MCTS 70-642 Technology & Digital Applications 3 — Questions and Answers
Question 1: An administrator needs to configure Windows Server 2008 R2 to route traffic between two subnets without using a dedicated hardware router. Which feature should be enabled?
- Network Bridge
- IP Routing via Routing and Remote Access (RRAS) (Correct answer)
- Internet Connection Sharing (ICS)
- Network Load Balancing (NLB)
Correct answer: IP Routing via Routing and Remote Access (RRAS)
Enabling IP routing in RRAS allows Windows Server 2008 R2 to function as a software router between subnets.
Question 2: Which Windows Server 2008 R2 feature provides fault tolerance for a DHCP server by splitting scope address distribution between two DHCP servers?
- DHCP Failover (80/20 rule) (Correct answer)
- DHCP Superscope
- DHCP Multicast scope
- DHCP lease splitting via NLB
Correct answer: DHCP Failover (80/20 rule)
The 80/20 rule manually splits a scope so that 80% of addresses are served by the primary and 20% by a backup DHCP server.
Question 3: A Windows Server 2008 R2 DNS server is configured as a forwarder. When the forwarder is unavailable, which behavior occurs by default if 'Use root hints if no forwarders are available' is enabled?
- The DNS server returns a SERVFAIL error to all clients
- The DNS server queries root hint servers to resolve the name (Correct answer)
- The DNS server uses its local cache exclusively
- The DNS server switches to recursive mode and queries the client's ISP
Correct answer: The DNS server queries root hint servers to resolve the name
With root hints fallback enabled, the DNS server falls back to iterative queries starting from root hint servers when forwarders fail.
Question 4: Which type of DNS zone stores a read-only copy of zone data and only contains NS and SOA records plus glue records for delegated zones?
- Secondary zone
- Stub zone (Correct answer)
- Forward lookup zone
- GlobalNames zone
Correct answer: Stub zone
A stub zone contains only the SOA, NS, and glue A records needed to contact authoritative servers for the zone.
Question 5: An IPsec policy is applied via Group Policy on Windows Server 2008 R2. A server cannot communicate with a client after the policy is applied. What is the most likely cause?
- The client does not have a matching IPsec policy configured (Correct answer)
- IPsec requires IPv6 to function
- The Group Policy Object needs to be restarted before IPsec activates
- IPsec policies cannot be applied via Group Policy in Windows Server 2008 R2
Correct answer: The client does not have a matching IPsec policy configured
IPsec requires both endpoints to have compatible policies; if the client lacks a matching policy, the negotiation fails and communication is blocked.
Question 6: A network administrator wants all DNS client queries for an internal domain to resolve via an internal DNS server while all other queries go to the ISP DNS. Which DNS feature achieves this?
- Conditional forwarding (Correct answer)
- DNS stub zones
- Split-brain DNS
- Root zone delegation
Correct answer: Conditional forwarding
Conditional forwarders route queries for specific domain names to designated DNS servers, leaving all other queries to default forwarders or root hints.
Question 7: What does the Windows Server 2008 R2 Network Policy Server (NPS) use to determine whether a connecting client is compliant with health requirements?
- Active Directory group membership only
- System Health Validators (SHVs) (Correct answer)
- RADIUS accounting logs
- Windows Firewall profile settings
Correct answer: System Health Validators (SHVs)
SHVs define the health criteria (e.g., antivirus, firewall status) that NPS evaluates against client System Statement of Health (SSoH) reports.
MCTS 70-642 Technology & Digital Applications 3
An administrator needs to configure Windows Server 2008 R2 to route traffic between two subnets without using a dedicated hardware router.
Which feature should be enabled?