Ultimate Guide: 70-642 in pdf

Exam Code: 70-642 (Practice Exam Latest Test Questions VCE PDF)
Exam Name: TS: Windows Server 2008 Network Infrastructure, Configuring
Certification Provider: Microsoft
Free Today! Guaranteed Training- Pass 70-642 Exam.

2021 Jan ebook for 70-642:

Q211. - (Topic 3) 

Your network contains one Active Directory domain. You have a member server named Server1 that runs Windows Server 2008 R2. The server has the Routing and Remote Access Services role service installed. 

You implement Network Access Protection (NAP) for the domain. 

You need to configure the Point-to-Point Protocol (PPP) authentication method on Server1. 

Which authentication method should you use? 

A. Challenge Handshake Authentication Protocol (CHAP) 

B. Extensible Authentication Protocol (EAP) 

C. Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2) 

D. Password Authentication Protocol (PAP) 

Answer: B 

Explanation: 

With EAP, the specific authentication mechanism is not chosen during the link establishment phase of the PPP connection; instead, the PPP peers negotiate to perform EAP during the connection authentication phase. When the connection authentication phase is reached, the peers negotiate the use of a specific EAP authentication scheme known as an EAP method. After the EAP method is agreed upon, EAP allows for an open-ended exchange of messages between the access client and the authenticating server that can vary based on the parameters of the connection. The conversation consists of requests and responses for authentication information. The EAP method determines the length and details of the authentication conversation. http://technet.microsoft.com/en-us/library/bb457039.aspx 

Q212. - (Topic 3) 

Your network contains an Active Directory domain. The domain contains several VPN servers that have the Routing and Remote Access service (RRAS) role service installed. 

You need to collect information about the duration of the VPN connections. The information must be stored in a central location. 

What should you configure on the VPN servers? 

A. connection request policies 

B. the RADIUS Authentication authentication provider 

C. health policies 

D. the RADIUS Accounting accounting provider 

E. remediation server groups 

F. the Windows Accounting accounting provider 

G. system health validators (SHVs) 

H. Group Policy preferences 

I. the Windows Authentication authentication provider 

J. IKEv2 client connections 

Answer: D 

Q213. - (Topic 3) 

Your company has a main office and two branch offices. Domain controllers in the main office host an Active Directory-integrated zone. 

The DNS servers in the branch offices host a secondary zone for the domain and use the main office DNS servers as the DNS Master servers for the zone. 

Each branch office has an application server. 

Users access the application server by using its fully qualified domain name. 

You need to ensure that users in the branch offices can access their local application server even if the WAN links are down for three days. 

What should you do? 

A. Increase the Expires After setting to 4 days on the Start of Authority (SOA) record for the zone. 

B. Increase the Refresh Interval setting to 4 days on the Start of Authority (SOA) record for the zone. 

C. Configure the Zone Aging / Scavenging Properties dialog box to enable Scavenge stale resource records, and set the Refresh setting to 4 days. 

D. Configure the Zone Aging / Scavenging Properties dialog box to enable Scavenge stale resource records, and set the No-refresh interval setting to 4 days. 

Answer: A 

Q214. - (Topic 1) 

Your network contains the servers configured as shown in the following table. 

Your company is assigned the public IP addresses from 131.107.0.1 to 131.107.0.31. You need to ensure that Web1 is accessible from the Internet by using https://131.107.0.2. 

What should you do from the Routing and Remote Access console? 

A. From the Static Routes node, configure a static route. 

B. From the server properties, configure SSL Certificate Binding. 

C. From the NAT interface, add an address pool and a reservation. 

D. From the NAT interface, configure the Secure Web Server (HTTPS) service. 

Answer: C 

Q215. - (Topic 3) 

Your company has a server named Server1 that runs Windows Server 2008 R2. Server1 runs the DHCP Server server role and the DNS Server server role. You also have a server named ServerCore that runs a Server Core installation of Windows Server 2008 R2. 

All computers are configured to use only Server1 for DNS resolution. The IP address of Server1 is 192.168.0.1. 

The network interface on all the computers is named LAN. 

Server1 is temporarily offline. A new DNS server named Server2 has been configured to use the IP address 192.168.0.254. 

You need to configure ServerCore to use Server2 as the preferred DNS server and Server1 as the alternate DNS server. 

What should you do? 

A. Run the netsh interface ipv4 add dnsserver "LAN" static 192.168.0.254 index=1 command. 

B. Run the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.254 192.168.0.1 both command. 

C. Run the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.254 primary command and the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.1 both command. 

D. Run the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.254 primary command and the netsh interface ipv4 add dnsserver "LAN" static 192.168.0.1 index=1 command. 

Answer: A 

Improve testout 70-642:

Q216. - (Topic 2) 

Your network contains two Active Directory sites named Site1 and Site2. Site1 contains a server named 

Server1. Server1 runs a custom application named App1. 

Users in Site2 report that they cannot access App1 on Server1. Users in Site1 can access 

App1. Server1 has a Windows Firewall with Advanced Security rule named Rule1. 

You discover that Rule1 blocks the connection to App1. 

You verify that Server1 has no connection security rules. 

You need to ensure that the Site2 users can connect to Server1. 

What should you modify in Rule1? 

A. the authorized computers list 

B. the authorized users list 

C. the edge traversal settings 

D. the scope 

Answer: D 

Q217. - (Topic 1) 

Your company has a domain controller named Server1 that runs Windows Server 2008 R2 and the DNS server role. A server named Server2 runs Windows Server 2003 and Microsoft Exchange Server 2007. 

The company wants to deploy a new Exchange server named Server3 to receive all inbound e- mail traffic. You need to configure DNS to direct incoming e-mail traffic to the Exchange servers. You also need to ensure that higher priority is given to Server3. 

What should you do? 

A. Set the priority value of the Server2 Mail Exchanger (MX) record to 20. Create a new Mail Exchanger (MX) record for Server3. Set the priority value to 5. 

B. Set the priority value of the Server2 Mail Exchanger (MX) record to 5. Create a new Mail Exchanger (MX) record for Server3. Set the priority value to 20. 

C. Create a new Service Location (SRV) record in the domain for Server3. Set the port number value to 25. Configure the priority setting to 20. 

D. Create a new Service Location (SRV) record in the domain for Server3. Set the port number value to 110. Configure the priority setting to 5. 

Answer: A 

Q218. - (Topic 1) 

Your company has a main office and two branch offices. Domain controllers in the main office host an Active Directory-integrated zone. 

The DNS servers in the branch offices host a secondary zone for the domain and use the main office DNS servers as their DNS Master servers for the zone. 

The company adds a new branch office. You add a member server named Branch3 and install the DNS Server server role on the server. You configure a secondary zone for the domain. The zone transfer fails. 

You need to configure DNS to provide zone data to the DNS server in the new branch office. 

What should you do? 

A. Run dnscmd by using the ZoneResetMasters option. 

B. Run dnscmd by using the ZoneResetSecondaries option. 

C. Add the new DNS server to the Zone Transfers tab on one of the DNS servers in the main office. 

D. Add the new DNS server to the DNSUpdateProxy Global security group in Active Directory Users and Computers. 

Answer: C 

Q219. - (Topic 1) 

Your network contains a server named Server1. Server1 runs Windows Server 2008 R2 and has a single network connection. The connection is configured to use a default gateway address of 10.0.0.1. The default gateway has a metric value of 100. You configure a second default gateway that uses an address of 10.0.0.2. 

You need to ensure that 10.0.0.2 is only used as the default gateway if 10.0.0.1 is unreachable. 

What should you do? 

A. For the interface, set the interface metric to 100. 

B. For the 10.0.0.2 gateway, set the metric to 50. 

C. For the 10.0.0.2 gateway, set the metric to 200. 

D. For the 10.0.0.1 gateway and the 10.0.0.2 gateway, enable automatic metric. 

Answer: C 

Q220. - (Topic 2) 

Your network contains a Routing and Remote Access server named RRAS1 and a DHCP server named 

DHCP1. RRAS1 and DHCP1 are located in different subnets. 

RRAS1 is configured to support VPN connections from the Internet. DHCP1 has a scope that provides IP addresses for the VPN connections. 

You need to ensure that VPN clients that connect to RRAS1 can receive IP addresses from DHCP1. 

What should you do? 

A. On DHCP1, configure a DHCP Relay Agent. 

B. On DHCP1, install the Routing role service. 

C. On RRAS1, configure a DHCP Relay Agent. 

D. On RRAS1, install the Routing role service. 

Answer: C 

Explanation: 

If a DHCP server is on the same subnet as your remote access/VPN server, DHCP messages from VPN clients will be able to reach the DHCP server after the VPN connection is established. 

If a DHCP server is on a different subnet than your remote access/VPN server, make sure that the router between subnets can relay DHCP messages between clients and the server. If your router is running a 

Windows Server 2003 operating system, you can configure the DHCP Relay Agent service on the router to forward DHCP messages between subnets. 

To configure the DHCP Relay Agent to work over remote access: 

Click Start, point to Programs, point to Administrative Tools, and then click Routing and 

Remote Access. 

In the object tree, expand Your_Server, expand IP Routing, right-click General, and then click New Routing Protocol. 

In the Routing Protocols list, click DHCP Relay Agent, and then click OK. 

Right-click DHCP Relay Agent, and then click Properties. 

In the DHCP Relay Agent Properties dialog box, type the IP addresses of your DHCP servers in the Server 

Address box, click ADD, and then click OK. 

Right-click DHCP Relay Agent, and then click New Interface. 

Click Internal. 

Internal represents the virtual interface that is connected to all remote access clients.