TS: Windows Server 2008 Network Infrastructure, Configuring v58.0 (70-642)

Page:    1 / 27   
Total 406 questions

Your network contains a server that runs Windows Server 2008 R2 named Server1. You install a new application on Server1. After the installation, you discover that Server1 frequently becomes unavailable.
You need to identify whether the issues on Server1 coincide with the installation of the application.
What should you do?

  • A. From Reliability Monitor, review the reliability details.
  • B. From Administrative Tools, run Windows Memory Diagnostic.
  • C. From the System Configuration utility, select Diagnostic startup.
  • D. From the command prompt, run the Program Compatibility Wizard.


Answer : A

Explanation:
Reliability Monitor maintains up to a year of history for system stability and reliability events. The System Stability Chart displays a rolling graph organized by date.
The top half of the System Stability Chart displays a graph of the Stability Index. In the lower half of the chart, five rows track Reliability Events that either contribute to the stability measurement for the system or provide related information about software installation and removal. When one or more Reliability Events of each type are detected, an icon appears in the column for that date.
For Software Installs and Uninstalls, an Information icon indicates a successful event of that type occurred, or a Warning icon indicates a failure of that type occurred.
For all other Reliability Event types, an Error icon indicates a failure of that type occurred. http://technet.microsoft.com/en-us/library/cc749583(v=ws.10).aspx

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and wingtiptoys.com. The network contains a public DNS server named
Server1 and an e-mail server named Server2. You notice that Internet hosts can send e- mail messages to users that have the @contoso.com SMTP suffix, but cannot send e-mail messages to users that have the @wingtiptoys.com SMTP suffix.
You need to ensure that every user can receive e-mail messages from the Internet.
Which type of resource record should you add to the wingtiptoys.com zone?

  • A. Host (A)
  • B. Mail Group (MG)
  • C. Mail Exchanger (MX)
  • D. Service Locator (SRV)


Answer : C

Explanation:
http://technet.microsoft.com/en-us/library/cc958958.aspx

Your network contains a computer named Computer1. Computer1 is assigned an IP address of
192.168.1.112/26.
Your company's corporate policy states that the first usable address in each subnet is allocated to the default gateway.
You need to configure the default gateway for Computer1.
Which address should you choose?

  • A. 192.168.1.1
  • B. 192.168.1.63
  • C. 192.168.1.65
  • D. 192.168.1.93


Answer : C

Your network contains a file server named Server1 that runs Windows Server 2008 R2.
You enable IPSec on Server1.
You need to identify which client computers have active IPSec associations to Server1.
Which administrative tool should you use to achieve this task?

  • A. Share and Storage Management
  • B. Windows Firewall with Advanced Security
  • C. Performance Monitor
  • D. Event Viewer


Answer : B

Your network contains an Active Directory domain named contoso.com. The domain contains two DNS servers named DC1 and Server1. DC1 is a domain controller. Server1 is member server.
On Server1, you create a primary zone named fabrikam.com.
You need to create a copy of the fabrikam.com zone on DC1.
What should you do? (Each correct answer presents part of the solution. Choose two.)

  • A. Create a new secondary zone on DC1.
  • B. Run the New Delegation Wizard on DC1.
  • C. Create a new Active Directory-integrated stub zone on DC1.
  • D. Run the New Delegation Wizard on Server1.
  • E. Modify the Name Servers list for the fabrikam.com zone.
  • F. Modify the start of authority (SOA) record of the fabrikam.com zone.


Answer : A,E

Explanation: http://technet.microsoft.com/en-us/library/dd197427(v=ws.10).aspx
A DNS database can be partitioned into multiple zones. A zone is a portion of the DNS database that contains the resource records with the owner names that belong to the contiguous portion of the DNS namespace. Zone files are maintained on DNS servers. A single DNS server can be configured to host zero, one, or multiple zones.
The new zone fabrikam.com is a totally new domain and zone and is thus in no way related to contoso.com.
This is allowed as DNS servers are capable of hosting multiple, unrelated zones.

Your network contains two offices named Office1 and Office2. The offices connect to each other by using a demand-dial connection.
You add a new subnet in Office2.
You need to ensure that a demand-dial connection starts when users attempt to connect to resources in the new Office2 subnet.
What should you do from the Remote Routing and Access console?

  • A. From the remote access server in Office2, right-click the demand-dial interface and click Connect.
  • B. From the remote access server in Office1, right-click the demand-dial interface and click Connect.
  • C. From the remote access server in Office1, right-click the demand-dial interface and click Update Routes.
  • D. From the remote access server in Office2, right-click the demand-dial interface and click Update Routes.


Answer : C

Your network contains an Active Directory domain. The domain contains a file server named Server1 that runs Windows Server 2008 R2.
You need to ensure that a user named User1 can back up and restore files on Server1.
The solution must minimize the number of user rights assigned to User1.
What should you do?

  • A. Add User1 to the Server Operators group.
  • B. Assign the Backup files and directories user right to User1.
  • C. Add User1 to the Backup Operators group.
  • D. Assign the Perform volume maintenance tasks user right to User1.


Answer : B

You need to capture the HTTP traffic to and from a server every day between 09:00 and
10:00.
What should you do?

  • A. Create a scheduled task that runs the Netsh tool.
  • B. Create a scheduled task that runs the Nmcap tool.
  • C. From Network Monitor, configure the General options.
  • D. From Network Monitor, configure the Capture options.


Answer : B

Explanation:
nmcap /networks * /capture LDAP /file c:\file.cap
If you want a timer add the following
/startwhen /timeafter x hours

Your network contains a DHCP server that is configured as shown in the exhibit. (Click the
Exhibit button.)


You need to ensure that the DHCP server can respond to DHCP clients.
What should you do?

  • A. From the DHCP console, authorize the DHCP server.
  • B. From the Services console, start the DHCP Server service.
  • C. From Network Connections, modify the IPv4 properties and the IPv6 properties.
  • D. From the Local Users and Groups snap-in, add the Server3 computer account to the DHCP Administrators group.


Answer : A

Your network contains a server named Server1 that has the Routing role service installed.
Server1 has two network connections. One network connection connects to the internal network. The other network connection connects to the Internet.
All network connections connected to the internal network use private IP addresses. You install a Web server named Web1. Web1 hosts a secured Web site that only allows connections over TCP port 8281. Web1 is connected to the internal network.
You need to ensure that the secure Web site can be accessed from the Internet.
What should you do from the Routing and Remote Access console?

  • A. Configure Routing Information Protocol (RIP), and then activate authentication on the RIP interface.
  • B. Configure Routing Information Protocol (RIP), and then configure the incoming packet protocol settings on the RIP interface.
  • C. Configure Network Address Translation (NAT), and then add a new service to the NAT interface.
  • D. Configure Network Address Translation (NAT), and then enable the Secure Web Server (HTTPS) service on the NAT interface.


Answer : C

Explanation:
This is a trick question. The requirement here is to allow port 8281. Https is running on port
443.
So the answer is "C".

Your network contains a server named Server1 that runs Windows Server 2008 R2.
Server1 has the Routing and Remote Access service (RRAS) role service installed.
You need to view all inbound VPN packets. The solution must minimize the amount of data collected.
What should you do?

  • A. From RRAS, create an inbound packet filter.
  • B. From Network Monitor, create a capture filter.
  • C. From the Registry Editor, configure file tracing for RRAS.
  • D. At the command prompt, run netsh.exe ras set tracing rasauth enabled.


Answer : B

Your company has a server named Server1 that runs a Server Core installation of
Windows Server 2008 R2, and the DNS Server server role. Server1 has one network interface named Local Area Connection. The static IP address of the network interface is configured as 10.0.0.1.
You need to create a DNS zone named local.contoso.com on Server1.
Which command should you use?

  • A. ipconfig /registerdns:local.contoso.com
  • B. dnscmd Server1 /ZoneAdd local.contoso.com /DSPrimary
  • C. dnscmd Server1 /ZoneAdd local.contoso.com /Primary /file local.contoso.com.dns
  • D. netsh interface ipv4 set dnsserver name="local.contoso.com" static 10.0.0.1 primary


Answer : C

Explanation:
http://technet.microsoft.com/en-us/library/cc756116(v=ws.10).aspx#BKMK_22

Your network contains a domain controller named DC1 and a member server named
Server1.
You save a copy of the Active Directory Web Services (ADWS) event log on DC1. You copy the log to Server1.
You open the event log file on Server1 and discover that the event description information is unavailable.
You need to ensure that the event log file displays the same information when the file is open on Server1 and on DC1.
What should you do on Server1?

  • A. Import a custom view.
  • B. Copy the SYSVOL folder from DC1.
  • C. Copy the LocaleMetaData folder from DC1.
  • D. Create a custom view.


Answer : C

Explanation:
The LocaleMetaData contains the description/display information that is missing, and when you "save all events as" you should chose to save and "display information". http://technet.microsoft.com/en-us/library/cc749339.aspx

Your network contains an Active Directory domain. The domain contains an enterprise certification authority (CA) named Server1 and a server named Server2.
On Server2, you deploy Network Policy Server (NPS) and you configure a Network Access
Protection (NAP) enforcement policy for IPSec.
From the Health Registration Authority snap-in on Server2, you set the lifetime of health certificates to four hours.
You discover that the validity period of the health certificates issued to client computers is one year.
You need to ensure that the health certificates are only valid for four hours.
What should you do?

  • A. Modify the Request Handling settings of the certificate template used for the health certificates.
  • B. Modify the Issuance Requirements settings of the certificate template used for the health certificates.
  • C. On Server1, run certutil.exe -setreg policy\editflags +editf_attributeenddate.
  • D. On Server1, run certutil.exe Csetregdbflags +dbflags_enablevolatilerequests.


Answer : C

Explanation:
Configure template validity period override
Use the following procedure to allow the CA to issue the new health certificate template.
This procedure applies to an enterprise NAP CA only.
To allow template validity period override
On the NAP CA, click Start, click Run, right-click Command Prompt, and then click Run as administrator.
In the command window, type Certutil.exe -setreg policy\EditFlags
+EDITF_ATTRIBUTEENDDATE, and then press ENTER.
In the command window, type net stop certsvc && net start certsvc, and then press
ENTER.
Verify that Active Directory Certificate Services (AD CS) stops and starts successfully. http://technet.microsoft.com/en-us/library/dd296906(v=ws.10).aspx
Reference URL : http://technet.microsoft.com/en-us/library/dd296906(v=ws.10).aspx

Your network contains an Active Directory forest. The forest contains a member server named Server1 that runs Windows Server 2008 R2. You need to ensure that UNIX-based client computers can access shared folders on Server1.
Which server role, role service, or feature should you install?

  • A. Windows Server Update Services (WSUS)
  • B. Network Policy Server (NPS)
  • C. Routing and Remote Access service (RRAS)
  • D. Simple TCP/IP Services
  • E. Windows System Resource Manager (WSRM)
  • F. File Server Resource Manager (FSRM)
  • G. Wireless LAN Service
  • H. Network Load Balancing (NLB)
  • I. Windows Internal Database
  • J. Services for Network File System (NFS) K. Group Policy Management L. Health Registration Authority (HRA) M. Connection Manager Administration Kit (CMAK)


Answer : J

Explanation:
http://technet.microsoft.com/en-us/library/cc753302(v=ws.10).aspx
Services for Network File System (NFS) provides a file-sharing solution for enterprises that have a mixed
Windows and UNIX environment. Services for NFS enables users to transfer files between computers running the Windows Server 2008 operating system and UNIX-based computers using the NFS protocol.

Page:    1 / 27   
Total 406 questions