Online Access Free 070-648 Practice Test

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 is located in a
branch office.
You discover that users cannot obtain cached documents from Server1. The BranchCache configuration on
Server1 is shown in the exhibit. (Click the Exhibit button.)
You need to ensure that Server1 hosts cached content for client computers in the branch office. What should you do?
Exhibit:

• A.At the command prompt, run netsh.exe branchcache set service mode=DISTRIBUTED.
• B.Enable Peer Discovery firewall rules.
• C.Set the Startup Type of the BranchCache service to Automatic, and then start the service.
• D.At the command prompt, run netsh.exe branchcache set service mode=HOSTEDCLIENT.

Your network contains a domain-based namespace named DFS1. DFS1 has Windows 2008 Server mode
enabled.
You need to ensure that only files and folders in DFS1 that users have permissions to access are displayed.
What should you do?

• A.Disable referrals.
• B.Modify the system access control list.
• C.Modify the discretionary access control list.
• D.Enable Access-Based Enumeration (ABE).

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses an Enterprise Root certificate authority (CA).
You need to ensure that revoked certificate information is highly available.
What should you do?

• A.Publish the Trusted Certificate Authorities list to the domain by using a Group Policy Object (GPO).
• B.Create a new Group Policy Object (GPO) that allows users to trust peer certificates. Link the GPO to the domain.
• C.Implement an Online Certificate Status Protocol (OCSP) responder by using an Internet Security and Acceleration Server array.
• D.Implement an Online Certificate Status Protocol (OCSP) responder by using Network Load Balancing.

You deploy Network Access Protection (NAP) on your network.
An administrator configures a network policy as shown in the exhibit. (Click the Exhibit button.)
You discover that noncompliant client computers cannot access the remediation network.
You need to configure the network policy to ensure that noncompliant client computers can access the
remediation network.
What should you do?
Exhibit:

• A.In Access Permission, select the Ignore user account dial-in properties check box.
• B.In Access Permission, select the Grant access. Grant access if the connection request matches this policy option button.
• C.In the Type of network access server list, click HCAP Server.
• D.In the Type of network access server list, click Health Registration Authority,

Your network contains an Active Directory forest named contoso.com. You need to create an Active Directory Rights Management Services (AD RMS) licensing-only cluster.
What should you do?
To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area and arrange them in the correct order.
Build List and Reorder:

Correct Answer:

Explanation:
During the installation of the AD RMS root cluster we need to select a configuration database, so we need
to install SQL Server 2008 first.
Next we need to install the AD RMS root cluster; only then can we install the AD RMS licensing-only
cluster.
The last step is to deploy the AD RMS policy templates.
Before you install AD RMS Before you install Active Directory Rights Management Services (AD RMS) on Windows Server@ 2008 R2 for the first time, there are several requirements that must be met:
-(...)
In addition to pre-installation requirements for AD RMS, we strongly recommend the following:
-Install the database server that is used to host the AD RMS databases on a separate computer.
-(...)
Reference: http://technet.microsoft.com/en-us/library/cc771789.aspx
A root AD RMS cluster must already be present in the AD DS forest before you can install the licensing-only cluster.Reference: http://technet.microsoft.com/en-us/library/cc772087.aspx