MCTS 70-642 Microsoft 70 642: Network Infrastructure, Configuring 3 — Questions and Answers
Question 1: A company has multiple branch offices connected via site-to-site VPNs. Administrators need a centralized location to manage all VPN connections. Which Windows Server role should they deploy?
- Network Policy Server (NPS)
- Routing and Remote Access Service (RRAS) (Correct answer)
- DirectAccess
- Network Load Balancing
Correct answer: Routing and Remote Access Service (RRAS)
RRAS provides VPN gateway capabilities and can be used to establish and manage site-to-site VPN connections between branch offices.
Question 2: You need to configure DNS so that unresolved queries from your internal DNS server are sent to your ISP's DNS server by default. Which setting should you configure?
- Zone delegation
- Root hints
- Forwarders (Correct answer)
- Stub zone
Correct answer: Forwarders
Forwarders direct a DNS server to send all unresolved queries to a specified external DNS server rather than using root hints for iterative resolution.
Question 3: A network administrator needs to assign the same IP address to a specific client every time it connects using DHCP. What should be configured?
- DHCP exclusion range
- DHCP reservation (Correct answer)
- Static IP on the client
- DHCP scope option
Correct answer: DHCP reservation
A DHCP reservation binds a specific IP address to a client's MAC address, ensuring the client always receives the same IP from the DHCP server.
Question 4: You configure a Network Policy Server (NPS) as a RADIUS proxy. What is the primary purpose of using NPS in this mode?
- To enforce NAP health policies on clients
- To forward RADIUS authentication requests to other RADIUS servers (Correct answer)
- To terminate VPN connections
- To issue certificates to clients
Correct answer: To forward RADIUS authentication requests to other RADIUS servers
When NPS acts as a RADIUS proxy, it forwards authentication and accounting requests from RADIUS clients to other RADIUS servers for processing.
Question 5: Which IPv6 address type is equivalent to the IPv4 private address ranges and is only routable within an organization's network?
- Global unicast
- Link-local
- Unique local (ULA) (Correct answer)
- Multicast
Correct answer: Unique local (ULA)
Unique local addresses (FC00::/7 prefix) are the IPv6 equivalent of IPv4 private addresses, intended for use within an organization and not routable on the public Internet.
Question 6: A server running Windows Server 2008 R2 is configured as a VPN server. Remote users report they can connect but cannot access internal resources by name. DNS resolution works on the LAN. What is the most likely cause?
- The VPN server has no route to the internal subnet
- VPN clients are not receiving the internal DNS server address (Correct answer)
- The VPN server firewall is blocking port 53
- IPSec is not configured
Correct answer: VPN clients are not receiving the internal DNS server address
VPN clients must receive the internal DNS server's IP address via DHCP or VPN server configuration to resolve internal hostnames after connecting.
Question 7: You need to implement quality of service (QoS) policies to prioritize Voice over IP (VoIP) traffic on a Windows Server 2008 R2 network. Which feature should you use?
- Group Policy-based QoS (Correct answer)
- Traffic shaping via RRAS
- Network Load Balancing
- IPSec policies
Correct answer: Group Policy-based QoS
Group Policy-based QoS in Windows Server 2008 R2 allows administrators to mark network packets with DSCP values and prioritize specific application traffic such as VoIP.
MCTS 70-642 Microsoft 70 642: Network Infrastructure, Configuring 3
A company has multiple branch offices connected via site-to-site VPNs.
Administrators need a centralized location to manage all VPN connections.
Which Windows Server role should they deploy?