MCTS 70-642 Microsoft 70-642 3

Question 1

A Windows Server 2008 R2 server is configured as a VPN server using SSTP. Which certificate requirement must be met on the VPN server?

Accepted Answer

A certificate issued by a CA trusted by VPN clients with the server's public FQDN as the subject

Answer

SSTP requires a machine certificate on the VPN server whose subject or SAN matches the server's public FQDN and is issued by a CA trusted by connecting clients.

Question 2

You need to allow inbound Remote Desktop connections through Windows Firewall with Advanced Security. Which profile(s) should you apply the rule to for a corporate workstation?

Accepted Answer

Domain only

Answer

On corporate workstations that authenticate to a domain, applying the inbound RDP rule to the Domain profile ensures it is active only on trusted domain networks.

Question 3

Which tool do you use in Windows Server 2008 to capture and analyze network traffic without installing third-party software?

Accepted Answer

Network Monitor 3.x

Answer

Microsoft Network Monitor 3.x is a free downloadable tool for Windows Server 2008 that captures and analyzes raw network traffic.

Question 4

A DHCP server is configured with a scope of 192.168.10.0/24. You add an exclusion for 192.168.10.1–192.168.10.20. How many addresses are available for dynamic lease?

Accepted Answer

234

Answer

The /24 scope has 254 usable addresses; excluding 20 addresses leaves 234 addresses available for dynamic assignment.

Question 5

You want DNS clients to automatically register their PTR (reverse lookup) records. Which DNS dynamic update setting enables this on the DNS server?

Accepted Answer

Allow any dynamic updates

Answer

Allowing any dynamic updates (secure and non-secure) permits DNS clients, including those not domain-joined, to register PTR records automatically.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Microsoft 70-642 3