Online Access Free 070-648 Practice Test

Note: This question is part of a series of question that use the same set of answer choices. Each answer choice may be used once, more than once, or not at all.
Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Server1 that has Microsoft SQL Server 2008 R2 installed.
You need to configure the Windows Firewall on Server1 to allow client computers access to the SQL Server
installation.
Which port or ports should you allow through Windows Firewall?

• A.TCP 636
• B.TCP 1433
• C.UDP 1433
• D.UDP 546 and UDP 547
• E.UDP 995
• F.TCP 993
• G.TCP 53 and UDP 53
• H.UDP 993
• I.TCP 67 and TCP 68
• J.TCP 587 and UDP 587
• K.TCP 546 and TCP 547
• L.UDP 67 and UDP 68
• M.TCP 995

Your network contains a server named Server1. Server1 has DirectAccess deployed. A group named Group1 is enabled for DirectAccess.
Users report that when they log on to their computers, the computers are not configured to use DirectAccess.
You need to ensure that the users' computers are configured to use DirectAccess.
What should you do first?

• A.From Active Directory Users and Computers, add the users' computer accounts to Group1.
• B.On each client computer, add Group1 to the Network Configuration Operators group.
• C.On each client computer, add Group1 to the Distributed COM Users group.
• D.From Active Directory Users and Computers, add the users' user accounts to Group1.

You need to back up all of the group policies in a domain. The solution must minimize the size of the backup.
What should you use?

• A.the Group Policy Management console
• B.the Add-WBSystemState cmdlet
• C.the wbadmin tool
• D.the Windows Server Backup feature

You deploy Network Access Protection (NAP) on your network.
An administrator configures a network policy as shown in the exhibit. (Click the Exhibit button.)
You discover that noncompliant client computers cannot access the remediation network.
You need to configure the network policy to ensure that noncompliant client computers can access the
remediation network.
What should you do?
Exhibit:

• A.In the Type of network access server list, click HCAP Server.
• B.In Access Permission, select the Ignore user account dial-in properties check box.
• C.In the Type of network access server list, click Health Registration Authority,
• D.In Access Permission, select the Grant access. Grant access if the connection request matches this policy option button.

Your company has a main office and 15 branch offices. The company has a single Active Directory domain. All servers run Windows Server 2008 R2.
You need to ensure that the VPN connections between the main office and the branch offices meet the following requirements:
-All data must be encrypted by using end-to-end encryption.
-The VPN connection must use computer-level authentication.
-User names and passwords cannot be used for authentication.
What should you do?

• A.Configure an IPsec connection to use tunnel mode and pre-shared key authentication.
• B.Configure a L2TP/IPsec connection to use the EAP-TLS authentication.
• C.Configure a PPTP connection to use version 2 of the MS-CHAP v2 authentication.
• D.Configure a L2TP/IPsec connection to use version 2 of the MS-CHAP v2 authentication.