Microsoft 70-642 Online Practice Questions and Exam Preparation

Microsoft 70-642 Online Questions & Answers

• Question 291:

  Your network contains an Active Directory domain named contoso.com. The domain contains two Active Directory sites named Site1 and Site2.

  You have a domain-based Distributed File System (DFS) namespace named \\contoso.com\public that has a single namespace server located in Site1.

  You install another namespace server in Site2.

  You need to verify that the client computers in Site2 use the new namespace server.

  You want to achieve this goal by using the minimum amount of administrative effort. Which tool should you use?

  A. Share and Storage Management
  B. DFS Management
  C. Windows Explorer
  D. Services for Network File System (NFS)
  B. DFS Management

  ---

  Ref: http://technet.microsoft.com/en-us/library/cc732863(v=ws.10).aspx

• Question 292:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the File Services role installed.

  You configure a file classification rule.

  You discover that scanned documents stored as JPG files are not being classified. You need to ensure that all file classification rules apply to scanned documents.

  What should you do?

  A. Enable the Windows TIFF IFilter feature.
  B. Modify the properties of the file classification rule.
  C. Modify the properties of the Windows Search Service.
  D. Install the Office 2007 System Converter: Microsoft Filter Pack.
  A. Enable the Windows TIFF IFilter feature.

  ---

  1- Not classified as a matter of operation to the file. As soon the file "steps onto the ground" - I mean being copied to NTFS File system if there is a classification rule/pattern that match file strings it will apply;

  2 - If there is a classification rule for a "JPG" file format at all - it will classify the scanned JPGs, 3 - This might be our winner!! =)) The word "document" A) Enable the Windows TIFF IFilter feature. Cheers! =)

  In order FCI /File Classification Infrastructure/ to classify images based on their content by using optical character recognition (OCR), you need to install Windows TIFF IFilter on the server that is running FCI. Then the content classifier can

  recognize TIFF images and extract text from those files TIFF IFilter supports the most frequent compressions, such as LZW, JPG, CCITT v4, CCITT v6, uncompressed, and so forth. "You discover that scanned documents stored as JPG files

  are not being classified. You need to ensure that all file classification rules apply to scanned documents." So, we have "Folder"and "Content" classifiers types. =Folder Classifier:

  -

  This rule uses the Folder Classifier which assigns the specified value to the classification property for all files within the rule's scope /within the target folder/.

  Which means that this mechanism does not "care" for a file type or whatever is the operation that created the file in the set for classification folder... as soon the file is in the folder - it will be classified. ;) =Content Clasifier:

  -

  Searches for text or patterns using the same mechanism as the search indexer and if it finds them assigns the specified value to the classification property. When parameters are found in a file, then the rule will assign the property value /

  Example : If a word/string "Confidential" is set in the rule and there is a file containing that word

  -file will be classified./

  So we have tree "magic words" mentioned as a factors for the not-classified files in the "Question" :

  1.

  File is scanned to the server

  2.

  File type is JPG

  3.

  File subject - contains document

• Question 293:

  Your network contains two Web servers named Web1 and Web2. Web1 hosts the company's corporate Web site. Web2 is a test server that contains a copy of the Web site.

  Users connect to Web1 by using the URL http://www.contoso.com. A Web developer named User1 plans to test updates to the Web site on Web2. You need to ensure that User1 connects to Web2 by using the URL http://www.contoso.com.

  The solution must ensure that all other computers connect to Web1.

  What should you do?

  A. From User1's computer, create a record in the Hosts file.
  B. From User1's computer, create a record in the Lmhosts file.
  C. From a DNS server, create a new Host (A) resource record.
  D. From a DNS server, create a new Alias (CNAME) resource record.
  A. From User1's computer, create a record in the Hosts file.

• Question 294:

  Your network contains an Active Directory domain. The domain contains an enterprise certification authority (CA) named Server1 and a server named Server2.

  On Server2, you deploy Network Policy Server (NPS) and you configure a Network Access Protection (NAP) enforcement policy for IPSec.

  From the Health Registration Authority snap-in on Server2, you set the lifetime of health certificates to four hours.

  You discover that the validity period of the health certificates issued to client computers is one year.

  You need to ensure that the health certificates are only valid for four hours.

  What should you do?

  A. Modify the Request Handling settings of the certificate template used for the health certificates.
  B. Modify the Issuance Requirements settings of the certificate template used for the health certificates.
  C. On Server1, run certutil.exe -setreg policy\editflags +editf_attributeenddate.
  D. On Server1, run certutil.exe Csetregdbflags +dbflags_enablevolatilerequests.
  C. On Server1, run certutil.exe -setreg policy\editflags +editf_attributeenddate.

  ---

  Configure template validity period override

  Use the following procedure to allow the CA to issue the new health certificate template. This procedure applies to an enterprise NAP CA only.

  To allow template validity period override

  On the NAP CA, click Start, click Run, right-click Command Prompt, and then click Run as administrator. In the command window, type Certutil.exe -setreg policy\EditFlags +EDITF_ATTRIBUTEENDDATE, and then press ENTER.

  In the command window, type net stop certsvc andand net start certsvc, and then press ENTER. Verify that Active Directory Certificate Services (AD CS) stops and starts successfully. http://technet.microsoft.com/en-us/library/dd296906

  (v=ws.10).aspx Reference URL : http://technet.microsoft.com/en-us/library/dd296906 (v=ws.10).aspx

• Question 295:

  Your network contains an Active Directory domain. All client computers run Windows XP Service Pack 3 (SP3). The domain contains a member server named Server1 that runs Windows Server 2008 R2. On Server1, you create a connection

  security rule that requires authentication for inbound and outbound connections. You configure the connection security rule to use Kerberos authentication. You need to ensure that the client computers can connect to Server1. The solution

  must ensure that all connections to Server1 are encrypted.

  What should you do?

  A. From the Windows Firewall with Advanced Security console, create an inbound rule on Server1.
  B. From the Windows Firewall with Advanced Security console, create an outbound rule on Server1.
  C. From a Group Policy object (GPO), enable the Client (Respond Only) IPSec policy on all client computers.
  D. From a Group Policy object (GPO), configure the Network Security: LDAP client signing requirements policy setting for all client computers.
  C. From a Group Policy object (GPO), enable the Client (Respond Only) IPSec policy on all client computers.

  ---

  Client (Respond Only) - This default policy contains one rule, the default response rule. The default response rule secures communication only upon request by another computer. This policy does not attempt to negotiate security for any other traffic. http://technet.microsoft.com/en-us/library/cc786870(v=ws.10).aspx

• Question 296:

  Your company has multiple DNS servers in the main office.

  You plan to install DNS on a member server in a branch office. You need to ensure that the DNS server in the branch office is able to query any DNS server in the main office, and you need to limit the number of DNS records that are

  transferred to the DNS server in the branch office.

  What should you do?

  A. Configure a secondary zone on the DNS server in the branch office.
  B. Configure a stub zone on the DNS server in the branch office.
  C. Configure a stub zone on the DNS server in the main office.
  D. Configure a primary zone on the DNS server in the branch office.
  B. Configure a stub zone on the DNS server in the branch office.

  ---

  A stub zone is a copy of a zone that contains only those resource records necessary to identify the authoritative Domain Name System (DNS) servers for that zone. A stub zone is used to resolve names between separate DNS namespaces. This type of resolution may be necessary when a corporate merger requires that the DNS servers for two separate DNS namespaces resolve names for clients in both namespaces.

  A stub zone consists of:

  -

  The start of authority (SOA) resource record, name server (NS) resource records, and the glue A resource records for the delegated zone.

  -

  The IP address of one or more master servers that can be used to update the stub zone. http://technet.microsoft.com/en-us/library/cc779197(v=ws.10).aspx

• Question 297:

  Your network contains an Active Directory domain named contoso.com.

  From DNS Manager, you open the properties of contoso.com as shown in the exhibit. (Click the Exhibit button)

  

  You need to ensure that you can modify the start of authority (SOA) record for contoso.com. What should you do?

  A. Modify the zone transfer settings.
  B. Log on as a member of the DnsAdmins group.
  C. Log on as a member of the Domain Admins group.
  D. Connect to the DNS server that contains the primary zone.
  D. Connect to the DNS server that contains the primary zone.

• Question 298:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. You discover that the server unexpectedly shut down several times during the past week.

  You need to identify what caused the shutdowns and which software was recently installed.

  What should you click from Action Center?

  A. Maintenance, and then View reliability history
  B. Troubleshooting, and then Programs
  C. Troubleshooting, and then System and Security
  D. Troubleshooting, and then View history
  A. Maintenance, and then View reliability history

• Question 299:

  Your network contains an Active Directory domain named contoso.com. The domain contains two sites named Site1 and Site2. The servers for the sites are configured as shown in the following table.

  

  Server1 hosts a standard primary zone for contoso.com. Server2 hosts a secondary zone for contoso.com.

  You need to ensure that all DNS replication traffic between Server1 and Server2 is encrypted. What should you do?

  A. On Server1, configure DNSSEC for the contoso.com zone.
  B. On Server1, convert the contoso.com zone to an Active Directory-integrated zone.
  C. On each server, create connection security rules.
  D. On each server, enable Encrypting File System (EFS) encryption for the contoso.com.dns file.
  C. On each server, create connection security rules.

• Question 300:

  Your company's corporate network uses Network Access Protection (NAP). Users are able to connect to the corporate network remotely.

  You need to ensure that data transmissions between remote client computers and the corporate network are as secure as possible. What should you do?

  A. Apply an IPSec NAP policy
  B. Configure a NAP policy for 802.1X wireless connections
  C. Configure VPN connections to use MS-CHAP v2 authentication
  D. Restrict Dynamic Host Configuration Protocol (DHCP) clients by using NAP
  A. Apply an IPSec NAP policy