Microsoft : 070-648 Questions & Answers

Note: This question is part of a series of question that use the same set of answer choices. Each answer choice may be used once, more than once, or not at all.
Your network contains an Active Directory domain. The domain contains several VPN servers that have the Routing and Remote Access service (RRAS) role service installed.
You need to collect information about the duration of the VPN connections. The information must be stored in a central location.
What should you configure on the VPN servers?

• A. Remediation Server groups
• B. the Windows Authentication authentication provider
• C. IKEv2 client connections
• D. System Health Validators (SHVs)
• E. Connection Request policies
• F. the RADIUS Authentication authentication provider
• G. Group Policy preferences
• H. the RADIUS Accounting accounting provider
• I. Health policies
• J. the Windows Accounting accounting provider

Your network contains two Active Directory forests named contoso.com and adatum.com. Active Directory Rights Management Services (AD RMS) is deployed in contoso.com. An AD RMS trusted user domain (TUD) exists between contoso.com and adatum.com.
From the AD RMS logs, you discover that some clients that have IP addresses in the adatum.com forest are authenticating as users from contoso.com.
You need to prevent users from impersonating contoso.com users.
What should you do?

• A. Enable lockbox exclusion in AD RMS.
• B. Configure trusted e-mail domains.
• C. Create a forest trust between adatum.com and contoso.com.
• D. Add a certificate from a third-party trusted certification authority (CA).

Your network contains a server that runs Windows Server 2008 R2. The server has the Network Policy and Access Services server role installed.
You need to allow only members of a global group named Group1 VPN access to the network.
What should you do?

• A. Add Group1 to the RAS and IAS Servers group.
• B. Add Group1 to the Network Configuration Operators group.
• C. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.
• D. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. You have a server named Server1 that hosts shared documents.
Users report extremely slow response times when they try to open the shared documents on Server1. You log on to Server1 and observe real-time data indicating that the processor is operating at 100 percent of capacity.
You need to gather additional data to diagnose the cause of the problem.
What should you do?

• A. In Resource Monitor, use the Resource View to see the percentage of processor capacity used by each application.
• B. In Performance Monitor, create performance counter alert that will be triggered when processor usage exceeds 80 percent for more than five minutes on Server1.
• C. In the Performance Monitor console, create a counter log to track processor usage.
• D. In Event Viewer, open and review the Application log for Performance events.

Your network contains an Active Directory domain named contoso.com. The domain contains two sites named Site1 and Site2. The servers for the sites are configured as shown in the following table.

Server1 hosts a standard primary zone for contoso.com. Server2 hosts a secondary zone for contoso.com.
You need to ensure that all DNS replication traffic between Server1 and Server2 is encrypted.
What should you do?

• A. On Server1, configure DNSSEC for the contoso.com zone.
• B. On each server, enable Encrypting File System (EFS) encryption for the contoso.com.dns file.
• C. On each server, create Connection Security Rules.
• D. On Server1, convert the contoso.com zone to an Active Directory-integrated zone.