Microsoft 70-643 Online Practice Questions and Exam Preparation

Microsoft 70-643 Online Questions & Answers

• Question 151:

  Your network contains a server named Server1 that has the Remote Desktop Services (RDS) server role installed and all of the RDS role services installed.

  You need to identify which processes each Remote Desktop session runs currently.

  Which tool should you use?

  A. Remote Desktop Gateway Manager
  B. Windows System Resource Manager (WSRM)
  C. Remote Desktop Session Host Configuration
  D. Regedit
  E. Remote Desktop Services Manager
  F. Dism
  G. Rdpinit
  H. Mstsc
  I. Rdpsign
  J. Remote Desktop Connection Manager
  E. Remote Desktop Services Manager

  ---

  Remote Desktop Services Manager

  You can use Remote Desktop Services Manager to view information about and monitor users, sessions, and processes on RD Session Host servers. You can also perform certain administrative tasks; for example, you can disconnect or log off users from their Remote Desktop Services sessions.

  http://technet.microsoft.com/en-us/library/cc770412.aspx

• Question 152:

  Your company has an Active Directory domain. A server named Server1 runs Windows Server 2008 R2. The Remote Desktop Services server role and the RD Web Access role service are installed on Server1.

  You install the RD Gateway role service on Server1. You create the Remote Desktop connection authorization policy. Users report that they cannot connect to Server1.

  You need to ensure that users can connect to Server1.

  What should you do?

  A. Configure Network Access Protection (NAP) on Server1.
  B. Configure the Remote Desktop Resource Authorization Policy (RD RAP) on Server1.
  C. Create a Remote Desktop Group Policy object (GPO). Enable the Allow log on through Remote Desktop Services setting on the GPO. Link the GPO to the domain.
  D. Create a Remote Desktop Group Policy object (GPO). Enable the Set path for Remote Desktop Services Roaming User Profile setting on the GPO. Create an organization unit (OU) named RDSUsers. Link the GPO to the RDSUsers OU.
  B. Configure the Remote Desktop Resource Authorization Policy (RD RAP) on Server1.

  ---

  Remote Desktop resource authorization policies (RD RAPs) allow you to specify the internal network resources (computers) that remote users can connect to through an RD Gateway server. Remote users connecting to the network through an RD Gateway server are granted access to computers on the internal network if they meet the conditions specified in at least one RD CAP and one RD RAP.

  Source: http://technet.microsoft.com/en-us/library/cc772397.aspx

• Question 153:

  Your network contains a server that runs Windows Server 2008 R2 and has the Windows Deployment Services (WDS) server role installed.

  The server contains an image of Windows Vista Service Pack 2 (SP2), an image of Windows 7, an image of Windows Server 2008, and an image of Windows Server 2008 R2.

  You need to update the drivers in the images. You want to achieve this goal by using the minimum amount of administrative effort.

  Which tool should you use?

  A. Windows Deployment Services console
  B. Pkgmgr
  C. Dism
  D. Windows Driver Kit (WDK)
  A. Windows Deployment Services console

  ---

  In Windows Server 2008 R2, you can use Windows Deployment Services to add driver packages to the server and configure them to be deployed to client computers along with the install image. Note that this functionality is only available when you are installing images of the following operating systems: Windows Vista with SP1, Windows Server 2008, Windows 7, and Windows Server 2008 R2.

  WDS console because Dism no archieve this goal using the minimum administrative effort. Source: http://technet.microsoft.com/en-us/library/dd348456 (WS.10).aspx

• Question 154:

  Your company has an Active Directory domain. The company has a server named Server1 that has the Terminal Services role and the Terminal Services Web Access role installed. All client computers run Windows XP Service Pack 2 (SP2).

  You deploy and publish an application named TimeReport on Server1. The Terminal Services Web Access role uses Active Directory Domain Services (AD DS) and Network Level Authentication is enabled.

  You need to ensure that the users can launch TimeReport on Server1 from the Terminal Services Web Access Web page.

  What should you do?

  A. Disable publishing to AD DS for the TimeReport remote application.
  B. Install the Remote Desktop Client 6.1 application on the client computers that run Windows XP SP2.
  C. Publish TimeReport on Server1 as a Microsoft Windows Installer package. Distribute the Windows Installer package to the users.
  D. Install the Terminal Services Gateway (TS Gateway) role on Server1. Reconfigure the TimeReport remote application publishing to reflect the change in the infrastructure.
  B. Install the Remote Desktop Client 6.1 application on the client computers that run Windows XP SP2.

  ---

  To ensure that the users can launch App1 on Server1 from the Terminal Services Web Access Web page, you need to install the Remote Desktop Client 6.1 application on the client computers, which eases the deployment of Windows Server 2008 Terminal services on the client computers that run Windows XP Service Pack 2. Because the Remote Desktop Client 6.1 application supports Terminal Services Web Access, the Windows XP users can launch App1 on Server1 from their Terminal Services Web Access Web page. Reference: Download Microsoft Remote Desktop Connection (Terminal Services Client 6.1) for Windows XP SP2 http://www.dabcc.com/article.aspx?id=8044

• Question 155:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Hyper-V server role installed.

  Server1 hosts a virtual machine (VM) named VM1.

  You take a snapshot of VM1 at 05:00 and at 19:00.

  You use Hyper-V Manager to delete the snapshot taken at 05:00. You need to ensure that the files created by the 05:00 snapshot are deleted from the hard disk on Server1.

  What should you do?

  A. At the command prompt, run the rmdir.exe command.
  B. From Windows PowerShell, run the Remove-Item cmdlet.
  C. From the Hyper-V Manager console, shut down VM1.
  D. From the Hyper-V Manager console, right-click VM1 and click Revert.
  C. From the Hyper-V Manager console, shut down VM1.

  ---

  When you delete a snapshot, the .avhd files that store the snapshot data remain in the storage location until the virtual machine is shut down, turned off, or put into a saved state. As a result, when you delete a snapshot, you will need to put the production virtual machine into one of those states at some point to be able to complete the safe removal of the snapshot.

  Source: http://technet.microsoft.com/en-us/library/dd560637.aspx

• Question 156:

  Your network contains two Web servers named Server1 and Server2. Server1 has a Web site named Site1. Site 1 is configured to use SSL.

  You need to import the SSL certificate from Server1 to Server2. The solution must ensure that the private key is also imported.

  Which format should you use to export the certificate?

  A. Base-64 encoded X.509 (.cer)
  B. Cryptographic Message Syntax Standard PKCS #7 (.p7b)
  C. DER encoded binary X.509 (.cer)
  D. Personal Information Exchange PKCS #12 (.pfx)
  D. Personal Information Exchange PKCS #12 (.pfx)

  ---

  To export a certificate with the private key

  1.

  Open the Certificates snap-in for a user, computer, or service.

  2.

  In the console tree under the logical store that contains the certificate to export, click Certificates.

  3.

  In the details pane, click the certificate that you want to export.

  4.

  On the Action menu, point to All Tasks, and then click Export.

  5.

  In the Certificate Export Wizard, click Yes, export the private key. (This option will appear only if the private key is marked as exportable and you have access to the private key.)

  6.

  Under Export File Format, do any of the following, and then click Next.

  -

  To include all certificates in the certification path, select the Include all certificates in the certification path if possible check box.

  -

  To delete the private key if the export is successful, select the Delete the private key if the export is successful check box.

  -

  To export the certificate's extended properties, select the Export all extended properties check box.

  7.

  In Password, type a password to encrypt the private key you are exporting. In Confirm password, type the same password again, and then click Next.

  8.

  In File name, type a file name and path for the PKCS #12 file that will store the exported certificate and private key. Click Next, and then click Finish.

  Source: http://technet.microsoft.com/en-us/library/cc754329.aspx

• Question 157:

  Your network contains a Web server that runs Windows Server 2008 R2.

  The Web server contains 100 application pools.

  You need to identify which application pool is using the most CPU resources.

  Which tool should you use?

  A. Appcmd
  B. Internet Information (IIS) Manager
  C. Resource Monitor
  D. Task Manager
  B. Internet Information (IIS) Manager

  ---

  Section: Internet Information Server (IIS)

  

• Question 158:

  Your network contains a Web server that runs Windows Server 2008 R2.

  You create an IIS Manager user account for a user named User1.

  When you attempt to delegate permissions for the Default Web Site to User1, you receive the following dialog box.

  

  You need to ensure that you can delegate permissions for the Default Web Site to User1. Which feature should you modify?

  A. Feature Delegation
  B. IIS Manager Permissions
  C. IIS Manager Users
  D. Management Service
  D. Management Service

  ---

  

  Allow both Windows credentials AND IIS Manager credentials:

  

• Question 159:

  Your company named Contoso, Ltd. has a two-node Network Load Balancing cluster. The cluster is intended to provide high availability and load balancing for only the intranet Web site. The name of the cluster is web.contoso.com.

  You discover that Contoso users can see the Network Load Balancing cluster in the network neighborhood and can connect to various services by using the web.contoso.com name. The web.contoso.com Network Load Balancing cluster is

  configured with only one port rule. You need to configure the web.contoso.com Network Load Balancing cluster to accept only HTTP traffic.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Log on to one of the cluster nodes and run the wlbs disable all command.
  B. Open the Network Load Balancing Clusters console and delete the default port rules.
  C. Open the Network Load Balancing Clusters console and create a new Allow rule for TCP port 80.
  D. Open the Network Load Balancing Clusters console and change the default port rule to a disabled port range rule.
  B. Open the Network Load Balancing Clusters console and delete the default port rules.
  C. Open the Network Load Balancing Clusters console and create a new Allow rule for TCP port 80.

  ---

  

  The following procedure describes how to configure NLB on the Web tier for a typical deployment. To configure NLB on the Web tier Open properties for the front-end adapter (for communicating with clients on the Internet).

  In Network Load Balancing Properties dialog box, on the Cluster Parameters tab, type the Primary IP address (the virtual IP address shared across all cluster members), Subnet Mask, and Full Internet name.

  In Network Load Balancing Properties dialog box, on the Host Parameters tab, type the Priority (Unique host ID), Dedicated IP address, and Subnet Mask In Network Load Balancing Properties dialog box, on the Port Rules tab, remove the

  default port rule covering ports 0 to 65535 by selecting the port rule, then clicking Remove. Create a port rule for HTTP using the information in the following table, and then click Add.

  Source: http://technet.microsoft.com/en-us/library/ee784931(CS.20).aspx

• Question 160:

  Your network contains an Active directory domain named fabrikam.com. The domain contatins a Web server named Web1 that runs Windows Server 2008 R2.

  You install the SMTP Server feature on Web1.

  You need to verify whether you can establish an SMTP connection to Web1.

  Which tool should you use?

  A. Telnet
  B. Windows Firewall
  C. Internet Information Services (IIS) 6.0 Manager
  D. Internet Information Services (IIS) Manager
  A. Telnet

  ---

  But how does SMTP work? The "Simple" part of the name is pure truth in advertising. A message can be moved from one SMTP server to another using one of the simplest TCP/IP protocols (lineoriented telnet) and just a few simple text

  commands. One SMTP server makes a telnet-like connection to TCP port 25 on the other; it then sends commands and data, receiving numeric responses.

  This process can be simulated with any telnet client. In fact, in the early days of the grand network unification of ARPAnet, Bitnet, Edunet, and several other major networks, a lot of testing was done this way, with developers connecting to an

  SMTP server and typing commands at it, just to see what would happen. To do this yourself, run telnet from a command prompt and connect to an online SMTP mail server on TCP port 25.

  The server will send back a response that looks a lot like this:

  C:\> telnet newmoon.microsoft.net 25

  Trying 127.0.0.1...

  Connected to newmoon.microsoft.net.

  Escape character is `^]'.

  220 newmoon.microsoft.net Microsoft ESMTP MAIL Service, Version:

  6.0.3790.1830 ready at Sun, 15 May 2005 22:56:26 ?700

  http://technet.microsoft.com/en-us/magazine/2005.11.howitworkssmtp.aspx