Microsoft 70-643 Online Practice Questions and Exam Preparation

Microsoft 70-643 Online Questions & Answers

• Question 231:

  Your network contains an FTP server that runs Windows Server 2008 R2. You need to configure SSL security for the FTP connections. The solution must meet the following requirements:

  All user names and passwords must be encrypted.

  The anonymous user identity must be allowed to establish a connection without requiring encryption. What should you configure?

  A. the Control Channel setting to Allow
  B. the Control Channel setting to Require only for credentials
  C. the Data Channel setting to Allow
  D. the Data Channel setting to Require
  B. the Control Channel setting to Require only for credentials

  ---

  Configure the FTP SSL Encryption Policy for the Control Channel and Data Channel Configure a custom SSL encryption policy when you want to specify an SSL encryption policy for the control channel and data channel separately. For example, you might encrypt the control channel to avoid passing user credentials in cleartext. Or you might encrypt the data channel to protect sensitive information from being disclosed or changed.

  To configure the SSL encryption policy for the control channel and data channel

  1.

  Open IIS Manager.

  2.

  In the Connections pane, select the server node.

  3.

  In Features View, double-click FTP SSL Settings.

  4.

  Under SSL Policy, select Custom and then click Advanced.

  5.

  In the Advanced SSL Policy dialog box, under Control Channel select one of the following options for SSL encryption over the control channel:

  Allow: Requires SSL encryption for all users, but gives the anonymous user identity the ability to establish a connection without encryption.

  Require: Requires SSL encryption for all users, including the anonymous user identity. Require only for credentials: Requires SSL encryption for all users, but does not allow the anonymous user identity to establish an encrypted connection.

  6.

  Under Data Channel, select one of the following options for SSL encryption over the data channel:

  Allow: When an encrypted connection is established, data transfer is encrypted but requests for metadata (using the DIR command) return a non-encrypted reply.

  Require: Requires SSL encryption over the data channel.

  Deny: Denies SSL encryption over the data channel.

  7.

  Click OK.

  8.

  In the Actions pane, click Apply.

  

  Source: http://technet.microsoft.com/en-us/library/dd463988.aspx

• Question 232:

  Your network contains three servers that run Windows Server 2008 R2. The servers are configured as shown in the following table.

  

  Server1 and Server2 are members of an RD Session Host server farm named farm1.contoso.com.

  You configure the RD Connection Broker role service on Server3 to support farm1.contoso.com.

  You need to create DNS records to support RD Connection Broker load balancing.

  Which record or records should you create for farm1.contoso.com?

  A. One Alias (CNAME) record
  B. One Host (AAAA) record
  C. Two Host (A) records
  D. Two service location (SRV) records
  C. Two Host (A) records

  ---

  Configure DNS for RD Connection Broker Load Balancing To load balance sessions in an RD Session Host server farm, you can use the RD Connection Broker Load Balancing feature together with Domain Name System (DNS) round robin. To configure DNS, you must create a DNS host resource record for each RD Session Host server in the farm that maps the RD Session Host server's IP address to the RD Session Host server farm name in DNS. To add DNS entries for each RD Session Host server in the farm

  1.

  Open the DNS snap-in. To open the DNS snap-in, log on to a computer where the DNS snap-in has been installed, click Start, point to Administrative Tools, and then click DNS.

  2.

  Expand the server name, expand Forward Lookup Zones, and then expand the domain name.

  3.

  Right-click the appropriate zone, and then click New Host (A or AAAA).

  4.

  In the Name (uses parent domain name if blank) box, type the RD Session Host server farm name.

  5.

  The farm name is the virtual name that clients will use to connect to the RD Session Host server farm. Do not use the name of an existing server. For management purposes, we recommend that you use the same farm name that you specified when you configured the RD Session Host servers to join a farm in RD Connection Broker.

  6.

  In the IP address box, type the IP address of an RD Session Host server in the farm.

  7.

  Click Add Host.

  Repeat steps three through six for each RD Session Host server in the farm.

  Source: http://technet.microsoft.com/en-us/library/cc772506.aspx

• Question 233:

  Your network contains an Active Directory domain named contoso.com. Contoso.com contains a server named Server1 that has the Remote Desktop Session Host (RD Session Host) role service installed.

  You install the Remote Desktop Licensing (RD Licensing) role service on a server named Server2.

  Server2 is in a workgroup.

  On Server1, you attempt to configure Server2 as the RD Licensing server and receive the error shown in the following message box.

  

  You need to ensure that you can configure Server1 to use Server2 as the RD Licensing server. What should you do first?

  A. Join Server1 to the workgroup.
  B. Join Server2 to the contoso.com domain.
  C. On Server2, activate the server from Remote Desktop Licensing Manager.
  D. On Server2, modify the membership of the Terminal Server Computers group.
  C. On Server2, activate the server from Remote Desktop Licensing Manager.

  ---

  Activating a Terminal Services License Server

  A Terminal Services license server must be activated in order to certify the server and allow the license server to issue Terminal Services client access licenses (TS CALs). You can activate a license server by using the Activate Server Wizard in the TS Licensing Manager tool. There are three methods by which you can activate your license server:

  Internet (Automatic) This method requires Internet connectivity from the computer running TS Licensing Manager. Internet connectivity is not required from the license server itself. This method uses TCP/IP (TCP Port 443) to connect directly to the Microsoft Clearinghouse. Web You can use the Web method when the computer running TS Licensing Manager does not have Internet connectivity, but you have access to the Web by means of a Web browser from another computer.

  The URL for the Web method is displayed in the Activate Server Wizard. Telephone The telephone method allows you to talk to a Microsoft customer service representative to complete the activation process. The appropriate telephone number is determined by the country/region that you choose in the Activate Server Wizard and is displayed by the wizard. When you activate the license server, Microsoft provides the server with a limited-use digital certificate that validates server ownership and identity. Microsoft uses an X.509 industry standard certificate for this purpose.

  By using this certificate, a license server can make subsequent transactions with Microsoft. If a license server is not activated, the license server can only issue temporary TS Per Device CALs, which are valid for 90 days, or TS Per User CALs.

  Source: http://technet.microsoft.com/en-us/library/cc731293.aspx

• Question 234:

  You are evaluating whether to purchase Windows Server 2008 R2 Service Pack 1 (SP1). Several weeks ago, you installed Windows Server 2008 R2 SP1 on a server. During the installation, you did not enter a product key.

  You need to identify how many days remain until the license status of the server will change to Unlicensed.

  Which tool should you use?

  A. Wevutil.exe
  B. Slmgr.vbs
  C. Msinfo32.exe
  D. Act.exe
  B. Slmgr.vbs

• Question 235:

  Your network contains an Active Directory domain. The domain contains a server named Server1 that has the Remote Desktop Licensing (RD Licensing) role service installed. On Server1, you enable the License server security group Group Policy setting. You need to ensure that Server1 can issue Remote Desktop Services client access licenses (RDS CALs) to a server named Server3.

  What should you do on Server3?

  A. From Remote Desktop Licensing Manager, reactivate the server.
  B. From Remote Desktop Session Host Configuration, modify the licensing mode.
  C. From Computer Management, modify the members of the Terminal Server Computers group.
  D. From Remote Desktop Licensing Manager, modify the connection method from the properties of the server.
  C. From Computer Management, modify the members of the Terminal Server Computers group.

  ---

  Terminal Services License Server Security Group Configuration When the TS Licensing role service is installed on the server, the Terminal Server Computerslocal group is created.

  The license server will respond only to requests for TS CALs from terminal servers whose computer accounts are members of this group if the Computer Configuration\Administrative Templates\Windows Components\Terminal Services\TS

  Licensing\License server security group Group Policy setting has been enabled and applied to the license server.

  By default, the Terminal Server Computers local group is empty.

  Source: http://technet.microsoft.com/en-us/library/cc775331.aspx

• Question 236:

  Your network contains a server named Server1 that has the Remote Desktop Session Host (RD Session Host) role service installed.

  A user named User1 connects to Server1 and starts an application named App1.exe. User1 reports that App1.exe is unresponsive and cannot be closed.

  You need to terminate App1.exe for User1 only.

  Which tool should you do?

  A. Qprocess
  B. Quser
  C. Rwinsta
  D. Tskill
  D. Tskill

  ---

  Tskill Ends a process.

  Syntax tskill {ProcessID | ProcessName} [/server:ServerName] [{/id:SessionID | /a}] [/v] Parameters ProcessID : The ID of the process you want to end.

  ProcessName : The name of the process you want to end. You can use wildcards to specify this parameter.

  /server: ServerName : Specifies the terminal server containing the process you want to end.

  Otherwise, the current terminal server is used.

  /id: SessionID : Ends the process running in the specified session.

  /a : Ends the process running in all sessions.

  /v : Displays information about the actions being performed.

  /? : Displays help at the command prompt.

  tskill App1.exe /server:Server1 /id:

  Source: http://technet.microsoft.com/en-us/library/bb490806.aspx

• Question 237:

  Your network contains a server named Server1. Server1 has the Streaming Media Services role installed.

  You have media files stored on a hard disk drive. The hard disk drive is formatted by using the NTFS file system and protected by using Encrypted File System (EFS).

  You need to ensure that Windows Media Services can open the EFS-encrypted files.

  What should you do?

  A. From the Windows Media Services console, configure the WMS NTFS ACL Authorization plug- in.
  B. From the Windows Media Services console, configure the WMS Publishing Points ACL Authorization plug-in.
  C. From the Services console, configure the properties of the Protected Storage service, and then start the service.
  D. From the Services console, configure the properties of the Windows Media Services service, and then restart the service.
  D. From the Services console, configure the properties of the Windows Media Services service, and then restart the service.

  ---

  Sourcing from an encrypted directory

  Security concerns may require that you maintain some or all of your content in an encrypted directory. The encryption process encodes the data in a file so that it is unreadable to a computer or account that does not have the appropriate file encryption key. In the Windows operating system, the file encryption key is assigned to an account. Anyone who logs on using that account is then able to decrypt and use the content. Windows Media Services can decrypt and stream encrypted content if it is logged on to the proper account. By default, Windows Media Services logs on to the Network Service account. To access the encrypted content, you must set Windows Media Services to log on to the same account that encrypted the content. You can change the account Windows Media Services uses to log on to the computer by using Microsoft Management Console. For more information about encryption, accounts, and user privileges, see Windows Help and Support.

  Source: http://technet.microsoft.com/en-us/library/cc754882.aspx

• Question 238:

  Your network contains an Active Directory domain named adatum.com. The domain contains a server named Servers that runs Windows Server 2008 R2 Service Pack 1 (SP1).

  Server5 is configured as a file and print server.

  Server5 contains a RAIDS volume named Volume1. Volume1 contains four disks. You replace one of the disks in Volume1.

  You need to ensure that the new disk is added to Volume1.

  Which Diskpart command should you run?

  A. create
  B. online
  C. break
  D. filesystems
  E. list
  F. compact vdisk
  G. rescan
  H. assign
  I. GPT
  J. remove
  N

  ---

  Repairs the RAID-5 volume with focus by replacing the failed disk region with the specified dynamic disk.

  Repair disk= [align=] [noerr]

  The specified dynamic disk must have free space greater than or equal to the total size of the failed disk region in the RAID-5 volume.

  A volume in a RAID-5 array must be selected for this operation to succeed. Use the select volume command to select a volume and shift the focus to it.

  http://technet.microsoft.com/en-us/library/cc731358(v=ws.10)

• Question 239:

  Your network contains a server named Server1 that has the Hyper-V server role installed. Server1 has two network adapters.

  You need to configure Server1 to meet the following requirements:

  All virtual machines (VMs) on Server1 must be able to communicate with other computers on the network.

  The number of virtual network connections must be minimized.

  What should you do?

  A. Create one internal virtual network. Clear the Enable virtual LAN identification for management operating system check box for the virtual network.
  B. Create one internal virtual network. Select the Enable virtual LAN identification for management operating system check box for the virtual network.
  C. Create one external virtual network. Clear the Allow management operating system to share this network adapter check box for the virtual network.
  D. Create one external virtual network. Select the Allow management operating system to share this network adapter check box for the virtual network.
  C. Create one external virtual network. Clear the Allow management operating system to share this network adapter check box for the virtual network.

  ---

  External virtual networks. Use this type when you want to provide virtual machines with access to a physical network to communicate with externally located servers and clients. This type of virtual network also allows virtual machines on the same virtualization server to communicate with each other. This type of network may also be available for use by the management operating system, depending on how you configure the networking. (The management operating system runs the Hyper-V role.) For more information, see "A closer look at external virtual networks" later in this topic.

  Source: http://technet.microsoft.com/en-us/library/cc816585%28WS.10%29.aspx

• Question 240:

  Your network contains a server named Server1. You add a new hard disk to Server1.

  When you run the Provision Storage Wizard, you do not see the new disk. You need to ensure that you can provision the new disk by using the Provision Storage Wizard.

  What should you do?

  A. At the command prompt, run chkdsk.exe /f.
  B. From Disk Management, initialize the disk.
  C. From Services, restart the Virtual Disk service.
  D. From Storage Explorer, click Refresh SAN View.
  B. From Disk Management, initialize the disk.