Online Access Free 070-642 Exam Questions

Your network contains a domain-based namespace named DFS1. DFS1 has Windows 2008 Server mode enabled.
You need to ensure that only files and folders in DFS1 that users have permissions to access are displayed.
What should you do?

• A.Enable access-based enumeration (ABE).
• B.Modify the discretionary access control list.
• C.Disable referrals.
• D.Modify the system access control list.

Your network contains an Active Directory domain. The domain contains several VPN servers that have the Routing and Remote Access service (RRAS) role service installed.
You need to collect information about the duration of the VPN connections. The information must be stored in a central location.
What should you configure on the VPN servers?

• A.the RADIUS Authentication authentication provider
• B.the Windows Authentication authentication provider
• C.the Windows Accounting accounting provider
• D.health policies
• E.system health validators (SHVs)
• F.connection request policies
• G.remediation server groups
• H.Group Policy preferences
• I.the RADIUS Accounting accounting provider
• J.IKEv2 client connections

Your network contains a server that runs Windows Server 2008 R2. You need to enable access-based enumeration (ABE) on a shared folder.
Which console should you use?

• A.Storage Explorer
• B.File Server Resource Manager
• C.Disk Management
• D.Share and Storage Management

Your network contains a Network Policy Server (NPS) named NPS1 and a network access server named
NAS1. NAS1 is configured to use NPS1 for authentication and accounting. A firewall separates NPS1 and
NAS1.
You need to ensure that NAS1 can successfully send authentication and accounting messages to NPS1.
Which ports should you allow through the firewall?

• A.UDP ports 1812, 1813, 1645 and 1646
• B.TCP ports 88, 135, 139 and 1813
• C.UDP ports 53, 67, 68 and 69
• D.TCP ports 80, 443, 389 and 1645

Your network contains a server named Server1 that runs Windows Server 2008 R2 Service Pack 1 (SP1).
You log on to Server1 by using an account named Admin1, and then you open Event Viewer as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can view all of the events in the Security log.
What should you do?

• A.From a command prompt, run net localgroup /add "Event Log Readers" Admin1.
• B.From the Local Group Policy Editor, set Log access to Enabled for the Security log.
• C.From Event Viewer, right-click Security, and then click Clear Filter.
• D.From the Local Group Policy Editor, set Retain old events to Enabled for the Security log.
• E.From Event Viewer, right-click Security, and then click Refresh.