Exam A 70-642
You need to create a sender policy framework (SPF) record for the email servers on your network.
Which type of resource record should you create? Correct Answer: Text (TXT)
A DC named DC12 runs critical services. Restructuring of the organizational unit hierarchy for the
domain has been completed and unnecessary objects have been deleted. You need to perform an
offline defragmentation of the Active Directory database on DC12. You also need to ensure that the
critical services remain online. What should you do? Correct Answer: Stop the DC service in the Services
(local) Microsoft Management Console (MMC). Run the Ntdsutil utility.
Contoso Ltd. has a single Active Directory forest that has 5 domains. Each domain has two DNS servers.
Each DNS server hosts Active Directory integrated zones for all 5 domains. All DCs run Windows Server
2008 R2. Contoso acquires a company named Tailspin Toys. Tailspin Toys has a single Active Directory
forest that contains a single domain. You need to configure the DNS system in the Contoso forest to
provide name resolution for resources in both forests. What should you do? Correct Answer: Create a
new conditional forwarder and store it in Active Directory. Replicate the new conditional forwarder to
all DNS servers in the Contoso forest.
Your network contains a server named Server1 that runs Windows Server 2008 R2 SP1. Server1 has a
static IP address. You need to configure Server1 to receive an IP address from a DHCP server. Which
Netch context should you use? Correct Answer: interface
You create 200 new user accounts. The users are located in 6 different sites. New users report that they
receive the following error message when they try to log on:
"The username or password is incorrect."
You confirm that the user accounts exist and are enabled. You also confirm that the user name and
password information supplied are correct. You need to identify the cause of the failure. You also need
to ensure that the new users are able to log on. Which utility should you run? Correct Answer:
Repadmin
You need to validate whether Active Directory successfully replicated between two domain controllers.
What should you do? Correct Answer: Run the RepAdmin command.
Your network contains an Active Directory domain named contoso.com. The contoso.com domain
contains a domain controller named DC1. You create an Active Directory integrated GlobalNames zone.
You add an alias (CNAME) resource record named Server1 to the zone. The target host of the record is
server2.contoso.com. When you ping Server1, you discover that the name fails to resolve. You are able
to successfully ping server2.contoso.com. You need to ensure that you can resolve names by using the
GlobalNames zone. Which command should you run? Correct Answer: Dnscmd
DC1.contos.com/config/Enableglobalnamessupport 1
Your network contains an Active Directory domain named contoso.com. From DNS Manager, you open
the properties of contoso.com as shown in the exhibit. You need to ensure that you can modify the start
, of authority (SOA) record from contoso.com. What should you do? Correct Answer: Connect to the DNS
server that contains the primary zone.
Your network contains an Active Directory forest named fabrikam.com. The forest contains a DNS server
named Server1. You need to configure Server1 to resolve single label names. What should you do?
Correct Answer: Create a DNS zone named GlobalNames. Run dnscmd.exe and specify the Config
parameter.
You need to identify all failed logon attempts on the domain controllers. What should you do? Correct
Answer: Run Event Viewer.
You have a server that runs Windows Server 2008. You need to configure the server as a VPN server.
What should you install on the server? Correct Answer: Network Policy and Access Services role and
Routing and Remote Access Services role service.
You have a file server that runs Windows Server 2008. The server has a shared folder. You need to
receive a notification when a user stores more than 500MB of data in the shared folder. You must allow
users to store more than 500MB of data in the shared folder. What should you do? Correct Answer:
Create a soft quota.
Your network contains a server named Server1. The Active Directory Rights Management Services (AD
RMS) server role is installed on Server1. An administrator changes the password of the user account that
is used by AD RMS. You need to update AD RMS to use the new password. Which console should you
use? Correct Answer: Active Directory Rights Management Services.
You deploy an Active Directory Federation Services (AD FS) Federation Service Proxy on a server named
Server1. You need to configure the Widows Firewall on Server1 to allow external users to authenticate
by using AD FS. Which protocol should you allow on Server1? Correct Answer: Secure Socket Layer (SSL)
Your network contains a DC named DC1. DC1 hosts a zone named contoso.com. The properties of the
zone are shown in the exhibit. You need to ensure that only secure dynamic updates are accepted for
the contoso.com zone. What should you do first? Correct Answer: Configure the zone to be stored in
Active Directory.
Your network contains an Active Directory domain. The domain contains DNS servers that run Windows
Server 2008 R2. The network has two external links. One link connects to the internet. The other link
directly connects to the network of a partner company. The partner company's network is not
connected to the internet. You need to ensure that users on your network can access resources on the
partner company's network. The solution must ensure that the users on your network can continue to
access resources on the internet. Which two actions should you perform on the DNS server? Correct
Answer: 1. Configure conditional forwarding.
2. Modify the root hints.
Your network contains a server named Server1 that runs Windows Server 2008 R2 SP1. You log on to
Server1 by using an account named Admin1, and then you open Event Viewer as shown in the exhibit.
You need to ensure that you can view all of the events in the Security log. What should you do? Correct
Answer: From Event Viewer, right click Security, then click Clear Filter.
You need to create a sender policy framework (SPF) record for the email servers on your network.
Which type of resource record should you create? Correct Answer: Text (TXT)
A DC named DC12 runs critical services. Restructuring of the organizational unit hierarchy for the
domain has been completed and unnecessary objects have been deleted. You need to perform an
offline defragmentation of the Active Directory database on DC12. You also need to ensure that the
critical services remain online. What should you do? Correct Answer: Stop the DC service in the Services
(local) Microsoft Management Console (MMC). Run the Ntdsutil utility.
Contoso Ltd. has a single Active Directory forest that has 5 domains. Each domain has two DNS servers.
Each DNS server hosts Active Directory integrated zones for all 5 domains. All DCs run Windows Server
2008 R2. Contoso acquires a company named Tailspin Toys. Tailspin Toys has a single Active Directory
forest that contains a single domain. You need to configure the DNS system in the Contoso forest to
provide name resolution for resources in both forests. What should you do? Correct Answer: Create a
new conditional forwarder and store it in Active Directory. Replicate the new conditional forwarder to
all DNS servers in the Contoso forest.
Your network contains a server named Server1 that runs Windows Server 2008 R2 SP1. Server1 has a
static IP address. You need to configure Server1 to receive an IP address from a DHCP server. Which
Netch context should you use? Correct Answer: interface
You create 200 new user accounts. The users are located in 6 different sites. New users report that they
receive the following error message when they try to log on:
"The username or password is incorrect."
You confirm that the user accounts exist and are enabled. You also confirm that the user name and
password information supplied are correct. You need to identify the cause of the failure. You also need
to ensure that the new users are able to log on. Which utility should you run? Correct Answer:
Repadmin
You need to validate whether Active Directory successfully replicated between two domain controllers.
What should you do? Correct Answer: Run the RepAdmin command.
Your network contains an Active Directory domain named contoso.com. The contoso.com domain
contains a domain controller named DC1. You create an Active Directory integrated GlobalNames zone.
You add an alias (CNAME) resource record named Server1 to the zone. The target host of the record is
server2.contoso.com. When you ping Server1, you discover that the name fails to resolve. You are able
to successfully ping server2.contoso.com. You need to ensure that you can resolve names by using the
GlobalNames zone. Which command should you run? Correct Answer: Dnscmd
DC1.contos.com/config/Enableglobalnamessupport 1
Your network contains an Active Directory domain named contoso.com. From DNS Manager, you open
the properties of contoso.com as shown in the exhibit. You need to ensure that you can modify the start
, of authority (SOA) record from contoso.com. What should you do? Correct Answer: Connect to the DNS
server that contains the primary zone.
Your network contains an Active Directory forest named fabrikam.com. The forest contains a DNS server
named Server1. You need to configure Server1 to resolve single label names. What should you do?
Correct Answer: Create a DNS zone named GlobalNames. Run dnscmd.exe and specify the Config
parameter.
You need to identify all failed logon attempts on the domain controllers. What should you do? Correct
Answer: Run Event Viewer.
You have a server that runs Windows Server 2008. You need to configure the server as a VPN server.
What should you install on the server? Correct Answer: Network Policy and Access Services role and
Routing and Remote Access Services role service.
You have a file server that runs Windows Server 2008. The server has a shared folder. You need to
receive a notification when a user stores more than 500MB of data in the shared folder. You must allow
users to store more than 500MB of data in the shared folder. What should you do? Correct Answer:
Create a soft quota.
Your network contains a server named Server1. The Active Directory Rights Management Services (AD
RMS) server role is installed on Server1. An administrator changes the password of the user account that
is used by AD RMS. You need to update AD RMS to use the new password. Which console should you
use? Correct Answer: Active Directory Rights Management Services.
You deploy an Active Directory Federation Services (AD FS) Federation Service Proxy on a server named
Server1. You need to configure the Widows Firewall on Server1 to allow external users to authenticate
by using AD FS. Which protocol should you allow on Server1? Correct Answer: Secure Socket Layer (SSL)
Your network contains a DC named DC1. DC1 hosts a zone named contoso.com. The properties of the
zone are shown in the exhibit. You need to ensure that only secure dynamic updates are accepted for
the contoso.com zone. What should you do first? Correct Answer: Configure the zone to be stored in
Active Directory.
Your network contains an Active Directory domain. The domain contains DNS servers that run Windows
Server 2008 R2. The network has two external links. One link connects to the internet. The other link
directly connects to the network of a partner company. The partner company's network is not
connected to the internet. You need to ensure that users on your network can access resources on the
partner company's network. The solution must ensure that the users on your network can continue to
access resources on the internet. Which two actions should you perform on the DNS server? Correct
Answer: 1. Configure conditional forwarding.
2. Modify the root hints.
Your network contains a server named Server1 that runs Windows Server 2008 R2 SP1. You log on to
Server1 by using an account named Admin1, and then you open Event Viewer as shown in the exhibit.
You need to ensure that you can view all of the events in the Security log. What should you do? Correct
Answer: From Event Viewer, right click Security, then click Clear Filter.
