Microsoft TS: Upgrading MCSA on Windows serv 2003 to Windows Serv 2008 - 070-648 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Your network contains a server that runs Windows Server 2008 R2. The server has the Network Policy and Access Services server role installed.
You need to allow only members of a global group named Group1 VPN access to the network.
What should you do?

A. Add Group1 to the RAS and IAS Servers group. B. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3. C. Add Group1 to the Network Configuration Operators group. D. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

Your network contains an Active Directory forest. The forest contains an Active Directory site for a remote
office. The remote site contains a read-only domain controller (RODC).
You need to configure the RODC to store only the passwords of users in the remote site.
What should you do?

A. Add the user accounts of the remote site users to the Allowed RODC Password Replication Group. B. Add the user accounts of users who are not in the remote site to the Denied RODC Password Replication Group. C. Create a Password Settings object (PSO). D. Modify the Partial-Attribute-Set attribute of the forest.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Your company has a server named FS1. FS1 hosts the domain-based DFS namespace named \ \contoso.com\dfs. All domain users store their data in subfolders within the DFS namespace.
You need to prevent all users, except administrators, from creating new folders or new files at the root of the \\contoso.com\dfs share.
What should you do?

A. Configure the \\FS1\dfs shared folder permissions. Set the permissions for the Authenticated Users group to Reader. Set the permissions for the Administrators group to Co-owner. B. Run the dfscmd.exe \\FS1\dfs /restore command on FS1. C. Configure the NTFS permissions for the C:\DFSroots\dfs folder on FS1. Set the Create folders/ append data special permission to Deny for the Authenticated Users group. Set the Full Control permission to Allow for the Administrators group. D. Start the Delegate Management Permissions Wizard for the DFS namespace named \\contoso.com \dfs.
Remove all groups that have the permission type Explicit except the Administrators group.

Discussion 0

Correct Answer: A Vote an answer

Question 4

Your network contains an Active Directory domain. The domain contains a server that runs Windows Server
2008 R2. The server contains 10 shared folders.
You need to be notified by email when users save .mp3 files to the shared folders.
What should you do?
To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area and
arrange them in the correct order.
Select and Place:

Discussion 0

Correct Answer:

Explanation:
You can configure File Server Resource Manager to generate e-mail or other notifications when a file
screening event occurs.
(...)
Passive screening monitors users saving specific file types and generates any configured notifications, but
does not prevent users from saving files.
Reference: http://technet.microsoft.com/en-us/library/cc732349%28v=ws.10%29.aspx
MY NOTE: An active screen would prevent saving the .mp3 file, but we have not been asked for this functionality.

Question 5

Your network contains a server named Server1 that runs Windows Server 2008 R2. The network for Server1 is configured as shown in the table.

You plan to deploy DirectAccess on Server1.
You need to configure the network interfaces on Server1 to support DirectAccess.
What should you do?

A. Remove the IP of address 131.107.1.13 from Internet2, and then add the address to Internet1. B. Remove the IP address of 131.107.1.13 from Internet2, and then add the address to LAN1. C. Add the default gateway of 131.107.1.1 to Internet2. D. Add the IP address of 10.1.2.2 to LAN1.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

Your network contains a Windows Server Update Services (WSUS) server. All computers on the network are configured to download and install updates once a week.
You need to deploy a critical update to a WSUS client as soon as possible.
Which command should you run?

A. gpupdate.exe /force B. dism.exe /online /check-apppatch C. wuauclt.exe /detectnow D. secedit.exe /refreshpolicy

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Your network contains an Active Directory forest. The forest contains a member server named VPN1 that runs Windows Server 2008 R2.
You configure VPN1 as a VPN server.
You need to ensure that only client computers that have Windows Update enabled can establish VPN
connections to VPN1.
What should you install on VPN1?

A. Network Policy Server (NPS) B. Health Registration Authority (HRA) C. Connection Manager Administration Kit (CMAK) D. Windows Server Update Services (WSUS)

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

Your company is designing its network. The network will use an IPv6 prefix of 2001:DB8:BBCC:0000::/53.
You need to identify an IPv6 addressing scheme that will support 2,000 subnets.
Which network mask should you use?

A. /61 B. /64 C. /62 D. /63

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

Your network contains an Active Directory domain named contoso.com. The contoso.com DNS zone is stored in Active Directory. All domain controllers run Windows Server 2008 R2.
You need to identify if all of the DNS records used for Active Directory replication are correctly registered.
What should you do?

A. From the Active Directory Module for Windows PowerShell, run the Get-ADDomainController cmdlet. B. From the Active Directory Module for Windows PowerShell, run the Get-ADRootDSE cmdlet. C. From the command prompt, use dnslint.exe. D. From the command prompt, use netsh.exe.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2008 R2. The functional level of the domain is Windows Server 2008 R2. The functional level of the forest is Windows Server 2008.
You have a member server named Server1 that runs Windows Server 2008.
You need to ensure that you can add Server1 to contoso.com as a domain controller.
What should you run before you promote Server1?

A. Set-ADDomainMode -Identity contoso.com -DomainMode Windows2008Domain B. Set-ADForestMode -Identity contoso.com -ForestMode Windows2008R2Forest C. dcpromo.exe /CreateDCAccount D. dcpromo.exe /ReplicaOrNewDomain:replica

Discussion 0

Correct Answer: A Vote an answer

Question 11

You create a Password Settings object (PSO).
You need to apply the PSO to a domain user named User1.
What should you do?

A. Modify the password policy of the Default Domain Policy Group Policy object (GPO). B. Modify the properties of the PSO. C. Modify the account options of the User1 account. D. Modify the security settings of the User1 account.

Discussion 0

Correct Answer: B Vote an answer

Question 12

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company
uses an Enterprise Root certification authority (CA) and an Enterprise Intermediate CA.
The Enterprise Intermediate CA certificate expires.
You need to deploy a new Enterprise Intermediate CA certificate to all computers in the domain.
What should you do?

A. Import the new certificate into the Intermediate Certification Store on the Enterprise Intermediate CA server. B. Import the new certificate into the Intermediate Certification Store in the Default Domain group policy object. C. Import the new certificate into the Intermediate Certification Store in the Default Domain Controllers group policy object. D. Import the new certificate into the Intermediate Certification Store on the Enterprise Root CA server.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 13

Your company has deployed Network Access Protection (NAP). You configure secure wireless access to the network by using 802.1X authentication from any access point.
You need to ensure that all client computers that access the network are evaluated by NAP.
What should you do?

A. Create a network policy that defines Remote Access Server as a network connection method. B. Create a network policy that specifies EAP-TLS as the only available authentication method. C. Configure all access points as RADIUS clients to the Remediation Servers. D. Configure all access points as RADIUS clients to the Network Policy Server (NPS).

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 14

Your company hires 10 new employees. You want the new employees to connect to the main office through a VPN connection.
You create new user accounts and grant the new employees the Allow Read and Allow Execute permissions to shared resources in the main office.
The new employees are unable to access shared resources in the main office.
You need to ensure that users are able to establish a VPN connection to the main office.
What should you do?

A. Grant the new employees the Allow Full control permission. B. Add the new employees to the Remote Desktop Users security group. C. Add the new employees to the Windows Authorization Access security group. D. Grant the new employees the Allow Access Dial-in permission.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).