Free Microsoft 70 642: Network Infrastructure, Configuring Questions and Answers — Questions and Answers
Question 1: Server1 is a server in your network that runs Windows Server 2008 R2. On Server1, a fresh application is installed. You find that Server1 frequently goes down after the installation. Determine if the problems on Server1 are related to the application's installation. What ought you to do?
- From the System Configuration utility, select Diagnostic startup.
- From the command prompt, run the Program Compatibility Wizard.
- From Reliability Monitor, review the reliability details. (Correct answer)
- From Administrative Tools, run Windows Memory Diagnostic.
Correct answer: From Reliability Monitor, review the reliability details.
Explanation: <br> Reliability Monitor keeps track of system stability and reliability incidents going back up to a year. On the <br> System Stability Chart, a rolling graph arranged by date is visible. <br> A graph of the Stability Index can be seen in the top part of the System Stability Chart. Five rows in the <br> lower portion of the chart track Reliability Events, which either help determine the system's stability or <br> provide information about the addition and deletion of software. An icon is displayed in the column for the <br> given date whenever one or more Reliability Events of that sort are found. An Information icon for software <br> installs and uninstalls denotes a successful occurrence of that sort, whereas a Warning icon denotes a failure <br> of that type. <br> An Error icon denotes a failure of that type for all other Reliability Event types.
Question 2: Windows Server 2008 R2 is installed on a file server called Server1 in your network. On Server1, IPSec is turned on. You must determine which client machines are connected to Server1 using active IPSec associations. What administrative tool ought to be employed to complete this task?
- Windows Firewall with Advanced Security (Correct answer)
- Performance Monitor
- Event Viewer
- Share and Storage Management
Correct answer: Windows Firewall with Advanced Security
Explanation: <br> A host firewall that assists with device security in two ways is Windows Defender Firewall with Advanced <br> Security. First, it has the ability to filter the network traffic that is allowed to leave the network and filter the <br> network traffic that the device is authorized to send back to the network.
Question 3: An Active Directory domain with the name contoso.com is present on your network. Two DNS servers, DC1 and Server1, are present on the domain. A domain controller is DC1. Member server 1 is the server. You establish the principal zone fabrikam.com on Server 1. On DC1, you must duplicate the fabrikam.com zone. What ought you to do? (Select two accurate answers; each one contributes to the answer.)
- Run the New Delegation Wizard on DC1.
- Create a new secondary zone on DC1. (Correct answer)
- Modify the Name Servers list for the fabrikam.com zone. (Correct answer)
- Run the New Delegation Wizard on Server1.
Correct answer: Create a new secondary zone on DC1.
Explanation: <br> Multiple zones can be created from a single DNS database. A zone is a section of the DNS database that <br> houses resource entries with owner names that are part of the DNS namespace's contiguous area. DNS <br> servers keep track of zone files. Zero, one, or more zones may be hosted by a single DNS server. <br> Because fabrikam.com is a brand-new zone and domain, it has nothing to do with contoso.com. <br> This is permitted because DNS servers can host a number of distinct zones.
Question 4: The HTTP traffic to and from a server must be recorded each day between 9:00 and 10:00. What do you need to do?
- From Network Monitor, configure the General options.
- From Network Monitor, configure the Capture options.
- Create a scheduled task that runs the Netsh tool.
- Create a scheduled task that runs the Nmcap tool. (Correct answer)
Correct answer: Create a scheduled task that runs the Nmcap tool.
To record HTTP traffic automatically at specific times, the `Nmcap` tool is the correct utility for network capture. A scheduled task is necessary to automate the execution of `Nmcap` daily between 9:00 and 10:00. This combination allows for unattended, time-based network monitoring and recording.
Question 5: The Routing role service is deployed on a server called Server1 in your network. Server1 has two connections to the internet. The internal network is connected by a single network connection. The Internet is accessible through the other network connection. Private IP addresses are used for any network connections that are part of the internal network. A Web server called Web1 is installed. Only TCP port 8281 is permitted for connections to Web1's secure website. Web1 is linked to the corporate intranet. You must make sure that Internet users may access the secure website. From the Routing and Remote Access console, what should you do?
- Configure Network Address Translation (NAT), and then enable the Secure Web Server (HTTPS) service on the NAT interface.
- Configure Network Address Translation (NAT), and then add a new service to the NAT interface. (Correct answer)
- Configure Routing Information Protocol (RIP), and then activate authentication on the RIP interface.
- Configure Routing Information Protocol (RIP), and then configure the incoming packet protocol settings on the RIP interface.
Correct answer: Configure Network Address Translation (NAT), and then add a new service to the NAT interface.
To allow external Internet users to access an internal web server with a private IP address, Network Address Translation (NAT) is essential. You must configure NAT and then add a new service (port forwarding rule) on the NAT interface connected to the Internet. This rule translates the public IP and port 8281 to Web1's private IP and port, enabling secure external access.
Question 6: A member server called DC1 and a domain controller named DC1 are both part of your network. Server1. The event log for Active Directory Web Services (ADWS) is copied and saved to DC1. The log is copied to Server1. When you examine the Server1 event log file, you find that the event description information is missing. You must make sure that the event log file opens on Server 1 and DC 1 with the same information displayed. On Server1, what should you do?
- Copy the LocaleMetaData folder from DC1. (Correct answer)
- Create a custom view.
- Import a custom view.
- Copy the SYSVOL folder from DC1.
Correct answer: Copy the LocaleMetaData folder from DC1.
When event log files are moved between servers, the event description information can be missing if the target server lacks the necessary metadata. The `LocaleMetaData` folder contains language-specific message files and metadata crucial for correctly displaying event descriptions. Copying this folder from the source server (DC1) to the target server (Server1) ensures that Server1 can properly interpret and display the event log entries with their full descriptions.
Question 7: There is an Active Directory domain on your network. The domain houses a server named Server1 and an enterprise certification authority (CA) called Server2. You install Network Policy Server (NPS) and set up a network access server on Server 2. Policy for IPSec protection (NAP) enforcement. The lifetime of health certificates can be set to four hours through the Health Registration Authority snap-in on Server2. You learn that the client computers' health certificates have a one-year expiration date. The health certificates must be limited to a four-hour validity period. What ought you to do?
- Modify the Issuance Requirements settings of the certificate template used for the health certificates.
- On Server1, run certutil.exe Csetregdbflags +dbflags_enablevolatilerequests.
- On Server1, run certutil.exe -setreg policy\editflags +editf_attributeenddate. (Correct answer)
- Modify the Request Handling settings of the certificate template used for the health certificates.
Correct answer: On Server1, run certutil.exe -setreg policy\editflags +editf_attributeenddate.
To enforce a specific, shorter validity period for health certificates, the Certificate Authority (CA) must be configured to honor the `EndDate` attribute in certificate requests. The `certutil.exe -setreg policy\editflags +editf_attributeenddate` command enables this flag on the CA. This allows the Health Registration Authority (HRA) to specify a four-hour lifetime for NAP health certificates, overriding the default template settings.
Free Microsoft 70 642: Network Infrastructure, Configuring Questions and Answers
Server1 is a server in your network that runs Windows Server 2008 R2.
On Server1, a fresh application is installed.
You find that Server1 frequently goes down after the installation.
Determine if the problems on Server1 are related to the application's installation.
What ought you to do?