web analytics

OFFER Microsoft 70-649 PDF and VCE Free Download (221-230)

QUESTION 221
Your company has 10 servers that run Windows Server 2008 R2. The servers have Remote Desktop Protocol (RDP) enabled for server administration. RDP is configured to use default security settings. All administrators’ computers run Windows 7. You need to ensure the RDP connections are as secure as possible. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.    Set the security layer for each server to the RDP Security Layer.
B.    Configure the firewall on each server to block port 3389.
C.    Acquire user certificates from the internal certification authority.
D.    Configure each server to allow connections only to Remote Desktop client computers that use Network Level Authentication.

Answer: CD

QUESTION 222
Your company has deployed Network Access Protection (NAP) enforcement for VPNs. You need to ensure that the health of all clients can be monitored and reported. What should you do?

A.    Create a Group Policy object (GPO) that enables Security Center and link the policy to the domain.
B.    Create a Group Policy object (GPO) that enables Security Center and link the policy to the Domain Controllers organizational unit (OU).
C.    Create a Group Policy object (GPO) and set the Require trusted path for credential entry option to Enabled. Link the policy to the domain.
D.    Create a Group Policy object (GPO) and set the Require trusted path for credential entry option to Enabled. Link the policy to the Domain Controllers organizational unit (OU).

Answer: A

QUESTION 223
Your network contains a Network Policy Server (NPS) named Server1. NPS1 provides authentication for all of the VPN servers on the network. You need to track the usage information of all VPN connections. Which RADIUS attribute should you log?

A.    Acct-Session-Id
B.    Acct-Status-Type
C.    Class
D.    NAS-Identifier

Answer: C

QUESTION 224
Your network contains an Active Directory forest. The forest contains two domains named contoso.com and eu.contoso.com. You install a Network Policy Server (NPS) named Server1 in the contoso.com domain. You need to ensure that Server1 can read the dial-in properties of the user accounts in the eu.contoso.com domain. What should you do?

A.    In the contoso.com domain, add Server1 to the RAS and IAS Servers group.
B.    In the contoso.com domain, add Server1 to the Windows Authorization Access group.
C.    In the eu.contoso.com domain, add Server1 to the RAS and IAS Servers group.
D.    In the eu.contoso.com domain, add Server1 to the Windows Authorization Access group.

Answer: C

QUESTION 225
Your company has a single Active Directory domain. The company network is protected by a firewall. Remote users connect to your network through a VPN server by using PPTP. When the users try to connect to the VPN server, they receive the following error message: Error 721: The remote computer is not responding. You need to ensure that users can establish a VPN connection. What should you do?

A.    Open port 1423 on the firewall.
B.    Open port 1723 on the firewall.
C.    Open port 3389 on the firewall.
D.    Open port 6000 on the firewall.

Answer: B

QUESTION 226
Your network contains an Active Directory domain. The network has DirectAccess deployed. You deploy the DirectAccess Connectivity Assistant (DCA) to all client computers. You need to ensure that users can view their DirectAccess status by using the DCA. Which two group policy settings should you configure? (Each correct answer presents part of the solution. Choose two.)

A.    Dynamic Tunnel Endpoints (DTEs)
B.    Corporate Portal Site
C.    Corporate Resources
D.    PortalName

Answer: AC

QUESTION 227
Your network contains a Web server named Web1 that runs Windows Server 2008 R2. You import an SSL certificate to Web1. You need to enable SSL encryption for the Web site. What should you do?

A.    Add a new binding to the Web site.
B.    Modify the Server Certificates settings.
C.    Configure the handler mappings for the Web site.
D.    Configure the Machine Key feature for the Web site.

Answer: A

QUESTION 228
You have a server named Server1 that runs Windows Server 2008 R2. Server1 has the Key Management Service (KMS) installed. You need to identify how many computers were activated by Server1. What should you run?

A.    cliconfg.exe
B.    mrinfo.exe Server1
C.    slmgr.vbs /dli
D.    slui.exe

Answer: C

QUESTION 229
You have a server that runs Windows Server 2008 R2. The server has the Web Server (IIS) server role and the FTP Service role service installed. You add a new FTP site to the server. You need to ensure that the new FTP site is available. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

A.    Run the iisreset command on the server.
B.    Configure an alternate TCP port in the FTP site properties.
C.    Configure an alternate IP address in the FTP site properties.
D.    Configure a host header file in the default Web site properties.
E.    Configure an alternate IP address in the default Web site properties.

Answer: BC

QUESTION 230
Your company hosts a Web site on a server that runs Windows Server 2008 R2. The server has the Web Server (IIS) server role installed. SSL is configured on the Web site for virtual directories that require encryption. You are implementing a new Web application on the Web site. The new application has its own logon page named userlogin.aspx. You enable Forms Authentication in the Web site properties. You need to configure the Web site to use userlogin.aspx to authenticate user accounts. What should you do?

A.    Configure the Forms Authentication Settings to Require SSL.
B.    Configure the Name property of the Cookie Settings to the userlogin.aspx filename.
C.    Configure the Login URL property for the Forms Authentication Settings to the userlogin.aspx filename.
D.    Configure the Default Document setting to add the userlogin.aspx filename in the Web site properties.

Answer: C

OFFER Microsoft 70-649 PDF and VCE Free Download