Ensurepass

QUESTION 291

Your network contains an Active Directory domain named contoso.com. A partner organization has an Active Directory domain named fabrikam.com. Your company plans to provide VPN access for fabrikam.com users. You need to configure Network Policy Server (NPS) to forward authentication requests to fabrikam.com. What should you configure on the NPS server?

 

A.       connection request policies

B.       system health validators (SHVs)

C.       health policies

D.       remediation server groups

 

Correct Answer: A

 

 

QUESTION 292

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server3 that has the DHCP Server role installed. You need to configure Windows Firewall on Server3 to allow IPv4 client computers access to the DHCP Server service. Which port or ports should you allow through Windows Firewall?

 

A.       TCP 53 and UDP 53

B.       TCP 995

C.       TCP 67 and TCP 68

D.       UDP 995

E.        TCP 993

F.        TCP 587 and UDP 587

G.       UDP 993

H.       UDP 546 and UDP 547

I.         TCP 1433

J.         UDP 67 and UDP 68

K.        TCP 546 and TCP 547

L.        TCP 636

M.     UDP 1433

 

Correct Answer: J

 

 

QUESTION 293

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server2 that has the DNS Server role installed. You need to configure the Windows Firewall on Server2 to allow client computers access to the DNS Server service. Which port or ports should you allow through Windows Firewall?

 

A.       UDP 546 and UDP 547

B.       UDP 993

C.       TCP 993

D.       TCP 995

E.        UDP 995

F.        TCP 67 and TCP 68

G.       TCP 636

H.       TCP 587 and UDP 587

I.         TCP 546 and TCP 547

J.         UDP 67 and UDP 68

K.        UDP 1433

L.        TCP 1433

M.     TCP 53 and UDP 53

 

Correct Answer: M

 

 

QUESTION 294

Your network contains a server named DC1 that has the DHCP Server role installed. You discover that clients are not being assigned IP addresses from DC1. You open the DHCP console as shown in the exhibit.

 

 

You need to ensure that the clients can be assigned IP addresses from DC1. What should you do?

 

A.       Compact the database.

B.       Configure DHCP link layer-based filtering.

C.       Configure a DHCP Relay Agent.

D.       Restore the database from a backup.

E.        Configure Routing Information Protocol version 2 (RIPv2) on the router

F.        Increase the database cleanup interval.

G.       Configure Open Shortest Path First (OSPF) on the router

H.       Configure name protection.

I.         Reconcile the scope.

J.         Modify the start address.

K.        Authorize DC1 in Active Directory.

 

Correct Answer: K

 

 

QUESTION 295

You need to ensure that only the members of the Power Users group and the members of the Administrators group can view the events in the System log. Which tools should you use?

 

A.       Wecutil

B.       Event Viewer

C.       Cacls

D.       Wevtutil

 

Correct Answer: D

QUESTION 296

Your network contains an Active Directory forest named contoso.com. The forest contains a server named Server1 that runs Windows Server 2008 R2 Service Pack 1 (SP1) Standard. The forest contains a server named Server2 that runs Windows Server 2008 R2 SP1 Enterprise. Server1 and Server2 have the Print and Document Services server role installed. You need to migrate the print queues, printer settings, printer ports, and language monitors from Server1 to Server2. Which tool should you use?

 

A.       Print Management

B.       Printmig

C.       Active Directory Users and Computers

D.       Printui

 

Correct Answer: A

 

 

QUESTION 297

Your network contains an Active Directory domain named contoso.com. The domain contains two Active Directory sites named Site1 and Site2. You have a domain-based Distributed File System (DFS) namespace named \contoso.compublic that has a single namespace server located in Site1. You install another namespace server in Site2. You need to verify that the client computers in Site2 use the new namespace server. You want to achieve this goal by using the minimum amount of administrative effort. Which tool should you use?

 

A.       Share and Storage Management

B.       DFS Management

C.       Windows Explorer

D.       Services for Network File System (NFS)

 

Correct Answer: B

 

 

QUESTION 298

Your network contains an Active Directory domain named contoso.com. The domain contains three VPN servers named VPN1, VPN2, and VPN3 that run Windows Server 2008 R2. You need to configure all of the VPN servers to use the same network policies. What should you configure on the VPN servers?

 

A.       remediation server groups

B.       the RADIUS Accounting accounting provider

C.       connection request policies

D.       the RADIUS Authentication authentication provider

 

Correct Answer: D

 

 

QUESTION 299

Your network contains an Active Directory forest. The forest contains the member servers configured as shown in the following table.

 

All servers run Windows Server 2008 R2. You deploy a new server named Server1. You need to configure Server1 to provide central authentication for all dial-up connections and all VPN connections. What should you install on Server1?

 

A.       Active Directory Lightweight Directory Services (AD LDS)

B.       Active Directory Federation Services (AD FS)

C.       Network Policy Server (NPS)

D.       Routing and Remote Access service (RRAS)

 

Correct Answer: C

 

 

QUESTION 300

Your network contains a server named Server1 that runs Windows Server 2008 R2 Service Pack 1 (SP1). A user named Admin1 opens Event Viewer on Server1 as shown in the exhibit.

 

 

Admin1 can view the events in the Application log and the System log. You need to ensure that Admin1 can view the events in the Security log. What should you modify?

 

A.       the user rights assignment

B.       the membership of the Event Log Readers group

C.       the permissions on the Server1 computer object

D.       the permissions on the Security.evtx file

 

Correct Answer: D

 

Instant Access to Download Testing Software & PDF File for Microsoft 70-642 Real Exam

Instant Access to Try Microsoft 70-642 Free Demo