MCTS 70-642 Research & Evidence-Based Practice 4

Question 1

An administrator wants evidence that Windows Firewall with Advanced Security is blocking specific outbound traffic. Which tool provides the most detailed rule-match evidence?

Accepted Answer

Windows Firewall audit logging with dropped packet logging enabled

Answer

Enabling Windows Firewall audit logging with dropped packet recording creates log entries for each blocked connection, providing rule-match evidence.

Question 2

When researching WINS name resolution failures on a Windows Server 2008 network, which file contains evidence of locally cached NetBIOS name mappings?

Accepted Answer

C:\Windows\System32\drivers\etc\lmhosts

Answer

The lmhosts file contains static NetBIOS name-to-IP mappings that can be used as evidence of pre-configured name resolution entries.

Question 3

Which Windows Server 2008 command provides evidence of the current NetBIOS name cache on a workstation, useful for diagnosing name resolution issues?

Accepted Answer

nbtstat -c

Answer

The 'nbtstat -c' command displays the current NetBIOS name cache including all recently resolved names and their IP addresses.

Question 4

A security audit requires evidence that all administrative RDP sessions to servers are encrypted. Which Group Policy setting should be verified?

Accepted Answer

Set client connection encryption level to High

Answer

Setting the RDP encryption level to High ensures all data transmitted during remote desktop sessions is encrypted with 128-bit encryption.

Question 5

To research the impact of a network change, an administrator compares Performance Monitor baseline data with post-change data. Which counter provides evidence of network saturation?

Accepted Answer

Network Interface\Output Queue Length

Answer

Network Interface Output Queue Length greater than 2 sustained over time provides evidence that the network interface is saturated and cannot keep pace with traffic.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Research & Evidence-Based Practice 4