Microsoft 70-649 Online Practice Questions and Exam Preparation

Microsoft 70-649 Online Questions & Answers

• Question 81:

  You need to purge the list of user accounts that were authenticated on a read-only domain controller (RODC). What should you do?

  A. Run the repadmin.exe command and specify the /prp parameter.
  B. From Active Directory Sites and Services, modify the properties of the RODC computer object.
  C. From Active Directory Users and Computers, modify the properties of the RODC computer object.
  D. Run the dsrm.exe command and specify the -u parameter.
  A. Run the repadmin.exe command and specify the /prp parameter.

• Question 82:

  You manage a member server that runs Windows Server 2008 R2. The server runs the Remote Desktop Gateway (RD Gateway) role service.

  You need to gather information about active users that are currently connected through the RD Gateway server. The information must include the Connection ID, User ID, User Name, Idle Time, and Client IP Address.

  What should you do?

  A. View the events in the Monitoring folder from the RD Gateway Manager console.
  B. View the Event Viewer Security log.
  C. View the Event Viewer Application log.
  D. View the Event Viewer Terminal Services-Gateway log.
  D. View the Event Viewer Terminal Services-Gateway log.

• Question 83:

  Your network contains an Active Directory forest named contoso.com. The forest contains a server named Server1 that is configured as an enterprise certification authority (CA). The forest contains a server named Server2 that has the

  Network Policy Server (NPS) role service installed.

  You deploy Network Access Protection (NAP).

  You discover that Server1 fails to issue health certificates.

  You need to ensure that health certificates can be issued.

  What should you do?

  A. Install an additional server, configure the new server as a standalone CA, and then configure the Health Registration Authority (HRA) to use the CA.
  B. From the Network Policy Server console, create a new health policy.
  C. From the Network Policy Server console, modify the Windows System Health Validators settings.
  D. Install the Host Credential Authorization Protocol (HCAP) role service on Server1.
  A. Install an additional server, configure the new server as a standalone CA, and then configure the Health Registration Authority (HRA) to use the CA.

• Question 84:

  Your network contains a Windows Server Update Services (WSUS) server named Server!. All client computers are configured to download updates from Server1. Server1 is configured only to synchronize manually to Microsoft Update.

  Your company deploys a new Microsoft application.

  You discover that the new application is not listed on the Products and Classifications list

  You need to ensure that updates for the new application are available to all of the client computers.

  What should you do first?

  A. Run the Server Cleanup Wizard.
  B. Approve updates.
  C. Synchronize the WSUS server.
  D. Modify the Products and Classifications settings.
  C. Synchronize the WSUS server.

• Question 85:

  Your network contains a Key Management Service (KMS) host named Server1.

  On a client computer named Computer1 that runs Windows 7, you discover the following error message in the Event log: "0xC004F00F. The Software Licensing Server reported that the hardware ID binding is beyond level of tolerance."

  You need to prevent the error message from appearing on Computer1.

  What should you do from Computer1?

  A. Run slmgr.vbs /xpr.
  B. Run slmgr.vbs /ato.
  C. Restart the Windows Process Activation Service.
  D. Restart the Windows Update service.
  B. Run slmgr.vbs /ato.

• Question 86:

  Your company has a main office and 40 branch offices. Each branch office is configured as a separate Active Directory site that has a dedicated read-only domain controller (RODQ.

  You need to identify the user accounts that can be cached on the RODC server.

  Which utility should you use?

  A. Dsmod.exe
  B. Repadmin.exe
  C. Active Directory Domain and Trusts
  D. Active Directory Sites and Services
  B. Repadmin.exe

• Question 87:

  Your network contains an Active Directory forest. The forest contains a member server named Server1 that runs Windows Server 2008 R2.

  You need to configure Server1 to provide central authentication of dial-up, VPN, and wireless connections to the network.

  Which server role, role service or feature should you install?

  A. Windows System Resource Manager (WSRM)
  B. Health Registration Authority (HRA)
  C. Services for Network File System (NFS)
  D. Simple TCP/IP Services
  E. Network Load Balancing (NLB)
  F. Windows Internal Database
  G. Connection Manager Administration Kit (CMAK)
  H. File Server Resource Manager (FSRM)
  I. Windows Server Update Services (WSUS)
  J. Group Policy Management
  K

• Question 88:

  Your company runs Windows Server Update Services (WSUS) on a server named Server1. Server1 runs Windows Server 2008 R2. Server1 is located on the company intranet.

  You configure the WSUS Web site to use SSL.

  You need to configure a Group Policy object (GPO) to specify the intranet update locations.

  Which URLs should you use?

  A. http: //SERVER1
  B. http://Server1:8080
  C. https://SERVER1
  D. https://Server1:8080
  C. https://SERVER1

• Question 89:

  Your network contains three servers that run Windows Server 2008 R2. The servers are configured as shown in the following table.

  

  Server1 and Server2 are members of an RD Session Host server farm named farm 1.contoso.com.

  You configure the RD Connection Broker role service on Server3 to support farm 1.contoso.com.

  You need to create DNS records to support RD Connection Broker load balancing.

  Which record or records should you create for farm 1.contoso.com?

  A. Two service location (SRV) records
  B. On Alias (CNAME) records
  C. On Host (AAAA) records
  D. Two Host (A) records
  D. Two Host (A) records

• Question 90:

  Your network contains an Active Directory domain.

  You deploy Network Access Protection (NAP).

  You need to verify whether VPN clients have Windows Firewall enabled. What should you configure?

  A. system health validators (SHVs)
  B. connection request policies
  C. the Windows Authentication authentication provider
  D. health policies
  E. the Windows Accounting accounting provider
  F. Group Policy preferences
  G. IKEv2 client connections
  H. the RADIUS Authentication authentication provider
  I. remediation server groups
  J. the RADIUS Accounting accounting provider
  A. system health validators (SHVs)