默认题库 - MCITP(70-642)

单选题

Your network contains two servers named Server1 and Server2. Server1 and Server2 run the Server Core installation of Windows Server 2008 R2.You need to duplicate the Windows Firewall configurations from Server1 to Server2.What should you use？（）

A. the Get-Item and the Set-Item cmdlets
B. the Get-Service and the Set-Service cmdlets
C. the Netsh tool
D. the Sconfig tool

查看答案

单选题

Your company has a main office and 15 branch offices. The company has a single Active Directory domain. All servers run Windows Server 2008 R2.You need to ensure that the VPN connections between the main office and the branch offices meet the following requirements: ˆAll data must be encrypted by using end-to-end encryption. ˆ The VPN connection must use computer-level authentication. ˆ User names and passwords cannot be used for authentication. What should you do？（）

A. Configure an IPsec connection to use tunnel mode and preshared key authentication.
B. Configure a PPTP connection to use version 2 of the MS-CHAP v2 authentication.
Configure a L2TP/IPsec connection to use the EAP-TLS authentication.
D. Configure a L2TP/IPsec connection to use version 2 of the MS-CHAP v2 authentication.

查看答案

单选题

Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2.Server1 has several custom inbound rules and connection security rules.You need to duplicate the Windows Firewall rules from Server1 to Server2.What should you do on Server1？（）

At the Command Prompt, run netsh.exe firewall dump.
B. At the Command Prompt, run netsh.exe firewall show > firewall.txt.
C. From the Windows Firewall with Advanced Security console, click Export policy.
D. From the Windows Firewall with Advanced Security console, click the Connection Security Rules node, and then click Export List.

查看答案

单选题

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 hosts a custom application named App1. App1 is accessible on TCP port 5000.You need to encrypt App1 data on the network.What should you do？（）

A. From the Local Security Policy console, configure the Security Options.
B. From the Local Security Policy console, configure the Application Control Policies.
C. From the Windows Firewall with Advanced Security console, create an inbound rule.
D. From the Windows Firewall with Advanced Security console, create a connection security rule.

查看答案

多选题

Your company has a server named SRV1 that runs windows server 2008. The default print server role is installed on SRV1 the company wants to centralize printing on SRV1 for both UNIX and windows users. You need to provide support to the UNIX users who print on SRV1. What are two possible ways to achieve this goal? （）

A. Install the internet printing server role on SRV1.
B. Install the line printer daemon (LPD) services role service on SRV1.
Configure the printers on SRV1 to use line printer remote printing.
D. Install the file server role on SRV1 and activate the services for the NFS Role service option.

查看答案

多选题

Your company has a single active directory domain. All servers run windows server 2008. The company network has 10 servers that perform as web servers. All confidential files are located on a server named FSS1. The company security policy states that all confidential data must be transmitted in the most secure manner. When you monitor the network, you notice that the confidential files are stored on FSS1 server are being transmitted over the network without encryption. You need to ensure that encryption is always used when the confidential files on the FSS1 server are transmitted over the network. What are two possible ways to achieve this goal? （）

A. Deactivate all LM and NTLM authentication methods on the FSS1 server.
B. Use IIS to publish the confidentials files. Activate SSL on the ISS server, and then open the files as a web folder.
C. Use IPSec encryption between the FSS 1 server and the computers of the users who need to access the confidential files.
D. Use the server messager block (SMB) signing between the FSS1 server and the computers of the users who want to access the confidential files.
E. Activate offline files for the confidential files that are stored on the FSS1 server. In the folder advanced properties dialog box, select the encrypt contents to secure data option.

查看答案

多选题

Your network uses ipv4. You install a server that runs windows server 008 at a brach office. The server is configured with two network interfaces. You need to configure routing on the server at the branch office. Which two actions should you perform? （）

A. Install the routing and remote access role.
B. Run the netsh ras ip set access ALL command.
C. Run the netsh interface ipv4 enable command.
D. Enable the IPV4 router routing and remote access option.

查看答案

单选题

Your company has a single active directory domain. The domain has servers that run windows server 2008. You have a server named NAT1 that functions as a NAT server. You need to ensure that administrators can access a server named RDP1 by using remote desktop protocol (RDP). What should you do?（）

A. Configure NAT1 to forward port 389 to RDP1.
B. Configure NAT1 to forward port 1432 to RDP1.
Configure NAT1 to forward port 3339 to RDP1.
D. Configure NAT1 to forward port 3389 to RDP1.

查看答案

单选题

Your network contains an Active Directory domain. The domain contains two servers named Server1 and Server2. All servers run Windows Server 2008 R2 and have Windows Firewall turned on. You need to ensure that you can use Event Viewer on Server2 to access the Application log on Server1. What should you do？（）

A. On Server2, create a new event subscription.
B. On Server2, modify the outbound firewall rules.
C. On Server1, modify the inbound firewall rules.
D. On Server1, modify the settings on the Application log.

查看答案

单选题

Your network contains a DNS server named Server1 that runs Windows Server 2008 R2.Root hints for Server1 are configured as shown in the exhibit. (Click the Exhibit button.)You need to add root hints to Server1.What should you do first？（）

A. Disable recursion.
B. Delete the . (root) zone.
C. Restart the DNS Server service.
D. Remove all conditional forwarders.

查看答案