MCTS 70-642 Case Studies & Practical Application 4

Question 1

A Windows Server 2008 R2 server running the Routing and Remote Access role is configured for demand-dial routing. The demand-dial interface connects successfully but drops after exactly 5 minutes of idle time. How should the administrator fix this?

Accepted Answer

Increase the idle disconnect time on the demand-dial interface

Answer

The idle disconnect timer on a demand-dial interface controls how long it stays up with no traffic; increasing this value prevents premature disconnection.

Question 2

After adding a new subnet (192.168.50.0/24) to the network, clients on that subnet cannot communicate with other subnets. The DHCP server has a new scope for 192.168.50.0/24 and clients receive correct addresses. What is missing?

Accepted Answer

A static route on the core router pointing to 192.168.50.0/24

Answer

Routers need a routing table entry for the new subnet to forward traffic to and from 192.168.50.0/24; without it, packets destined for the new subnet are dropped.

Question 3

An administrator configures Windows Server 2008 R2 as a RADIUS proxy to forward authentication requests to two backend NPS servers. One NPS server processes requests; the other never receives any. What should the administrator configure?

Accepted Answer

Set equal priority and weight on both RADIUS servers in the remote RADIUS server group

Answer

Remote RADIUS server groups load-balance based on priority and weight; equal settings distribute requests across all servers in the group.

Question 4

A Windows Server 2008 R2 DNS server experiences increased query load after a major website hosted on the network gains popularity. Which DNS server feature reduces repeated recursive lookups for the same external names?

Accepted Answer

DNS caching with appropriately sized cache and respected TTLs

Answer

DNS caching stores resolved query results for the duration of their TTL, so repeated queries for the same name are answered locally without additional recursion.

Question 5

A company uses IPsec transport mode to secure traffic between two Windows Server 2008 R2 servers. After upgrading one server's network adapter, encrypted traffic fails. Unencrypted traffic between the servers works. What should the administrator check?

Accepted Answer

Whether the IPsec policy still references the old adapter's IP address

Answer

IPsec policies can be bound to specific IP addresses; if the new adapter has a different IP, the existing policy may not apply and IPsec negotiation will fail.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Case Studies & Practical Application 4