MCTS 70-642 Microsoft 70-642 3 — Questions and Answers
Question 1: A Windows Server 2008 R2 server is configured as a VPN server using SSTP. Which certificate requirement must be met on the VPN server?
- A self-signed certificate with the server's NetBIOS name
- A certificate issued by a CA trusted by VPN clients with the server's public FQDN as the subject (Correct answer)
- A wildcard certificate from any internal CA
- A certificate with the IP address as the subject alternative name
Correct answer: A certificate issued by a CA trusted by VPN clients with the server's public FQDN as the subject
SSTP requires a machine certificate on the VPN server whose subject or SAN matches the server's public FQDN and is issued by a CA trusted by connecting clients.
Question 2: You need to allow inbound Remote Desktop connections through Windows Firewall with Advanced Security. Which profile(s) should you apply the rule to for a corporate workstation?
- Public only
- Private and Public
- Domain only (Correct answer)
- Domain and Private
Correct answer: Domain only
On corporate workstations that authenticate to a domain, applying the inbound RDP rule to the Domain profile ensures it is active only on trusted domain networks.
Question 3: Which tool do you use in Windows Server 2008 to capture and analyze network traffic without installing third-party software?
- Performance Monitor
- Network Monitor 3.x (Correct answer)
- Reliability Monitor
- Resource Monitor
Correct answer: Network Monitor 3.x
Microsoft Network Monitor 3.x is a free downloadable tool for Windows Server 2008 that captures and analyzes raw network traffic.
Question 4: A DHCP server is configured with a scope of 192.168.10.0/24. You add an exclusion for 192.168.10.1–192.168.10.20. How many addresses are available for dynamic lease?
- 233
- 234 (Correct answer)
- 254
- 232
Correct answer: 234
The /24 scope has 254 usable addresses; excluding 20 addresses leaves 234 addresses available for dynamic assignment.
Question 5: You want DNS clients to automatically register their PTR (reverse lookup) records. Which DNS dynamic update setting enables this on the DNS server?
- Allow only secure dynamic updates
- Allow any dynamic updates (Correct answer)
- Disable dynamic updates
- Enable recursion
Correct answer: Allow any dynamic updates
Allowing any dynamic updates (secure and non-secure) permits DNS clients, including those not domain-joined, to register PTR records automatically.
Question 6: A server running RRAS is configured for demand-dial routing. Which credential type is used to authenticate the demand-dial interface to the remote router?
- The logged-on user's domain credentials
- Credentials stored in the demand-dial interface properties (Correct answer)
- A Kerberos ticket obtained from Active Directory
- Anonymous authentication
Correct answer: Credentials stored in the demand-dial interface properties
Demand-dial interfaces store dedicated username and password credentials in their properties, independent of any currently logged-on user.
Question 7: Which Windows Server 2008 feature enables branch office clients to cache content from the main office, reducing WAN traffic, without a dedicated server at the branch?
- BranchCache in Hosted Cache mode
- BranchCache in Distributed Cache mode (Correct answer)
- DFS Replication
- BITS (Background Intelligent Transfer Service)
Correct answer: BranchCache in Distributed Cache mode
BranchCache Distributed Cache mode allows branch clients to cache and share content peer-to-peer without requiring a dedicated cache server at the branch.
MCTS 70-642 Microsoft 70-642 3
A Windows Server 2008 R2 server is configured as a VPN server using SSTP.
Which certificate requirement must be met on the VPN server?