[Free] 2018(Jan) EnsurePass Dumpsleader Microsoft 70-642 Dumps with VCE and PDF Download 131-140

Ensurepass.com : Ensure you pass the IT Exams 2018 Jan Microsoft Official New Released 70-642
100% Free Download! 100% Pass Guaranteed!
http://www.EnsurePass.com/70-642.html

TS: Windows Server 2008 Network Infrastructure, Configuring

Question No: 131 – (Topic 2)

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and nwtraders.com.

You have a DNS server named DNS1. DNS1 hosts Active Directory-integrated zones for contoso.com and nwtraders.com.

You discover that client computers in contoso.com cannot use single-label names to access servers in nwtraders.com.

You need to ensure that contoso.com computers can access nwtraders.com servers by using single-label names.

What should you modify?

  1. the DNS suffix search order on DNS1

  2. the DNS suffix search order on the client computers

  3. the root hints servers on DNS1

  4. the security settings of the nwtraders.com zone

Answer: B

Question No: 132 – (Topic 2)

Your network contains a server named Server1 that runs Windows Server 2008 R2. You plan to deploy DirectAccess on Server1.

You need to configure Windows Firewall on Server1 to support DirectAccess connections. What should you allow from Windows Firewall on Server1?

  1. ICMPv6 Echo Requests

  2. ICMPv6 Redirect

  3. IGMP

  4. IPv6-Route

Answer: A

Question No: 133 – (Topic 2)

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2008 R2. All client computers run Windows 7.

You discover that users can use Encrypting File System (EFS) when the smart cards on their computers are removed.

You need to prevent the users from accessing EFS-encrypted files when their smart cards are removed. From the EFS properties, you click Require a smart card for EFS.

What should you do next?

  1. Set the Elliptic Curve Cryptography to Allow.

  2. Set the Elliptic Curve Cryptography to Require.

  3. Disable the Allow delegating saved credentials setting.

  4. Disable the Create caching-capable user key from smart card option.

Answer: D

Question No: 134 – (Topic 2)

Your network contains a server named Server1 that runs Windows Server 2008 R2.

You need to ensure that an administrator is notified by e-mail if the Event Viewer logs any error.

What should you do from the Event Viewer console?

  1. Create a custom view, and then click the Filter Current Custom View action.

  2. Create a custom view, and then click the Attach Task to This Custom View action.

  3. From the System log, click the Filter Current Log action.

  4. From the System log, select an Error event, and then click the Attach Task to This Event action.

Answer: B

Question No: 135 – (Topic 2)

Your network contains an Active Directory domain. The domain contains a member server named Server1.

Server1 has a single network connection.

You need to log every attempt to connect to Server1 on a restricted port. What should you do?

  1. Change the settings of the private firewall profile.

  2. Change the settings of the domain firewall profile.

  3. Modify the properties of the inbound firewall rules.

  4. Modify the properties of the outbound firewall rules.

    Answer: B Explanation:

    As per the URL, http://technet.microsoft.com/en- us/library/cc947815(v=ws.10).aspx#bkmk_ToenableWindowsFirewallandconfigurethedefau ltbehavior

    The attached questions answer should be Option B, not option C , as logging cannot be set at inbound or outbound level. Only @ Profile level, since the member server is part of the domain.

    1. Open the Group Policy Management Console to Windows Firewall with Advanced Security.

    2. In the details pane, in the Overview section, click Windows Firewall Properties.

    3. For each network location type (Domain, Private, Public), perform the following steps.

      1. Click the tab that corresponds to the network location type.

      2. Under Logging, click Customize.

      3. The default path for the log is %windir%\system32\logfiles\firewall\pfirewall.log. If you want to change this, clear the Not configured check box and type the path to the new location, or click Browse to select a file location.

        Important

        The location you specify must have permissions assigned that permit the Windows Firewall service to write to the log file.

      4. The default maximum file size for the log is 4,096 kilobytes (KB). If you want to change this, clear the Not configured check box, and type in the new size in KB, or use the up and down arrows to select a size. The file will not grow beyond this size; when the limit is reached, old log entries are deleted to make room for the newly created ones.

      5. No logging occurs until you set one of following two options:

        To create a log entry when Windows Firewall drops an incoming network packet, change Log dropped packets to Yes.

        To create a log entry when Windows Firewall allows an inbound connection, change Log successful connections to Yes.

      6. Click OK twice.

Question No: 136 – (Topic 2)

Your network contains a DNS server named DNS1 that runs Windows Server 2008 R2. DNS1 is configured as the DNS server for contoso.com. All client computers are configured to use DNS1 for name resolution.

From a client computer, you run the Ping tool as shown in the exhibit. (Click the Exhibit button.)

Ensurepass 2018 PDF and VCE

You need to ensure that users can use the Ping tool to resolve the IP addresses of internal servers to fully qualified domain names (FQDNs).

What should you do?

  1. Create a GlobalNames zone.

  2. Create a reverse lookup zone.

  3. Create a forward lookup zone.

  4. Enable zone transfers on the contoso.com zone.

Answer: B

Question No: 137 – (Topic 2)

Your network contains a Windows Server Update Services (WSUS) server.

You need to ensure that the WSUS server automatically downloads service packs. What should you do first?

  1. From the Automatic Approvals options, modify the Update Rules list.

  2. From the Automatic Approvals options, modify the Advanced settings.

  3. From the Products and Classifications options, modify the Products settings.

  4. From the Products and Classifications options, modify the Classifications settings.

Answer: D

Question No: 138 – (Topic 2)

Your network contains an Active Directory domain.

You have a print server named Server1 that runs Windows Server 2008 R2. You deploy a new print device and create a shared printer.

You need to ensure that only members of a group named Marketing can print color documents on the new print device. All other users must only be able to print black and white documents on the new print device.

What should you do?

  1. Create a printer port.

  2. Create a second shared printer.

  3. Modify the Active Directory printer object.

  4. Modify the properties of the shared printer.

Answer: B

Question No: 139 – (Topic 2)

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 hosts a custom application named App1. App1 is accessible on TCP port 5000.

You need to encrypt App1 data on the network. What should you do?

  1. From the Local Security Policy console, configure the Security Options.

  2. From the Local Security Policy console, configure the Application Control Policies.

  3. From the Windows Firewall with Advanced Security console, create an inbound rule.

  4. From the Windows Firewall with Advanced Security console, create a connection security rule.

Answer: D Explanation:

Inbound rule cannot encrypt data. Therefore answer is D.

Question No: 140 – (Topic 2)

Your network contains a Network Policy Server (NPS) named NPS1 and a network access server named

NAS1. NAS1 is configured to use NPS1 for authentication and accounting. A firewall separates NPS1 and

NAS1.

You need to ensure that NAS1 can successfully send authentication and accounting messages to NPS1.

Which ports should you allow through the firewall?

A. TCP ports 80, 443, 389 and 1645

B. TCP ports 88, 135, 139 and 1813

C. UDP ports 53, 67, 68 and 69

D. UDP ports 1812, 1813, 1645 and 1646

Answer: D Explanation:

Configure NPS UDP port information

Network Policy Server (NPS) uses for RADIUS authentication and accounting traffic

By default, NPS listens for RADIUS traffic on ports 1812, 1813, 1645, and 1646 for both Internet Protocol version 6 (IPv6) and IPv4 for all installed network adapters. http://technet.microsoft.com/en-us/library/cc731277(v=ws.10).aspx

100% Ensurepass Free Download!
Download Free Demo:70-642 Demo PDF
100% Ensurepass Free Guaranteed!
70-642 Dumps

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No