OBI

1.

1 point

Your company has deployed Network Access Protection (NAP). You configure secure wireless access to the network by using an 802.1X authentication from any access point. You need to ensure that all client computers that access the network are evaluated by NAP. What should you do?

Create a Network Policy that defines Remote Access Server as a network connection method

Configure all access points as RADIUS clients to the Network Policy Server (NPS)

Create a Network Policy that specifies EAP-TLS as the only available authentication method

Configure all access points as RADIUS clients to the Remediation Servers

2.

1 point

Your network contains a windows server update services (WSUS) server named Server1. Server 1 Provides updates to client computers in two sties named Site1 and Site2.

A WSUS computer group named Group1 is configured for automatic approval

Yout need to ensure that the new client computers in Site2 are automatically added to Group1.

Which two actions should you perform? (each correct answer presents part of the solution. choose two)

Create a new automatic approval update rule

Modify the Computer Options in the Update Services console

Modify the Automatic Approvals options in the Update Services console

Configure a Group Policy object (GPO) that enables client-side targeting

3.

1 point

Your network contains an Active Directory forest. The forest contains three domain trees. Each domain tree contains multiple domains.
You have an Active Directory-integrated DNS zone.
You install a Web server named Web1. All of the users in the company will use Web1. You need to ensure that the users can access Web1 by using the URL http://web1. You want to achieve this goal by using the minimum amount of administrative effort.
What should you do?

Create an Alias (CNAME) resource record for Web1 in the forest root domain zone.

Create a reverse lookup zone and add an Alias (CNAME) resource for Web1.

Configure a Host information (HINFO) resource record for Web1 in the forest root domain zone.

Configure a GlobalNames zone and add a Host (A) resource record for Web1.

4.

1 point

You have a DHCP server named Server1 and an application server named Server2. Both servers run Windows Server 2008 R2. The DHCP server contains one scope. You need to ensure that Server2 always receives the same IP address. Server2 must receive its DNS settings and its WINS settings from DHCP. What should you do?

Create a DHCP reservation in the DHCP scope

Create an exclusion range in the DHCP scope

Assign a static IP address to Server2

Create a multicast scope

5.

1 point

Your company runs Windows Server Update Services (WSUS) on a server named Server1.
Server1 runs Windows Server 2008.

Server1 is located on the company intranet.

You configure WSUS Web site to use SSL. You need to configure a Group Policy object (GPO) to specify the intranet update locations.

Which URLs should you use?

http://SERVER1

https://SERVER1

https://SERVER1:8080

http://SERVER1:8080

6.

1 point

Your network contains a Windows Server Update Services (WSUS) server. You have an organizational unit (OU) named Sales. The Sales OU contains all of the computer objects for the sales department. You enable client-side targeting for the Sales OU and set the target group name to Sales-Computers. You restart a sales computer.
You discover that the computer is not added to the Sales-Computer computer group in WSUS.
You need to ensure that all sales computers are added to the Sales-Computers group.

Which options should you configure?

Automatic Approvals

Personalization

Computers

Products and Classifications

7.

1 point

Your company has four DNS servers that run Windows Server 2008 R2 Each server has a static IP address. You need to prevent DHCP from assigning the addresses of the DNS servers to DHCP clients. What should you do?

Create a new scope for the DNS servers

Configure the 005 Name Servers scope option

Create a reservation for the DHCP server

Configure an exclusion that contains the IP addresses of the four DNS servers

8.

1 point

You have a DHCP server that runs Windows Server 2008 R2 You need to reduce the size of the DHCP database. What should you do?

From the properties of the dhcp.mdb file, enable the File is ready for archiving attribute

From the DHCP snap-in reconcile the database

From the folder that contains the DHCP database, run jetpack.exe dhcp.mdb temp.mdb

From the properties of the dhcp.mdb file enable the Compress contents to save disk space attribute

9.

1 point

Your network has Network Access Protection (NAP) deployed. The network contains two servers named Server1 and Server2. Server1 is a Network Policy Server (NPS). Server2 has a third-party antivirus solution installed. Server1 is configured to use a custom system health validator provided by the antivirus vendor. The system health validator uses Server2 to identify the version of the current antivirus definition. You need to ensure that NAP clients are considered non-compliant if Server1 cannot connect to Server2.

SHA not responding to NAP client

SHV unable to contact required services

SHV not responding

SHA unable to contact required services

10.

1 point

Your company has a single Active Directory forest that has an Active Directory domain named na.contoso.com. A server named Server1 runs the DNS Server server role. You notice stale resource records in the na.contoso.com zone. You have enabled DNS scavenging on Server1. Three weeks later, you notice that the stale resource records remain in na.contoso.com. You need to ensure that the stale resource records are removed from na.contoso.com.
What should you do?

Enable DNS scavenging on the na.contoso.com zone.

Stop and restart the DNS Server service on Server1.

Run the dnscmd Server1 /StartScavenging command on Server1.

Run the dnscmd Server1 /AgeAllRecords command on Server1.

11.

1 point

You need to add a reservation for a print device to a DHCP scope.

Which two components should you include in the reservation? (Each correct answer presents part of the solution. Choose two)

the default gateway

the subnet mask

the IP address

the MAC address

the printer server name

12.

1 point

Your network contains a DHCP server named DHCP1. You have a DHCP reservation for a computer named Computer1 You add a DNS server option to the reservation. You need to ensure that Computer1 immediately receives the new option. What should you do

Run ipconfig.exe /renew

Run ipconfig.exe /registerdns

On DHCP1 recreate the reservation

On DHCP1 delete the active lease for the reservation

13.

1 point

Your network contains a server that runs Windows Server 2008 R2. The server has the Network Policy and Access Services server role installed. You need to allow only members of a global group named Group1 VPN access to the network. What should you do?

Add Group1 to the RAS and IAS Servers group

Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1

Add Group1 to the Network Configuration Operators group

Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3

14.

1 point

Your company has a main office and two branch offices. Domain controllers in the main office host an Active Directory-integrated zone.
The DNS Servers in the branch offices host a secondary zone for the domain and use the main office DNS servers as the DNS Master servers for the zone.
Each branch office has an application server. Users access the application server by using its fully qualified domain name.
You need to ensure that users in the branch offices can access their local application server even if the WAN links are down for three days.
What should you do?

Increase the Refresh Interval setting to 4 days on the Start of Authority (SOA) record for the zone.

Configure the Zone Aging / Scavenging Properties dialog box to enable Scavenge stale recourse records, and set the Refresh interval setting to 4 days.

Configure the Zone Aging / Scavenging Properties dialog box to enable Scavenge stale recourse records, and set the No-Refresh interval setting to 4 days.

Increase the Expires After setting to 4 days on the Start Authority (SOA) record for the zone.

15.

1 point

You have 10 standalone servers that run Windows Server 2008. You install WSUS on a server named Server1.
You need to configure all of the servers to receive updates from Server1.
What should you do?

Configure the Windows Update settings on each server by using local group policy.

configure the windows Update Settings on each server by using control panel

Run the wuauclt.exe /detectnow command on each server

Run the wuaucit.exe /reauthorization command on each server

16.

1 point

Your company has a main office and a brance office. The main office has a domain controller named DC1 that hosts a DNS primary zone. The branch office has a DNS server named SRV1 that hosts a DNS secondary zone. All client computers are configured to use their location server for DNS resolution. You can change the IP address of an existing server named SRV2 in the main office. You need to ensure that SRV1 reflects the change immediately.
What should you do?

Run the dnscmd command by using the /zonerefresh option on SRV1.

Set the refresh interval to 10 minutes on the Start of Authority (SOA) record.

Restart the DNS Server service on DC1.

Run the dnscmd command by using the /zonerefresh option on DC1.

17.

1 point

Your network contains a file server named Server1 that runs Windows Server 2008 R2. On Server1 , you create a disk quota for volume E that limits storage to 200 MB for all users. You need to ensure that a user named User1 can store files that are larger than 200 MB on volume.

What should you do?

From Windows Explorer, modify the security properties of the volume.

From a command prompt, run dirquota.exe.

From File Server Resource Manager, create a file screen exception.

From Disk Management, create a new quota entry.

18.

1 point

Your network contains a server named Server1 that runs Windows Server 2008 R2. The network contains multiple subnets. An administrator reports that Server1 fails to communicate with computers on remote subnets. You run route.exe print on Server1 as shown in the exhibit. ( zie plaatje RRAS en NAP vraag 3 )
You need to ensure that Server1 can communicate with all computers on the network. What should you do?

Change the Subnet Mask

Disable IPv6

Change the default metric to 100

Add a default Gateway address

19.

1 point

Your company has an Active Directory forest. All domain controllers run the DNS Server server role. The company plans to decommission the WINS service. You need to enable forest-wide single name resolution. What should you do?

Create an Active Directory-integrated zone named GlobalNames. Create host (A) records for the single name resources.

Enable WINS-R lookup in DNS.

Create an Active Directory-integrated zone named LagacyWINS. Create host (A) records for the single names resources.

Create Service Location (SRV) records for the single name resources.

20.

1 point

Your company has a main office and two branch offices. Domain controllers in the main office host an Active Directory-integrated zone.
The DNS servers in the branch offices host a secondary zone for the domain and use the main office DNS servers as their DNS Master Server for the zone.
The company adds a new branch office. You add a member server named Branch3 and install the DNS Server server role on the server. You configure a secundary zone for the domain. The zone transfer fails.
You need to configure DNS to provide zone data to the DNS server in the new branch office.
What should you do?

Run dnscmd by using the ZoneResetSecondaries option.

Run dnscmd by using the ZoneResetMasters option.

Add the new DNS server to the Zone Transfer tab on one of the DNS servers in the main office.

Add the new DNS server to the DNSUpdateProxy Global security group in Active Directory Users and Computers.

21.

1 point

Your network contains two DHCP servers named Server 1 and Server2. On Server1, you create a scope named Scope1. You need to ensure that DHCP clients receive IP addresses from the address range in Scope1 if Server1 is unavaible The solution must prevent both servers from assigning duplicate IP addresses. What should you do from the DHCP console?

On Server1 create a superscope

On Server2 create a scope and then reconcile each scope

On Server1 select Scope1 and then run the Split-Scope wizard

On Server2 create a scope and then enable Network Acces Protection

22.

1 point

Your network contains a domain-based Distributed File System (DFS) namespace named \\contoso.com\DFS1
You have two servers named Serverl and Server2 that are configured as namespace servers for \\contoso.com\DFS1. You need to verify that the DFS namespace replicates successfully between Server1 and Server2.

Which tool should you use?

Dfsrdiag

Dfsutil

Dfscmd

Dfsdiag

23.

1 point

You company’s corporate network uses Network Access Protection (NAP). Users are able to connect to the corporate network remotely. You need to ensure that data transmissions between remote client computers and the corporate network are as secure as possible. What should you do?

Configure a NAP policy for 802.1X wireless connections

onfigure VPN connections to use MS-CHAP v2 authentication

Restrict Dynamic Host Configuration (DHCP) clients by using NAP

Apply an IPsec NAP Policy

24.

1 point

Network Access Protection (NAP) is configured for the corporate network. Users connect to the corporate network portable computers. The company policy requires confidentiality of data when the data is in transit between the portable computers and the servers. You need to ensure that users can access network resources only from computers that comply with the company policy. What should you do?

Create a Wired Network (IEEE 802.3) Group policy

Create an 802.1X Enforcement Network policy

Create an Extensible Authentication Protocol (EAP) Enforcement Network Policy

Create an IPsec Enforcement Network Policy

25.

1 point

Your network contains an Active Directory domain. You have a print server named Server1 that runs Windows Server 2008 R2. You deploy a new print device and create a shared printer. You need to ensure that only members of a group named Marketing can print color documents on the new print device. All other users must only be able to print black and white documents on the new print device.

What should you do?

Modify the Active Directory printer object

Create a printer port

Create a second shared printer.

Modify the properties of the shared printer.

26.

1 point

Your network contains a Routing and Remote Access server named RRAS1 and a DHCP server named DHCP1. RRAS1 and DHCP1 are located in different subnets. RRAS1 is configured to support VPN connections from the Internet. DHCP1 has a scope that provides IP addresses for the VPN connections. You need to ensure that VPN clients that connect to RRAS1 can receive IP addresses from DHCP1. What should you do?

On DHCP1, configure a DHCP Relay Agent

On DHCP1, install the Routing role service

On RRAS1, configure a DHCP Relay Agent

On RRAS1, install the Routing role service

27.

1 point

Your company has a single Active Directory forest that has six domains. All DNS servers in the forest run Windows Server 2008 R2. You need to ensure that all public DNS quaries are channeled through a single-caching-only DNS server.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Enable BIND secondaries.

Disable the root hints.

Configure a forwarder to the caching DNS server.

Configure a GlobalNames host (A) record for the hostnames of the caching DNS server.

28.

1 point

You need to add a reservation for a print device to a DHCP scope which two components should you include in the reservation (Choose 2 answers)

The MAC address

The Default gateway

The Subnet mask

The Printer server name

The IP address

29.

1 point

Your network uses IPv4. You install a server that runs Windows Server 2008 R@ at a branch office. The server is configured with two network interfaces. You need to configure routing on the server at the branch office. Which to actions should you perform? ( Choose two )

Run the netsh interface IPv4 enable command

Install the Routing and Remote Access Services role service

Run the netsh ras ip set ALL command

Enable the IPv4 Routing and Remote Access Option

30.

1 point

Your network contains an Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2 taht run Windows Server 2008 R2. DC1 hosts a primary zone for contoso.com. DC2 hosts a secondary zone for contoso.com. You need to ensure that DNS zone data iis encrypted when the data replicates across the network. DC2 must provide authoritative responses to client computers.
What should you do?

Convert the contoso.com zone to an Active Directory-integrated zone.

Configure the contoso.com zone to use DNSSEC.

Modify the zone transfer settings of the contoso.com zone.

Create the new delegation in the contoso.com zone.

31.

1 point

You need to ensure that the DHCP server can respond to DHCP clients what should you do?

From the Services console, start the DHCP Server service

From network Connections, modify the IPv4 properties and the IPv6 properties

From the DHCP console, authorize the DHCP server

From the Local Users and Groups snap-in, add the Server3 computer account to the DHCP Administrators group

32.

1 point

Your company has 10 servers that run Windows Server 2008 R2. The servers have Remote Desktop Protocol (RDP) enabled for server administration. RDP is configured to use default security settings. All administrators’ computers run Windows 7. You need to ensure the RDP connections are as secure as possible. Which two actions should you perform? ( Choose two )

Set the security layer for each server to the RDP Security Layer

Acquire user certificates from the Internal certification authority

Configure each server to allow connections only to Remote Desktop client computers that use Network Level Authentication

Configure the firewall on each server to block port 3389

33.

1 point

Your network contains an Active Directory domain. The domain contains a Windows Server Update Services (WSUS) server named Serverl. A Group Policy object (GPO) named GP01 configures all compute the domain to use Served for Windows Update.

You add a new Windows7 computer named Computer1 to the domain.

From the Update Services console, you discover that Computer1 is not listed as a member of any computer groups.
You verify that GP01 is applied to Computer1.

You need to ensure that Computer1 is available in the Update Services console.

What should you do?

On Computer1, run wuauclt.exe /detectnow

On Server1 , run wsusutil.exe listinactiveapprovals

On Server1 , run wsusutil.exe reset

On Computer1, run wuauclt.exe /reportnow

34.

1 point

Your company has a domain named Server1 that runs Windows Server 2008 R2. Server1 has the DNS Server server role installed.
You need to configure the DNS server to resolve IP addresses to host names.
Which record should you create?

Pointer (PTR)

Host Info (HINFO)

Canonical Name (CNAME)

Service Location (SRV)

35.

1 point

Contoso Ltd. has a single Active Directory forest that has five domains. Each domain has two DNS servers. Each DNS server hosts Active Directory-integrated zones for all five domains. All domain controllers run Windows Server 2008 R2.
Contoso acquires a company named Tailspin Toys. Tailspin Toys has a single Active Directory forest that contains a single domain.
You need to configure the DNS system in the Contoso forest to provide name resolution for resources in both forests.
What should you do?

Create a new application directory partition in the Contoso forest. Enlist the directory partition for all DNS servers.

Configure client computers in the Contoso forest to use the Tailspin Toys DNS server as the alternate DNS server.

Create a new host (A) record in the GlobalNames folder on one of the DNS servers in the Contoso forest. Configure the host (A) record by using the Tailspin Toys domain name and the IP address of the DNS server in the Tailspin Toys forest.

Create a new conditional forwarder and store it in Active Directory. Replicate the new conditional forwarder to all DNS servers in the Contoso forest.