Microsoft 70-643 Online Practice Questions and Exam Preparation

Microsoft 70-643 Online Questions & Answers

• Question 191:

  Your network contains a server farm that has Microsoft SharePoint Foundation 2010 installed. The farm contains two Web applications named WebApp1 and WebApp2. You need to ensure that WebApp1 is enabled for outgoing e-mail.

  What should you configure on WebApp1?

  A. the General settings
  B. the Manage Features
  C. the Service Connections settings
  D. the User Policy
  A. the General settings

  ---

  To configure outgoing email for a specific Web application by using Central Administration Verify that you have the following administrative credentials: You must be a member of the Farm Administrators group on the computer that is running the SharePoint Central Administration Web site. In Central Administration, in the Application Management section, click Manage web applications. On the Web Applications Management page, select a Web application, and then in the General Settings group on the Ribbon, click Outgoing Email. On the Web Application Outgoing Email Settings page, in the Mail Settings section, type the SMTP server name for outgoing email (for example, mail.fabrikam.com) in the Outbound SMTP server box. In the From address box, type the email address (for example, the site administrator alias) as you want it to be displayed to email recipients. In the Reply-to address box, type the email address (for example, a help desk alias) to which you want email recipients to reply. In the Character set list, click the character set that is appropriate for your language. Click OK.

• Question 192:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Streaming Media Services role and the Web Server (IIS) role installed. Server1 has a broadcast publishing point named Broadcast1.

  Broadcast1 publishes a file named Broadcast1.wmv.

  You run the Unicast Announcement Wizard for Broadcast1 and create a new announcement file.

  You need to ensure that only authorized users have permission to access the announcement file.

  What should you modify?

  A. the Authentication settings for Broadcast1
  B. the Authorization settings for Broadcast1
  C. the NTFS permissions on c:\inetpub\wwwroot\Broadcast1.asx
  D. the NTFS permissions on c:\wmpub\wmroot\Broadcast1.wmv
  C. the NTFS permissions on c:\inetpub\wwwroot\Broadcast1.asx

• Question 193:

  You have a server that runs Windows Server 2008 R2. The server has the Hyper-V server role installed.

  You need to merge a differencing disk and a parent disk.

  What should you do?

  A. Edit the parent disk.
  B. Inspect the parent disk.
  C. Edit the differencing disk.
  D. Inspect the differencing disk.
  C. Edit the differencing disk.

  ---

  Merging Differencing Disks with Hyper-V

  A differencing disk is a disk that is a child of a parent disk. Differencing disks are very helpful in keeping disk images small, manageable and consistent, because you can create a base parent disk- such as a Windows 2008 Standard base image- and use it as the foundation for all other guest virtual machines and disks that will be based on Windows Server 2008. For example, I have a Windows Server 2008 guest that I use exclusively as sandbox for development. I am in the process of building out another guest based on Windows Server 2008 that will be for some TFS 2008 demos that I am working on for an upcoming series of talks. Rather than copy the Windows Server 2008 guest VPC over and over again, I can simply create one differencing disk for my development environment role and one for my TFS role. The result is a VHD that represents the intersection of the base/parent disk (in this case, a barebones install of Windows Server 2008 Standard) and any additional software I've installed or configuration changes I have made. This not only conserves disk space, but also saves me a lot of time in copying hefty giga-some-odd vhds around. Sometimes it is necessary to merge a differencing disk back to it's parent or into a new disk. For example, you may be moving VHDs around as I did recently to a new, high speed E-SATA drive. My old drive hosted a vhd that I used as my development sandbox that used a parent on the old disk.

  I certainly don't want to depend on my clunky old USB 2.0 drive for the parent (the IO cost alone would be just silly), and at a minimum, there is state on the differenced guest OS that I do not want to lose. The first thing to do is copy over the parent VHD, create a new differencing disk based on the same parent, but in the new location. Next, since the differenced guest VHD has state that you want to move over (lest you lose it), it is necessary to merge the state of the "old" differenced guest VHD with the new copy. To do so, under Server Manager, in the Hyper-V Manager, click "Edit Disk", and locate the disk that you want to merge into a new differenced disk:

  

  On the next screen, under Action, select "Merge":

  

  Select "To a new virtual disk", and choose a name and path for the new disk that you created in the initial copy:

  

  The "old" differenced disk, which is based on the original parent disk plus state from the "old" differenced disk is merged into the new disk on the drive you specified:

  

  That's all there is to it. Differencing is a powerful feature in virtualization, and there is very nice support for migration of differenced disks right within the Server Manager. Source: http://rickgaribay.net/archive/2008/08/15/merging-differencing-disks-with-hyper-v.aspx

• Question 194:

  Your company has an Active Directory domain. The company runs Remote Desktop Services. A user has remotely logged on to the Remote Desktop Session Host Server. The user requires help to use an application.

  When you connect to the Remote Desktop session, you cannot operate any applications. You need to ensure that you can assist any user on the Remote Desktop Session Host Server.

  What should you do?

  A. From the Remote Desktop Session Host Server run the Tscon /v command. Then reconnect to the session.
  B. Run the Chgusr /execute command on the Remote Desktop Session Host Server. Then reconnect to the session.
  C. Enable Use remote control with default user settings in the RDP-Tcp Properties.
  D. Enable Use remote control with the following settings in the RDP-Tcp Properties. Configure the Level of control policy setting to Interact with the session. Instruct the user to log off and log back on.
  D. Enable Use remote control with the following settings in the RDP-Tcp Properties. Configure the Level of control policy setting to Interact with the session. Instruct the user to log off and log back on.

  ---

  In Remote Desktop Session Host Configuration rightclick RDP-Tcp and choose properties.

  

  

• Question 195:

  Your network contains a server named Server1 that has Microsoft SharePoint Foundation 2010 installed.

  You configure Server1 to receive email by using the Automatic settings mode. You discover that the email enabled libraries on Server1 receive email from unauthorized SMTP servers.

  You need to ensure that Server1 only accepts email from authorized SMTP servers.

  What should you configure?

  A. From the settings of the libraries, modify the permissions.
  B. From the settings of the libraries, modify the incoming email settings.
  C. From Central Administration, modify the incoming email settings.
  D. From Central Administration, modify the list of approved distribution groups.
  C. From Central Administration, modify the incoming email settings.

  ---

  To configure incoming email in an advanced scenario

  1. Verify that you have the following administrative credentials:

  - You must be a member of the Administrators group on the computer that is running the SharePoint Central Administration Web site.

  2.

  In Central Administration, click System Settings.

  3.

  On the System Settings page, in the Email and Text Messages (SMS) section, click Configure incoming email settings.

  4.

  If you want to enable sites on this server to receive email, on the Configure Incoming Email Settings page, in the Enable Incoming Email section, click Yes.

  5.

  Select the Advanced settings mode.

  If you select Advanced, you can specify a drop folder instead of using an SMTP server.

  6.

  If you want to connect to Directory Management Service, in the Directory Management Service section, click Yes.If you select this option, you must first configure Active Directory Domain Services (AD DS). If you use Exchange Server, you must also configure the DNS Manager and add an SMTP connector. For more information, see the "Configure AD DS to be used with Directory Management Service", "Configure DNS Manager", and "Add an SMTP connector in Exchange Server 2010" sections later in this article.

  a.

  In the Active Directory container where new distribution groups and contacts will be created box, type the name of the container in the format OU=ContainerName, DC=domain, DC=com, where ContainerName is the name of the OU in AD DS, domain is the second-level domain, and com is the toplevel domain.

  b.

  In the SMTP mail server for incoming mail box, type the name of the SMTP mail server. The server name must match the FQDN in the A resource record entry for the mail server in DNS Manager.

  c.

  To accept only messages from authenticated users, click Yes for Accept messages from authenticated users only. Otherwise, click No.

  d.

  To enable users to create distribution groups from SharePoint sites, click Yes for Allow creation of distribution groups from SharePoint sites . Otherwise, click No. e. Under Distribution group request approval settings , select the actions that will require approval.

  Actions include the following:

  -Create new distribution group

  -

  Change distribution group email address

  -

  Change distribution group title and description

  -Delete distribution group

  7.

  If you want to use a remote Directory Management Service, select Use remote. If you select this option and you are using Exchange Server, you must configure the DNS Manager and add an SMTP connector. For more information, see the "Configure DNS Manager" and "Add an SMTP connector in Exchange Server 2010" sections later in this article. The AD DS has most likely already been configured, so you do not need to do this. a. In the Directory Management Service URL box, type the URL of the Directory Management Service that you want to use. The URL is typically in the following format: http://server:adminport/_vti_bin/SharePointEmailWS.asmx. b. In the SMTP mail server for incoming mail box, type the name of the SMTP mail server. The server name must match the FQDN in the A resource record entry for the mail server in DNS Manager on the domain server. c. To accept messages from authenticated users only, click Yes for Accept messages from authenticated users only. Otherwise, click No. d. To allow creation of distribution groups from SharePoint sites, click Yes for Allow creation of distribution groups from SharePoint sites. Otherwise, click No.

  8.

  If you do not want to use Directory Management Service, click No.

  9.

  In the Incoming Email Server Display Address section, in the Email server display address box, type a display name for the email server (for example, mail.fabrikam.com). You typically use this option together with the Directory Management Service.

  10.

  In the Email Drop Folder section, in the Email drop folder box, type the name of the folder from which SharePoint 2010 Timer service retrieves incoming email from the SMTP service. If you select this option, ensure that you configure the necessary permissions to the email drop folder. For more information, see the "Configure permissions to the email drop folder" section later in this article. It is useful to have a dedicated email drop folder if the default email drop folder is full or almost full. Ensure that the logon account for the SharePoint 2010 Timer service has Modify permissions on the email drop folder. For more information, see "To configure email drop folder permissions for the logon account for the SharePoint 2010 Timer service" procedure later in this article.

  11.

  In the Safe Email Servers section, select whether you want to accept email from all email servers or from several specified email servers

  12.

  Click OK.

• Question 196:

  Your network contains an Active Directory domain. The domain contains a server named Server1 that has Microsoft SharePoint Foundation 2010 installed. You install the SMTP Server feature on a server named SMTP1. From Central

  Administration on Server1, you configure SMTP1 as the outbound mail server for the SharePoint farm.

  You need to ensure that SMTP1 can deliver all email messages sent from Server1.

  What should you do?

  A. On Server1, create an inbound firewall rule.
  B. On Server1, create an outbound firewall rule.
  C. On SMTP1, configure the Authentication settings.
  D. On SMTP1, configure the Relay Restrictions settings.
  D. On SMTP1, configure the Relay Restrictions settings.

  ---

  

• Question 197:

  Your network contains an FTP server that runs Windows Server 2008 R2. You create an FTP site on the server and allow Read access for all users. You create an IIS Manager user account for a user named User1. You need to ensure that User1 can connect to the FTP site.

  What should you do?

  A. Enable FTP user isolation
  B. Enable Basic authentication
  C. Add an FTP authorization rule
  D. Add a custom provider for FTP authentication
  D. Add a custom provider for FTP authentication

  ---

  

  IIS Manager Authentication IIS Manager authentication is a custom authentication method that requires users to provide a valid IIS Manager user name and password to gain access to content. IIS Manager authentication requires that the IIS Management Service is installed and configured to use both Windows credentials and IIS Manager credentials. (The IIS Management Service does not have to be running when you use IIS Manager authentication.)

  Source: http://technet.microsoft.com/en-us/library/dd722688.aspx

• Question 198:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Streaming Media Services role and the Web Server (IIS) role installed. Server1 hosts the company's intranet Web site.

  You need to configure Windows Media Services to stream content by using HTTP.

  What should you do first?

  A. Install the RPC over HTTP proxy server feature.
  B. Configure a host header for the intranet Web site.
  C. Configure the server to have an additional IP address.
  D. Create a new virtual directory on the intranet Web site.
  C. Configure the server to have an additional IP address.

  ---

  Microsoft Windows Media Services (WMS) and Microsoft Internet Information Services (IIS) can coexist on a computer when you use their default values. By default, WMS does not enable the WMS HTTP Server Control Protocol plug-in. In

  this manner, IIS can safely bind to port 80 for delivery of Web-based content.

  Sometimes it can be useful for WMS to use port 80 to deliver content. For example, if the majority of a content provider's clients are behind a firewall, it can be better to use port 80 for delivery of streaming content, because most firewalls have

  port 80 opened. With IIS 6.0, HTTP requests are handled by the Http.sys listener. By default, Http.sys will listen to all requests coming in on port 80 for all IP addresses bound to the computer (except for the loopback address: 127.0.0.1).

  For WMS to bind to use port 80 for streaming content, you must configure the Http.sys listener so that WMS can listen to the specified IP addresses. If you enable the HTTP Server Control Protocol plug-in without configuring the listener, you

  may receive the following error:

  One usage of each socket address (protocol/network address/port) is permitted. Verify that other services (such as IIS) or applications are not attempting to use the same port and then try to enable the plug-in again.

  Error Code: 0xC00D158B

  MORE INFORMATION

  For both IIS and WMS to use port 80, one of the following two conditions must be true:

  One (1) network adapter has at least 2 IPs bound to the adapter. Two (2) network adapters have at least 1 IP bound to each adapter.

  Source: http://support.microsoft.com/kb/328728

• Question 199:

  Your network contains a Web server that runs Windows Server 2008 R2. The Web server has the Client Certificate Mapping Authentication role service installed.

  You create a Web site that requires client certificates for authentication.

  You need to enable client certificate mapping for the Web site.

  Which tool should you use?

  A. Appcmd
  B. Certutil
  C. the Authorization Manager snap-in
  D. the Certificates snap-in
  A. Appcmd

  ---

  Client Certificate Mapping Authentication

  Client Certificate Mapping Authentication enables clients to authenticate with the Web server by presenting client certificates over Secure Socket Layer (SSL) connections. Note Certificate-based authentication enables clients to use client

  certificates to authenticate with the Web server. It is not required to enable secure communication between the client and the server. The Client Certificate Mapping Authentication uses the Directory Services Mapper (DS Mapper) service in

  Active Directory to map client certificates provided by the user to domain accounts. IIS also provides a custom certificate mapping feature, the IIS Client Certificate Mapping Authentication, which allows for more flexible mapping of client

  certificates to Windows accounts. See the section titled "IIS Client Certificate Mapping Authentication" later in this chapter for more information.

  Note Client Certificate Mapping Authentication is not part of the default IIS install and is not enabled by default.

  You can manually install it from the Security feature category through Turn Windows Features On And Off on Windows Vista. You can also install it via the Security role service category of the Web Server (IIS) role in Server Manager on

  Windows Server 2008. See Chapter 12 for more information about installing and enabling modules. After the module is installed, you have to explicitly enable Client Certificate Mapping Authentication for it to be available.

  To use Client Certificate Mapping Authentication, you need to meet the following requirements:

  The Web server must be a member of a Windows domain.

  You must issue client certificates to your users by using a Certificate Authority (CA) trusted by the Web server.

  You must map each client certificate to a valid domain account in Active Directory. Note You do not need to use Client Certificate Mapping Authentication to require clients to present client certificates. You can configure the server to always

  require client certificates to access the server, but use another authentication scheme to authenticate the client. To do this, see the section titled "Client Certificates" later in this chapter.

  To enable Client Certificate Mapping Authentication on the Web server, you need to perform the following steps (after installing the Certificate Mapping hentication module).

  1.

  Enable Client Certificate Mapping Authentication. You can do this in IIS Manager by clicking the server node, double-clicking Authentication, selecting Active Directory Client Certificate Authentication, and clicking Enable in the Actions pane. Note that this can only be done at the server level when using IIS Manager, although you can enable Client Certificate Mapping Authentication for a specific URL through configuration.

  2.

  Configure SSL on each Web site using this authentication method. Certificate authentication is possible only if the Web site is being accessed over an SSL connection and therefore requires an SSL binding to be configured for the Web site. See the section titled "Configuring SSL" later in this chapter for more details.

  3.

  Enable DS Mapper for each Web site SSL binding. IIS Manager does this automatically for each Web site when the Client Certificate Mapping Authentication is enabled and you add an SSL binding for the Web site.

  To do this manually, use the Netsh.exe command with the following syntax: netsh http add sslcert IP

  Address:Port dsmapperusage=enable, where IP Address and Port are the IP address and port of the corresponding binding.

  4. Configure each Web site using this authentication method to accept client certificates (and possibly require them). This ensures that the server accepts client certificates when provided by the client and can also configure the server to require the client to present a certificate to proceed with the request. See the section titled "Client Certificates" later in this chapter for more details. You can also enable Client Certificate Mapping Authentication by editing the system.webServer/security/authentication/clientCertificateMappingAuthentication configuration section directly or by using Appcmd or other configuration APIs. You can enable this authentication method by using the following Appcmd syntax. %systemroot%\system32\inetsrv\Appcmd set config /section: system.webServer/ security/authentication/clientCertificateMappingAuthentication /enabled: true The enabled attribute specifies whether or not the Client Certificate Mapping Authentication is enabled. You can enable this method for a specific URL. However, do note that the decision to use the Directory Services Mapper to map certificates to Windows domain accounts is dependent on each Web site binding having been configured to use the HTTP.sys DS Mapper setting.

  Source: http://technet.microsoft.com/en-us/library/dd163543.aspx

• Question 200:

  Your network contains a server that has Microsoft SharePoint Foundation 2010 installed.

  You need to ensure that a user named User1 can use Central Administration to back up SharePoint site collections.

  The solution must minimize the number of permissions assigned to User1.

  To which group should you add User1?

  A. local Administrators
  B. local Backup Operators
  C. SharePoint Delegated Administrators
  D. SharePoint Farm Administrators
  D. SharePoint Farm Administrators

  ---

  Group memberships required to run backup and restore operations in Central Administration You must ensure that all user accounts that will be backing up or restoring your farm and farm components by using Central Administration have the group memberships that are described in the following table. Required group memberships