MCTS 70-642 Microsoft 70 642: Network Infrastructure 3 — Questions and Answers
Question 1: You need to configure a VPN solution on Windows Server 2008 R2 that uses certificate-based authentication and operates over UDP port 443. Which VPN protocol should you deploy?
- PPTP
- L2TP/IPsec
- SSTP
- IKEv2 (Correct answer)
Correct answer: IKEv2
IKEv2 uses UDP and supports certificate-based authentication, and is more resilient to network changes than SSTP which uses TCP 443.
Question 2: A network has the address 172.16.50.0/24. An administrator needs to create 6 subnets with at least 25 hosts each. Which subnet mask should be used?
- /26
- /27 (Correct answer)
- /28
- /29
Correct answer: /27
A /27 mask provides 32 addresses (30 usable hosts) per subnet and allows up to 8 subnets from the /24 block.
Question 3: Which Windows Server 2008 R2 role service provides centralized authentication for dial-up and VPN connections using RADIUS?
- Routing and Remote Access Service (RRAS)
- Network Policy Server (NPS) (Correct answer)
- DirectAccess
- Health Registration Authority (HRA)
Correct answer: Network Policy Server (NPS)
Network Policy Server (NPS) is Microsoft's implementation of a RADIUS server and proxy, used for centralized authentication of network connections.
Question 4: An administrator needs to ensure that only healthy computers can access the corporate network. Which Windows Server 2008 R2 technology enforces health policies for connecting clients?
- Network Access Protection (NAP) (Correct answer)
- Windows Firewall with Advanced Security
- IPsec enforcement
- 802.1X port authentication
Correct answer: Network Access Protection (NAP)
Network Access Protection (NAP) evaluates the health of connecting clients and can restrict access or remediate non-compliant systems.
Question 5: Which type of DNS zone contains a read-only copy of a primary zone and is automatically updated from the primary?
- Stub zone
- Secondary zone (Correct answer)
- Active Directory-integrated zone
- Forwarder zone
Correct answer: Secondary zone
A secondary DNS zone holds a read-only copy of zone data that is replicated from the primary zone via zone transfer.
Question 6: A Windows Server 2008 R2 server needs to act as a router between two subnets. Which feature must be enabled?
- Network Load Balancing
- IP Routing in RRAS (Correct answer)
- Bridging
- DNS forwarder
Correct answer: IP Routing in RRAS
Enabling IP routing in Routing and Remote Access Service (RRAS) allows a Windows server to route packets between network interfaces.
Question 7: When configuring an Active Directory-integrated DNS zone, which replication scope stores zone data in all DNS servers in the forest?
- Domain DNS Application Partition
- Forest DNS Application Partition (Correct answer)
- Legacy replication to all domain controllers
- Custom application partition
Correct answer: Forest DNS Application Partition
The Forest DNS Application Partition (ForestDnsZones) replicates zone data to all DNS servers enrolled in the partition across the entire forest.
MCTS 70-642 Microsoft 70 642: Network Infrastructure 3
You need to configure a VPN solution on Windows Server 2008 R2 that uses certificate-based authentication and operates over UDP port 443.
Which VPN protocol should you deploy?