MCTS 70-642 Case Studies & Practical Application 3

Question 1

A company migrates from a single-site to a multi-site SSTP VPN deployment. Remote clients connecting to the secondary site receive Certificate warnings. The primary site works correctly. What is the most likely cause?

Accepted Answer

The secondary VPN server's certificate CN does not match its external FQDN

Answer

SSTP validates that the server certificate's CN or SAN matches the DNS name clients use to connect; a mismatch triggers certificate warnings.

Question 2

Clients on a Windows Server 2008 R2 network obtain IP addresses via DHCP but cannot reach hosts on remote subnets. All clients have valid IP addresses, subnet masks, and default gateways. What should the administrator verify on the DHCP server?

Accepted Answer

That DHCP option 003 (Router) is configured with the correct gateway IP

Answer

DHCP option 003 provides the default gateway; if it is missing or incorrect, clients cannot route traffic beyond their local subnet.

Question 3

After implementing DNSSEC on a Windows Server 2008 R2 DNS zone, some older resolvers report SERVFAIL for queries in that zone. What is the most likely reason?

Accepted Answer

The older resolvers do not support EDNS0 extensions required for DNSSEC

Answer

DNSSEC responses are larger than standard DNS responses and require EDNS0 support; resolvers without EDNS0 cannot process the additional records and return SERVFAIL.

Question 4

An administrator must configure Windows Server 2008 R2 to allow only authenticated computers to obtain IP addresses from DHCP. Which feature combination achieves this without third-party software?

Accepted Answer

NAP DHCP enforcement with health policies checking domain membership

Answer

NAP DHCP enforcement can use a health policy that checks domain membership, issuing full leases only to computers that pass the health check.

Question 5

A Windows Server 2008 R2 IIS server hosts an HTTPS site. After renewing the SSL certificate, users receive a 'certificate not trusted' error. The old certificate worked fine. What should the administrator check first?

Accepted Answer

Whether the intermediate CA certificate is installed in the correct store

Answer

If the intermediate CA certificate is missing from the server's Intermediate Certification Authorities store, clients cannot build a trusted chain to the root CA.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Case Studies & Practical Application 3