MCTS 70-642 Quality Control & Assurance 3 — Questions and Answers
Question 1: A QA engineer must verify that IPsec policies are consistently applied across all domain member servers. Which Windows Server 2008 tool provides centralized IPsec policy monitoring and audit results?
- Windows Firewall with Advanced Security MMC
- IP Security Monitor snap-in (Correct answer)
- Network Policy Server logs
- Resultant Set of Policy (RSoP)
Correct answer: IP Security Monitor snap-in
The IP Security Monitor snap-in displays active IPsec policies, security associations, and statistics, confirming which policies are applied to each connection.
Question 2: You need to confirm that NPS (Network Policy Server) is correctly logging RADIUS authentication attempts for compliance review. Where are RADIUS accounting logs stored by default in Windows Server 2008?
- C:\Windows\System32\LogFiles
- C:\Windows\System32\ias (Correct answer)
- Event Viewer Security log
- C:\inetpub\logs
Correct answer: C:\Windows\System32\ias
By default, NPS writes IAS/RADIUS accounting log files to C:\Windows\System32\ias in W3C or database-compatible format.
Question 3: During a quality review, you discover that a DNS server's cache is returning outdated records that were updated at the authoritative server. What is the fastest corrective action?
- Restart the DNS Server service
- Run dnscmd /clearcache (Correct answer)
- Decrease the zone's TTL
- Delete and re-create the zone
Correct answer: Run dnscmd /clearcache
The dnscmd /clearcache command immediately flushes all cached DNS records from the server's resolver cache without requiring a service restart.
Question 4: A QA process requires verifying that the Windows Server 2008 DHCP server is not leasing addresses to unauthorized clients. Which DHCP feature enforces this control?
- Scope exclusions
- DHCP MAC filtering via reservations only
- DHCP NAP enforcement (Correct answer)
- Superscope restrictions
Correct answer: DHCP NAP enforcement
DHCP NAP (Network Access Protection) enforcement can quarantine non-compliant clients by issuing restricted leases until remediation is complete.
Question 5: Which counter in Performance Monitor indicates how often the DNS server receives queries it cannot resolve from its cache, requiring recursive lookups?
- DNS\Total Query Received
- DNS\Recursive Queries/sec (Correct answer)
- DNS\Cache Hits/sec
- DNS\UDP Query Received/sec
Correct answer: DNS\Recursive Queries/sec
DNS\Recursive Queries/sec tracks the rate at which the DNS server forwards queries recursively, indicating cache-miss frequency and upstream dependency.
Question 6: You must ensure that all routing table changes on a Windows Server 2008 RRAS server are logged for audit purposes. Which method captures this information?
- Enable RRAS event logging to Maximum detail (Correct answer)
- Enable Windows Firewall logging
- Configure a Performance Monitor trace for TCP/IP
- Use Network Monitor capture filters
Correct answer: Enable RRAS event logging to Maximum detail
Setting RRAS event logging to Maximum detail records routing protocol events, route additions, and removals in the System event log.
Question 7: A compliance audit requires confirming that SNMP community strings on Windows Server 2008 are not set to the insecure default value. Where is this configured?
- Services snap-in → SNMP Service Properties → Security tab (Correct answer)
- Network Connections → Advanced Settings
- Local Security Policy → Network Security settings
- Computer Configuration → Administrative Templates → Network → SNMP
Correct answer: Services snap-in → SNMP Service Properties → Security tab
SNMP community strings are configured on the Security tab of the SNMP Service Properties in the Services MMC snap-in.
MCTS 70-642 Quality Control & Assurance 3
A QA engineer must verify that IPsec policies are consistently applied across all domain member servers.
Which Windows Server 2008 tool provides centralized IPsec policy monitoring and audit results?