2013 Latest MCTS 70-642 Exam Questions 121-125

Ensurepass

QUESTION 26
Your network contains a server named Server1. Server1 has DirectAccess deployed. A group named
Group1 is enabled for DirectAccess.
Users report that when they log on to their computers, the computers are not configured to use
DirectAccess.
You need to ensure that the users’ computers are configured to use DirectAccess. What should you do first?
A. On each client computer, add Group1 to the Distributed COM Users group.
B. On each client computer, add Group1 to the Network Configuration Operators group. C. From Active Directory Users and Computers, add the users’ user accounts to Group1.
D. From Active Directory Users and Computers, add the users’ computer accounts to Group1.
Correct Answer: D
Explanation/Reference:
Correct answer(s): D

QUESTION 27
Your network contains an Active Directory domain named contoso.com. The network has DirectAccess deployed.
You deploy a new server named Server1 that hosts a management application.
You need to ensure that Server1 can initiate connections to DirectAccess client computers. Which settings should you modify from the DirectAccess Setup console?
A. Application Servers B. DirectAccess Server C. Infrastructure Servers D. Remote Clients
Correct Answer: C
Explanation/Reference: Correct answer(s): C Explanation:
read the guide here :
http://blog.concurrency.com/infrastructure/uag-directaccess-infrastructure-servers-wizard/

QUESTION 28
Your network contains a client computer named Computer1 that runs Windows 7. Computer1 is configured to use DirectAccess.
You need to identify the URL of the network location server that Computer1 is configured to use. What should you do?
A. From a command prompt, run ipconfig.exe /displaydns.
B. From a command prompt, run netsh.exe namespace show policy. C. From Control Panel, run the network adapter troubleshooter.
D. From the Network Connection Status window, view the Network Connection Details.
Correct Answer: B
Explanation/Reference: Correct answer(s): B Explanation:
This command shows the rules in the NRPT on a DirectAccess client. The netsh namespace show policy shows the NRPT rules as configured with Group Policy. There should be NRPT rules for the intranet namespace and an exemption rule for the fully qualified domain name (FQDN) of the network location server”
http://technet.microsoft.com/en-us/library/ee624067(v=ws.10).aspx

QUESTION 29
Your network contains an Active Directory domain. The network has DirectAccess deployed.
You deploy the DirectAccess Connectivity Assistant (DCA) to all client computers. You need to ensure that users can view their DirectAccess status by using the DCA.
Which two group policy settings should you configure? (Each correct answer presents part of the solution. Choose two.)
A. Dynamic Tunnel Endpoints (DTEs) B. Corporate Portal Site
C. Corporate Resources
D. PortalName
Correct Answer: AC
Explanation/Reference:
Correct answer(s): A, C
You must configure the DTE and CorporateResources settings to have DCA functionality http://technet.microsoft.com/en-us/library/gg502552.aspx

QUESTION 30
Your network contains an Active Directory forest. The functional level of the forest is Windows Server 2008
R2. You plan to deploy DirectAccess.
You need to configure the DNS servers on your network to support DirectAccess. What should you do?
A. Modify the GlobalQueryBlockList registry key and restart the DNS Server service.
B. Modify the EnableGlobalNamesSupport registry key and restart the DNS Server service.
C. Create a trust anchor that uses a certificate issued by an internal certification authority (CA).
D. Create a trust anchor that uses a certificate issued by a publicly trusted certification authority (CA).
Correct Answer: A
Explanation/Reference: Correct answer(s): A Explanation:
To remove ISATAP from the DNS global query block list
1. Click Start, click All Programs, click Accessories, rightclick Command Prompt, and then click Run as administrator.
2. In the Command Prompt window, type dnscmd /config / globalqueryblocklist wpad, and then press
ENTER.
3. Close the Command Prompt window.
OR
To remove ISATAP from the DNS global query block list on a DNS server
1- Click Start, type regedit.exe, and then press ENTER.
2- In the console tree, open ComputerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices
DNSParameters.
3- In the contents pane, double-click the GlobalQueryBlockList value.
4- In the Edit Multi-String dialog box, remove the name ISATAP from the list, and then click OK.
5- Start a command prompt as an administrator.
6- In the Command Prompt window, run the following commands:
net stop dns
net start dns
http://technet.microsoft.com/en-us/library/ee649158(v=ws.10).aspx

Download Ensurepass Latest 2013 MCTS 70-642 Real Exam Questions , help you to pass exam 100%.