Microsoft 70-649 Online Practice Questions and Exam Preparation

Microsoft 70-649 Online Questions & Answers

• Question 221:

  Your network contains a server named Server1 that has the Hyper-V server role installed. Server1 has two network adapters.

  You need to configure Server1 to meet the following requirements:

  All virtual machines (VMs) on Server1 must be able to communicate with other computers on the network.

  The number of virtual network connections must be minimized.

  What should you do?

  A. Create one internal virtual network. Clear the Enable virtual LAN identification for management operating system check box for the virtual network.
  B. Create one internal virtual network. Select the Enable virtual LAN identification for management operating system check box for the virtual network.
  C. Create one external virtual network. Clear the Allow management operating system to share this network adapter check box for the virtual network.
  D. Create one external virtual network. Select the Allow management operating system to share this network adapter check box for the virtual network.
  C. Create one external virtual network. Clear the Allow management operating system to share this network adapter check box for the virtual network.

• Question 222:

  Your network contains an Active Directory domain named contoso.com. Contoso.com contains a domain controller named DC1 and a read-only domain controller (RODC) named RODC1.

  You need to view the most recent user accounts authenticated by RODC1.

  What should you do first?

  A. From Active Directory Sites and Services, right-click the Connection object for DC1, and then click Replicate Now.
  B. From Active Directory Sites and Services, right-click the Connection object for DC2, and then click Replicate Now.
  C. From Active Directory Users and Computers, right-click contoso.com, click Change Domain Controller, and then connect to DC1.
  D. From Active Directory Users and Computers, right-click contoso.com, click Change Domain Controller, and then connect to RODC1.
  C. From Active Directory Users and Computers, right-click contoso.com, click Change Domain Controller, and then connect to DC1.

• Question 223:

  Your company hosts a Web site on a server that runs Windows Server 2008 R2. The server has the Web Server (IIS) server role installed. SSL is configured on the Web site for virtual directories that require encryption.

  You are implementing a new Web application on the Web site. The new application has its own logon page named User1ogin.aspx. You enable Forms Authentication in the Web site properties.

  You need to configure the Web site to use User1ogin.aspx to authenticate user accounts.

  What should you do?

  A. Configure the Forms Authentication Settings to Require SSL.
  B. Configure the Name property of the Cookie Settings to the User1ogin.aspx filename.
  C. Configure the Login URL property for the Forms Authentication Settings to the User1ogin.aspx filename.
  D. Configure the Default Document setting to add the User1ogin.aspx filename in the Web site properties.
  C. Configure the Login URL property for the Forms Authentication Settings to the User1ogin.aspx filename.

• Question 224:

  Your network contains a server named Server1 that runs Windows Server 2008 R2.

  You need to ensure that you can log performance counter data from Server1 to a SQL database.

  Which tool should you use?

  A. Data Sources (ODBC)
  B. Storage Explorer
  C. Share and Storage Management
  D. Component Services
  A. Data Sources (ODBC)

• Question 225:

  Your network contains an Active Directory forest. The forest contains a member server named Server1 that runs Windows Server 2008 R2.

  You configure Server1 as a VPN server.

  You need to ensure that only client computers that have up-to-date virus definitions can establish VPN connections to Server1.

  Which server role, role service, or feature should you install?

  A. windows System Resource Manager (WSRM)
  B. Routing and Remote Access service (RRAS)
  C. Connection Manager Administration Kit (CMAK)
  D. File Server Resource Manager (FSRM)
  E. Windows Server Update Services (WSUS)
  F. Windows Internal Database
  G. Services for Network File System (NFS)
  H. Simple TCP/IP Services
  I. Network Policy Server (NPS)
  J. Health Registration Authority (HRA)
  I. Network Policy Server (NPS)

• Question 226:

  Your network contains a single Active Directory domain. All servers run Windows Server 2008 R2. A DHCP server is deployed on the network and configured to provide IPv6 prefixes.

  You need to ensure that when you monitor network traffic, you see the interface identifiers derived from the Extended unique Identifier (6UI)-64 address.

  Which command should you run?

  A. netsh.exe interface ipv6 set global addressmaskreply-disabled
  B. netsh.exe interface ipv6 set global dhcpmediasense = enabled
  C. netsh.exe interface ipv6 set global randomizeidentifiers = disabled
  D. netsh.exe interface ipv6 set privacy state = enabled
  C. netsh.exe interface ipv6 set global randomizeidentifiers = disabled

• Question 227:

  You deploy Network Access Protection (NAP) on your network.

  An administrator configures a network policy as shown in the exhibit. (Click the Exhibit button.)

  

  You discover that noncompliant client computers cannot access the remediation network.

  You need to configure the network policy to ensure that noncompliant client computers can access the remediation network. What should you do?

  A. In the Type of network access server list, click HCAP Server.
  B. In the Type of network access server list, click Health Registration Authority.
  C. In Access Permission, select the Ignore user account dial-in properties check box.
  D. In Access Permission, select the Grant access. Grant access if the connection request matches this policy option button.
  D. In Access Permission, select the Grant access. Grant access if the connection request matches this policy option button.

• Question 228:

  Your network contains an Active Directory forest named adatum.com. All domain controllers currently run Windows Server 2003 Service Pack 2 (SP2). The functional level of the forest and the domain is Windows Server 2003.

  You need to deploy a read-only domain controller (RODC) that runs Windows Server 2008 R2.

  What should you do first?

  A. Raise the functional level of the forest to Windows Server 2008.
  B. Deploy a writable domain controller that runs Windows Server 2008 R2.
  C. Raise the functional level of the domain to windows Server 2008.
  D. Run adprep.exe.
  D. Run adprep.exe.

• Question 229:

  Your company has an Active Directory domain. The company runs Remote Desktop services.

  Standard Users who connect to the Remote Desktop Sessions Host Server are in an organizational unit (OU) named OU1. Administrative users are in OU1. No other users connect to the Remote Desktop Session Host Server.

  You need to ensure that only members of OU1 can run Remote Desktop Protocol files.

  What should you do?

  A. Create a Group Policy object (GPO) that configures the Allow .rdp files from valid publishers and user's default .rdp settings policy setting in the Remote Desktop Client Connection template to Enabled. Apply the GPO to OU1.
  B. Create a Group Policy object (GPO) that configures the Specify SHA1 thumbprints of certificates represting trusted .rdppublishers policy setting in the Remote Desktop Client Connection template to Enabled. Apply the GPO to OU1.
  C. Create a Group Policy object (GPO) that configures the Allow .rdp files from unknown publishers policy setting in the Remote Desktop Client Connection template to Disabled. Apply the GPO to OU1.
  D. Create a Group Policy object (GPO) that configures the Allow .rdp files from valid publishers and user's default .rdp settings policy setting in the Remote Desktop Client Connection template to Disabled. Apply the GPO to OU1.
  B. Create a Group Policy object (GPO) that configures the Specify SHA1 thumbprints of certificates represting trusted .rdppublishers policy setting in the Remote Desktop Client Connection template to Enabled. Apply the GPO to OU1.

• Question 230:

  You deploy an Active Directory Federation Services (AD FS) Federation Service Proxy on a server named Server1.

  You need to configure the Windows Firewall on Server1 to allow external users to authenticate by using AD FS.

  Which protocol should you allow on Server1?

  A. SMB
  B. RPC
  C. Kerberos
  D. SSL
  D. SSL