2013 Latest MCTS 70-642 Exam Questions 331-335


Your network contains an Active Directory domain. The domain contains several VPN servers that run
Windows Server 2008 R2.
You need to log the time and the date users establish VPN connections to the network. The log must be stored in a central location.
What should you configure on the VPN servers? A. the Windows Accounting accounting provider
B. connection request policies
C. health policies
D. the RADIUS Accounting accounting provider
Correct Answer: D
Correct answer(s): D
RADIUS accounting logs information about dial-in connections. This information is often used for billing purposes.

Your network contains a domain controller named DC1.
DC1 hosts a zone named fabhkam.com. The properties of the zone are shown in the exhibit.(Click the
Exhibit button.)
You need to ensure that only secure dynamic updates are accepted for the fabrikam.com zone. What should you do first?
A. Configure the zone to be stored in Active Directory. B. Change the zone to a secondary zone.
C. Pause the zone.
D. Modify the NTFS permissions of the zone file.
Correct Answer: A
Correct answer(s): A

Your network contains a DNS server that runs Windows Server 2008 R2 Service Pack 1 (SP1).
You need to prevent the DNS server from accepting updates for cached resource records until the time-to- live (TTL) value of the cached resource records expires.
Which tool should you use? (Each correct answer presents a complete solution. Choose two.) A. Server Manager
B. Netsh
C. DNS Manager
D. Regedit
E. Dnscmd
F. Dns
Correct Answer: DE
Correct answer(s): D,E
Open an elevated command prompt.
Type the following command, and then press ENTER:
dnscmd /Config /CacheLockingPercent Restart the DNS Server service.
To configure cache locking using the Windows interface
Click Start, click Run, type regedit.exe, and then press ENTER.
In Registry Editor, open HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesDNSParameters.
If the CacheLockingPercent registry key is not present, right-click Parameters, click New, click DWORD (32-bit) Value, and then type CacheLockingPercent for the name of the new registry key.
Double-click the CacheLockingPercent registry key.
Under Base, choose Decimal, under Value data type a value from 0 to 100 for the cache locking percent, and then click OK.
Close Registry Editor.
Restart the DNS Server service.

A corporate network includes two servers named File1 and File2 that run Windows Server 2008 R2.
You need to ensure that a specific user can schedule Data Collector Sets (DCSs) on File2. The solution must minimize the number of rights assigned to the user.
What should you do?
A. Add the user to the Performance Log Users group on File2.
B. Assign the Profile single process user right to the user on File2.
C. Assign the Bypass traverse checking user right to the user on File2. D. Add the user to the Performance Monitor Users group on File2.
Correct Answer: A
Correct answer(s): A

Your company is implementing Network Access Protection (NAP) with DHCP enforcement.
You need to define which network resources non-compliant client computers can access. What should you configure?
A. remediation server groups
B. health policies
C. connection request policies
D. system health validators (SHVs)
Correct Answer: A
Correct answer(s): A
Remediation server groups are used to specify servers that are available to noncompliant Network Access Protection (NAP) clients for the purpose of remediating their health state to comply with health requirements. The type of remediation servers that are required depend on your health requirements and network access methods.

Download Ensurepass Latest 2013 MCTS 70-642 Real Exam Questions , help you to pass exam 100%.