MCTS 70-642 Quality Control & Assurance 4 — Questions and Answers
Question 1: Your QA process requires verifying that Windows Server 2008 correctly logs failed network logon attempts. Which event ID in the Security log indicates a failed NTLM network logon?
- 4624
- 4625 (Correct answer)
- 4648
- 4776
Correct answer: 4625
Event ID 4625 is logged when an account fails to log on, including failed network (NTLM) authentication attempts with the failure reason code.
Question 2: A quality review shows that a DHCP server occasionally fails to update DNS records for dynamically assigned clients. Which DHCP setting controls whether the DHCP server performs DNS dynamic updates on behalf of clients?
- DNS tab → Always dynamically update DNS records (Correct answer)
- Advanced tab → Credentials
- General tab → Conflict detection attempts
- Filters → Allow list
Correct answer: DNS tab → Always dynamically update DNS records
The DNS tab on DHCP server properties controls dynamic DNS update behavior, including whether updates are always performed or only when the client requests it.
Question 3: During network QA testing, you use Network Monitor 3.4 to verify traffic encryption. Which frame field confirms that IPsec ESP is encrypting the payload?
- IP Protocol field = 50 (Correct answer)
- IP Protocol field = 51
- TCP flags field
- IP TOS field
Correct answer: IP Protocol field = 50
IP Protocol number 50 identifies Encapsulating Security Payload (ESP), which encrypts and optionally authenticates the packet payload.
Question 4: You are validating that a Windows Server 2008 VPN server enforces the requirement that only MS-CHAPv2 is used for PPTP connections. Where is this authentication protocol restriction configured?
- Network Policy Server policy → Constraints → Authentication Methods (Correct answer)
- RRAS → Server Properties → PPP tab
- RRAS → Remote Access Policy → Conditions
- Active Directory Users and Computers → Dial-in tab
Correct answer: Network Policy Server policy → Constraints → Authentication Methods
NPS network policies contain Authentication Methods constraints that specify which protocols (MS-CHAPv2, EAP, etc.) are permitted for each connection type.
Question 5: A QA auditor asks you to demonstrate that the WINS server replication partners are synchronizing correctly. Which tool shows replication partner status and last replication time?
- WINS console → Replication Partners node (Correct answer)
- Event Viewer System log
- Performance Monitor WINS counters
- netsh wins show partner
Correct answer: WINS console → Replication Partners node
The Replication Partners node in the WINS MMC console shows each partner's type (push/pull), status, and last successful replication timestamp.
Question 6: To ensure network QA, you must verify that Windows Server 2008 applies the correct QoS policy for VoIP traffic. Which tool shows whether a Group Policy-based QoS policy is active on the server?
- netsh qos show policy
- gpresult /scope computer /v (Correct answer)
- Performance Monitor → QoS counters
- netstat -e
Correct answer: gpresult /scope computer /v
The gpresult /scope computer /v command outputs applied Group Policy settings including QoS policies, showing which QoS rules are active from which GPO.
Question 7: After a firmware upgrade on a network switch, you need to QA test that jumbo frames are supported end-to-end. Which command tests maximum transmission unit size from a Windows Server 2008 server?
- ping -l 9000 -f <target> (Correct answer)
- pathping -n <target>
- tracert -d <target>
- netsh interface ip show config
Correct answer: ping -l 9000 -f <target>
The ping -l flag sets the packet payload size and -f sets the Don't Fragment bit, allowing you to test whether jumbo frame sizes traverse the path without fragmentation.
MCTS 70-642 Quality Control & Assurance 4
Your QA process requires verifying that Windows Server 2008 correctly logs failed network logon attempts.
Which event ID in the Security log indicates a failed NTLM network logon?