MCTS 70-642 Quality Control & Assurance 5 — Questions and Answers
Question 1: Your organization's change management process requires documenting the current routing configuration before making changes. Which command exports the full routing table of a Windows Server 2008 RRAS server to a file?
- route print > routing_table.txt
- netsh routing ip show rtmroutes > routing_table.txt (Correct answer)
- ipconfig /all > routing_table.txt
- netstat -r > routing_table.txt
Correct answer: netsh routing ip show rtmroutes > routing_table.txt
The netsh routing ip show rtmroutes command displays the full RTM (Routing Table Manager) routing table including protocol-specific routes managed by RRAS.
Question 2: A QA process mandates that all administrative access to Windows Server 2008 be performed over encrypted sessions. Which feature enforces that remote management connections use HTTPS rather than HTTP?
- Windows Remote Management (WinRM) with HTTPS listener (Correct answer)
- Remote Desktop Gateway with SSL bridging
- IPsec transport mode policy
- SSL certificates applied in IIS Manager
Correct answer: Windows Remote Management (WinRM) with HTTPS listener
Configuring a WinRM HTTPS listener with a valid SSL certificate ensures that all Windows Remote Management connections, including PowerShell remoting, are encrypted.
Question 3: During a QA review of DHCP, you find that Conflict Detection Attempts is set to 0. What risk does this configuration introduce?
- The server leases addresses without first pinging them, risking duplicate IP assignment (Correct answer)
- The server refuses all lease requests from unknown clients
- The server cannot detect rogue DHCP servers
- The server ignores DHCP Decline messages from clients
Correct answer: The server leases addresses without first pinging them, risking duplicate IP assignment
When Conflict Detection Attempts is 0, the DHCP server does not ping an address before offering it, so statically configured hosts sharing that address cause IP conflicts.
Question 4: An auditor requires proof that your DNS infrastructure uses DNSSEC to protect zone integrity. Which Windows Server 2008 feature provides signed zone support?
- DNS Security Extensions via dnscmd /signzone (Correct answer)
- DNS Conditional Forwarders with authentication
- Active Directory Integrated zone access control
- DNS Aging and Scavenging
Correct answer: DNS Security Extensions via dnscmd /signzone
Windows Server 2008 R2 introduced the ability to sign DNS zones using DNSSEC via dnscmd /signzone or the DNS Manager console, adding digital signatures to resource records.
Question 5: A QA engineer must validate that NPS correctly applies different access policies to wired versus wireless 802.1X connections. Which NPS condition attribute differentiates connection type?
- NAS-Port-Type (Correct answer)
- Called-Station-ID
- Framed-Protocol
- NAS-Identifier
Correct answer: NAS-Port-Type
The NAS-Port-Type RADIUS attribute specifies the physical port type (Ethernet, wireless IEEE 802.11, etc.), enabling NPS to apply different policies per connection medium.
Question 6: For quality assurance, you must verify that the Routing and Remote Access service automatically recovers if it stops unexpectedly. Where is service recovery behavior configured in Windows Server 2008?
- Services snap-in → RRAS Properties → Recovery tab (Correct answer)
- RRAS console → Server Properties → General tab
- Task Scheduler → Service Monitor task
- Group Policy → Computer Configuration → System Services
Correct answer: Services snap-in → RRAS Properties → Recovery tab
The Recovery tab in the service's Properties dialog in the Services snap-in allows you to specify automatic restart or custom program execution on first, second, and subsequent failures.
Question 7: Your QA team requires that all changes to Active Directory-integrated DNS zones are auditable. Which Windows Server 2008 audit policy category must be enabled to log DNS zone modifications?
- Audit Directory Service Access (Correct answer)
- Audit Object Access
- Audit Policy Change
- Audit Privilege Use
Correct answer: Audit Directory Service Access
Active Directory-integrated DNS zones are stored as objects in AD DS; enabling Audit Directory Service Access generates events when those objects are modified.
MCTS 70-642 Quality Control & Assurance 5
Your organization's change management process requires documenting the current routing configuration before making changes.
Which command exports the full routing table of a Windows Server 2008 RRAS server to a file?