Microsoft 70-643 Online Practice Questions and Exam Preparation

Microsoft 70-643 Online Questions & Answers

• Question 121:

  Your network contains a server that has the Streaming Media Services role installed. The server contains a publishing point. You need to configure the publishing point to meet the following requirements:

  Authenticate users by using Kerberos authentication.

  Only allow users from a virtual local area network (VLAN) named VLAN1 to access the publishing point.

  What should you configure?

  A. WMS Digest Authentication and WMS IP Address Authorization
  B. WMS Digest Authentication and WMS Publishing Points ACL Authorization
  C. WMS Negotiate Authentication and WMS IP Address Authorization
  D. WMS Negotiate Authentication and WMS Publishing Points ACL Authorization
  C. WMS Negotiate Authentication and WMS IP Address Authorization

  ---

  WMS Negotiate Authentication

  The WMS Negotiate Authentication plug-in grants access to the server based upon the user's network logon approval. This plug-in uses an encrypted challenge/response scheme to authenticate users. It is a secure form of authentication because the user name and password are not sent across the network; the player acknowledges the password by using a cryptographic exchange with the Windows Media server. Because this plug-in relies upon established user logon credentials, the player and server must be on the same domain or on trusted domains. Negotiate authentication does not work across proxy servers or other firewall applications. Source: http://technet.microsoft.com/en-us/library/ cc730972.aspx WMS IP Address Authorization The WMS IP Address Authorization plug-in is used to control access to your content based on client Internet Protocol (IP) addresses. You can add specific IP addresses or ranges of IP addresses for which you want to allow or restrict access. You can configure the following options on the General tab for this plug-in.

  Source: http://technet.microsoft.com/en-us/library/cc770273.aspx

• Question 122:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Windows Deployment Services (WDS) server role and the Windows Automated Installation Kit (Windows AIK) installed.

  You create a new x86 Microsoft Windows Preinstallation Environment (Windows PE) image and add it as a boot image to Server1.

  You run the Create Capture Image wizard and receive the following error message: "The Windows Deployment Services Image Capture Wizard could not be located in the specified Windows PE image."

  You need to ensure that you can create a capture image by using the Create Capture Image wizard.

  What should you do first?

  A. Create an x64 Windows PE image and add the image to Server1 as a boot image.
  B. Add a new boot image to Server1 and specify the Sources\Boot.wim file from the Windows Server 2008 R2 installation media.
  C. Mount the Windows PE boot image and add the contents of the %programFiles%\Windows AIK\Tools \amd64 folder to the image.
  D. Mount the Windows PE boot image and add the contents of the %programFiles%\Windows AIK\Tools\PETools folder to the image.
  B. Add a new boot image to Server1 and specify the Sources\Boot.wim file from the Windows Server 2008 R2 installation media.

  ---

  Answer "Create an x64 Windows PE image and add the image to Server1 as a boot image." is most likely incorrect because custom WinPE images are considered an advanced scenario, while just adding the Boot.wim from the Windows

  Server 2008 R2 installation media is more straightforward.

  Custom Capture Images

  For advanced scenarios as part of a custom deployment solution, you can create discover or capture images manually by using the tools provided in the Windows AIK.

  To create a discover or capture image manually

  1.

  Locate the boot image that you want to modify, and save it to a known location. This boot image can be either the custom boot image that you created earlier, or the Boot.wim from the product DVD.

  2.

  Mount the image using either DISM or ImageX.

  3.

  Create a Winpeshl.ini file in the Windows\System32 folder of the custom boot image with the following section. [LaunchApps]%SYSTEMROOT%\system32\wdscapture.exe

  4.

  Unmount and commit the changes using either DISM or ImageX.

  5.

  Update the image metadata to reflect any changes to the image name or description.

  Source: http://technet.microsoft.com/nl-nl/library/cc730907(WS.10).aspx

• Question 123:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Remote Desktop Session Host (RD Session Host) role ervice and the Windows System Resource Manager (WSRM) feature installed.

  Users from two Active Directory groups named Group1 and Group2 connect to Server1 and run the same RemoteApp program.

  You need to ensure that when Server1 experiences high CPU usage, Group1 users have priority over Group2 users regarding the use of CPU resources. You ant to achieve this goal by using the minimum amount of administrative effort. What should you do from the WSRM console?

  A. Add a new Conditional Policy.
  B. Create a new Calendar Schedule.
  C. Create a new Process Matching criteria.
  D. Implement Weighted_Remote_Sessions.
  D. Implement Weighted_Remote_Sessions.

  ---

  When the Weighted_Remote_Sessions resource allocation policy is managing the system, the processes are grouped according to the priority assigned with the user account. For example, if three users are remotely connected, the user assigned Premium priority will receive highest priority access to the CPU, the user assigned Standard priority will receive second priority to the CPU, and the user assigned Basic priority will receive lowest priority to the CPU. This policy is for use with RD Session Host servers.

  Source: http://technet.microsoft.com/en-us/library/cc732553.aspx

• Question 124:

  You have a Terminal Server that runs Windows Server 2008. You need to configure the server to end any sessions that are inactive for more than one hour. What should you do?

  A. From Terminal Services Manager, create a new group.
  B. From Terminal Services Manager, delete the inactive sessions.
  C. From Terminal Services Configuration, modify the RDP-Tcp settings.
  D. From Terminal Services Configuration, modify the User logon mode setting.
  C. From Terminal Services Configuration, modify the RDP-Tcp settings.

  ---

  To configure the Terminal Server to end any sessions that are inactive for more than one hour, you need to modify the RDP-Tcp settings from Terminal Services Configuration. You can configure the properties of the terminal server's RDP-TCP connection to provide better protection. You can set session time limits that help to ensure that sessions are not left unattended and active for long periods Reference: How Secure are Windows Terminal Services? / Securing the RDP-TCP Connection http://www.windowsecurity.com/articles/Windows_Terminal_Services.html

• Question 125:

  Your network contains a Web server that runs Windows Server 2008 R2.

  The server has a single IP address.

  You plan to create several Web sites.

  You need to ensure that each Web site is accessible over TCP port 80.

  What should you configure?

  A. the application pools for the server
  B. the bindings for each site
  C. the ISAPI Filters for each site
  D. the Request Filtering settings for the server
  B. the bindings for each site

  ---

  Section: Internet Information Server (IIS)

  

• Question 126:

  Your network contains an SMTP server.

  You discover that the server has two SMTP Virtual Servers named SMTP1 and SMTP2.

  SMTP1 starts and SMTP2 stops.

  You attempt to start SMTP2 and receive the following error message.

  

  

  You need to ensure that you can start SMTP2. Which settings should you modify on SMTP2?

  A. Access control
  B. Advanced Delivery
  C. Connection Control
  D. IP address and TCP port
  D. IP address and TCP port

  ---

  IP address/TCP port: All unassigned/25. You can use the General tab in the SMTP virtual server properties dialog box to change this setting. If you change this etting, you must specify an IP address/TCP port combination that is not being used by another SMTP virtual server. TCP port 25 is both the default TCP port and the recommended TCP port. More than one virtual server can use the same TCP port, provided that they are configured with different IP addresses. If you do not set a unique IP address/TCP port combination, the SMTP virtual server will not start. Source: http://technet.microsoft.com/es-es/library/cc758440(WS.10).aspx

• Question 127:

  Your company has four regional offices. You install the Windows Deployment Services (WDS) role on the network.

  Your company creates three images for each office. There are a total of 12 images for the company. The images will be used as standard images for workstations.

  You deploy the images by using WDS.

  You need to ensure that each administrator can view only the images for his or her regional office.

  What should you do?

  A. Create a global group for each regional office and place the computers in the appropriate global group.
  B. Create an organizational unit (OU) for each regional office and place the computers in the appropriate OU.
  C. Place all images into a single image group on the WDS server. Grant each administrator permissions to the image group.
  D. Place each regional office into a separate image group on the WDS server. Grant each administrator permissions to his or her regional offices image group.
  D. Place each regional office into a separate image group on the WDS server. Grant each administrator permissions to his or her regional offices image group.

  ---

  Image group: Each image group has a unique name and an ACL to specify users who are allowed to deploy OS images from the image group. An image group may contain multiple OS image containers. Source: http://msdn.microsoft.com/ en-us/library/dd891274%28v=prot.10%29.aspx

• Question 128:

  Your company has a server named VS1 that runs Windows Server 2008 and Microsoft Hyper-V. VS1 hosts 10 virtual machines. You need to configure VS1 to shut down each virtual machine before the server shuts down. What should you do?

  A. Create a shutdown script on each virtual machine.
  B. Install Integration Services on each virtual machine.
  C. Enable the Turn off the virtual machine option in the Automatic stop action properties on each virtual machine.
  D. Enable the Shut down the guest operating system option in the Automatic stop action properties on each virtual machine.
  D. Enable the Shut down the guest operating system option in the Automatic stop action properties on each virtual machine.

• Question 129:

  Your network contains a server named Server1 that has the Remote Desktop Licensing (RD Licensing) role service installed.

  You install the RD Licensing role service on a server named Server2. You need to move all Remote Desktop Services client access licenses (RDS CALs) from Server1 to Server2.

  What should you do?

  A. From the Remote Desktop Session Hosts console on Server1, modify the licensing settings.
  B. From the Remote Desktop Session Hosts console on Server2, modify the licensing settings.
  C. From the Remote Desktop Licensing Manager console on Server2, run the Manage RDS CALs Wizard.
  D. From the Remote Desktop Licensing Manager console on Server2, run the Repeat Last Installation action.
  C. From the Remote Desktop Licensing Manager console on Server2, run the Manage RDS CALs Wizard.

  ---

  You can use the Manage RDS CALs Wizard in the Remote Desktop Licensing Manager tool to migrate Remote Desktop Services client access licenses (RDS CALs) from one Remote Desktop license server to a Remote Desktop license server that is running Windows Server 2008 R2.

  Source: http://technet.microsoft.com/en-us/library/dd851844.aspx

• Question 130:

  You have a Remote Desktop Services farm that contains several Remote Desktop Session Host Servers.

  You need to configure one of the Remote Desktop Session Host Servers as a dedicated redirector.

  You configure the appropriate DNS records.

  What should you do next?

  A. From Remote Desktop Session Host Configuration, set the licensing mode to per user.
  B. From Remote Desktop Session Host Configuration, set the licensing mode to per device.
  C. From Remote Desktop Session Host Configuration, change the relative weight of the server to 50.
  D. From Remote Desktop Session Host Configuration, configure the server to deny new user logons.
  D. From Remote Desktop Session Host Configuration, configure the server to deny new user logons.

  ---

  To configure dedicated redirectors, you must do the following:

  1.

  Create DNS round robin entries for the terminal servers that you want to use as dedicated redirectors. When you do so, you must map the IP address of each terminal server that you want to use as a dedicated redirector to the terminal server farm name in DNS. (The farm name is the virtual name that clients use to connect to the terminal server farm.) The farm name must not match an existing server name in Active Directory Domain Services (AD DS).

  2.

  Configure the terminal servers that you want to use as dedicated redirectors to deny new user logon requests. Source: http://technet.microsoft.com/en-us/library/ff519163(WS.10).aspx