MCTS 70-642 Microsoft 70-642 4 — Questions and Answers
Question 1: You need to configure conditional forwarding so that DNS queries for fabrikam.com are sent to 10.5.5.5. Where do you configure this in the DNS Manager?
- Server forwarders tab
- Conditional Forwarders node under the server (Correct answer)
- Zone properties > Name Servers tab
- Root hints tab
Correct answer: Conditional Forwarders node under the server
Conditional forwarders are configured under the Conditional Forwarders node in the DNS Manager tree, per domain name.
Question 2: A Windows Server 2008 R2 server needs to route traffic between two subnets without using a hardware router. Which role service must be installed?
- Network Policy Server
- Routing and Remote Access (LAN routing) (Correct answer)
- DirectAccess
- Network Bridge
Correct answer: Routing and Remote Access (LAN routing)
Enabling LAN routing in RRAS (Routing and Remote Access) allows a Windows server to forward packets between multiple network interfaces.
Question 3: An administrator configures IPsec transport mode between two servers. What portion of the packet is protected?
- The entire IP packet including the original IP header
- Only the IP payload (transport-layer data), not the original IP header (Correct answer)
- Only the IP header, not the payload
- Neither header nor payload — only the key exchange is secured
Correct answer: Only the IP payload (transport-layer data), not the original IP header
IPsec transport mode encrypts and/or authenticates the payload while keeping the original IP header intact, used for end-to-end host communication.
Question 4: Which DNS record type is used to resolve an IPv6 address to a hostname (reverse lookup for IPv6)?
- PTR record in ip6.arpa zone (Correct answer)
- AAAA record
- A record
- SRV record
Correct answer: PTR record in ip6.arpa zone
PTR records in the ip6.arpa reverse lookup zone map IPv6 addresses back to hostnames, equivalent to in-addr.arpa for IPv4.
Question 5: You suspect a rogue DHCP server is operating on your network. Which command shows the IP address of the DHCP server that leased an address to a Windows client?
- ipconfig /all (Correct answer)
- netstat -an
- arp -a
- route print
Correct answer: ipconfig /all
The 'ipconfig /all' command displays the DHCP server IP address alongside the lease details for each network adapter.
Question 6: A GPO-based Windows Firewall rule is deployed but does not appear to apply to a workstation. Which tool would you use first to verify that the GPO is reaching the target computer?
- Netsh advfirewall show allprofiles
- gpresult /r (Correct answer)
- wf.msc
- auditpol /get /category:*
Correct answer: gpresult /r
Gpresult /r shows the Resultant Set of Policy applied to the computer, allowing you to verify which GPOs are applied and detect any filtering or WMI filter issues.
Question 7: You configure a DHCP superscope on Windows Server 2008. What is the primary purpose of a superscope?
- To split a single scope across two DHCP servers for redundancy
- To group multiple scopes so a server can assign addresses from any member scope to clients on a single physical segment (Correct answer)
- To reserve a block of addresses for specific MAC addresses
- To forward DHCP requests to another subnet
Correct answer: To group multiple scopes so a server can assign addresses from any member scope to clients on a single physical segment
A superscope groups multiple scopes so the DHCP server can service clients on a single physical network that spans multiple logical IP subnets (multinetting).
MCTS 70-642 Microsoft 70-642 4
You need to configure conditional forwarding so that DNS queries for fabrikam.com are sent to 10.5.5.5.
Where do you configure this in the DNS Manager?