TS: Upgrading MCSA on Windows serv 2003 to Windows Serv 2008 (070-648) Free Practice Test

Question 1

Your network contains an Active Directory domain named contoso.com. Contoso.com contains two servers
named Server1 and Server2 that run Windows Server 2008 R2.
DirectAccess is deployed on Server2. You need to configure Server1 as a network location server (NLS).
Which Web Server (IIS) role service should you install on Server1?

A. IIS Client Certificate Mapping Authentication

B. IP and Domain Restrictions

C. URL Authorization

D. Request Filtering

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

You create a Data Collector Set (DCS).
You need prevent the DCS from logging data if the server has less than 1 GB of available disk space.
What should you do?

A. Modify the Stop Conditions settings of the DCS.

B. Modify the Data Manager settings of the DCS.

C. Create a passive file screen.

D. Create an active file screen.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Your network contains a server named Server1 that runs Windows Server 2008 R2. You need to ensure that you can log performance counter data from Server1 to a SQL database.
Which tool should you use?

A. Data Sources (ODBC)

B. Share and Storage Management

C. Storage Explorer

D. Component Services

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Your network contains an Active Directory domain named contoso.com.
The Administrator deletes an OU named OU1 accidentally.
You need to restore OU1. Which cmdlet should you use?

A. Get-ADGroup cmdlet.

B. Get-ADOrganizationalUnit cmdlet.

C. Get-ADObject cmdlet.

D. Get-ADUser cmdlet.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Your network contains an Active Directory forest named contoso.com. The functional level of the forest is
Windows Server 2008 R2. The forest contains a single domain.
You need to ensure that objects can be restored from the Active Directory Recycle Bin.
Which tool should you use?

A. Ntdsutil

B. Set-ADDomain

C. Dsamain

D. Enable-ADOptionalFeature

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the
Routing and Remote Access service (RRAS) role service installed.
You need to view all inbound VPN packets. The solution must minimize the amount of data collected.
What should you do?

A. From Network Monitor, create a capture filter.

B. From RRAS, create an inbound packet filter.

C. At the command prompt, run netsh.exe ras set tracing rasauth enabled.

D. From the Registry Editor, configure File Tracing for RRAS.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company
uses an Enterprise Root certification authority (CA) and an Enterprise Intermediate CA.
The Enterprise Intermediate CA certificate expires.
You need to deploy a new Enterprise Intermediate CA certificate to all computers in the domain.
What should you do?

A. Import the new certificate into the Intermediate Certification Store in the Default Domain Controllers group policy object.

B. Import the new certificate into the Intermediate Certification Store on the Enterprise Root CA server.

C. Import the new certificate into the Intermediate Certification Store on the Enterprise Intermediate CA server.

D. Import the new certificate into the Intermediate Certification Store in the Default Domain group policy object.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Note: This question is part of a series of question that use the same set of answer choices. Each answer choice may be used once, more than once, or not at all.
Your network contains an enterprise certification authority (CA) that runs Windows Server 2008 R2 Enterprise.
You need to ensure that users can enroll for certificates that use the IPSEC (Offline request) certificate template.
Which snap-in should you use?

A. Security Configuration Wizard

B. Group Policy Management

C. Certificate Templates

D. Authorization Manager

E. Share and Storage Management

F. Enterprise PKI

G. Active Directory Administrative Center

H. Certificates

I. Certification Authority

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

You have an enterprise subordinate certification authority (CA). The CA issues smart card logon certificates.
Users are required to log on to the domain by using a smart card.
Your company's corporate security policy states that when an employee resigns, his ability to log on to the
network must be immediately revoked.
An employee resigns.
You need to immediately prevent the employee from logging on to the domain.
What should you do?

A. Reset the password for the employee's Active Directory account.

B. Revoke the employee's smart card certificate.

C. Disable the employee's Active Directory account.

D. Publish a new delta certificate revocation list (CRL).

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Microsoft TS: Upgrading MCSA on Windows serv 2003 to Windows Serv 2008 (070-648) Free Practice Test