Microsoft 70-642 Online Practice Questions and Exam Preparation

Microsoft 70-642 Online Questions & Answers

• Question 331:

  Your network contains an Active Directory domain named contoso.com. Contoso.com contains three servers.

  The servers are configured as shown in the following table.

  

  You plan to give users access to the files shares on Server2 by using DirectAccess. You need to ensure that you can deploy DirectAccess on Server3.

  What should you do?

  A. Add a static IPv6 address to DC1.
  B. Add a static IPv6 address to Server2.
  C. Upgrade DC1 to Windows Server 2008 R2.
  D. Upgrade Server2 to Windows Server 2008 R2.
  C. Upgrade DC1 to Windows Server 2008 R2.

  ---

  -

  One or more DirectAccess servers running Windows Server 2008 R2 (with or without UAG) with two network adapters: one that is connected directly to the Internet and one that is connected to the intranet. DirectAccess servers must be a member of an AD DS domain.

  -

  On the DirectAccess server, at least two consecutive, public IPv4 addresses assigned to the network adapter that is connected to the Internet.

  -

  DirectAccess client computers that are running Windows 7 Enterprise or Windows 7 Ultimate. DirectAccess clients must be members of an AD DS domain.

  -

  At least one domain controller and DNS server that is running Windows Server 2008 SP2 or Windows Server 2008 R2. When UAG is used, DirectAccess can be deployed with DNS servers and domain controllers that are running Windows Server 2003 when NAT64 functionality is enabled.

  -

  A public key infrastructure (PKI) to issue computer certificates, and optionally, smart card certificates for smart card authentication and health certificates for NAP. For more information, see Public Key Infrastructure on the Microsoft Web site.

  -

  Without UAG, an optional NAT64 device to provide access to IPv4-only resources for DirectAccess clients. DirectAccess with UAG provides a built-in NAT64. http://technet.microsoft.com/en-us/library/dd637797(v=ws.10).aspx

• Question 332:

  Your network contains a server named Server1. Server1 runs Windows Server 2008 R2 and has a single network connection. The connection is configured to use a default gateway address of 10.0.0.1. The default gateway has a metric value of 100. You configure a second default gateway that uses an address of 10.0.0.2.

  You need to ensure that 10.0.0.2 is only used as the default gateway if 10.0.0.1 is unreachable.

  What should you do?

  A. For the interface, set the interface metric to 100.
  B. For the 10.0.0.2 gateway, set the metric to 50.
  C. For the 10.0.0.2 gateway, set the metric to 200.
  D. For the 10.0.0.1 gateway and the 10.0.0.2 gateway, enable automatic metric.
  C. For the 10.0.0.2 gateway, set the metric to 200.

• Question 333:

  Your network contains a Routing and Remote Access server named RRAS1 and a DHCP server named DHCP1. RRAS1 and DHCP1 are located in different subnets.

  RRAS1 is configured to support VPN connections from the Internet. DHCP1 has a scope that provides IP addresses for the VPN connections.

  You need to ensure that VPN clients that connect to RRAS1 can receive IP addresses from DHCP1.

  What should you do?

  A. On DHCP1, configure a DHCP Relay Agent.
  B. On DHCP1, install the Routing role service.
  C. On RRAS1, configure a DHCP Relay Agent.
  D. On RRAS1, install the Routing role service.
  C. On RRAS1, configure a DHCP Relay Agent.

  ---

  If a DHCP server is on the same subnet as your remote access/VPN server, DHCP messages from VPN clients will be able to reach the DHCP server after the VPN connection is established. If a DHCP server is on a different subnet than

  your remote access/VPN server, make sure that the router between subnets can relay DHCP messages between clients and the server. If your router is running a

  Windows Server 2003 operating system, you can configure the DHCP Relay Agent service on the router to forward DHCP messages between subnets.

  To configure the DHCP Relay Agent to work over remote access:

  Click Start, point to Programs, point to Administrative Tools, and then click Routing and Remote Access. In the object tree, expand Your_Server, expand IP Routing, right-click General, and then click New Routing Protocol.

  In the Routing Protocols list, click DHCP Relay Agent, and then click OK.

  Right-click DHCP Relay Agent, and then click Properties.

  In the DHCP Relay Agent Properties dialog box, type the IP addresses of your DHCP servers in the Server Address box, click ADD, and then click OK.

  Right-click DHCP Relay Agent, and then click New Interface.

  Click Internal.

  Internal represents the virtual interface that is connected to all remote access clients.

• Question 334:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Network Policy Server (NPS) role service installed.

  You need to ensure that the NPS log files on Server1 contain information about the duration of client connections.

  What should you do?

  A. Enable the Authentication requests setting.
  B. Configure the DTS Compliant log file format.
  C. Configure the IAS (Legacy) log file format.
  D. Enable the Accounting requests setting.
  B. Configure the DTS Compliant log file format.

  ---

  The DTS Compliant log format is the newest one and only its XML have attributes for session duration such as Acct-Session-Time = "The length of time (in seconds) for which the session has been active. http://technet.microsoft.com/en-us/library/cc771748(v=ws.10).aspx

• Question 335:

  Your network contains a server named Server1. Server1 has DirectAccess deployed. A group named Group1 is enabled for DirectAccess.

  Users report that when they log on to their computers, the computers are not configured to use DirectAccess.

  You need to ensure that the users' computers are configured to use DirectAccess.

  What should you do first?

  A. On each client computer, add Group1 to the Distributed COM Users group.
  B. On each client computer, add Group1 to the Network Configuration Operators group.
  C. From Active Directory Users and Computers, add the users' user accounts to Group1.
  D. From Active Directory Users and Computers, add the users' computer accounts to Group1.
  D. From Active Directory Users and Computers, add the users' computer accounts to Group1.

• Question 336:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Routing and Remote Access service (RRAS) role service installed. You need to view all inbound VPN packets. The solution must minimize the amount of data collected.

  What should you do?

  A. From RRAS, create an inbound packet filter.
  B. From Network Monitor, create a capture filter.
  C. From the Registry Editor, configure file tracing for RRAS.
  D. At the command prompt, run netsh.exe ras set tracing rasauth enabled.
  B. From Network Monitor, create a capture filter.

• Question 337:

  Your network contains an Active Directory domain named contoso.com. An administrator named Admin1 plans to install the Routing and Remote Access service (RRAS) role service on a server named Server1. Admin1s user account is not a member of the Domain Admins group. You need to ensure that Server1 can authenticate users from Active Directory by using Windows authentication.

  What should you do?

  A. Install the Active Directory Lightweight Directory Services (AD LDS) role on Server1.
  B. Add the computer account for Server1 to the RAS and IAS Servers group.
  C. Install the Network Policy Server (NPS) role service on a domain controller.
  D. Add the computer account for Server1 to the Windows Authorization Access Group.
  B. Add the computer account for Server1 to the RAS and IAS Servers group.

  ---

  Not sure if I am right on this one, since not all question is shown ;)) But I guess that after adding the role by the Admin1 it says that he is not in Domain Admins group and RRAS server wont be added automatically to the RAS and IAS group, so it has to be added manually by a member of that group so server could authenticate users.

• Question 338:

  Your network contains an Active Directory domain named contoso.com. A partner organization has an Active Directory domain named fabrikam.com.

  Your company plans to provide VPN access for fabrikam.com users.

  You need to configure Network Policy Server (NPS) to forward authentication requests to fabrikam.com.

  What should you configure on the NPS server?

  A. connection request policies
  B. system health validators (SHVs)
  C. health policies
  D. remediation server groups
  A. connection request policies

  ---

  Connection request policies are sets of conditions and settings that allow network administrators to designate which Remote Authentication Dial-In User Service (RADIUS) servers perform the authentication and authorization of connection requests that the server running Network Policy Server (NPS) receives from RADIUS clients. Connection request policies can be configured to designate which RADIUS servers are used for RADIUS accounting. Ref: http:// technet.microsoft.com/en- us/library/cc753603.aspx

• Question 339:

  You have a client computer named Computer1 that runs Windows 7. You need to ensure that, from Computer1, you can enumerate all of the records in a DNS

  zone.

  Which settings should you configure from the properties of the DNS zone?

  To answer, select the appropriate tab in the answer area.

  Hot Area:

  

  

• Question 340:

  Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that has the Windows Server Update Services (WSUS) server role installed.

  You have several client computers that are not members of the domain. The client computers are currently part of the Unassigned Computers group.

  On the client computers, you set the WSUS target group to WSUS_Group1, and then you run wuauclt /resetauthorization / detectnow. You discover that all of the client computers are still members of the Unassigned Computers group.

  You need to ensure that the client computers immediately become members of a computer group named WSUS_Group1. What should you do? (Each correct answer presents part of the solution. Choose two.)

  A. Create a new WSUS computer group.
  B. On Server1, run wuauclt /resetauthorization /detectnow.
  C. On Server1, create a new security group.
  D. On all of the client computers, run wuauclt /resetauthorization /detectnow.
  E. On Server1, run wsusutil /reset.
  F. On all of the client computers, run wsusutil /reset.
  A. Create a new WSUS computer group.
  D. On all of the client computers, run wuauclt /resetauthorization /detectnow.

  ---

  Note:

  *

  By default, the WSUS server is set to use server-side targeting. If you are using client-side targeting, you need to set an option on the WSUS server.

  *

  By default, each computer is already assigned to the All Computers group. Computers will also be assigned to the Unassigned Computers group until you assign them to another group. Regardless of the group you assign a computer to, it will also remain in the All Computers group. A computer can be in only one other group in addition to the All Computers group.