Microsoft 70-643 Online Practice Questions and Exam Preparation

Microsoft 70-643 Online Questions & Answers

• Question 1:

  You are evaluating whether to purchase Windows Server 2008 R2 Service Pack 1 (SP1).

  Several weeks ago, you installed Windows Server 2008 R2 SP1 on a server. During the installation, you did not enter a product key.

  You need to identify how many days remain until the license status of the server will change to Unlicensed.

  Which tool should you use?

  A. Wevutil.exe
  B. Windows Activation
  C. Computer Management
  D. Action Center
  B. Windows Activation

  ---

  Ref: http://www.windowsvalley.com/is-windows-activated-check-windows-activation-status/

• Question 2:

  Your network contains an Active Directory domain named fabnkam.com. The domain contains a Web Server named Web1 that runs Windows Server 2008 R2.

  You create a new site named Site1.

  You need to ensure that when a user enters a URL on site1 for a resource that does not exist, a custom web page displays.

  Which feature should you configure?

  A. Default Document
  B. Error Pages
  C. HTTP Redirect
  D. Authorization Rules
  B. Error Pages

  ---

  Configurability of Custom Errors

  IIS 7.0 makes it easier to configure custom errors exactly how you want them. Added configuration options in the UI give administrators more flexibility and granularity; you can edit the existing configuration settings, or add completely new ones. Configuring error pages through the IIS Manager is done via the Error Pages feature in the main pane: To edit the configuration of an existing customer error page, select the status code entry in the main pane, and choose Edit... in the Actions pane. The Edit Customer Error Page window will appear:

  

  

  The Add Custom Error Page looks almost the same, except the fields are blank:

  

  http://blogs.msdn.com/b/webtopics/archive/2008/05/28/iis-7-0-http-error-pages.aspx

• Question 3:

  Your network contains an FTP server that runs Windows Server 2008 R2.

  The server has two FTP sites.

  The sites are configured as shown in the following table.

  

  You need to prevent users from storing more than 500 MB of data on FTP2.

  The users must be able to store at least 900 MB of data on FTP1.

  What should you do?

  A. Modify the properties of the FTP1 site.
  B. Modify the properties of the FTP2 site
  C. Create a disk quota from Windows Explorer.
  D. Install File Server Resource Manager (FSRM) and create a quota.
  D. Install File Server Resource Manager (FSRM) and create a quota.

• Question 4:

  Your network contains three servers named Server1, Server2, and Server3. Server1 is located on a perimeter network. Server2 and Server3 are accessible from the internal network only.

  Users connect to Server2 and Server3 to run RemoteApp programs.

  You need to ensure that remote users can run the RemoteApp programs on Server2 and Server3. The solution must minimize the number of ports that must be opened on the internal firewall.

  Which role service should you install on Server3?

  A. Remote Desktop Connection Broker (RD Connection Broker)
  B. Remote Desktop Web Access (RD Web Access)
  C. Remote Desktop Gateway (RD Gateway)
  D. Remote Desktop Session Host (RD Session Host)
  C. Remote Desktop Gateway (RD Gateway)

• Question 5:

  Your network contains a single Active Directory domain. The domain contains two servers. The servers are configured as shown in the following table.

  

  Server2 is configured to use Server1 as a licensing server. You install 100 Remote Desktop Services Per User client access licenses (RDS Per User CALs) on Server1.

  You discover that when users connect to Remote Desktop Services (RDS) on Server2, they receive temporary licenses.

  You need to ensure that users receive permanent licenses when they connect to Server2.

  What should you do?

  A. On Server2, install the RD Licensing role service.
  B. On Server2, change the Remote Desktop licensing mode to Per User.
  C. On Server1, remove the RD Session Host role service.
  D. On Server1, change the discovery scope of the license server to Domain.
  B. On Server2, change the Remote Desktop licensing mode to Per User.

  ---

  When a Remote Desktop Session Host (RD Session Host) server is configured to use Per Device licensing mode, and a client computer or device connects to an RD Session Host server for the first time, the client computer or device is issued a temporary license by default. When a client computer or device connects to an RD Session Host server for the second time, if the Remote Desktop license server is activated and enough RDS Per Device CALs are available, the license server issues the client computer or device a permanent RDS Per Device CAL. If the license server is not activated or does not have any RDS Per Device CALs available, the device continues to use the temporary license. The temporary license is valid for 90 days.

  Because no Per Device CALs are available, we've got "100 Remote Desktop Services Per User client access licenses (RDS Per User CALs)" on Server1, the will never get its permanent Per Device CAL.

  Source: http://technet.microsoft.com/en-us/library/cc732416.aspx

• Question 6:

  You have a server that runs Windows Server 2008 R2. The server has the Web Server (IIS) server role installed.

  The server contains a Web site that is configured to use only Windows Authentication. You have a security group named Group1 that contains several user accounts.

  You need to prevent the members of Group1 from accessing a Web site. You must not prevent other users from accessing the Web site.

  Which Web site feature should you configure?

  A. Authentication
  B. Authorization Rules
  C. IIS Manager Permissions
  D. SSL Settings
  B. Authorization Rules

  ---

  Add or Edit Allow Authorization Rule and Add or Edit Deny Authorization Rule Dialog Boxes Use the Add Allow Authorization Rule,the Edit Allow Authorization Rule, the Add Deny Authorization Rule, or the Edit Deny Authorization Rule dialog box to define rules for access to content.

  

• Question 7:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Windows Deployment Services (WDS) server role installed.

  You need to copy a default Windows 7 image to Server1.

  Which type of image should you add?

  A. boot
  B. capture
  C. discover
  D. install
  D. install

  ---

  Boot images. Boot images are images that you boot a client computer into to perform an operating system installation. In most scenarios, you can use the Boot.wim from the installation DVD (in the \Sources directory). The Boot.wim contains Windows PE and the Windows Deployment Services client (which is basically Windows Vista Setup.exe and supporting files). Install images. Install images are the operating system images that you deploy to the client computer.

  You can also use the install.wim from the installation DVD, or you can create your own install image. Capture images. Capture images are boot images that you boot a client computer into in order to capture the operating system into a .wim file. You can also create media (CD, DVD, USB drive, and so on) that contains a capture image, and then boot a computer from the media. These images provide an alternative to the command-line utility, ImageX.exe. Except in advanced scenarios, you can create a capture image using the Boot.wim file from the Windows Vista media (located in the \Sources folder). You can also use the WinPE.wim from the Windows AIK to create a capture image, which is slightly smaller than the Boot.wim. Discover images. If you have a computer that is not PXE enabled, you can create a discover image and use it to install an operating system on that computer. When you create a discover image and save it to media (CD, DVD, USB drive, and so on), you can then boot a computer to the media. The discover image on the media locates a Windows Deployment Services server, and the server deploys the install image to the computer. You can configure discover images to target a specific Windows Deployment Services server. This means that if you have multiple servers in your environment, you can create a discover image for each, and then name them based on the name of the

• Question 8:

  Your network contains an Active Directory domain named contoso.com. You publish a RemoteApp named Appl. The Remote Desktop Connection (.rdp) file for App1 is unsigned.

  When a user named User1 runs App1 from the Remote Desktop Web Access (RD Web Access) website, User1 is prompted for credentials. You need to prevent users from being prompted for credentials when they run Appl.

  What should you do?

  A. Enable the Allow Delegating Default Credentials Group Policy setting.
  B. Enable the Assign a default domain for logon Group Policy setting.
  C. Configure the SSL Settings for the RDWeb virtual directory.
  D. Modify the Authentication Settings for the RDWeb virtual directory.
  A. Enable the Allow Delegating Default Credentials Group Policy setting.

• Question 9:

  Your network contains a Remote Desktop Session Host (RD Session Host) server named Server1.

  You need to prevent users from running a application named App1 in Remote Desktop sessions.

  The solution must ensure that the users can run other applications from Remote Desktop sessions on Server1.

  What should you do? (Each correct answer presents part of the solution. Choose three.)

  A. Start the Application Management service, and then set up the startup to Automatic.
  B. From th Local Group Policy console, set the security level of the software restriction policy to Basic user.
  C. From the Local group Policy Editor, create the default AppLocker executable rules and a deny AppLocker executable rule.
  D. Start the Application Identity service, and then set the startup type to Automatic.
  E. From the Local group Policy Editor, modify the AppLocker Enforcement settings.
  C. From the Local group Policy Editor, create the default AppLocker executable rules and a deny AppLocker executable rule.
  D. Start the Application Identity service, and then set the startup type to Automatic.
  E. From the Local group Policy Editor, modify the AppLocker Enforcement settings.

  ---

  Why are my AppLocker rules not being enforced?

  The most common reasons why the AppLocker rules might not be enforced are:

  The Application Identity service (AppIDsvc) is not running.

  Rule enforcement is set to Audit only.

  http://technet.microsoft.com/en-us/library/ee619725(v=ws.10).aspx

• Question 10:

  You are configuring a two-node failover cluster. The failover cluster will connect to a storage server that runs Windows Storage Server 2008. The storage server contains a raw disk. The raw disk appears in the Disk Management console for both nodes. From one of the nodes, you bring the disk online, and then you initialize the disk. You run the Validate a Configuration Wizard as shown in the exhibit. (Click the Exhibit button.)

  

  You need to ensure that all of the tests pass when you run the Validate a Configuration Wizard. What should you do?

  A. Convert the disk to a GPT disk, and then create a simple volume.
  B. Convert the disk to a dynamic disk, and then take the disk offline.
  C. Create a simple volume on the disk, and then take the disk offline.
  D. Create a simple volume, and then convert the disk to a dynamic disk.
  C. Create a simple volume on the disk, and then take the disk offline.

  ---

  Now we should see our newly formatted disk as online in Disk Management. Note that if you went to any other node in the cluster, we'd still show this disk as `offline'. This is good because we don't want more than one node to be able to see

  or access a disk until it's under the control of the cluster.

  That's the step we do next.

  Source: http://blogs.technet.com/b/askcore/archive/2009/01/14/adding-a-new-disk-to-an-existing-windows-2008-cluster.aspx