MCTS 70-642 Microsoft 70 642: Network Infrastructure, Configuring 2 — Questions and Answers
Question 1: A company needs to ensure that DNS queries for internal resources are resolved by internal DNS servers while all other queries are forwarded to an ISP DNS server. Which DNS feature should you configure?
- Stub zones
- Conditional forwarders (Correct answer)
- Secondary zones
- Root hints
Correct answer: Conditional forwarders
Conditional forwarders allow DNS servers to forward queries for specific domain names to designated DNS servers, while other queries follow the default forwarder or root hints.
Question 2: You need to configure a Windows Server 2008 R2 server to lease IPv6 addresses to clients on the network. Which role should you install?
- DHCPv6 relay agent
- DHCPv6 server via the DHCP Server role (Correct answer)
- IPv6 router
- NPS role
Correct answer: DHCPv6 server via the DHCP Server role
The DHCP Server role in Windows Server 2008 R2 supports both DHCPv4 and DHCPv6 scopes, allowing the server to lease IPv6 addresses to clients.
Question 3: A technician wants to verify that IPSec is functioning correctly between two servers. Which command-line tool should be used to monitor IPSec security associations?
- netsh ipsec static show all
- netstat -an
- ipsecmon
- netsh ipsec dynamic show all (Correct answer)
Correct answer: netsh ipsec dynamic show all
The command 'netsh ipsec dynamic show all' displays active IPSec security associations and policy applied dynamically on the system.
Question 4: Your organization uses Network Access Protection (NAP) with DHCP enforcement. A non-compliant client connects to the network. What IP configuration does the non-compliant client receive?
- A full IP address with unrestricted access
- An APIPA address
- A restricted IP address with access only to remediation servers (Correct answer)
- No IP address
Correct answer: A restricted IP address with access only to remediation servers
With DHCP-based NAP enforcement, non-compliant clients receive a restricted IP configuration that limits access only to remediation servers until they become compliant.
Question 5: You need to reduce the amount of broadcast traffic between two VLANs while allowing them to communicate. Which device should you place between the VLANs?
- Hub
- Switch
- Router or Layer 3 switch (Correct answer)
- Repeater
Correct answer: Router or Layer 3 switch
A router or Layer 3 switch routes traffic between VLANs, blocking broadcasts from crossing while still allowing inter-VLAN communication.
Question 6: A Windows Server 2008 R2 DNS server hosts a primary zone. You want a second server to have a read-only copy of the zone for redundancy. What type of zone should you create on the second server?
- Stub zone
- Secondary zone (Correct answer)
- Forward lookup zone
- Reverse lookup zone
Correct answer: Secondary zone
A secondary zone is a read-only copy of a primary zone that is transferred from the master DNS server, providing redundancy and load distribution.
Question 7: You are configuring Windows Firewall with Advanced Security. You need to allow inbound Remote Desktop connections only from a specific subnet. Which rule type should you create?
- Program rule
- Port rule with scope restriction (Correct answer)
- Custom rule
- Predefined rule
Correct answer: Port rule with scope restriction
A port rule in Windows Firewall with Advanced Security allows you to specify the port (TCP 3389) and restrict the scope to specific IP address ranges or subnets.
MCTS 70-642 Microsoft 70 642: Network Infrastructure, Configuring 2
A company needs to ensure that DNS queries for internal resources are resolved by internal DNS servers while all other queries are forwarded to an ISP DNS server.
Which DNS feature should you configure?