70-642
[30]
2. Your company has an IPv6 network that has 25 segments.
You deploy a server on the IPv6 network.
You need to ensure that the server can communicate with all segments on the IPv6 network.
What should you do?
A. Configure the IPv6 address as fd00::2b0:d0ff:fee9:4143/8.
B. Configure the IPv6 address as fe80::2b0:d0ff:fee9:4143/64.
C. Configure the IPv6 address as ff80::2b0:d0ff:fee9:4143/64.
D. Configure the IPv6 address as 0000::2b0:d0ff:fee9:4143/64.
Answer: A
3. Your company uses DHCP to lease IPv4 addresses to computers at the main office.
A WAN link connects the main office to a branch office.
All computers in the branch office are configured with static IP addresses.
The branch office does not use DHCP and uses a different subnet.
You need to ensure that the portable computers can connect to network resources at the main office and the branch office.
How should you configure each portable computer?
A. Use a static IPv4 address in the range used at the branch office.
B. Use an alternate configuration that contains a static IP address in the range used at the main office.
C. Use the address that was assigned by the DHCP server as a static IP address.
D. Use an alternate configuration that contains a static IP address in the range used at the branch office.
Answer: D
4. Your company has servers that run Windows Server 2008.
All client computers run Windows XP Service Pack 2 (SP2),
Windows 2000 Professional, or Windows Vista.
You need to ensure that all computers can use the IPv6 protocol.
What should you do?
A. Install Service Pack 4 on all Windows 2000 Professional computers.
B. Upgrade the Windows 2000 Professional computers to Windows XP SP2.
C. Run the IPv6.exe tool on the Windows 2000 Professional and Windows XP computers.
D. Install the Active Directory Client extension (DSClient.exe) on the Windows 2000 Professional and Windows XP computers.
Answer: B
5. Your company has computers in multiple locations that use IPv4 and IPv6.
Each location is protected by a firewall that performs symmetric NAT.
You need to allow peer-to-peer communication between all locations.
What should you do?
A. Configure dynamic NAT on the firewall.
B. Configure the firewall to allow the use of Teredo.
C. Configure a link local IPv6 address for the internal interface of the firewall.
D. Configure a global IPv6 address for the external interface of the firewall.
Answer: B
6. Your company has recently deployed a server that runs Windows Server 2008.
The server has the IP information shown below:
IP address: 192.168.46.186
Subnet mask: 255.255.255.192
Default gateway: 192.168.46.1
Users on remote subnets report that they are unable to connect to the server.
You need to ensure all users are able to connect to the server.
What should you do?
A. Change the IP address to 192.168.46.129.
B. Change the IP address to 192.168.46.200.
C. Change the subnet mask to a 24bit mask.
D. Change the subnet mask to a 27bit mask.
Answer: C
7. You have a Windows Server 2008 computer that has an IP address of 172.16.45.9/21.
The server is configured to use IPv6 addressing.
You need to test IPv6 communication to a server that has an IP address of 172.16.40.18/21.
What should you do from a command prompt?
A. Type ping 172.16.45.9:::::.
B. Type ping ::9.45.16.172.
C. Type ping followed by the Link-local address of the server.
D. Type ping followed by the Site-local address of the server.
Answer: C
9. Your company has a single Active Directory domain.
The domain runs at the functional level of
Windows Server 2003.
You install the DHCP service on a server named DHCP1.
You attempt to start the DHCP service, but it does not start.
You need to ensure that the DHCP service starts.
What should you do?
A. Restart DHCP1.
B. Configure a scope on DHCP1.
C. Activate the scope on DHCP1.
D. Authorize DHCP1 in the Active Directory domain.
Answer: D
10. Your company has an Active Directory forest.
The corporate network uses DHCP to configure client computer IP addresses.
The DHCP server has a DHCP client reservation for a portable computer named WKS1.
You install a second DHCP server on the network.
You need to ensure that WKS1 receives the DHCP reservation from the DHCP service.
What should you do?
A. Run the ipconfig /renew command on WKS1.
B. Run the netsh add helper command on WKS1.
C. Add the DHCP reservation for WKS1 to the second DHCP server.
D. Add both DHCP servers to the RAS and IAS Servers group in the Active Directory domain.
Answer: C
11. Your company has four DNS servers that run Windows Server 2008.
Each server has a static IP address.
You need to prevent DHCP from assigning the addresses of the DNS servers to DHCP clients.
What should you do?
A. Create a new scope for the DNS servers.
B. Create a reservation for the DHCP server.
C. Configure the 005 Name Servers scope option.
D. Configure an exclusion that contains the IP addresses of the four DNS servers.
Answer: D
12. Your company has a main office and a branch office.
Users in the branch office report that they are unable to access shared resources in the main office.
You discover that computers in the branch office have IP addresses in the range of 169.254.x.x.
You need to ensure that computers can connect to shared resources in both the main office and the branch office.
What should you do?
A. Configure a DHCP relay agent on a member server in the main office.
B. Configure a DHCP relay agent on a member server in the branch office.
C. Configure the Broadcast Address DHCP server option to include the main offices DHCP server address.
D. Configure the Resource Location Servers DHCP server option to include the main offices server IP addresses.
Answer: B
13. You have a DHCP server named Server1 and an application server named Server2.
Both servers run Windows Server 2008.
The DHCP server contains one scope.
You need to ensure that Server2 always receives the same IP address.
Server2 must receive its DNS settings and its WINS settings from DHCP.
What should you do?
A. Create a multicast scope.
B. Assign a static IP address to Server2.
C. Create an exclusion range in the DHCP scope.
D. Create a DHCP reservation in the DHCP scope.
Answer: D
14. You have a DHCP server that runs Windows Server 2008.
You need to reduce the size of the DHCP database.
What should you do?
A. From the DHCP snapin, reconcile the database.
B. From the folder that contains the DHCP database, run jetpack.exe dhcp.mdb temp.mdb.
C. From the properties of the dhcp.mdb file, enable the File is ready for archiving attribute.
D. From the properties of the dhcp.mdb file, enable the Compress contents to save disk space attribute.
Answer: B
15. You have a DHCP server that runs Windows Server 2008.
The DHCP server has two network connections named LAN1 and LAN2.
You need to prevent the DHCP server from responding to DHCP client requests on LAN2.
The server must continue to respond to nonDHCP client requests on LAN2.
What should you do?
A. From the DHCP snapin, modify the bindings to associate only LAN1 with the DHCP service.
B. From the DHCP snapin, create a new multicast scope.
C. From the properties of the LAN1 network connection, set the metric value to 1.
D. From the properties of the LAN2 network connection, set the metric value to 1.
Answer: A
16. You have a DHCP server that runs Windows Server 2008.
You restore the DHCP database by using a recent backup.
You need to prevent DHCP clients from receiving IP addresses that are currently in use on the network.
What should you do?
A. Add the DHCP server option 15.
B. Add the DHCP server option 44.
C. Set the Conflict Detection value to 0.
D. Set the Conflict Detection value to 2.
Answer: D
17. Your company has an Active Directory domain.
A server named Server1 runs the Network Access Policy server role.
You need to disable IPv6 for all connections except for the tunnel interface and the IPv6 Loopback interface.
What should you do?
A. Run the netsh ras ipv6 set command.
B. Run the netsh interface ipv6 delete command.
C. Run ipv6.exe and remove the IPv6 protocol.
D. From Local Area Connection Properties, uncheck Internet Protocol Version 6 (TCP/IPv6).
Answer: D
18. Your network uses IPv4.
You install a server that runs Windows Server 2008 at a branch office.
The server is configured with two network interfaces.
You need to configure routing on the server at the branch office.
Which two actions should you perform?
(Each correct answer presents part of the solution. Choose two.)
A. Install the Routing and Remote Access role.
B. Run the netsh ras ip set access ALL command.
C. Run the netsh interface ipv4 enable command.
D. Enable the IPv4 Router Routing and Remote Access option.
Answer: A D
20. Your company has a single Active Directory domain.
All servers run Windows Server 2008.
The company network has 10 servers that perform as Web servers.
All confidential files are located on a server named FSS1.
The company security policy states that all confidential data must be transmitted in the most secure manner.
When you monitor the network,
you notice that the confidential files that are stored on the FSS1 server are being transmitted over the network without encryption.
You need to ensure that encryption is always used when the confidential files on the FSS1 server are transmitted over the network.
What are two possible ways to achieve this goal?
(Each correct answer presents a complete solution. Choose two.)
A. Deactivate all LM and NTLM authentication methods on the FSS1 server.
B. Use IIS to publish the confidential files, activate SSL on the IIS server, and then open the files as a Web folder.
C. Use IPSec encryption between the FSS1 server and the computers of the users who need to access the confidential files.
D. Use the Server Message Block (SMB) signing between the FSS1 server and the computers of the users who want to access the confidential files.
E. Activate offline files for the confidential files that are stored on the FSS1 server. In the Folder Advanced Properties dialog box, select the Encrypt contents to secure data option.
Answer: B C
21. Your network consists of a single Active Directory domain.
The domain contains a server named Server1 that runs Windows Server 2008.
All client computers run Windows Vista.
All computers are members of the Active Directory domain.
You assign the Secure Server (Require Security) IPsec policy to Server1 by using a GPO.
Users report that they fail to connect to Server1.
You need to ensure that users can connect to Server1.
All connections to Server1 must be encrypted.
What should you do?
A. Restart the IPsec Policy Agent service on Server1.
B. Assign the Client (Respond Only) IPsec policy to Server1.
C. Assign the Server (Request Security) IPsec policy to Server1.
D. Assign the Client (Respond Only) IPsec policy to all client computers.
Answer: D
22. Your company uses Active Directory integrated DNS.
Users require access to the Internet.
You run a network capture.
You notice the DNS server is sending DNS name resolution queries to a server named f.rootservers.net.
You need to prevent the DNS server from sending queries to f.rootservers.net.
The server must be able to resolve names for Internet hosts.
Which two actions should you perform?
(Each correct answer presents part of the solution. Choose two.)
A. Enable forwarding to your ISPs DNS servers.
B. Disable the root hints on the DNS server.
C. Disable the netmask ordering option on the DNS server.
D. Configure Reverse Lookup Zones for the IP subnets on the network.
Answer: A B
23. Your company has a single Active Directory forest that has six domains.
All DNS servers in the forest run Windows Server 2008.
You need to ensure that all public DNS queries are channeled through a single-caching only DNS server.
Which two actions should you perform?
(Each correct answer presents part of the solution. Choose two.)
A. Disable the root hints.
B. Enable BIND secondaries.
C. Configure a forwarder to the caching DNS server.
D. Configure a GlobalNames host (A) record for the hostname of the caching DNS server.
Answer: A C
24. Contoso Ltd. has a single Active Directory forest that has five domains.
Each domain has two DNS servers. Each DNS server hosts Active Directory-integrated zones for all five domains.
All domain controllers run Windows Server 2008.
Contoso acquires a company named Tailspin Toys.
Tailspin Toys has a single Active Directory forest that contains a single domain.
You need to configure the DNS system in the Contoso forest to provide name resolution for resources in both forests.
What should you do?
A. Configure client computers in the Contoso forest to use the Tailspin Toys DNS server as the alternate DNS server.
B. Create a new conditional forwarder and store it in Active Directory. Replicate the new conditional forwarder to all DNS servers in the Contoso forest.
C. Create a new application directory partition in the Contoso forest. Enlist the directory partition for all DNS servers.
D. Create a new host (A) record in the GlobalNames folder on one of the DNS servers in the Contoso forest. Configure the host (A) record by using the Tailspin Toys domain name and the IP address of the DNS server in the Tailspin Toys forest.
Answer: B
25. Your company has a single Active Directory forest that has an Active Directory domain named na.contoso.com.
A member server named Server2 runs the DNS server role.
The Server2 DNS service hosts multiple secondary zones including na.contoso.com.
You need to reconfigure Server2 as a caching-only DNS server.
What should you do?
A. Uninstall and reinstall the DNS service on Server2.
B. Change all the DNS zones on Server2 to stub zones.
C. Disable and then enable the DNS service on Server2.
D. Delete the na.contoso.com DNS zone domain from Server2. Restart the DNS service on Server2.
Answer: A
26. Your company has a single Active Directory forest that has an Active Directory domain named na.contoso.com.
A server named Server1 runs the DNS server role.
You notice stale resource records in the na.contoso.com zone.
You have enabled DNS scavenging on Server1. Three weeks later,
you notice that the stale resource records remain in na.contoso.com.
You need to ensure that the stale resource records are removed from na.contoso.com.
What should you do?
A. Stop and restart the DNS service on Server1.
B. Enable DNS scavenging on the na.contoso.com zone.
C. Run the dnscmd Server1 /AgeAllRecords command on Server1.
D. Run the dnscmd Server1 /StartScavenging command on Server1.
Answer: B
27. Your company has two servers that run Windows Server 2008 named Server2 and Server3.
Both servers have the DNS server role installed.
Server3 is configured to forward all DNS requests to Server2.
You update a DNS record on Server2.
You need to ensure that Server3 is able to immediately resolve the updated DNS record.
What should you do?
A. Run the dnscmd . /clearcache command on Server3.
B. Run the ipconfig /flushdns command on Server3.
C. Decrease the Time-to-Live (TTL) on the Start of Authority (SOA) record of na.contoso.com to 15 minutes.
D. Increase the Retry Interval value on the Start of Authority (SOA) record of na.contoso.com to 15 minutes.
Answer: A
28. Your company has a server named Server1 that runs a Windows Server 2008 Core installation,
and the DNS server role. Server1 has one network interface named Local Area Connection.
The static IP address of the network interface is configured as 10.0.0.1.
You need to create a DNS zone named local.contoso.com on Server1.
Which command should you use?
A. ipconfig /registerdns:local.contoso.com
B. dnscmd Server1 /ZoneAdd local.contoso.com /DSPrimary
C. dnscmd Server1 /ZoneAdd local.contoso.com /Primary /file local.contoso.com.dns
D. netsh interface ipv4 set dnsserver name=local.contoso.com static 10.0.0.1 primary
Answer: C
29. Your company has a single domain named contoso.com.
The contoso.com DNS zone is Active Directory-integrated.
Your partner company has a single domain named partner.com.
The partner.com DNS zone is Active Directory-integrated.
The IP addresses of the DNS servers in the partner domain will change.
You need to ensure name resolution for users in contoso.com to resources in partner.com.
What should you do?
A. Create a stub zone for partner.com on each DNS server in contoso.com.
B. Configure the Zone Replication Scope for partner.com to replicate to all DNS servers in the forest.
C. Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition.
D. Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.
Answer: A
30. Your company has a DNS server named Server1.
Your partner company has a DNS server named Server2.
You create a stub zone on Server1.
The master for the stub zone is Server2.
Server2 fails.
You discover that users are not able to resolve names for the partner company.
You need to ensure that users are able to resolve names for the partner company in the event that Server2 fails.
What should you do?
A. Change the stub zone to a secondary zone on Server1.
B. Open the SOA record for the zone on Server2. Change the Minimum (default) TTL setting to 12 hours.
C. Open the DNS zone for the partner company on Server2. Create a new Route Through (RT) record and a new host (A) record for Server1.
D. Open the primary DNS zone on Server2. Create a new Service Locator (SRV) record and a new host (A) record for Server1.
Answer: A
