Tag: 70-649 Study Guide

EnsurepassQUESTION 261 Your network contains a Web server named Server1. You install a server certificate on Server1. You need to ensure that users can access the default Web site over HTTPS. What should you configure from Internet Information Services (IIS) Manager?   To answer, select the appropriate component or action in the answer area.   Point and Shoot:   Correct Answer: QUESTION 262 Your network contains two servers named Server1 and Server2. Server1 and Server2 Read more [...]

EnsurepassQUESTION 251 You need to deploy a read-only domain controller (RODC) that runs Windows Server 2008 R2. What is the minimal forest functional level that you should use?   A.      Windows Server 2008 R2 B.      Windows Server 2008 C.      Windows Server 2003 D.      Windows 2000   Correct Answer: C     QUESTION 252 Your company has a single Active Directory domain Read more [...]

EnsurepassQUESTION 241 Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. A domain controller named DC1 has a standard primary zone for contoso.com. A domain controller named DC2 has a standard secondary zone for contoso.com. You need to ensure that the replication of the contoso.com zone is encrypted. You must not lose any zone data. What should you do?   A.      On both Read more [...]

EnsurepassQUESTION 231 Your network contains three servers named Server1, Server2, and Server3 that have the Network Policy Server (NPS) role service installed. On Server1, you configure a Remote RADIUS Server Group that contains Server2 and Server3. On Server2 and Server3, you configure Server1 as a RADIUS client. You configure Server2 and Server3 to authenticate remote users. You need to configure Server1 to forward RADIUS authentication requests to Server2 and Server3. What should you create Read more [...]

EnsurepassQUESTION 221 Your network contains a two-node Hyper-V cluster that hosts 10 virtual machines (VMs). You discover that when a failover occurs, all of the VMs fail over simultaneously. You need to modify the cluster so that you can fail over each VM individually. What should you do first?   A.      Add a third node to the cluster. B.      Modify the properties of the cluster failover. C.      Create a Clustered Read more [...]

EnsurepassQUESTION 211 Your network contains a server named Server1 that has the Remote Desktop Connection Broker (RD Connection Broker) role service installed. You deploy two new servers named Server2 and Server3. On Server2 and Server3, you install the Remote Desktop Session Host (RD Session Host) role service. From the Remote Desktop Session Host Configuration snap-in, you configure Server2 and Server3 as server farm members. You need to ensure that all Remote Desktop sessions are distributed Read more [...]

EnsurepassQUESTION 201 Your network contains a server named Server1 that runs a Server Core installation of Windows Server 2008 R2. The network contains a client computer named Computer1 that runs Windows 7. You need to ensure that you can collect events from Server1 on Computer1. What should you run on Server1?   A.      net config server B.      eventcreate /so C.      wecutil cs D.      Read more [...]

EnsurepassQUESTION 191 Your network contains a server that runs Windows 2008 R2. The disks on the server are configured as shown in the following table.     Volume D contains shared files and applications. You plan to install an application named App1 on the server. App1 must be installed in D: Appl. App1 requires 75 GB of disk space. You need to ensure that the server can support the planned installation of Appl. The solution must minimize the impact on all users. What should you Read more [...]

EnsurepassQUESTION 181 Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Remote Desktop Gateway (RD Gateway) role service installed. You add the Domain Users group to a connection authorization policy named TS_CAP_01. You need to ensure that only client computers that have Windows Firewall enabled can connect to Remote Desktop resources through the RD Gateway. What should you do?   A.      From Remote Desktop Gateway Manager, Read more [...]

EnsurepassQUESTION 161 Your company has a network that has 100 servers. You install a new server that runs Windows Server 2008 R2. The server has the Web Server (IIS) server role installed. After a week, you discover that the Reliability Monitor has no data, and that the Systems Stability chart has never been updated. You need to configure the server to collect the Reliability Monitor data. What should you do?   A.      Run the perfmon.exe /sys command on the server. Read more [...]

EnsurepassQUESTION 151 Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the SMTP Server feature installed and has one SMTP Virtual Server named SMTP1.   You need to configure Server1 to meet the following requirements:   Ÿ   Relay e-mail messages for contoso.com. Ÿ   Relay e-mail messages for nwtraders.com. Ÿ   Prevent the relaying of e-mail messages to other domains.   What should you do?   Read more [...]

EnsurepassQUESTION 141 Active Directory Rights Management Services (AD RMS) is deployed on your network. Users who have Windows Mobile 6 devices report that they cannot access documents that are protected by AD RMS. You need to ensure that all users can access AD RMS protected content by using Windows Mobile 6 devices. What should you do?   A.      Modify the security of the MobileDeviceCertification.asmx file. B.      Modify the security Read more [...]

EnsurepassQUESTION 131 Your network contains a Windows Server Update Services (WSUS) server. You have an organizational unit (OU) named Sales. The Sales OU contains all of the computer objects for the sales department. You enable client side targeting for the Sales OU and set the target group name to Sales-Computers. You restart a sales computer. You discover that the computer is not added to the Sales-Computer computer group in WSUS. You need to ensure that all sales computers are added to the Read more [...]

EnsurepassQUESTION 121 You manage 20 servers that run Windows Server 2008 R2. The Remote Desktop Services server role and the Windows System Resource Manager (WSRM) feature are installed on all the servers. You create and configure a resource-allocation policy that has the required custom settings on a server named TS01. You need to configure the WSRM settings on all the servers to match the WSRM settings on TS01. What should you do?   A.      Use the Windows Backup Read more [...]

EnsurepassQUESTION 111 Your network contains an Active Directory domain named contoso.com. A partner organization has an Active Directory domain named fabrikam.com. Your company plans to provide VPN access for fabrikam.com users. You need to configure Network Policy Server (NPS) to forward authentication requests to fabrikam.com. What should you configure on the NPS server?   A.      Health policies B.      Connection request policies C.      Read more [...]

EnsurepassQUESTION 101 Your network consists of a single Active Directory domain. The network contains a Remote Desktop Session Host Server that runs Windows Server 2008 R2, and client computers that run Windows 7. All computers are members of the domain. You deploy an application by using the RemoteApp Manager. The Remote Desktop Session Host Server's security layer is set to Negotiate. You need to ensure that domain users are not prompted for credentials when they access the application. What Read more [...]

EnsurepassQUESTION 91 Your company has a server named DC1 that runs Windows Server 2008 R2. Server1 has the DHCP Server role installed. You find that a desktop computer named Computer1 is unable to obtain an IP configuration from the DHCP server. You install the Microsoft Network Monitor 3.0 application on Server1. You enable P-mode in the Network Monitor application configuration. You plan to capture only the DHCP server-related traffic between Server1 and Computer1. The network interface configuration Read more [...]

EnsurepassQUESTION 81 You are configuring a two-node failover cluster. The failover cluster will connect to a storage server that runs Windows Storage Server 2008. The storage server contains a raw disk. The raw disk appears in the Disk Management console for both nodes. From one of the nodes, you bring the disk online, and then you initialize the disk. You run the Validate a Configuration Wizard as shown in the exhibit.     You need to ensure that all of the tests pass when you run Read more [...]

EnsurepassQUESTION 71 You have a server named Server1 that has the following Active Directory Certificate Services (AD CS) role services installed:   Ÿ   Enterprise root certification authority (CA) Ÿ   Certificate Enrollment Web Service Ÿ   Certificate Enrollment Policy Web Service   You create a new certificate template. External users report that the new template is unavailable when they request a new certificate. You verify that all other templates Read more [...]

EnsurepassQUESTION 61 Your network contains an Active Directory domain. The domain contains an enterprise certification authority (CA) named Server1 and a server named Server2. On Server2, you deploy Network Policy Server (NPS) and you configure a Network Access Protection (NAP) enforcement policy for IPsec. From the Health Registration Authority snap-in on Server2, you set the lifetime of health certificates to four hours. You discover that the validity period of the health certificates issued Read more [...]

EnsurepassQUESTION 51 Active Directory Rights Management Services (AD RMS) is deployed on your network. You need to configure AD RMS to use Kerberos authentication. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)   A.      Register a service principal name (SPN) for AD RMS. B.      Register a service connection point (SCP) for AD RMS. C.      Configure the identity Read more [...]

EnsurepassQUESTION 41 Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 and a client computer named Computer1. Server1 runs Windows Server 2008 R2. Computer1 runs Windows 7. Server1 has the Remote Desktop Session Host (RD Session Host) role service and the Remote Desktop Web Access (RD Web Access) role service installed. You need to ensure that new RemoteApp programs published on Server1 are automatically added to the Start menu on Computer1. Read more [...]

EnsurepassQUESTION 31 Your network contains a Windows Server Update Services (WSUS) server named Server1. You need to configure all WSUS client computers to download approved updates directly from the Microsoft Update servers. The solution must ensure that all WSUS client computers report successful installation of updates to Server1. What should you do?   A.      From Server1, modify the Update Source and Proxy options. B.      From Active Read more [...]

EnsurepassQUESTION 21 Your network contains an Active directory domain named fabrikam.com. The domain contains a Web server named Web1 that runs Windows Server 2008 R2. You install the FTP Server role service on Web1. You need to manage the FTP server settings on Web1. Which tool should you use?   A.      Services B.      Internet Information Services (IIS) 6.0 Manager C.      FTP D.      Read more [...]

EnsurepassQUESTION 11 Your network contains three servers named ADFS1, ADFS2, and ADFS3 that run Windows Server 2008 R2. ADFS1 has the Active Director Federation Services (AD FS) Federation Service role service installed. You plan to deploy AD FS 2.0 on ADFS2 and ADFS3. You need to export the token-signing certificate from ADFS1, and then import the certificate to ADFS2 and ADFS3. In which format should you export the certificate?   A.      Cryptographic Message Syntax Read more [...]

EnsurepassQUESTION 1 Your network contains a server named Server1 that runs Windows Server 2008 R2. You have a user named User1. You need to ensure that User1 can view the events in the Security event log. The solution must minimize the number of rights assigned to User1. What should you do?   A.      In the Local Security Policy console, modify the Security Options. B.      In Event viewer, configure the properties of the Security log. Read more [...]