MCTS 70-642 Case Studies & Practical Application 5 — Questions and Answers
Question 1: A Windows Server 2008 R2 network has WINS deployed for legacy NetBIOS name resolution. After decommissioning one WINS server, some clients can no longer resolve NetBIOS names. What should the administrator verify?
- That the remaining WINS server is listed as both primary and secondary WINS on affected clients (Correct answer)
- That the WINS replication partnership was removed before decommissioning
- That the lmhosts file on each client lists the remaining WINS server
- That NetBIOS over TCP/IP is enabled on the remaining WINS server
Correct answer: That the remaining WINS server is listed as both primary and secondary WINS on affected clients
Clients configured with the decommissioned server as primary WINS will fail if no secondary is set or if the secondary is not the surviving server.
Question 2: After enabling QoS policies via Group Policy on a Windows Server 2008 R2 network, VoIP traffic still does not receive priority. The DSCP markings are applied by the server but ignored by the network. What must be verified on the network infrastructure?
- That network switches and routers are configured to honor DSCP markings (Correct answer)
- That the QoS policy is linked to the correct OU
- That the VoIP application uses the Windows QoS API
- That the RRAS server has QoS enabled on its interfaces
Correct answer: That network switches and routers are configured to honor DSCP markings
DSCP markings set by Windows QoS policies are only effective if routers and switches are configured to read and act on those DSCP values.
Question 3: A company runs a Windows Server 2008 R2 web server in a perimeter network (DMZ). The server can reach the internet but cannot communicate with the internal DNS server. The administrator wants the web server to resolve internal names. What is the correct approach without opening broad access?
- Configure a DNS forwarder on the DMZ server pointing only to the internal DNS server with a firewall rule allowing TCP/UDP 53 (Correct answer)
- Place the internal DNS server in the DMZ
- Configure the web server to use public DNS servers and add internal names to the hosts file
- Enable the DNS Server role on the DMZ server and create stub zones for internal domains
Correct answer: Configure a DNS forwarder on the DMZ server pointing only to the internal DNS server with a firewall rule allowing TCP/UDP 53
A targeted forwarder with a specific firewall rule allows the DMZ server to resolve internal names while minimizing the security exposure of the DMZ.
Question 4: A Windows Server 2008 R2 administrator uses Netsh to capture network traces on a server that does not have Network Monitor installed. Which Netsh context provides packet capture functionality?
- netsh trace (Correct answer)
- netsh diag
- netsh lan
- netsh winsock
Correct answer: netsh trace
The 'netsh trace' context in Windows Server 2008 R2 allows administrators to start, stop, and manage ETW-based network packet captures without additional tools.
Question 5: A company's remote offices connect to headquarters using L2TP/IPsec VPNs. After a firewall replacement at headquarters, L2TP/IPsec VPNs fail to establish, but PPTP VPNs work. What ports must be opened for L2TP/IPsec?
- UDP 1701 and UDP 500 and UDP 4500 (Correct answer)
- TCP 1723 and GRE protocol 47
- UDP 1701 and TCP 443
- UDP 500 and TCP 1701
Correct answer: UDP 1701 and UDP 500 and UDP 4500
L2TP/IPsec requires UDP 1701 for L2TP, UDP 500 for IKE, and UDP 4500 for NAT-T when a NAT device is present.
Question 6: A Windows Server 2008 R2 DHCP server is configured with a failover using split scope across two servers. Server A has addresses .1-.150 and Server B has .151-.254. During a planned maintenance window, Server A goes offline. Which clients are affected?
- Only clients whose current leases come from Server A's range and need renewal
- All clients on the subnet because DHCP failover requires both servers
- No clients because split scope provides automatic failover for all addresses
- Only new clients requesting leases during the maintenance window (Correct answer)
Correct answer: Only new clients requesting leases during the maintenance window
Split scope is not true failover; existing leases remain valid until they expire, but Server B can only assign addresses from its own range during Server A's outage.
Question 7: An administrator needs to prevent a specific computer from ever receiving an IP address from the DHCP server. The computer has a fixed MAC address. What is the most direct method using Windows Server 2008 R2 DHCP?
- Create a DHCP reservation with the MAC address and assign an IP outside the scope range
- Add the MAC address to a DHCP filter deny list (Correct answer)
- Configure a DHCP policy that excludes the MAC address from address assignment
- Remove the DHCP client service from the target computer
Correct answer: Add the MAC address to a DHCP filter deny list
The DHCP server's Allow/Deny filter list can block specific MAC addresses from receiving any IP address from the server.
MCTS 70-642 Case Studies & Practical Application 5
A Windows Server 2008 R2 network has WINS deployed for legacy NetBIOS name resolution.
After decommissioning one WINS server, some clients can no longer resolve NetBIOS names.
What should the administrator verify?