2013 Latest MCTS 70-642 Exam Questions 311-315

Ensurepass

QUESTION 31
Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Server2 that has the DNS Server server role installed.
You need to configure the Windows Firewall on Server2 to allow client computers access to the DNS Server service.
Which port or ports should you allow through Windows Firewall? A. UDP 546 and UDP 547
B. UDP 993
C. TCP 993
D. TCP 995
E. UDP 995
F. TCP 67 and TCP 68
G. TCP 636
H. TCP 587 and UDP 587
I. TCP 546 and TCP 547
J. UDP 67 and UDP 68
K. UDP 1433
L. TCP 1433
M. TCP 53 and UDP 53
Correct Answer: M
Explanation/Reference:
Correct answer(s): M
In general, all DNS queries are sent from a high-numbered source port (above 1023) to destination port 53, and responses are sent from source port 53 to a high-numbered destination port. The following table lists the UDP and TCP ports used for different DNS message types
http://technet.microsoft.com/pt-br/library/dd197515(v=ws.10).aspx

QUESTION 32
Your network contains a server named DC1 that has the DHCP Server server role installed. You discover that clients are not being assigned IP addresses from DC1.
You open the DHCP console as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that the clients can be assigned IP addresses from DC1. What should you do?
A. Compact the database.
B. Configure DHCP link layer-based filtering. C. Configure a DHCP Relay Agent.
D. Restore the database from a backup.
E. Configure Routing Information Protocol version 2 (RIPv2) on the router
F. Increase the database cleanup interval.
G. Configure Open Shortest Path First (OSPF) on the router
H. Configure name protection. I. Reconcile the scope.
J. Modify the start address.
K. Authorize DC1 in Active Directory.
Correct Answer: K
Explanation/Reference:
Correct answer(s): K

QUESTION 33
You need to ensure that only the members of the Power Users group and the members of the
Administrators group can view the events in the System log.
Which tools should you use? A. Wecutil
B. Event Viewer
C. Cacls
D. Wevtutil
Correct Answer: D
Explanation/Reference:
Correct answer(s): D
If you need to define access to just the System event log on our Windows 2008 Server.
1. open the command prompt, and run the following command to dump out the SDDL for the System log out to a txt file.
wevtutil gl system > C:tempout.txt
2. Open the text file and copy out the channelAccess: entry
channelAccess: O:BAG:SYD:(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x5;;;SO)(A;;0x1;;;IU)(A;;0x1;;;AU)(A;;0x1;;;
SU)(A;;0x1;;;S-1-5-3)(A;;0x2;;;LS)(A;;0x2;;;NS)(A;;0x2;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573) )
3. Copy the Interactive User (IU) rights and add your user or group to them.
O:BAG:SYD:(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x5;;;SO)(A;;0x1;;;IU)(A;;0x1;;;AU)(A;;0x1;;;SU)(A;;0x1;;;S-1-
5-3)(A;;0x2;;;LS)(A;;0x2;;;NS)(A;;0x2;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573) (A;;0x1;;; S-1-5-3-
3127463467463))
Last we need to apply the new SDDL. Just replace the O:BAG:XXXX with your SDDL String you created in the previous step.
wevtutil sl System /ca:O:BAG:XXXX
In addition you can remove access for the Event Log Readers group from event log in question by removing the (A;;0x1;;;S-1-5-32-573) entry from the respective log SDDL String.
http://blogs.technet.com/b/janelewis/archive/2010/04/30/giving-non-administrators-permission-to-read- event-logs-windows-2003-and-windows-2008.aspx

QUESTION 34
Your network contains an Active Directory forest named contoso.com. The forest contains a server named
Server1 that runs Windows Server 2008 R2 Service Pack 1 (SP1) Standard.
The forest contains a server named Server2 that runs Windows Server 2008 R2 SP1 Enterprise. Server1 and Server2 have the Print and Document Services server role installed.
You need to migrate the print queues, printer settings, printer ports, and language monitors from Server1 to
Server2.
Which tool should you use? A. Print Management
B. Printmig
C. Active Directory Users and Computers
D. Printui
Correct Answer: A
Explanation/Reference:
Correct answer(s): A
To migrate print servers by using Print Management
Open Print Management.
In left pane, click Print Servers, right-click the print server that contains the printer queues that you want to export, and then click Export printers to a file. This starts the Printer Migration Wizard.
On the Select the file location page, specify the location to save the printer settings, and then click Next to save the printers.
Right-click the destination computer on which you want to import the printers, and then click Import printers from a file. This launches the Printer Migration Wizard.
On the Select the file location page, specify the location of the printer settings file, and then click Next. On the Select import options page, specify the following import options:
Import mode. Specifies what to do if a specific print queue already exists on the destination computer.
List in the directory. Specifies whether to publish the imported print queues in the Active Directory Domain
Services.
Convert LPR Ports to Standard Port Monitors. Specifies whether to convert Line Printer Remote (LPR)
printer ports in the printer settings file to the faster Standard Port Monitor when importing printers. Click Next to import the printers.
OR
To migrate print servers by using a command prompt
To open a Command Prompt window, click Start, click All Programs, click Accessories, right-click
Command Prompt, and then click Run as administrator. Type:
CD %WINDIR%System32SpoolTools Printbrm -s \-b -f .printerExport
Type:
Printbrm -s \ -r -f .printerExport
http://technet.microsoft.com/en-us/library/cc722360.aspx

QUESTION 35
Your network contains an Active Directory domain named contoso.com. The domain contains two Active
Directory sites named Site1 and Site2.
You have a domain-based Distributed File System (DFS) namespace named \contoso.compublic that has a single namespace server located in Site1.
You install another namespace server in Site2.
You need to verify that the client computers in Site2 use the new namespace server. You want to achieve this goal by using the minimum amount of administrative effort. Which tool should you use?
A. Share and Storage Management
B. DFS Management
C. Windows Explorer
D. Services for Network File System (NFS)
Correct Answer: B
Explanation/Reference:
Correct answer(s): B
Ref: http://technet.microsoft.com/en-us/library/cc732863(v=ws.10).aspx

Download Ensurepass Latest 2013 MCTS 70-642 Real Exam Questions , help you to pass exam 100%.