Microsoft 70-642 TS: Windows Server 2008 Network Infrastructure, Configuring Certification

Ensurepass
Microsoft 70-642 TS: Windows Server 2008 Network Infrastructure, Configuring Certification 51-55

51. Network Access Protection (NAP) is configured for the corporate network.
Users connect to the corporate network by using portable computers.
The company policy requires confidentiality of data when the data is in transit between the portable computers and the servers.
You need to ensure that users can access network resources only from computers that comply with the company policy.
What should you do?
A. Create an IPsec Enforcement Network policy.
B. Create an 802.1X Enforcement Network policy.
C. Create a Wired Network (IEEE 802.3) Group policy.
D. Create an Extensible Authentication Protocol (EAP) Enforcement Network policy.
Answer: A

52. Your company’s corporate network uses Network Access Protection (NAP).
Users are able to connect to the corporate network remotely.
You need to ensure that data transmissions between remote client computers and the corporate network are as secure as possible.
What should you do?
A. Apply an IPsec NAP policy.
B. Configure a NAP policy for 802.1X wireless connections.
C. Configure VPN connections to use MS-CHAP v2 authentication.
D. Restrict Dynamic Host Configuration Protocol (DHCP) clients by using NAP.
Answer: A

53. Your company uses Network Access Protection (NAP) to enforce policies on client computers that connect to the network.
Client computers run Windows 7. A Group Policy is used to configure client computers to obtain updates from Windows Server Update Services (WSUS).
Company policy requires that updates labeled Important and Critical must be applied before client computers can access network resources.
You need to ensure that client computers meet the company policy requirement.
What should you do?
A. Enable automatic updates on each client.
B. Enable the Security Center on each client.
C. Quarantine clients that do not have all available security updates installed.
D. Disconnect the connection until the required updates are installed.
Answer: C

54. Your company has deployed Network Access Protection (NAP) enforcement for VPNs.
You need to ensure that the health of all clients can be monitored and reported.
What should you do?
A. Create a Group Policy object (GPO) that enables Security Center and link the policy to the domain.
B. Create a Group Policy object (GPO) that enables Security Center and link the policy to the Domain Controllers organizational unit (OU).
C. Create a Group Policy object (GPO) and set the Require trusted path for credential entry option to Enabled. Link the policy to the domain.
D. Create a Group Policy object (GPO) and set the Require trusted path for credential entry option to Enabled. Link the policy to the Domain Controllers organizational unit (OU).
Answer: A

55. Your company has deployed Network Access Protection (NAP).
You configure secure wireless access to the network by using 802.1X authentication from any access point.
You need to ensure that all client computers that access the network are evaluated by NAP.
What should you do?
A. Configure all access points as RADIUS clients to the Remediation Servers.
B. Configure all access points as RADIUS clients to the Network Policy Server (NPS).
C. Create a Network Policy that defines Remote Access Server as a network connection method.
D. Create a Network Policy that specifies EAP-TLS as the only available authentication method.
Answer: B

Ensurepass offers the Latest 2013 70-642 Exam PDF to pass the exams.