MCTS 70-642 Technology & Digital Applications 4 — Questions and Answers
Question 1: A Windows Server 2008 R2 VPN server is configured with SSTP. Which port must be open on the firewall to allow SSTP connections?
- 1723
- 1701
- 443 (Correct answer)
- 500
Correct answer: 443
SSTP (Secure Socket Tunneling Protocol) encapsulates PPP traffic over HTTPS using TCP port 443.
Question 2: An administrator needs to configure Windows Server 2008 R2 to issue certificates automatically to domain computers for IPsec. Which role service should be deployed?
- Active Directory Rights Management Services
- Active Directory Certificate Services with autoenrollment (Correct answer)
- Network Policy Server with RADIUS
- Active Directory Federation Services
Correct answer: Active Directory Certificate Services with autoenrollment
AD CS with autoenrollment allows Group Policy to automatically enroll domain computers in certificate templates, enabling IPsec authentication.
Question 3: Which RRAS feature in Windows Server 2008 R2 allows branch office users to connect to the headquarters network using a persistent site-to-site VPN connection?
- Demand-dial interface configured for persistent connection (Correct answer)
- Remote Access VPN with L2TP
- DirectAccess
- Network Bridge
Correct answer: Demand-dial interface configured for persistent connection
A demand-dial interface configured as persistent maintains a permanent site-to-site VPN tunnel between two RRAS servers.
Question 4: When configuring a new Windows Server 2008 R2 print server, you want clients to automatically download the correct printer driver when they connect. What must you configure?
- Deploy the driver via Group Policy Software Installation
- Install additional driver packages for each client OS in the printer's sharing properties (Correct answer)
- Configure the print spooler to use universal print drivers only
- Enable BranchCache on the print server
Correct answer: Install additional driver packages for each client OS in the printer's sharing properties
By adding additional drivers (x86 and x64) in the printer sharing properties, Windows clients automatically download the appropriate driver when connecting.
Question 5: An administrator wants to limit which users can manage a shared printer on Windows Server 2008 R2 without giving them local administrator rights. What is the correct approach?
- Add the users to the Print Operators group and assign Manage Printers permission
- Add the users to the Server Operators group
- Grant the users Full Control on the print server's C:\Windows\System32\spool folder
- Configure the printer's security properties to grant Manage Printers permission to the users (Correct answer)
Correct answer: Configure the printer's security properties to grant Manage Printers permission to the users
Assigning Manage Printers permission directly in the printer's Security tab gives granular control over a specific printer without requiring group membership.
Question 6: Which Windows Server 2008 R2 feature encrypts data in transit between a client and a file server using SMB signing?
- Encrypting File System (EFS)
- SMB signing via Group Policy security settings (Correct answer)
- BitLocker Drive Encryption
- IPsec transport mode
Correct answer: SMB signing via Group Policy security settings
SMB signing, configurable via Group Policy under Security Options, adds a digital signature to each SMB packet to prevent tampering in transit.
Question 7: A Windows Server 2008 R2 file server uses the Distributed File System (DFS). Which DFS component provides fault tolerance by replicating folder contents between multiple servers?
- DFS Namespaces
- DFS Replication (DFSR) (Correct answer)
- File Replication Service (FRS)
- BranchCache
Correct answer: DFS Replication (DFSR)
DFS Replication (DFSR) uses the Remote Differential Compression (RDC) algorithm to efficiently replicate file data between DFS servers.
MCTS 70-642 Technology & Digital Applications 4
A Windows Server 2008 R2 VPN server is configured with SSTP.
Which port must be open on the firewall to allow SSTP connections?