Free Microsoft 70-642 Questions and Answers — Questions and Answers
Question 1: Your business is creating its open network. The IPv4 address space used by the network is 131.107.40.0/22. The network must be set up as depicted in the ensuing exhibit. For each segment, subnets must be configured. Which IP addresses on the network should you assign?
- Segment A: 131.107.40.0/25 Segment B: 131.107.40.128/26 Segment C: 131.107.43.192/27 Segment D: 131.107.43.224/30
- Segment A: 131.107.40.0/23 Segment B: 131.107.41.0/24 Segment C: 131.107.41.128/25 Segment D: 131.107.43.0/27
- Segment A: 131.107.40.128/23 Segment B: 131.107.43.0/24 Segment C: 131.107.44.0/25 Segment D: 131.107.44.128/27
- Segment A: 131.107.40.0/23 Segment B: 131.107.42.0/24 Segment C: 131.107.43.0/25 Segment D: 131.107.43.128/27 (Correct answer)
Correct answer: Segment A: 131.107.40.0/23 Segment B: 131.107.42.0/24 Segment C: 131.107.43.0/25 Segment D: 131.107.43.128/27
This question requires careful subnetting of the given 131.107.40.0/22 IPv4 address space. The correct answer demonstrates a valid and non-overlapping allocation of subnets for each segment. It efficiently utilizes the address range by assigning 131.107.40.0/23, then 131.107.42.0/24, and further subdividing 131.107.43.0 into /25 and /27 segments, all fitting within the parent /22 block.
Question 2: A DHCP scope has to have a reservation added for a printing device. Which two elements ought to be mentioned in the reservation? (Select two accurate answers; each one contributes to the answer.)
- the IP address (Correct answer)
- the MAC address (Correct answer)
- the printer server name
- the default gateway
Correct answer: the IP address
A DHCP reservation ensures that a specific network device consistently receives the same IP address from the DHCP server. To create this reservation, the DHCP server requires two unique identifiers: the device's MAC (Media Access Control) address to identify it on the network, and the specific IP address that should always be assigned to that device. This is crucial for devices like printers that need stable network addresses.
Question 3: Your organization uses both IPv4 and IPv6 on computers spread across many sites. A firewall that implements symmetric NAT guards each location. Peer-to-peer communication must be permitted between all locations. What do need to do?
- Configure a link local IPv6 address for the internal interface of the firewall.
- Configure a global IPv6 address for the external interface of the firewall.
- Configure the firewall to allow the use of Teredo. (Correct answer)
- Configure dynamic NAT on the firewall.
Correct answer: Configure the firewall to allow the use of Teredo.
Teredo is an IPv6 transition technology designed to allow IPv6-enabled hosts to communicate over an IPv4 network, even when separated by NAT devices. Since the organization uses both IPv4 and IPv6 across sites with symmetric NAT firewalls, configuring the firewall to allow Teredo is necessary. This enables peer-to-peer IPv6 communication by tunneling IPv6 packets over UDP/IPv4, effectively traversing the NAT barriers.
Question 4: A Server Core installation of Windows Server 2008 R2 is present on the two servers known as Server1 and Server2 in your network. DNS servers are set up on servers 1 and 2. 10.0.0.1 is the IP address of Server1. 10.0.0.2 is the IP address of Server2. Contoso.com is the usual principal zone on Server 1. Zone transfers for contoso.com are permitted. Make sure Server2 has a copy of the contoso.com zone hosted on it. Which command ought to be entered into Server2?
- dnscmd / zoneadd contoso.com /primary 10.0.0.1
- dnscmd / zoneadd contoso.com /secondary 10.0.0.1 (Correct answer)
- dnscmd / zoneadd contoso.com /primary 10.0.0.2
- dnscmd / zoneadd contoso.com /secondary 10.0.0.2
Correct answer: dnscmd / zoneadd contoso.com /secondary 10.0.0.1
To ensure Server2 hosts a copy of the `contoso.com` zone from Server1, Server2 must be configured as a secondary DNS server for that zone. The `dnscmd /zoneadd` command is used to add a new zone, and the `/secondary` switch specifies it as a secondary zone. The IP address `10.0.0.1` is then provided as the master DNS server from which Server2 will pull the zone data.
Question 5: For the email servers on your network, you must set up a sender policy framework (SPF) record. What kind of resource record ought to you make?
- Host Information (HINFO)
- Text (TXT) (Correct answer)
- Alias (CNAME)
- Signature (SIG)
Correct answer: Text (TXT)
Sender Policy Framework (SPF) records are used to combat email spoofing by specifying which mail servers are authorized to send email for a particular domain. These SPF records are published in DNS as a special type of Text (TXT) resource record. Email receivers query this TXT record to verify the legitimacy of incoming mail, enhancing email security.
Question 6: There are two Windows Server machines on your network called Server1 and Server2. 2008 R2. A Windows 7 client named Computer1 is present on the network. IPSec is used to encrypt all communication between Server1 and Server2. There is no need for IPSec encryption during client-server communication. By utilizing the IP Security Monitor on your computer, you must make sure that you may connect to Server1. Computer1. What ought you to do?
- Add a value to the PolicyAgent registry key on Server1. (Correct answer)
- Modify the Advanced Audit Policy Configuration on Server1.
- Apply an IP Security policy to Computer1.
- Create a connection security rule on Computer1.
Correct answer: Add a value to the PolicyAgent registry key on Server1.
To allow a Windows 7 client (Computer1) to connect to Server1, while Server1 is configured for IPSec with other servers, you might need to adjust Server1's IPSec policy behavior. Adding a specific value to the PolicyAgent registry key on Server1 can configure it to accept unencrypted communication from clients without IPSec policies. This allows client-server communication without requiring IPSec on the client, while still enforcing IPSec with other IPSec-enabled servers.
Question 7: Your network includes the contoso.com Active Directory domain. A server called Server1 in the domain is home to Microsoft SQL Server 2008 R2. In order to give client PCs access to the SQL Server installation, you must establish the Windows Firewall on Server 1. Which port or ports should Windows Firewall be configured to allow?
- UDP 67 and UDP 68
- TCP 53 and UDP 53
- TCP 1433 (Correct answer)
- TCP 587 and UDP 587
Correct answer: TCP 1433
By default, Microsoft SQL Server listens for client connections on TCP port 1433. To enable client PCs to access the SQL Server instance on Server1, the Windows Firewall on Server1 must be configured to allow inbound traffic on TCP port 1433. This opens the necessary communication channel for SQL clients to connect to the database server.
Free Microsoft 70-642 Questions and Answers
Your business is creating its open network.
The IPv4 address space used by the network is 131.107.40.0/22.
The network must be set up as depicted in the ensuing exhibit.
For each segment, subnets must be configured.
Which IP addresses on the network should you assign?