MCTS 70-642 Microsoft 70 642: Network Infrastructure 3

Question 1

You need to configure a VPN solution on Windows Server 2008 R2 that uses certificate-based authentication and operates over UDP port 443. Which VPN protocol should you deploy?

Accepted Answer

IKEv2

Answer

IKEv2 uses UDP and supports certificate-based authentication, and is more resilient to network changes than SSTP which uses TCP 443.

Question 2

A network has the address 172.16.50.0/24. An administrator needs to create 6 subnets with at least 25 hosts each. Which subnet mask should be used?

Accepted Answer

/27

Answer

A /27 mask provides 32 addresses (30 usable hosts) per subnet and allows up to 8 subnets from the /24 block.

Question 3

Which Windows Server 2008 R2 role service provides centralized authentication for dial-up and VPN connections using RADIUS?

Accepted Answer

Network Policy Server (NPS)

Answer

Network Policy Server (NPS) is Microsoft's implementation of a RADIUS server and proxy, used for centralized authentication of network connections.

Question 4

An administrator needs to ensure that only healthy computers can access the corporate network. Which Windows Server 2008 R2 technology enforces health policies for connecting clients?

Accepted Answer

Network Access Protection (NAP)

Answer

Network Access Protection (NAP) evaluates the health of connecting clients and can restrict access or remediate non-compliant systems.

Question 5

Which type of DNS zone contains a read-only copy of a primary zone and is automatically updated from the primary?

Accepted Answer

Secondary zone

Answer

A secondary DNS zone holds a read-only copy of zone data that is replicated from the primary zone via zone transfer.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Microsoft 70 642: Network Infrastructure 3