QUESTION 161
Your company has a main office and two branch offices. Domain controllers in the main office host an Active Directory-integrated zone. The DNS servers in the branch offices host a secondary zone for the domain and use the main office DNS servers as their DNS Master servers for the zone. The company adds a new branch office. You add a member server named Branch3 and install the DNS Server server role on the server. You configure a secondary zone for the domain. The zone transfer fails. You need to configure DNS to provide zone data to the DNS server in the new branch office. What should you do?
A. Run dnscmd by using the ZoneResetMasters option.
B. Run dnscmd by using the ZoneResetSecondaries option.
C. Add the new DNS server to the Zone Transfers tab on one of the DNS servers in the main office.
D. Add the new DNS server to the DNSUpdateProxy Global security group in Active Directory Users and Computers.
Answer: C
QUESTION 162
Your company has a main office and a branch office. The main office has a domain controller named DC1 that hosts a DNS primary zone. The branch office has a DNS server named SRV1 that hosts a DNS secondary zone. All client computers are configured to use their local server for DNS resolution. You change the IP address of an existing server named SRV2 in the main office. You need to ensure that SRV1 reflects the change immediately. What should you do?
A. Restart the DNS Server service on DC1.
B. Run the dnscmd command by using the /zonerefresh option on DC1.
C. Run the dnscmd command by using the /zonerefresh option on SRV1.
D. Set the refresh interval to 10 minutes on the Start of Authority (SOA) record.
Answer: C
QUESTION 163
Your company has a single Active Directory domain. The company has a main office and a branch office. Both the offices have domain controllers that run Active Directory-integrated DNS zones. All client computers are configured to use the local domain controllers for DNS resolution. The domain controllers at the branch office location are configured as Read-Only Domain Controllers (RODC). You change the IP address of an existing server named SRV2 in the main office. You need the branch office DNS servers to reflect the change immediately. What should you do?
A. Run the dnscmd /ZoneUpdateFromDs command on the branch office servers.
B. Run the dnscmd /ZoneUpdateFromDs command on a domain controller in the main office.
C. Change the domain controllers at the branch offices from RODCs to standard domain controllers.
D. Decrease the Minimum (default) TTL option to 15 minutes on the Start of Authority (SOA) record for the zone.
Answer: A
QUESTION 164
Your company has a single Active Directory domain. The company has a main office and three branch offices. The domain controller in the main office runs Windows Server 2008 R2 and provides DNS for the main office and all of the branch offices. Each branch office contains a file server that runs Windows Server 2008 R2. Users in the branch offices report that it takes a long time to access network resources. You confirm that there are no problems with WAN connectivity or bandwidth. You need to ensure that users in the branch offices are able to access network resources as quickly as possible. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Configure a standard primary zone in each of the branch offices.
B. Configure forwarders that point to the DNS server in the main office.
C. Configure a secondary zone in each of the branch offices that uses the main office DNS server as a master.
D. Install DNS servers in each of the branch offices.
Answer: CD
QUESTION 165
Your company has a server named Server1 that runs Windows Server 2008 R2. Server1 runs the DHCP Server server role and the DNS Server server role. You also have a server named ServerCore that runs a Server Core installation of Windows Server 2008 R2. All computers are configured to use only Server1 for DNS resolution. The IP address of Server1 is 192.168.0.1. The network interface on all the computers is named LAN. Server1 is temporarily offline. A new DNS server named Server2 has been configured to use the IP address 192.168.0.254. You need to configure ServerCore to use Server2 as the preferred DNS server and Server1 as the alternate DNS server. What should you do?
A. Run the netsh interface ipv4 add dnsserver "LAN" static 192.168.0.254 index=1 command.
B. Run the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.254 192.168.0.1 both command.
C. Run the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.254 primary command and the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.1 both command.
D. Run the netsh interface ipv4 set dnsserver "LAN" static 192.168.0.254 primary command and the netsh interface ipv4 add dnsserver "LAN" static 192.168.0.1 index=1 command.
Answer: A
QUESTION 166
Your company has an Active Directory domain named ad.contoso.com. All client computers run Windows 7. The company has recently acquired a company that has an Active Directory domain named ad.fabrikam.com. A two-way forest trust is established between the ad.fabrikam.com domain and the ad.contoso.com domain. You need to edit the ad.contoso.com domain Group Policy object (GPO) to enable users in the ad.contoso.com domain to access resources in the ad.fabrikam.com domain. What should you do?
A. Configure the DNS Suffix Search List option to ad.contoso.com, ad.fabrikam.com.
B. Configure the Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries option to True.
C. Configure the Primary DNS Suffix option to ad.contoso.com, ad.fabrikam.com. Configure the Primary DNS Suffix Devolution option to True.
D. Configure the Primary DNS Suffix option to ad.contoso.com, ad.fabrikam.com. Configure the Primary DNS Suffix Devolution option to False.
Answer: A
QUESTION 167
Your company has a single Active Directory forest that has a domain in North America named na.contoso.com and a domain in South America named sa.contoso.com. The client computers run Windows 7. You need to configure the client computers in the North America office to improve the name resolution response time for resources in the South America office. What should you do?
A. Configure a new Group Policy object (GPO) that disables the Local-Link Multicast Name Resolution feature. Apply the policy to all the client computers in the North America office.
B. Configure a new Group Policy object (GPO) that enables the Local-Link Multicast Name Resolution feature. Apply the policy to all the client computers in the North America office.
C. Configure a new Group Policy object (GPO) that configures the DNS Suffix Search List option to sa.contoso.com, na.contoso.com. Apply the policy to all the client computers in the North America office.
D. Configure the priority value for the Service Location (SRV) records on each of the North America domain controllers to 5.
Answer: C
QUESTION 168
Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. From Server1, you create a collector-initiated subscription that uses Server2 as a source computer. You verify the event subscription and discover the error message shown in the exhibit. (Click the Exhibit button.)
You need to ensure that the subscription collection runs successfully. What should you do?
A. On Server1, run winrm quickconfig.
B. On Server2, run winrm quickconfig.
C. From the properties of the subscription, modify the User Account options.
D. From the properties of the subscription, modify the Protocol and Port options.
Answer: C
QUESTION 169
Your company has a single Active Directory domain. The domain has servers that run Windows Server 2008 R2. You have a server named NAT1 that functions as a NAT server. You need to ensure that administrators can access a server named RDP1 by using Remote Desktop Protocol (RDP). What should you do?
A. Configure NAT1 to forward port 389 to RDP1.
B. Configure NAT1 to forward port 1432 to RDP1.
C. Configure NAT1 to forward port 3339 to RDP1.
D. Configure NAT1 to forward port 3389 to RDP1.
Answer: D
QUESTION 170
Your network contains one Active Directory domain. You have a member server named Server1 that runs Windows Server 2008 R2. The server has the Routing and Remote Access Services role service installed. You implement Network Access Protection (NAP) for the domain. You need to configure the Point-to-Point Protocol (PPP) authentication method on Server1. Which authentication method should you use?
A. Challenge Handshake Authentication Protocol (CHAP)
B. Extensible Authentication Protocol (EAP)
C. Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2)
D. Password Authentication Protocol (PAP)
Answer: B
OFFER Microsoft 70-649 PDF and VCE Free Download