默认题库 - MCITP(70-642)

单选题

Your company has a single active directory domain named contoso.com. all servers run windows server 2008. You have a public DNS server named server1, and an e-mail server named server2. Client computers outside the company domain are unable to send e-mail messages to contoso.com. you verify that the host (A) DNS record for server2 is available to external client computers. You need to ensure server2 can receive e-mail messages from external client computers. How should you configure the contoso.com DNS zone?（）

Add a mail exchange (MX) record for server2.
B. Add a mailbox (MB) record for server2. Set the mailbox host setting to server2.
C. Add a canonical (CNAME) record that maps server2 to contoso.com.
D. Add a server locator (SRV) record for server2. Set the service field to _smtp. Set the protocol field to _tcp. Set the port number to 25.

查看答案

多选题

Your network contains an Active Directory domain. The network has DirectAccess deployed.You deploy the DirectAccess Connectivity Assistant (DCA) to all client computers.You need to ensure that users can view their DirectAccess status by using the DCA.Which two group policy settings should you configure？（）

A. Dynamic Tunnel Endpoints (DTEs)
B. Corporate Portal Site
Corporate Resources
D. PortalName

查看答案

单选题

Your company has deployed network access protection (NAP). You configure secure wireless access to the network by using 802.1x authentication from any access point. You need to ensure that all client computers that access the network are evaluated by NAP what should you do?（）

A. Configure all access points as RADIUS clients to the remediation servers.
B. Configure all access points as RADIUS clients to the network Policy Server (NPS).
Create a network policy that defines remote access server as a network connection method.
D. Create a network policy that specifies EAP-TLS as the only available authentication method.

查看答案

单选题

our network contains a server that runs window server 2008. The serve has the network policy server(NPS) service role installed. You need to allow only members of a global group named group1 VPN access to the network. What should you do?（）

Add group1 to the RAS and IAS servers group.
B. Add group1 to the network configuration operators group..
Create a new network policy and define a group-based connection for group1. Set the access permission of the policy to access granted. Set the processing order of the policy to 1.
D. Create a new network policy and define a group-based condition for group1. Set the access permission of the policy to acces granted. Set the processing of the policy to 3.

查看答案

单选题

Your network contains an Active Directory domain named contoso.com. The network has DirectAccess deployed.You deploy a new server named Server1 that hosts a management application.You need to ensure that Server1 can initiate connections to DirectAccess client computers.Which settings should you modify from the DirectAccess Setup console？（）

Application Servers
B. DirectAccess Server
C. Infrastructure Servers
D. Remote Client

查看答案

单选题

You install WSUS on a server that runs windows server 2008. You need to ensure that the traffic between the WSUS administrative web site and the server administrators computer is encrypted what should you do?（）

A. Configure SSL encryption on the WSUS server website.
B. Run the netdom trust /SecurePasswordPrompt command on the WSUS server.
Configure the NTFS permissions on the content directory to deny Full control permission to the everyone group.
D. Configure the WSUS serve to require integrated windows authentication (WA) hen users connect to the WSUS serve.

查看答案

单选题

Your network contains two offices named Office1 and Office2. The offices connect to each other by using a demand-dial connection.You add a new subnet in Office2.You need to ensure that a demand-dial connection starts when users attempt to connect to resources in the new Office2 subnet.What should you do from the Remote Routing and Access console？（）

A. From the remote access server in Office2, right-click the demand-dial interface and click Connect.
B. From the remote access server in Office1, right-click the demand-dial interface and click Connect.
C. From the remote access server in Office1, right-click the demand-dial interface and click Update Routes.
D. From the remote access server in Office2, right-click the demand-dial interface and click Update Routes.

查看答案

单选题

Your company has a server named DC1 that runs Windows Server 2008. DC1 has the DHCP server role installed. You find taht a desktop computer named SALES4 is unable to obtain an IP configuration from the DHCP server. You install the Microsoft Network Monitor 3.0 application on DC1. You enable P-mode in the Network Monitor application configuration. You plan to capture only the DHCP server-related traffic between DC1 and SALES4 The network interface configuration for the two computers is shown in the following table. （missing again wow）. You need to build a filter int he Network Monitor application to capture the DHCP traffic between DC1 and SALES4 Which filter should you use（）？

A. IPv4 Address == 169.254.15.84 && DHCP
B. IPv4 address == 192.168.2.1 && DHCP
C. Ethernet Address == 0x000A5E1C7F67 && DHCP
D. Ethernet Address == 0x001731D55EFF && DHCP

查看答案

单选题

You perform a security audit of a server named CRM1. You want to build a list of all DNS requests that are initiated by the server. You install the Microsoft Network Monitor 3.0 application on CRM1. You capture all local traffic on CRM1 for 24hours. You save the capture file as data.cap. you find that the size of this file is more tahn 1GB. you need to create a file named DNSdata.cap from the existing capture file taht contains only dNS -related data What should you do（）？

A. apply the display filter !DNS and save the displayed frames as DNSdata.cap file
B. Apply the capture filter DNS and save the displayed frames as a DNSdata.cap file
C. Add a new alisa named DNS to the aliases table and save the file as DNSdata.cap
D. Run the nmcap.exe /inputcapture data.cap /capture DNS /file DNSdata.cap command.

查看答案

单选题

You have a file server that runs Windows Server 2008. The server has a shared folder. You need to receive a notifcation when a user stores more than 500MB of data int he shared folder. You must allow users to store more than 500MB of data in the shared folder. What should you do（）？

A. Create a soft quota
B. Create a hard quota
C. create an active screening file screen
D. create a passive screening file scree

查看答案