This page was exported from Braindump2go Free Exam Dumps with PDF and VCE Collection [ https://www.mcitpdump.com ] Export date:Fri Nov 22 20:56:49 2024 / +0000 GMT ___________________________________________________ Title: Microsoft 70-642 Free Braindumps - Pass 70-642 Exam With Braindump2go Free Microsoft 70-642 Q&As (261-270) --------------------------------------------------- Quick and Effective Microsoft 70-642 Exam Preparation Options - Braindump2go new released 70-642 Exam Dumps Questions! Microsoft Official 70-642 relevant practice tests are available for Instant downloading at Braindump2go! PDF and VCE Formates, easy to use and install! 100% Success Achievement Guaranteed! Vendor: Microsoft Exam Code: 70-642 Exam Name: TS: Windows Server 2008 Network Infrastructure, Configuring Keywords: 70-642 Exam Dumps,70-642 Practice Tests,70-642 Practice Exams,70-642 Exam Questions,70-642 Dumps,70-642 PDF,70-642 VCE,70-642 Study Guide QUESTION 261Your network contains an Active Directory forest. The functional level of the forest is Windows Server 2008 R2. You plan to deploy DirectAccess.You need to configure the DNS servers on your network to support DirectAccess.What should you do? A.    Modify the GlobalQueryBlockList registry key and restart the DNS Server service.B.    Modify the EnableGlobalNamesSupport registry key and restart the DNS Server service.C.    Create a trust anchor that uses a certificate issued by an internal certification authority (CA).D.    Create a trust anchor that uses a certificate issued by a publicly trusted certification authority (CA). Answer: AExplanation:To remove ISATAP from the DNS global query block list1. Click Start, click All Programs, click Accessories, rightclick Command Prompt, and then click Run as administrator.2. In the Command Prompt window, type dnscmd /config / globalqueryblocklist wpad, and then press ENTER.3. Close the Command Prompt window.ORTo remove ISATAP from the DNS global query block list on a DNS server 1- Click Start, type regedit.exe, and then press ENTER.2- In the console tree, openComputerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesDNS Parameters.3- In the contents pane, double-click the GlobalQueryBlockList value. 4- In the Edit Multi-String dialog box, remove the name ISATAP from the list, and then click OK.5- Start a command prompt as an administrator.6- In the Command Prompt window, run the following commands:- net stop dns- net start dnshttp://technet.microsoft.com/en-us/library/ee649158(v=ws.10).aspx QUESTION 262Your network contains a server named Server1.contoso.com. Server1 is located on the internal network.You have a client computer named Computer1 that runs Windows 7. Computer1 is located on a public network that is connected to the Internet. Computer1 is enabled for DirectAccess. You need to verify whether Computer1 can resolve Server1 by using DirectAccess.Which command should you run on Computer1? A.    nbtstat.exe -a server1.contoso.comB.    netsh.exe dnsclient show stateC.    nslookup.exe server1.contoso.comD.    ping.exe server1.contoso.com Answer: D QUESTION 263Your network contains a server named Server1 that runs Windows Server 2008 R2. You plan to deploy DirectAccess on Server1.You need to configure Windows Firewall on Server1 to support DirectAccess connections. What should you allow from Windows Firewall on Server1? A.    ICMPv6 Echo RequestsB.    ICMPv6 RedirectC.    IGMPD.    IPv6-Route Answer: A QUESTION 264Your network contains a computer named Computer1 that runs Windows 7. You need to verify if Computer1 has active DirectAccess connections to the network.What should you do? A.    From Network Connections, right-click the active network connection, and then click Status.B.    From Network Connections, select the active network connection, and then click Diagnose this connection.C.    From Windows Firewall with Advanced Security, click Monitoring, and then click Connection Security Rules.D.    From Windows Firewall with Advanced Security, click Monitoring, click Security Associations, and then click Main Mode. Answer: D QUESTION 265Your network contains a Network Policy Server (NPS) named NPS1. You deploy a new NPS named NPS2.You need to ensure that NPS2 sends all authentication requests to NPS1. What should you modify on NPS2? A.    health policiesB.    network policiesC.    RADIUS clientsD.    remote RADIUS server groups Answer: DExplanation:NPS is RADIUS (Remote Authentication....). We need to configure NPS2 to use NPS1 for authentication. QUESTION 266Your network contains a Network Policy Server (NPS) named Server1. NPS1 provides authentication for all of the VPN servers on the network.You need to track the usage information of all VPN connections. Which RADIUS attribute should you log? A.    Acct-Session-IdB.    Acct-Status-TypeC.    ClassD.    NAS-Identifier Answer: C QUESTION 267Your network contains a Network Policy Server (NPS) named Server1. Server1 is configured to use SQL logging.You add a second NPS server named Server2.You need to ensure that Server2 has the same RADIUS authentication and logging settings as Server1. You export the NPS settings from Server1, and then import the settings to Server2.What should you do next on Server2? A.    Create a new ODBC data source.B.    Run netsh.exe nps reset config.C.    Manually configure the SQL logging settings.D.    Restart the Network Policy Server (NPS) role service. Answer: C QUESTION 268Your network contains an Active Directory forest. The forest contains two domains named contoso.com and eu.contoso.com.You install a Network Policy Server (NPS) named Server1 in the contoso.com domain. You need to ensure that Server1 can read the dial-in properties of the user accounts in the eu.contoso.com domain.What should you do? A.    In the contoso.com domain, add Server1 to the RAS and IAS Servers group.B.    In the contoso.com domain, add Server1 to the Windows Authorization Access group.C.    In the eu.contoso.com domain, add Server1 to the RAS and IAS Servers group.D.    In the eu.contoso.com domain, add Server1 to the Windows Authorization Access group. Answer: CExplanation:C is correct, Servers in this group can access remote access properties of users QUESTION 269Your network contains a Network Policy Server (NPS) named Server1. You need to configure a network policy for a VLAN.Which RADIUS attributes should you add? A.    Login-LAT-ServiceLogin-LAT-NodeLogin-LAT-GroupNAS-IdentifierB.    Tunnel-Assignment-ID Tunnel-PreferenceTunnel-Client-Auth-IDNAS-Port-IdC.    Tunnel-Client-Endpt Tunnel-Server-EndptNAS-Port-TypeTunnel-PasswordD.    Tunnel-Medium-Type Tunnel-Pvt-Group-IDTunnel-TypeTunnel-Tag Answer: DExplanation:http://technet.microsoft.com/en-us/library/cc754422(v=ws.10).aspx QUESTION 270Your network contains two Active Directory forests named contoso.com and fabrikam.com. You have a standalone Network Policy Server (NPS) named NPS1. You have a VPN server named VPN1. VPN1 is configured as a RADIUS client to NPS1. You need to ensure that users from both forests can establish VPN connections by using their own domain accounts.What should you do? A.    On NPS1, configure remediation server groups.B.    On NPS1, configure connection request policies.C.    On VPN1, modify the DNS suffix search order.D.    On VPN1, modify the IKEv2 Client connection controls. Answer: BExplanation:Connection request policies are sets of conditions and settings that allow network administrators to designate which Remote Authentication Dial-In User Service (RADIUS) servers perform the authentication and authorization of connection requests that the server running Network Policy Server (NPS) receives from RADIUS clients. Connection request policies can be configured to designate which RADIUS servers are used for RADIUS accounting.http://technet.microsoft.com/en-us/library/cc753603.aspx 100% 70-642 Complete Success & Money Back Guarantee!By utilizing Braindump2go high quality Microsoft 70-642 Exam Dumps Products, You can surely pass 70-642 certification 100%! Braindump2go also offers 100% money back guarantee to individuals in case they fail to pass Microsoft 70-642 in one attempt. http://www.braindump2go.com/70-642.html --------------------------------------------------- Images: --------------------------------------------------- --------------------------------------------------- Post date: 2015-05-06 03:28:42 Post date GMT: 2015-05-06 03:28:42 Post modified date: 2015-05-06 03:28:42 Post modified date GMT: 2015-05-06 03:28:42 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com