Microsoft 70-649 Online Practice Questions and Exam Preparation

Microsoft 70-649 Online Questions & Answers

• Question 171:

  Your network contains a server named Server1 that runs Windows Server 2008 R2. You plan to deploy DirectAccess on Server1.

  You need to configure Windows Firewall on Server1 to support DirectAccess connections. What should you allow from Windows Firewall on Server1?

  A. ICMPv6 Echo Requests
  B. IPv6-Route
  C. ICMPv6 Redirect
  D. IGMP
  A. ICMPv6 Echo Requests

• Question 172:

  Your company has an Active Directory domain. The company has a server named Server1 that has the Remote Desktop Services server role and the RD Web Access role service installed. The company has a server named Server2 that runs

  ISA Server 2006.

  The company deploys the Remote Desktop Gateway (RD Gateway) role on a new server named Server3. The company wants to use ISA as the SSL endpoint for Remote Desktop connections.

  You need to configure the RD Gateway role on Server3 to use ISA 2006 on Server2.

  What should you do?

  A. Configure the RD Gateway to use SSL HTTPS-HTTP bridging.
  B. Export a self-signed SSL certificate from Server3 and install the SSL certificate on Server2. Configure the ISA service on Server2 to use the SSL certificate from Server3.
  C. Configure the Remote Desktop Connection Authorization Policy Store on Server3 to use Server2 as the Central Network Policy Server.
  D. Export the SSL certificate from Server2 and install the SSL certificate on Server3. Configure the RD Gateway to use the SSL certificate from Server2.
  A. Configure the RD Gateway to use SSL HTTPS-HTTP bridging.

• Question 173:

  Your network contains a Web server that runs Windows Server 2008 R2.

  Remote management is configured for Internet Information Services (IIS).

  From IIS Manager Permissions, you add a user to a Web site.

  You need to prevent the user from using Internet Information Services (IIS) Manager to modify the authorization rules of the Web site.

  Which settings should you configure?

  A. Authorization Rules
  B. Feature Delegation
  C. IIS Manager Permissions
  D. IIS Manager Users
  B. Feature Delegation

• Question 174:

  Your network contains an Active Directory forest. The functional level of the forest is Windows Server 2008 R2.

  You plan to deploy DirectAccess.

  You need to configure the DNS servers on your network to support DirectAccess.

  What should you do?

  A. Modify the EnableGlobalNamesSupport registry key and restart the DNS Server service.
  B. Create a trust anchor that uses a certificate issued by a publicly trusted certification authority (CA).
  C. Modify the GlobalQueryBlockList registry key and restart the DNS Server service.
  D. Create a trust anchor that uses a certificate issued by an internal certification authority (CA).
  C. Modify the GlobalQueryBlockList registry key and restart the DNS Server service.

• Question 175:

  Your network contains a server that runs Windows Server 2008 R2 and has the Windows Deployment Services (WDS) server role installed.

  The server contains an image of Windows Vista Service Pack 2 (SP2), an image of Windows 7, an image of Windows Server 2008, and an image of Windows Server 2008 R2.

  You need to update the drivers in the images. You want to achieve this goal by using the minimum amount of administrative effort.

  Which tool should you use?

  A. dism
  B. Pkgmgr
  C. Windows Deployment Services console
  D. Windows Driver Kit (WDK)
  C. Windows Deployment Services console

• Question 176:

  Active Directory Rights Management Services (AD RMS) is deployed on your network.

  Users who have Windows Mobile 6 devices report that they cannot access documents that are protected by AD RMS.

  You need to ensure that all users can access AD RMS protected content by using Windows Mobile 6 devices.

  What should you do?

  A. Modify the security of the MobileDeviceCertification.asmx file.
  B. Modify the security of the ServerCertification.asmx file.
  C. Enable anonymous authentication for the _wmcs virtual directory.
  D. Enable anonymous authentication for the certification virtual directory.
  A. Modify the security of the MobileDeviceCertification.asmx file.

• Question 177:

  Your company has a main office and a branch office. The branch office has three servers that run a Server Core installation of Windows Server 2008 R2. The servers are named Server1, Server2, and Server3.

  You want to configure the Event Logs subscription on Server1 to collect events from Server2 and Servers.

  You discover that you cannot create a subscription on Server1 from another computer.

  You need to configure a subscription on Server1.

  Which two actions should you perform? (Each correct answer presents part of the solution.

  Choose two.)

  A. Run the wecutilcssubscription.xml command on Server1.
  B. Create a custom view on Server1 by using Event Viewer. Export the custom view to a file named subscription.xml.
  C. Create an event collector subscription configuration file. Name the file subscription.xml.
  D. Run the wevtutilimsubscription.xml command on Server1.
  A. Run the wecutilcssubscription.xml command on Server1.
  C. Create an event collector subscription configuration file. Name the file subscription.xml.

• Question 178:

  Your network contains four servers that run Windows Server 2008 R2. The servers are configured as shown in the following table.

  

  Server2 and Server3 are configured as RemoteApp sources on Server4.

  You need to ensure that the RemoteApp programs are listed on the RD Web Access Web page on Server1.

  What should you do?

  A. On Server4, add Server1 to the Session Broker Computers group.
  B. On Server4, add Server1 to the TS Web Access Computers group.
  C. On Server1, add Server4 to the TS Web Access Administrators group.
  D. On Server1, add Server2 and Server3 to the TS Web Access Administrators group.
  B. On Server4, add Server1 to the TS Web Access Computers group.

• Question 179:

  Your company's corporate network uses Network Access Protection (NAP). Users are able to connect to the corporate network Remote1y.

  You need to ensure that data transmissions between remote client computers and the corporate network are as secure as possible. What should you do?

  A. Apply an IPSec NAP policy.
  B. Restrict Dynamic Host Configuration Protocol (DHCP) clients by using NAP.
  C. Configure a NAP policy for 802.IX wireless connections.
  D. Configure VPN connections to use MS-CHAP u2 authentication.
  A. Apply an IPSec NAP policy.

• Question 180:

  You have a Remote Desktop Services farm that contains several Remote Desktop Session Host Servers.

  You need to configure one of the Remote Desktop Session Host Servers as a dedicated redirector.

  You configure the appropriate DNS records.

  What should you do next?

  A. From Remote Desktop Session Host Configuration, set the licensing mode to per user.
  B. From Remote Desktop Session Host Configuration, set the licensing mode to per device.
  C. From Remote Desktop Session Host Configuration, change the relative weight of the server to 50.
  D. From Remote Desktop Session Host Configuration, configure the server to deny new user logons.
  D. From Remote Desktop Session Host Configuration, configure the server to deny new user logons.