MCTS 70-642 Case Studies & Practical Application 5

Question 1

A Windows Server 2008 R2 network has WINS deployed for legacy NetBIOS name resolution. After decommissioning one WINS server, some clients can no longer resolve NetBIOS names. What should the administrator verify?

Accepted Answer

That the remaining WINS server is listed as both primary and secondary WINS on affected clients

Answer

Clients configured with the decommissioned server as primary WINS will fail if no secondary is set or if the secondary is not the surviving server.

Question 2

After enabling QoS policies via Group Policy on a Windows Server 2008 R2 network, VoIP traffic still does not receive priority. The DSCP markings are applied by the server but ignored by the network. What must be verified on the network infrastructure?

Accepted Answer

That network switches and routers are configured to honor DSCP markings

Answer

DSCP markings set by Windows QoS policies are only effective if routers and switches are configured to read and act on those DSCP values.

Question 3

A company runs a Windows Server 2008 R2 web server in a perimeter network (DMZ). The server can reach the internet but cannot communicate with the internal DNS server. The administrator wants the web server to resolve internal names. What is the correct approach without opening broad access?

Accepted Answer

Configure a DNS forwarder on the DMZ server pointing only to the internal DNS server with a firewall rule allowing TCP/UDP 53

Answer

A targeted forwarder with a specific firewall rule allows the DMZ server to resolve internal names while minimizing the security exposure of the DMZ.

Question 4

A Windows Server 2008 R2 administrator uses Netsh to capture network traces on a server that does not have Network Monitor installed. Which Netsh context provides packet capture functionality?

Accepted Answer

netsh trace

Answer

The 'netsh trace' context in Windows Server 2008 R2 allows administrators to start, stop, and manage ETW-based network packet captures without additional tools.

Question 5

A company's remote offices connect to headquarters using L2TP/IPsec VPNs. After a firewall replacement at headquarters, L2TP/IPsec VPNs fail to establish, but PPTP VPNs work. What ports must be opened for L2TP/IPsec?

Accepted Answer

UDP 1701 and UDP 500 and UDP 4500

Answer

L2TP/IPsec requires UDP 1701 for L2TP, UDP 500 for IKE, and UDP 4500 for NAT-T when a NAT device is present.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Case Studies & Practical Application 5