Online Access Free 70-648 Practice Test

Your network contains an Active Directory forest named contoso.com. The forest contains four computers. The computers are configured as shown in the following table.

An administrator creates a script that contains the following commands:
auditpol /get /sd auditpol /list /user auditpol /resourceSACL /type:File /clear auditpol /remove /user:{S-1-5-21-397123417-1234567}
You need to identity which computers can successfully run all of the commands in the script.
Which two computers should you identify? (Each correct answer presents part of the solution. Choose two.)

• A.Server1
• B.Computer2
• C.Server2
• D.Computer1

Your network contains an Active Directory forest. The forest schema contains a custom attribute for user objects.
You need to give the human resources department a file that contains the last logon time and the custom attribute values for each user in the forest.
Which should you use?

• A.the Get-ADUser cmdlet
• B.the Export-CSV cmdlet
• C.the net.exe user command
• D.the dsquery tool

Your company's corporate network uses Network Access Protection (NAP). Users are able to connect to the corporate network remotely.
You need to ensure that data transmissions between remote client computers and the corporate network are as secure as possible.
What should you do?

• A.Configure VPN connections to use MS-CHAP v2 authentication.
• B.Apply an IPsec NAP policy.
• C.Configure a NAP policy for 802.1X wireless connections.
• D.Restrict Dynamic Host Configuration Protocol (DHCP) clients by using NAP.

Your network contains an Active Directory forest. The forest contains two domains. You have a standalone
root certification authority (CA).
On a server in the child domain, you run the Add Roles Wizard and discover that the option to select an
Enterprise CA is disabled.
You need to install an Enterprise Subordinate CA on the server. What should you use to log on to the new server?

• A.an account that is a member of the Certificate Publishers group in the forest root domain
• B.an account that is a member of the Schema Admins group in the forest root domain
• C.an account that is a member of the Certificate Publishers group in the child domain
• D.an account that is a member of the Enterprise Admins group in the forest root domain

Your network contains an Active Directory domain named contoso.com. The domain contains two sites named Site1 and Site2. The servers for the sites are configured as shown in the following table.

Server1 hosts a standard primary zone for contoso.com. Server2 hosts a secondary zone for contoso.com.
You need to ensure that all DNS replication traffic between Server1 and Server2 is encrypted.
What should you do?

• A.On Server1, configure DNSSEC for the contoso.com zone.
• B.On each server, create Connection Security Rules.
• C.On Server1, convert the contoso.com zone to an Active Directory-integrated zone.
• D.On each server, enable Encrypting File System (EFS) encryption for the contoso.com.dns file.