TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist (70-649) Free Practice Test

Question 1

Your company has an Active Directory domain. The company runs Remote Desktop Services.
Standard users who connect to the Remote Desktop Session Host Server are in the TSUsers organizational unit (OU). Administrative users are in the TSAdmins OU. No other users connect to the Remote Desktop Session Host Server.
You need to ensure that only members of OU1 can run the Remote Desktop Protocol files.
What should you do?

A. Create a Group Policy object (GPO) that configures the Allow .rdp files from valid publishers and users default .rdp settings policy setting in the Remote Desktop Client Connection template to Enabled. Apply the GPO to the TSAdmins OU.

B. Create a Group Policy object (GPO) that configures the Specify SHA1 thumbprints of certificates representing trusted .rdp publishers policy setting in the Remote Desktop Client Connection template to Enabled. Apply the GPO to the TSAdmins OU.

C. Create a Group Policy object (GPO) that configures the Allow .rdp files from unknown publishers policy setting in the Remote Desktop Client Connection template to Disabled. Apply the GPO to the TSUsers OU.

D. Create a Group Policy object (GPO) that configures the Allow .rdp files from valid publishers and users default .rdp settings policy setting in the Remote Desktop Client Connection template to Disabled. Apply the GPO to the TSUsers OU.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Your network contains an Active directory domain named fabrikam.com. The domain
contains a Web server named Web1 that runs Windows Server 2008 R2.
You create three application pools named AppPool1, AppPool2, and AppPool3.
You need to recycle AppPool1 without affecting AppPool2 and AppPool3.
Which tool should you use?

A. Services

B. Iisreset

C. Internet Information Services (IIS) Manager

D. Internet Information Services (IIS) 6.0 Manager

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

HOTSPOT
You need to modify the Password Replication Policy on a read-only domain controller (RODC).
Which tool should you use?
To answer, select the appropriate tool in the answer area.

Correct Answer:

Question 4

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Remote Desktop Gateway (RD Gateway) role service installed.
You add the Domain Users group to a connection authorization policy named TS_CAP_01.
You need to ensure that only client computers that have Windows Firewall enabled can connect to Remote Desktop resources through the RD Gateway.
What should you do?

A. From Remote Desktop Gateway Manager, modify the properties of the TS_CAP_01 connection authorization policy.

B. From the Network Policy Server console, modify the properties of the TS GATEWAY AUTHORIZATION POLICY connection request policy.

C. From the Network Policy Server console, modify the properties of the TS_CAP_01 network policy.

D. From Remote Desktop Gateway Manager, modify the properties of the TS_RAP_01 resource authorization policy.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Your network contains two Active Directory forests named contoso.com and nwtraders.com.
Active Directory Rights Management Services (AD RMS) is deployed in each forest.
You need to ensure that users from the nwtraders.com forest can access AD RMS protected content in the contoso.com forest.
What should you do?

A. Add a trusted user domain to the AD RMS cluster in the nwtraders.com domain.

B. Add a trusted user domain to the AD RMS cluster in the contoso.com domain.

C. Create an external trust from nwtraders.com to contoso.com.

D. Create an external trust from contoso.com to nwtraders.com.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Question 7

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Windows Deployment Services (WDS) server role installed.
You need to ensure that WDS only responds to computers that are prestaged in Active Directory.
Which WDS properties should you modify?

A. DHCP Authorization

B. Transfer Settings

C. PXE Boot Policy

D. PXE Response Policy

Correct Answer: D

Question 8

Your network contains a server that runs Windows Server 2008 R2. The server has the Network Policy and Access Services server role installed.
You need to allow only members of a global group named Group1 VPN access to the network.
What should you do?

A. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.

B. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.

C. Add Group1 to the RAS and IAS Servers group.

D. Add Group1 to the Network Configuration Operators group.

Correct Answer: B

Question 9

Your network contains a Windows Server Update Services (WSUS) Server infrastructure that has three servers named WSUS1, WSUS2, and WSUS3. WSUS2 is a downstream replica server of WSUS1. WSUS3 is a downstream replica server of WSUS2.
You need to ensure that the Update Services console on WSUS2 only displays computers that receive updates from WSUS2.
What should you configure on WSUS2?

A. reporting rollup

B. downstream servers

C. Personalization

D. synchronizations

Correct Answer: C

Question 10

Your network contains a single Active Directory domain. The domain contains two servers. The servers are configured as shown in the following table.

You install 100 Remote Desktop Services Per User client access licenses (RDS Per User CALs) on Server1.
You discover that when users connect to Remote Desktop Services (RDS) on Server2, they receive temporary licenses.
You need to ensure that users receive permanent licenses when they connect to Server2.
What should you do?

A. On Server2, install the RD Licensing role service.

B. On Server1, change the discovery scope of the license server to Domain.

C. On Server1, remove the RD Session Host role service.

D. On Server2, change the Remote Desktop licensing mode to Per User.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

Your network contains an Active Directory forest. The forest contains a member server named VPN1 that runs Windows Server 2008 R2.
You need to configure VPN1 as a VPN server.
What should you install on VPN1?

A. Simple TCP/IP Services

B. Routing and Remote Access service (RRAS)

C. Connection Manager Administration Kit (CMAK)

D. Network Policy Server (NPS)

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

Your company has Active Directory Certificate Services (AD CS) and Network Access Protection (NAP) deployed on the network.
You need to ensure that NAP policies are enforced on portable computers that use a wireless connection to access the network.
What should you do? (Choose all that apply.)

A. Use the Group Policy Management Console to access the wireless Group Policy settings, and enable the Prevent connections to ad-hoc networks option.

B. Configure all access points to use 802.1X authentication.

C. Configure all portable computers to use MS-CHAP v2 authentication.

D. Use the Group Policy Management Console to access the wireless Group Policy settings, and disable the Prevent connections to infrastructure networks option.

Correct Answer: B

Question 13

Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Server1 and Server2 are configured as a failover cluster named Cluster1.
Cluster1 hosts a clustered application named App1. App1 has a physical disk resource named Cluster Disk 1.
You need to use the Chkdsk tool to fix all of the errors on Cluster Disk 1.
What should you do first?

A. From Disk Management, take Cluster Disk l offline.

B. From Disk Management, disable write caching for Cluster Disk 1.

C. From Failover Cluster Manager, enable maintenance mode for Cluster Disk 1.

D. From Failover Cluster Manager, modify the dependencies for Cluster Disk 1.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Microsoft TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist (70-649) Free Practice Test