Microsoft 70-642 Online Practice Questions and Exam Preparation

Microsoft 70-642 Online Questions & Answers

• Question 231:

  Your company has two servers that run Windows Server 2008 R2 named Server2 and Server3. Both servers have the DNS Server server role installed. Server3 is configured to forward all DNS requests to Server2.

  You update a DNS record on Server2.

  You need to ensure that Server3 is able to immediately resolve the updated DNS record.

  What should you do?

  A. Run the dnscmd . /clearcache command on Server3.
  B. Run the ipconfig /flushdns command on Server3.
  C. Decrease the Time-to-Live (TTL) on the Start of Authority (SOA) record of na.contoso.com to 15 minutes.
  D. Increase the Retry Interval value on the Start of Authority (SOA) record of na.contoso.com to 15 minutes.
  A. Run the dnscmd . /clearcache command on Server3.

  ---

  dnscmd /clearcache - Clears the DNS server cache. http://technet.microsoft.com/en-us/library/cc772069(v=ws.10).aspx

• Question 232:

  Your company has 10 servers that run Windows Server 2008 R2. The servers have Remote Desktop Protocol (RDP) enabled for server administration. RDP is configured to use default security settings. All administrators' computers run Windows 7.

  You need to ensure the RDP connections are as secure as possible.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Set the security layer for each server to the RDP Security Layer.
  B. Configure the firewall on each server to block port 3389.
  C. Acquire user certificates from the internal certification authority.
  D. Configure each server to allow connections only to Remote Desktop client computers that use Network Level Authentication.
  C. Acquire user certificates from the internal certification authority.
  D. Configure each server to allow connections only to Remote Desktop client computers that use Network Level Authentication.

• Question 233:

  Your network contains a computer named Computer1. Computer1 is assigned an IP address of 192.168.1.112/26.

  Your company's corporate policy states that the first usable address in each subnet is allocated to the default gateway.

  You need to configure the default gateway for Computer1.

  Which address should you choose?

  A. 192.168.1.1
  B. 192.168.1.63
  C. 192.168.1.65
  D. 192.168.1.93
  C. 192.168.1.65

• Question 234:

  Your company has a network that has 100 servers. A server named Server1 is configured as a file server.

  Server1 is connected to a SAN and has 15 logical drives.

  You want to automatically run a data archiving script if the free space on any of the logical drives is below 30 percent. You need to automate the script execution.

  You create a new Data Collector Set. What should you do next?

  A. Add the Event trace data collector.
  B. Add the Performance counter alert.
  C. Add the Performance counter data collector.
  D. Add the System configuration information data collector.
  B. Add the Performance counter alert.

  ---

  You can create a custom Data Collector Set containing performance counters and configure alert activities based on the performance counters exceeding or dropping below limits you define. After creating the Data Collector Set, you must configure the actions the system will take when the alert criteria are met. http://technet.microsoft.com/en-us/library/cc722414.aspx

• Question 235:

  Your network contains a server named Server1 that runs Windows Server 2008 R2.

  You have a user named User1.

  You need to ensure that User1 can schedule Data Collector Sets (DCSs) on Server1. The solution must minimize the number of rights assigned to User1.

  What should you do?

  A. Add User1 to the Performance Log Users group.
  B. Add User1 to the Performance Monitor Users group.
  C. Assign the Profile single process user right to User1.
  D. Assign the Bypass traverse checking user right to User1.
  A. Add User1 to the Performance Log Users group.

  ---

  Both A and B are valid users group but:

  Performance Log users group : Members of this group may schedule logging of performance counters, enable trace providers, and collect event traces both locally and via remote access to this computer

  Performance Monitor users group : Members of this group can access performance counter data locally and remotely.

  Hence answer is "A".

• Question 236:

  Your company has a single Active Directory domain. All servers run Windows Server 2008 R2. You install an additional DNS server that runs Windows Server 2008 R2.

  You need to delete the pointer record for the IP address 10.3.2.127. What should you do?

  A. Use DNS manager to delete the 127.in-addr.arpa zone.
  B. Run the dnscmd /RecordDelete 10.3.2.127 command at the command prompt.
  C. Run the dnscmd /ZoneDelete 127.in-addr.arpa command at the command prompt.
  D. Run the dnscmd /RecordDelete 10.in-addr.arpa. 127.2.3 PTR command at the command prompt.
  D. Run the dnscmd /RecordDelete 10.in-addr.arpa. 127.2.3 PTR command at the command prompt.

  ---

  http://support.microsoft.com/kb/842127/en-us

• Question 237:

  Your network contains a file server named Server1 that runs Windows Server 2008 R2. Users report that when they try to open some of the folders in \\server1 \folder1, they receive an Access is Denied error message.

  You need to ensure that when the users connect to \\server1\folder1, they only see the files and the folders to which they are assigned permissions.

  Which tool should you use?

  A. Local Security Policy
  B. Share and Storage Management
  C. Windows Explorer
  D. Windows Firewall with Advanced Security
  B. Share and Storage Management

  ---

  http://technet.microsoft.com/fr-fr/library/dd772681(v=ws.10).aspx Access-based enumeration displays only the files and folders that a user has permissions to access. Accessbased enumeration is now included in the Windows Server 2008 operating system, and you can enable it by using Share and Storage Management.

• Question 238:

  Your network contains four servers named Server1, Server2, Server3, and Server4 that run Windows Server 2008 R2. The servers have the Network Policy Server (NPS) role service installed.

  You configure a Remote RADIUS Server Group named Group1. Group 1 contains Server2, Server3, and Server4.

  You need to configure load balancing for the members of Group1 to meet the following requirements:

  Server1 must send 25 percent of all authentication requests to Server3. Server1 must send 75 percent of all authentication requests to Server2. Server1 must only send authentication requests to Server4 if Server2 and Server3 are unavailable.

  What should you do from the Network Policy Server console?

  A. ?For Server2, set the weight to 75 and the priority to 75, ?For Server3, set the weight to 25 and the priority to 25. ?For Server4, set the weight to 100 and the priority to 200.
  B. ?For Server2, set the weight to 75 and the priority to 1. ?For Server3, set the weight to 25 and the priority to 1. ?For Server4, set the weight to 100 and the priority to 100.
  C. ?For Server2, set the weight to 1 and the priority to 75. ?For Server3, set the weight to 1 and the priority to 25. ?For Server4, set the weight to 100 and the priority to 1.
  D. ?For Server2, set the weight to 75 and the priority to 25. ?For Server3, set the weight to 25 and the priority to 75. ?For Server4, set the weight to 100 and the priority to 1.
  B. ?For Server2, set the weight to 75 and the priority to 1. ?For Server3, set the weight to 25 and the priority to 1. ?For Server4, set the weight to 100 and the priority to 100.

  ---

  RADIUS server priority and weight During the NPS proxy configuration process, you can create remote RADIUS server groups and then add RADIUS servers to each group. To configure load balancing, you must have more than one RADIUS server per remote RADIUS server group. While adding group members, or after creating a RADIUS server as a group member, you can access the Add RADIUS server dialog box to configure the following items on the Load Balancing tab:

  Priority: Priority specifies the order of importance of the RADIUS server to the NPS proxy server. Priority level must be assigned a value that is an integer, such as 1, 2, or 3. The lower the number, the higher priority the NPS proxy gives to the RADIUS server. For example, if the RADIUS server is assigned the highest priority of 1, the NPS proxy sends connection requests to the RADIUS server first; if servers with priority 1 are not available, NPS then sends connection requests to RADIUS servers with priority 2, and so on. You can assign the same priority to multiple RADIUS servers, and then use the Weight setting to load balance between them. Weight: NPS uses this Weight setting to determine how many connection requests to send to each group member when the group members have the same priority level. Weight setting must be assigned a value between 1 and 100, and the value represents a percentage of 100 percent. For example, if the remote RADIUS server group contains two members that both have a priority level of 1 and a weight rating of 50, the NPS proxy forwards 50 percent of the connection requests to each RADIUS server.

  Advanced settings: These failover settings provide a way for NPS to determine whether the remote RADIUS server is unavailable. If NPS determines that a RADIUS server is unavailable, it can start sending connection requests to other group members. With these settings you can configure the number of seconds that the NPS proxy waits for a response from the RADIUS server before it considers the request dropped; the maximum number of dropped requests before the NPS proxy identifies the RADIUS server as unavailable; and the number of seconds that can elapse between requests before the NPS proxy identifies the RADIUS server as unavailable. Reference: http://technet.microsoft.com/en-us/library/ dd197433(v=ws.10).aspx

• Question 239:

  Your company has Active Directory Certificate Services (AD CS) and Network Access Protection (NAP) deployed on the network. You need to ensure that NAP policies are enforced on portable computers that use a wireless connection to access the network.

  What should you do?

  A. Configure all access points to use 802.1X authentication.
  B. Configure all portable computers to use MS-CHAP v2 authentication.
  C. Use the Group Policy Management Console to access the wireless Group Policy settings, and enable the Prevent connections to ad-hoc networks option.
  D. Use the Group Policy Management Console to access the wireless Group Policy settings, and disable the Prevent connections to infrastructure networks option.
  A. Configure all access points to use 802.1X authentication.

• Question 240:

  Your network contains an Active Directory domain. The domain contains a print server named Server1. Server1 runs Windows Server 2008 R2.

  You need to ensure that users can locate all shared printers on Server1 by using Active Directory. What should you do from Server1?

  A. Run the pubprn.vbs script.
  B. Run dism.exe.
  C. Run the Set-ADObject cmdlet.
  D. Modify the Print Server properties.
  A. Run the pubprn.vbs script.

  ---

  The script pubprn.vbs publishes a printer to the Active Directory Domain Services.