TS: Windows Server 2008 Network Infrastructure, Configuring
Question No: 121 – (Topic 2)
Your network contains a DNS server that runs Windows Server 2008 R2.
You open the Forwarders settings of the DNS server and discover that the option to add forwarders is disabled. You need to add forwarders to the DNS server.
What should you do first?
Enable BIND secondaries
Delete the quot;.quot; (root) zone.
Create a GlobalNames zone.
Delete all conditional forwarders.
Question No: 122 – (Topic 2)
Your network contains two Active Directory forests named contoso.com and fabrikam.com. You have a standalone Network Policy Server (NPS) named NPS1. You have a VPN server named VPN1. VPN1 is configured as a RADIUS client to NPS1.
You need to ensure that users from both forests can establish VPN connections by using their own domain accounts.
What should you do?
On NPS1, configure remediation server groups.
On NPS1, configure connection request policies.
On VPN1, modify the DNS suffix search order.
On VPN1, modify the IKEv2 Client connection controls.
Answer: B Explanation:
Connection request policies are sets of conditions and settings that allow network administrators to designate which Remote Authentication Dial-In User Service (RADIUS) servers perform the authentication and authorization of connection requests that the server running Network Policy Server (NPS) receives from RADIUS clients. Connection request policies can be configured to designate which RADIUS servers are used for RADIUS accounting.
Question No: 123 – (Topic 2)
Your network contains an Active Directory domain. The domain contains two print servers named Server1 and Server2 that run Windows Server 2008 R2.
Server1 has a printer named Printer1. Server2 has a printer named Printer2. Both printers use the same driver.
The print device for Printer1 fails.
You need to ensure that the print jobs in the Printer1 queue are printed. What should you do?
Modify the Ports settings of Printer1.
Modify the Sharing settings of Printer1.
Run the Printer Migration tool.
Run the Remove-Job and Copy-Item cmdlets.
Question No: 124 – (Topic 2)
Your network contains a server named DC1 that has the DHCP Server server role installed.
Clients located on the same subnet as DC1 are assigned valid IP addresses from DC1. Clients located on a different subnet are not assigned IP addresses from DC1.
You verify that there is network connectivity between the two subnets.
You need to ensure that the clients on both of the subnets can receive IP addresses from DC1.
What should you do?
Authorize DC1 in Active Directory.
Increase the database cleanup interval.
Configure Routing Information Protocol version 2 (RIPv2) on the router.
Configure a DHCP Relay Agent.
Restore the database from a backup.
Configure name protection.
Reconcile the scope.
Configure DHCP link layer-based filtering.
Modify the start address.
Configure Open Shortest Path First (OSPF) on the router.
Compact the database.
Question No: 125 – (Topic 2)
Your network contains a Windows Server Update Services (WSUS) server named Server1. Server1 provides updates to client computers in two sites named Site1 and Site2. A WSUS computer group named Group1 is configured for automatic approval.
You need to ensure that new client computers in Site2 are automatically added to Group1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
Create a new automatic approval update rule.
Modify the Computers Options in the Update Services console.
Modify the Automatic Approvals options in the Update Services console.
Configure a Group Policy object (GPO) that enables client-side targeting.
Reference: http://technet.microsoft.com/en-us/library/cc720433(WS.10).aspx Explanation:
WSUS enables you to target updates to groups of client computers. This capability can help you ensure that specific computers get the right updates at the most convenient times on an ongoing basis. For example, if all computers in one department of your organization have a specific configuration (such as all computers in the Accounting team), you can determine what updates those computers get, at what time, and then use WSUS reporting features to evaluate the success of update activity for that computer group.
By default, each computer is already assigned to the All Computers group. Computers will also be assigned to the Unassigned Computers group until you assign them to another group.
Regardless of the group you assign a computer to, it will also remain in the All Computers group. A computer can be in only one other group in addition to the All Computers group.
You can assign computers to computer groups by using one of two methods, server-side targeting or client side targeting, depending on whether or not you want to automate the process. With server-side targeting, you use the Move the selected computer task on the Computers page to move one or more client computers to one computer group at a time. With client-side targeting, you use Group Policy or edit the registry settings on client computers to enable those computers to automatically add themselves into the computer
groups. You must specify which method you will use by selecting one of the two options on the Computers Options page.
If your WSUS server is running in replica mode, you will not be able to create computer groups on that server, you will only inherit the computer groups created on the administration server from which your server inherits its settings. For more information about replica mode, see Running in Replica Mode.
Server-side Targeting With server-side targeting, you use the WSUS console to both create groups and then assign computers to the groups. Server-side targeting is an excellent option if you do not have many client computers to update and you want to move client computers into computer groups manually.
To enable server-side targeting on your WSUS server, click the Use the Move computers task in Windows Server Update Services option on the Computers Options page.
Client-side Targeting With client-side targeting, you enable client-computers to add themselves to the computer groups you create in the WSUS console. You can enable client-side targeting through Group Policy (in an Active Directory network environment) or by editing registry entries (in a non-Active Directory network environment) for the client computers. When the client computers connect to the WSUS server, they will add themselves into the correct computer group. Client-side targeting is an excellent option if you have many client computers and want to automate the process of assigning them to computer groups. To enable client-side targeting on your WSUS server, click the Use Group Policy or registry settings on client computers option on the Computers Options page.
Question No: 126 – (Topic 2)
Your network contains a Routing and Remote Access server named RRAS1 and a DHCP server named
DHCP1. RRAS1 and DHCP1 are located in different subnets.
RRAS1 is configured to support VPN connections from the Internet. DHCP1 has a scope that provides IP addresses for the VPN connections.
You need to ensure that VPN clients that connect to RRAS1 can receive IP addresses from
What should you do?
On DHCP1, configure a DHCP Relay Agent.
On DHCP1, install the Routing role service.
On RRAS1, configure a DHCP Relay Agent.
On RRAS1, install the Routing role service.
Answer: C Explanation:
If a DHCP server is on the same subnet as your remote access/VPN server, DHCP messages from VPN clients will be able to reach the DHCP server after the VPN connection is established.
If a DHCP server is on a different subnet than your remote access/VPN server, make sure that the router between subnets can relay DHCP messages between clients and the server. If your router is running a
Windows Server 2003 operating system, you can configure the DHCP Relay Agent service on the router to forward DHCP messages between subnets.
To configure the DHCP Relay Agent to work over remote access:
Click Start, point to Programs, point to Administrative Tools, and then click Routing and Remote Access.
In the object tree, expand Your_Server, expand IP Routing, right-click General, and then click New Routing Protocol.
In the Routing Protocols list, click DHCP Relay Agent, and then click OK. Right-click DHCP Relay Agent, and then click Properties.
In the DHCP Relay Agent Properties dialog box, type the IP addresses of your DHCP servers in the Server
Address box, click ADD, and then click OK.
Right-click DHCP Relay Agent, and then click New Interface. Click Internal.
Internal represents the virtual interface that is connected to all remote access clients.
Question No: 127 – (Topic 2)
Your network contains a Network Policy Server (NPS) named NPS1. NPS1 is configured
for remote access account lockout.
A domain user named User1 has been locked out by NPS1. You need to unlock the User1 user account on NPS1.
What should you use?
the Netsh tool
the Network Policy Server console
the Registry Editor
the Routing and Remote Access console
Answer: C Explanation:
Manually Unlock a Remote Access Client
If the account is locked out, the user can try to log on again after the lockout timer has run out, or you can delete the DomainName:UserName value in the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Paramete rs\ AccountLockout registry key. To manually unlock an account, follow these steps:
Click Start, click Run, type regedit in the Open box, and then press ENTER. Locate and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Paramete rs \AccountLockout
Find the Domain Name:User Name value, and then delete the entry. Quit Registry Editor.
Question No: 128 – (Topic 2)
Your network contains a file server named Server1 that runs Windows Server 2008 R2. You have a folder named Folder1.
You need to ensure that files in Folder1 that are older than 365 days are automatically moved to an archive folder.
What should you create from the File Server Resource Manager console?
a file group
a file management task
a file screen
Answer: B Explanation:
You can use file management tasks to perform the following actions:
Create and update file expiration tasks, which move all files that match a set of criteria to a specified directory where an administrator can then back up and delete the files. Files can be set to expire based on classification values, or after a specified number of days since the file was created, modified, or last accessed.
Create and update custom tasks, which allow you to run a command or script in a specified working directory.
Send e-mail notifications, send a warning to the event log, or run a command or script at a specified number of days before the file management task is scheduled to run.
Question No: 129 – (Topic 2)
Your network contains a server named Server1 that runs Windows Server 2008 R2 Service Pack 1 (SP1). Server1 has Microsoft SQL Server 2008 R2 and the File Services server role installed.
Users report that access to Server1 during the morning is very slow.
An administrator creates a Data Collector Set and provides the results shown in the exhibit. (Click the Exhibit button.)
You need to log the CPU utilization of the processes running on Server1 if the CPU utilization exceeds 85 percent for more than one minute.
What should you do? (Each correct answer presents part of the solution. Choose two.)
Configure an action on the performance alert to run the systempropertiesperformance.exe command.
Configure a trigger on the performance alert to start the System Performance Data Collector Set.
Enable the SQMLogger event trace session.
Create a scheduled task that runs the Get-PSProvider cmdlet.
Create a Data Collector Set that has a performance alert for \Processor (_Total)\%Processor Time.
Question No: 130 – (Topic 2)
Your company has a main office and a branch office.
The network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Server1 is located in the main office. Server2 is located in the branch office.
You have a domain-based namespace named \\contoso.com\DFS1. Server1 is configured as the namespace server for \\contoso.com\DFS1.
\\contoso.com\DFS1 has a folder named Folder1. The folder targets for Folder1 are
\\Server1\Folder1 and \\Server2\Folder1.
Users in the main office report that they view different content in Folder1 than users in the branch office. You need to ensure that the content in Folder1 is identical for all of the users.
What should you do?
Create a new replication group.
Configure Server2 as a namespace server.
From Server2, run dfsutil.exe cache domain.
From Server2, run dfsutil.exe root forcesync \\contoso.com\DFS1.
|Lowest Price Guarantee||Yes||No||No|
|Free VCE Simulator||Yes||No||No|