QUESTION 171
Your network contains a server that runs Windows Server 2008 R2. The server has the Network Policy and Access Services server role installed. You need to allow only members of a global group named Group1 VPN access to the network. What should you do?
A. Add Group1 to the RAS and IAS Servers group.
B. Add Group1 to the Network Configuration Operators group.
C. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.
D. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.
Answer: C
QUESTION 172
Your company has Active Directory Certificate Services (AD CS) and Network Access Protection (NAP) deployed on the network. You need to ensure that NAP policies are enforced on portable computers that use a wireless connection to access the network. What should you do?
A. Configure all access points to use 802.1X authentication.
B. Configure all portable computers to use MS-CHAP v2 authentication.
C. Use the Group Policy Management Console to access the wireless Group Policy settings, and enable the Prevent connections to ad-hoc networks option.
D. Use the Group Policy Management Console to access the wireless Group Policy settings, and disable the Prevent connections to infrastructure networks option.
Answer: A
QUESTION 173
Your company has a server named FS1. FS1 hosts the domain-based DFS namespace named \\contoso.com\dfs. All domain users store their data in subfolders within the DFS namespace. You need to prevent all users, except administrators, from creating new folders or new files at the root of the \\contoso.com\dfs share. What should you do?
A. Run the dfscmd.exe \\FS1\dfs /restore command on FS1.
B. Configure the NTFS permissions for the C:\DFSroots\dfs folder on FS1. Set the Create folders/append data special permission to Deny for the Authenticated Users group. Set the Full Control permission to Allow for the Administrators group.
C. Start the Delegate Management Permissions Wizard for the DFS namespace named \\contoso.com\dfs.
Remove all groups that have the permission type Explicit except the Administrators group.
D. Configure the \\FS1\dfs shared folder permissions. Set the permissions for the Authenticated Users group to Reader. Set the permissions for the Administrators group to Co-owner.
Answer: D
QUESTION 174
Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Windows Deployment Services (WDS) server role and the Windows Automated Installation Kit (Windows AIK) installed. You create a new x86 Microsoft Windows Preinstallation Environment (Windows PE) image and add it as a boot image to Server1. You run the Create Capture Image wizard and receive the following error message: "The Windows Deployment Services Image Capture Wizard could not be located in the specified Windows PE image." You need to ensure that you can create a capture image by using the Create Capture Image wizard. What should you do first?
A. Create an x64 Windows PE image and add the image to Server1 as a boot image.
B. Add a new boot image to Server1 and specify the Sources\Boot.wim file from the Windows Server 2008 R2 installation media.
C. Mount the Windows PE boot image and add the contents of the %programFiles%\Windows AIK\Tools\amd64 folder to the image.
D. Mount the Windows PE boot image and add the contents of the %programFiles%\Windows AIK\Tools\PETools folder to the image.
Answer: B
QUESTION 175
Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2008 R2. Routers on the network support multicast transmissions. A server named Server1 has the Windows Deployment Services (WDS) server role installed. A custom Windows 7 image is available for download from Server1. You need to deploy the image to 100 new computers by using multicast. The solution must prevent computers that use low-bandwidth connections from slowing the deployment to computers that use high-bandwidth connections. What should you do?
A. Enable Auto-Cast.
B. Enable Scheduled-Cast.
C. From the WDS server properties, adjust the Transfer Settings.
D. From the WDS server properties, modify the Multicast IP Address settings.
Answer: C
QUESTION 176
Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Server1 and Server2 have the Hyper-V server role and the Failover Clustering feature installed. You deploy a new virtual machine (VM) named VM1 on Server1. You need to ensure that VM1 is available if one of the Hyper-V servers fails. What should you do?
A. Install the Network Load Balancing (NLB) feature on VM1.
B. Install the Network Load Balancing (NLB) feature on Server1.
C. Install the Failover Clustering feature on VM1. From Failover Cluster Manager on VM1, click Configure a Service or Application.
D. From Failover Cluster Manager on Server1, click Configure a Service or Application.
Answer: D
QUESTION 177
Your network contains a server named Server1 that runs Windows Server 2008 R2. You plan to create an image of Server1 to deploy to additional servers. You need to identify how many more times you can rearm the Windows activation clock. What should you run on Server1?
A. msinfo32.exe
B. slmgr.vbs /dlv
C. slui.exe
D. winrm.vbs enumerate
Answer: B
QUESTION 178
Your network contains an Active Directory domain. The domain contains two servers named Server1 and Server2. You connect Server1 and Server2 to a logical unit number (LUN) on a Storage Area Network (SAN). You need to ensure that you can use the LUN in a failover cluster. What should you do?
A. From Server Manager, run the Best Practices Analyzer.
B. From File Server Resource Manager, generate a storage report.
C. From Failover Cluster Manager, run the Validate a Configuration Wizard.
D. From Share and Storage Management, verify the advanced settings of the LUN.
Answer: C
QUESTION 179
Your network contains a server named Server1 that has the Hyper-V server role installed. Server1 hosts a virtual machine (VM) named VM1. You add an additional hard disk to Server1. The hard disk is configured as a basic disk. You need to configure VM1 to use the new hard disk as a pass-through disk. What should you do before you configure the pass-through disk?
A. Create a simple volume.
B. Take the new hard disk offline.
C. Convert the new hard disk to a GPT disk.
D. Convert the new hard disk to a dynamic disk.
Answer: B
QUESTION 180
Your network contains a server named Server1 that has two volumes named C and D. You add a new volume. You need to ensure that you can access data on the new volume by using the path D:\data. What should you do?
A. From Disk Management, create a volume mount point.
B. From Disk Management, attach a virtual hard disk (VHD).
C. At the command prompt, run the diskraid.exe command and specify the /v parameter.
D. At the command prompt, run the dism.exe command and specify the /mount-wim parameter.
Answer: A
OFFER Microsoft 70-649 PDF and VCE Free Download
