protocol
  D. MS-Service Class
  E. NAS Identifier
  D. MS-Service Class

• Question 202:

  Your company has a single Active Directory domain.

  The company has a main office and three branch offices. The domain controller in the main office runs Windows Server 2008 R2 and provides DNS for the main office and all of the branch offices. Each branch office contains a file server that

  runs Windows Server 2008 R2. Users in the branch offices report that it takes a long time to access network resources. You confirm that there are no problems with WAN connectivity or bandwidth. You need to ensure that users in the branch

  offices are able to access network resources as quickly as possible. Which two actions should you perform? (Each correct answer presents part of the solution.

  Choose two.)

  A. Configure a standard primary zone in each of the branch offices.
  B. Configure forwarders that point to the DNS server in the main office.
  C. Configure a secondary zone in each of the branch offices that uses the main office DNS server as a master.
  D. Install DNS servers in each of the branch offices.
  C. Configure a secondary zone in each of the branch offices that uses the main office DNS server as a master.
  D. Install DNS servers in each of the branch offices.

• Question 203:

  Your company has a main office and two branch offices. Domain controllers in the main office host an Active Directory-integrated zone.

  The DNS servers in the branch offices host a secondary zone for the domain and use the main office DNS servers as the DNS Master servers for the zone.

  Each branch office has an application server.

  Users access the application server by using its fully qualified domain name.

  You need to ensure that users in the branch offices can access their local application server even if the WAN links are down for three days.

  What should you do?

  A. Increase the Expires After setting to 4 days on the Start of Authority (SOA) record for the zone.
  B. Increase the Refresh Interval setting to 4 days on the Start of Authority (SOA) record for the zone.
  C. Configure the Zone Aging / Scavenging Properties dialog box to enable Scavenge stale resource records, and set the Refresh setting to 4 days.
  D. Configure the Zone Aging / Scavenging Properties dialog box to enable Scavenge stale resource records, and set the No-refresh interval setting to 4 days.
  A. Increase the Expires After setting to 4 days on the Start of Authority (SOA) record for the zone.

  ---

  

• Question 204:

  Your network contains a DNS server named DNS1 that runs Windows Server 2008 R2. You need to ensure that DNS1 only responds to DNS queries from computers that are located in the same subnet. What should you configure?

  A. Interfaces from DNS Manager
  B. Security from DNS Manager
  C. Trust Anchors
  D. Windows Firewall
  A. Interfaces from DNS Manager

  ---

  

  http://technet.microsoft.com/en-us/library/cc740071(WS.10).aspx

• Question 205:

  Your network contains a server named Server1.

  You perform a full server backup by using Windows Server Backup.

  You need to test a full server restore.

  Which option should you select from the Advanced Boot Options menu?

  To answer, select the appropriate option in the answer area.

  Hot Area:

  

  

  ---

  http://technet.microsoft.com/en-us/library/cc755163.aspx

• Question 206:

  Your network contains a server that runs Windows Server 2008 R2. The server has the Network Policy and Access Services server role installed.

  You need to allow only members of a global group named Group1 VPN access to the network.

  What should you do?

  A. Add Group1 to the RAS and IAS Servers group.
  B. Add Group1 to the Network Configuration Operators group.
  C. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.
  D. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.
  C. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.

• Question 207:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. On Server1, you share a folder named Share1. Users report that when they try to open some of the folders in Share1, they receive an Access is Denied error

  message.

  You need to ensure that when the users connect to Share1, they only see the files and the folders to which they are assigned permissions.

  Which administrative tool should you use to achieve this task?

  To answer, select the appropriate tool in the answer area.

  Hot Area:

  

  

  ---

  http://technet.microsoft.com/fr-fr/library/dd772681(v=ws.10).aspx Access-based enumeration displays only the files and folders that a user has permissions to access. Access-based enumeration is now included in the Windows Server 2008 operating system, and you can enable it by using Share and Storage Management.

• Question 208:

  Your network contains a server named DC1 that has the DHCP Server role installed. You need to prevent devices that are neither company-owned nor company- managed from being assigned DHCP addresses.

  What should you enable on the DHCP server?

  A. Configure name protection
  B. Modify the start address
  C. Configure DHCP link layer-based filtering
  D. Configure Open Shortest Path First (OSPF) on the router
  E. Reconcile the scope.
  F. Configure Routing Information Protocol version 2 (RIPv2) on the router
  G. Authorize DC1 in Active Directory
  H. Increase the database cleanup interval
  I. Compact the database
  J. Restore the database from a backup
  C. Configure DHCP link layer-based filtering

  ---

  Link layer filtering provides network access control for the issuance or denial of DHCP leases of IP addresses based on a media access control (MAC) address. Link layer filtering can be configured at the IPv4 node for all clients across all IPv4 scopes. This feature is currently available only for IPv4 networks. To enable MAC address filtering Open the DHCP Microsoft Management Console (MMC) snap- in. In the console tree, double-click the DHCP server you want to configure, right-click IPv4, and then click Properties. Click Filters, and then select the Enable Allow List or the Enable Deny List check box. To configure a new filter Open the DHCP snap-in. In the console tree, double-click the applicable DHCP server, double-click IPv4, double-click Filters, and then right-click Allow or Deny. Click New Filter, and then type a MAC Address and Description. Description is an optional field. http://technet.microsoft.com/en-us/library/dd759259.aspx

• Question 209:

  You have a Windows Server 2008 R2 computer that has an IP address of 172.16.45.9/21. The server is configured to use IPv6 addressing. You need to test IPv6 communication to a server that has an IP address of 172.16.40.18/21.

  What should you do from a command prompt?

  A. Type ping 172.16.45.9:::::.
  B. Type ping::9.45.16.172.
  C. Type ping followed by the Link-local address of the server.
  D. Type ping followed by the Site-local address of the server.
  C. Type ping followed by the Link-local address of the server.

• Question 210:

  Your network contains an Active Directory domain named contoso.com. All domain controllers and servers run Windows Server 2008 R2 Service Pack 1 (SP1). All client computers run Windows 7.

  A domain controller named dc1.contoso.com hosts an Active Directory-integrated zone for contoso.com. You have two Web servers named webl.contoso.com and web2.contoso.com. Both Web servers host the same website.

  Webl.contoso.com is located on a subnet named Subnet1. Web2.contoso.com is located on a subnet named Subnet2. You create two host (A) records for internal.contoso.com. One record points to the IP address of webl.contoso.com. The

  other record points to the IP address ofweb2.contoso.com. All users access the website by using the URL http://internal.contoso.com. You discover that the client computers on Subnet1 always connect to webl.contoso.com and the client

  computers on Subnet2 always connect to web2.contoso.com. You need to ensure that all of the client computers are distributed randomly between both Web servers.

  What should you do?

  A. Disable DNS round robin on dc1.contoso.com.
  B. Modify the time-to-live (TTL) value for the A records of internal.contoso.com.
  C. Modify the time-to-live (TTL) value for the A records of webl.contoso.com and web2.contoso.com.
  D. Disable netmask ordering on dcl.contoso.com.
  D. Disable netmask ordering on dcl.contoso.com.