Microsoft 70-649 Online Practice Questions and Exam Preparation

Microsoft 70-649 Online Questions & Answers

• Question 161:

  Your company has an Active Directory forest that contains a single domain. The domain member server has an Active Directory Federation Services (AD FS) server role installed.

  You need to configure AD FS to ensure that AD FS tokens contain information from the Active Directory domain.

  What should you do?

  A. Add and configure a new account store.
  B. Add and configure a new account partner.
  C. Add and configure a new resource partner.
  D. Add and configure a Claims-aware application.
  A. Add and configure a new account store.

• Question 162:

  You need to modify the Password Replication Policy on a read-only domain controller (RODC).

  Which tool should you use?

  To answer, select the appropriate tool in the answer area.

  Hot Area:

  

  

• Question 163:

  Your network contains two servers. The servers are configured as shown in the following table

  All client computers run the 32-bit version of Windows Vista.

  Your company purchases a new sales application named SalesAppl. SalesAppl is a 64-bit application. SalesAppl is associated with the .abc file I extension.

  You need to ensure that when users in the sales department open files that have the .abc file extension, SalesAppl automatically opens.

  What should you do?

  To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area and arrange them in the correct order.

  Select and Place:

  

  

• Question 164:

  Your network contains a server that runs Windows Server 2008 R2 and has the Hyper-V server role installed.

  Virtual machines (VMs) are frequently added to the Hyper-V server.

  You need to ensure that a VM named VM1 has priority regarding the allocation of the physical CPU resources on the Hyper-V host.

  What should you modify?

  A. The VM reserve of the virtual processor for VM1
  B. The VM limit of the virtual processor for VM1
  C. The number of virtual processors for VM1
  D. The relative weight of the virtual processor for VM1
  D. The relative weight of the virtual processor for VM1

• Question 165:

  Your company uses Network Access Protection (NAP) to enforce policies on client computers that connect to the network.

  Client computers run Windows 7. A Group Policy is used to configure client computers to obtain updates from Windows Server Update Services (WSUS).

  Company policy requires that updates labeled Important and Critical must be applied before client computers can access network resources.

  You need to ensure that client computers meet the company policy requirement.

  What should you do?

  A. Enable automatic updates on each client.
  B. Enable the Security Center on each client.
  C. Quarantine clients that do not have all available security updates installed.
  D. Disconnect the connection until the required updates are installed.
  C. Quarantine clients that do not have all available security updates installed.

• Question 166:

  Your network contains a Windows Server Update Services (WSUS) server.

  You need to ensure that the WSUS server automatically downloads updates for a specific Microsoft product.

  What should you do first?

  A. From the Automatic Approvals options, modify the Advanced settings.
  B. From the Products and Classifications options, modify the Classifications settings.
  C. From the Products and Classifications options, modify the Products settings.
  D. From the Automatic Approvals options, modify the Update Rules list.
  B. From the Products and Classifications options, modify the Classifications settings.

• Question 167:

  Your company has an Active Directory domain. The company runs Remote Desktop Services.

  Standard users who connect to the Remote Desktop Session Host Server are in the TSUsers organizational unit (OU). Administrative users are in the TSAdmins OU. No other users connect to the Remote Desktop Session Host Server.

  You need to ensure that only members of OU1 can run the Remote Desktop Protocol files.

  What should you do?

  A. Create a Group Policy object (GPO) that configures the Allow .rdp files from unknown publishers policy setting in the Remote Desktop Client Connection template to Disabled. Apply the GPO to the TSUsers OU.
  B. Create a Group Policy object (GPO) that configures the Allow .rdp files from valid publishers and users default .rdp settings policy setting in the Remote Desktop Client Connection template to Disabled. Apply the GPO to the TSUsers OU.
  C. Create a Group Policy object (GPO) that configures the Allow .rdp files from valid publishers and users default .rdp settings policy setting in the Remote Desktop Client Connection template to Enabled. Apply the GPO to the TSAdmins OU.
  D. Create a Group Policy object (GPO) that configures the Specify SHA1 thumbprints of certificates representing trusted .rdp publishers policy setting in the Remote Desktop Client Connection template to Enabled. Apply the GPO to the TSAdmins OU.
  C. Create a Group Policy object (GPO) that configures the Allow .rdp files from valid publishers and users default .rdp settings policy setting in the Remote Desktop Client Connection template to Enabled. Apply the GPO to the TSAdmins OU.

• Question 168:

  Your company has an Active Directory domain. A server named Server1 runs Windows Server 2008 R2. The Remote Desktop Services server role and the RD Web Access role service are installed on Server1.

  You install the RD Gateway role service on Server1. You create the Remote Desktop connection authorization policy. Users report that they cannot connect to Server1.

  You need to ensure that users can connect to Server1.

  What should you do?

  A. Create a Remote Desktop Group Policy object (GPO). Enable the Allow log on through Remote Desktop Services setting on the GPO. Link the GPO to the domain.
  B. Configure the Remote Desktop Resource Authorization Policy (RD RAP) on Server1.
  C. Create a Remote Desktop Group Policy object (GPO). Enable the Set path for Remote Desktop Services Roaming User Profile setting on the GPO. Create an organization unit (OU) named RDSUsers. Link the GPO to the RDSUsers OU.
  D. Configure Network Access Protection (NAP) on Server1.
  B. Configure the Remote Desktop Resource Authorization Policy (RD RAP) on Server1.

• Question 169:

  Your network contains an Active directory domain named fabrikam.com. The domain contains a Web server named Web1 that runs Windows Server 2008 R2.

  You install the SMTP Server feature on Web1.

  You need to create an SMTP virtual server on Web1.

  Which tool should you use?

  A. Internet Information Services (IIS) Manager
  B. System Configuration
  C. Services
  D. Internet Information Services (IIS) 6.0 Manager
  D. Internet Information Services (IIS) 6.0 Manager

• Question 170:

  You deploy a Windows Server 2008 R2 VPN server behind a firewall. Remote users connect to the VPN by using portable computers that run Windows 7.

  The firewall is configured to allow only secured Web communications.

  You need to enable remote users to connect as securely as possible. You must achieve this goal without opening any additional ports on the firewall.

  What should you do?

  A. Create an SSTP VPN connection.
  B. Creates a PPTP VPN connection.
  C. Create an L2TP VPN connection.
  D. Create an IPsec tunnel.
  A. Create an SSTP VPN connection.