70-642 Exam
Amazing 70-642 mcts To Try
Cause all that matters here is passing the Microsoft 70-642 exam. Cause all that you need is a high score of 70-642 TS: Windows Server 2008 Network Infrastructure, Configuring exam. The only one thing you need to do is downloading Testking 70-642 exam study guides now. We will not let you down with our money-back guarantee.
2021 Aug mcts 70-642:
Q81. - (Topic 1)
Your company has an Active Directory domain named ad.contoso.com. All client computers run Windows 7.
The company has recently acquired a company that has an Active Directory domain named ad.fabrikam.com.
A two-way forest trust is established between the ad.fabrikam.com domain and the ad.contoso.com domain.
You need to edit the ad.contoso.com domain Group Policy object (GPO) to enable users in the ad.contoso.com domain to access resources in the ad.fabrikam.com domain.
What should you do?
A. Configure the DNS Suffix Search List option to ad.contoso.com, ad.fabrikam.com.
B. Configure the Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries option to True.
C. Configure the Primary DNS Suffix option to ad.contoso.com, ad.fabrikam.com. Configure the Primary DNS Suffix Devolution option to True.
D. Configure the Primary DNS Suffix option to ad.contoso.com, ad.fabrikam.com. Configure the Primary DNS Suffix Devolution option to False.
Answer: A
Q82. - (Topic 4)
Your network contains a server named Server1.
An administrator named Admin1 installs the Windows Server Update Services (WSUS) server role on Server1. You open the Windows Server Update Services console and view the Products and Classifications options as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that you can select updates for Windows Server 2008 R2 Service Pack 1 (SP1) from the Products and Classifications options.
What should you do?
A. Add your user account to the WSUS Administrators group.
B. Synchronize Server1 to the Microsoft Update servers.
C. Configure a server that runs Windows Server 2008 R2 SP1 to download updates from Server1.
D. Restart the Update Services service.
Answer: B
Explanation:
Ref: http://www.networkinghints.com/administrator/windows-server/can%C2%B4t-find-windows-7-servicepack-1-in-wsus/ http://windowsteamblog.com/windows/b/bloggingwindows/archive/2011/03/08/windows-7-sp1- available-viawsus.aspx
Q83. HOTSPOT - (Topic 4)
You configure a full server backup on a server as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that a full server backup runs each day at 23:45 and that a custom script runs when the backup completes.
Which administrative tool should you use to achieve this task? To answer, select the appropriate tool in the answer area.
Answer:
Q84. - (Topic 1)
Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. The network contains an client named Computer1 that runs Windows7.
All communication between Server1 and Server2 is encrypted by using IPSec. Communication between the server and the client does not require IPSec encryption.
You need to ensure that you can connect to Server1 by using the IP Security Monitor on Computer1.
What should you do?
A. Apply an IP Security policy to Computer1.
B. Create a connection security rule on Computer1.
C. Add a value to the PolicyAgent registry key on Server1.
D. Modify the Advanced Audit Policy Configuration on Server1.
Answer: C
Explanation:
-Valid for Windows 7 and Vista client-
On the computer (2008) you want to remotely manage or monitor, click Start, click Run, type regedit, and then click OK.
Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ PolicyAgent On the
Edit menu, select
New, and then click DWORD Value.
Write EnableRemoteMgmt and then press ENTER.
Click the right mouse button on the entry EnableRemoteMgmt and then click Modify.
In the Value data box, type 1, and then click OK.
Exit Registry Editor.
Start the RemoteRegistry. To do this, type net start RemoteRegistry at a command prompt, and then press ENTER.
Start the PolicyAgent. To do this, type net start policyagent at the command prompt, and then press ENTER.
Make sure the user who will administer or supervise the team has administrator privileges on the computer. In the Advanced Security section of Windows Firewall, enable service management rules remotely.
Q85. - (Topic 3)
Your company has a single Active Directory domain. The domain has servers that run Windows Server 2008 R2.
You have a server named NAT1 that functions as a NAT server. You need to ensure that administrators can access a server named RDP1 by using Remote Desktop Protocol (RDP).
What should you do?
A. Configure NAT1 to forward port 389 to RDP1.
B. Configure NAT1 to forward port 1432 to RDP1.
C. Configure NAT1 to forward port 3339 to RDP1.
D. Configure NAT1 to forward port 3389 to RDP1.
Answer: D
Latest 70-642 exam questions:
Q86. - (Topic 4)
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1.
You are configuring DirectAccess.
You create a static host (A) record for isatap.contoso.com.
You discover that the DNS server fails to respond to queries for the isatap.contoso.com record.
You need to ensure that the DNS server resolves queries for isatap.contoso.com. What should you do?
A. Create a primary zone for isatap.contoso.com.
B. Create a canonical name (CNAME) record for isatap.contoso.com.
C. Run dnscmd /config /enableglobalqueryblocklist 1.
D. Run dnscmd /config /globalqueryblocklist wpad.
Answer: D
Q87. - (Topic 2)
Your network contains an Active Directory domain. The domain contains a Windows Server Update Services (WSUS) server named Server1. A Group Policy object (GPO) named GPO1 configures all computers in the domain to use Server1 for Windows Update.
You add a new Windows 7 computer named Computer1 to the domain.
From the Update Services console, you discover that Computer1 is not listed as a member of any computer groups.
You verify that GPO1 is applied to Computer1.
You need to ensure that Computer1 is available in the Update Services console. What should you do?
A. On Computer1, run wuauclt.exe /detectnow.
B. On Computer1, run wuauclt.exe /reportnow.
C. On Server1, run wsusutil.exe reset.
D. On Server1, run wsusutil.exe listinactiveapprovals.
Answer: A
Explanation:
Automatic Updates Behavior Using Command-line Options There are two documented command-line options used for manipulating Automatic Updates behavior. These options are meant to be run from a command prompt. They are helpful for testing and troubleshooting client computers. For comprehensive troubleshooting information for problems with both the WSUS server and client computers, see "Microsoft Windows Server Update Services Operations Guide."
Detectnow Option Because waiting for detection to start can be a time-consuming process, an option has been added to allow you to initiate detection right away. On one of the computers with the new Automatic Update client installed, run the following command at the command prompt: wuauclt.exe /detectnow Resetauthorization Option WSUS uses a cookie on client computers to store various types of information, including computer group membership when client-side targeting is used. By default this cookie expires an hour after WSUS creates it. If you are using client-side targeting and change group membership, use this option in combination with detectnow to expire the cookie, initiate detection, and have WSUS update computer group membership.
Note that when combining parameters, you can use them only in the order specified as follows: wuauclt.exe /resetauthorization /detectnow http://technet.microsoft.com/en-us/library/cc708617(v=WS.10).aspx
Q88. - (Topic 1)
Your company has a domain controller that runs Windows Server 2008 R2 and the DNS role. The DNS domain is named contoso.com.
You need to ensure that inquiries about contoso.com are sent to dnsadmin@contoso.com. What should you do?
A. Create a Signature (SIG) record for the domain controller.
B. Modify the Name Server (NS) record for the domain controller.
C. Modify the Service Location (SRV) record for the domain controller.
D. Modify the Start of Authority (SOA) record on the domain controller.
Answer: D
Q89. - (Topic 3)
You are planning the network for a branch office. The branch office will contain 100 IPv4 hosts.
You need to recommend a subnet mask for the branch office. The subnet mask must minimize the number of unused IP addresses.
Which subnet mask should you use?
A. 255.255.255.0
B. 255.255.255.128
C. 255.255.0.0
D. 255.255.128.0
Answer: B
Explanation:
http://www.pantz.org/software/tcpip/subnetchart.html
Q90. - (Topic 4)
Your network contains an Active Directory forest named contoso.com. The forest contains a DNS server named dnsl.fabrikam.com that hosts a standard primary zone for fabrikam.com. Dnsl.fabrikam.com uses an IP address of 172.23.1.3.
You run the nslookup.exe command as shown in the exhibit. (Click the Exhibit button.)
You need to prevent a timeout message from appearing when you run the command.
What should you do?
A. Reload the fabrikam.com zone.
B. Create a reverse lookup zone.
C. Run ipconfig /registerdns on www.fabrikam.com.
D. Restart the Netlogon service on dnsl.fabrikam.com.
E. Change the fabrikam.com zone to an Active Directory-integrated zone.
Answer: B