Microsoft 70-648

TS: Upgrading from Windows Server 2003 MCSA to,

Windows Server 2008, Technology SpecializationsVersion: Demo 45.0

Topic 1, Volume D

QUESTION NO: 1 Your network contains the servers configured as shown in the following table. Your company is assigned the public IP addresses from 131.107.0.1 to 131.107.0.31. You need to ensure that Web1 is accessible from the Internet by using https://131.107.0.2. What should you do from the Routing and Remote Access console? A. From the Static Routes node, configure a static route. B. From the server properties, configure SSL Certificate Binding. C. From the NAT interface, add an address pool and a reservation. D. From the NAT interface, configure the Secure Web Server (HTTPS) service.

Answer: C

Explanation:

Topic 2, Volume B

QUESTION NO: 2 Your network contains an Active Directory domain. You need to restore a deleted computer account from the Active Directory Recycle Bin. What should you do? A. From the command prompt, run recover.exe. B. From the command prompt, run ntdsutil.exe. C. From the Active Directory Module for Windows PowerShell, run the Restore-Computer cmdlet. D. From the Active Directory Module for Windows PowerShell, run the Restore-ADObject cmdlet.

Answer: D

Explanation:

Microsoft 70-648 Exam

"A Composite Solution With Just One Click" - Certification Guaranteed 2

QUESTION NO: 3 Your network contains an Active Directory domain. The domain is configured as shown in thefollowing table: You need to ensure that users in Branch2 only authenticate to the domain controllers inMain. What should you do? A. On DC3, set the AutoSiteCoverage value to 0. B. On DC3, set the AutoSiteCoverage value to 1. C. On DC1 and DC2, set the AutoSiteCoverage value to 0. D. On DC1 and DC2, set the AutoSiteCoverage value to 1.

Answer: A

Explanation:

Topic 3, Volume E

QUESTION NO: 4 Your network contains two Active Directory forests named contoso.com and nwtraders.com.Active Directory Rights Management Services (AD RMS) is deployed in each forest. You need toensure that users from the nwtraders.com forest can access AD RMS protected content in thecontoso.com forest. What should you do? A. Create an external trust from nwtraders.com to contoso.com. B. Create an external trust from contoso.com to nwtraders.com. C. Add a trusted user domain to the AD RMS cluster in the contoso.com domain. D. Add a trusted user domain to the AD RMS cluster in the nwtraders.com domain.

Answer: B

Explanation:

Microsoft 70-648 Exam

"A Composite Solution With Just One Click" - Certification Guaranteed 3

---

Topic 4, Volume C

QUESTION NO: 5 Your company has a main office and 15 branch offices. The company has a single ActiveDirectory domain. All servers run Windows Server 2008 R2. You need to ensure that the VPN connections between the main office and the branch officesmeet the following requirements:

All data must be encrypted by using end-to-end encryption. The VPN connection must use computer-level authentication. User names and passwords cannot be used for authentication.

What should you do? A. Configure an IPsec connection to use tunnel mode and preshared key authentication. B. Configure a PPTP connection to use version 2 of the MS-CHAP v2 authentication. C. Configure a L2TP/IPsec connection to use the EAP-TLS authentication. D. Configure a L2TP/IPsec connection to use version 2 of the MS-CHAP v2 authentication.

Answer: C

Explanation:

Topic 2, Volume B

QUESTION NO: 6 Your network consists of a single Active Directory domain. All domain controllers run WindowsServer 2008 R2. Auditing is configured to log changes made to the Managed By attribute on groupobjects in an organizational unit named OU1. You need to log changes made to the Description attribute on all group objects in OU1only. What should you do? A. Run auditpol.exe. B. Modify the auditing entry for OU1. C. Modify the auditing entry for the domain.

Microsoft 70-648 Exam

"A Composite Solution With Just One Click" - Certification Guaranteed 4

D. Create a new Group Policy object (GPO). Enable the Audit account management policy setting. Link the GPO to OU1.

Answer: B

Explanation:

Topic 3, Volume E

QUESTION NO: 7 Your network contains an Active Directory forest. All client computers run Windows 7. The networkcontains a high-volume enterprise certification authority (CA). You need to minimize the amount ofnetwork bandwidth required to validate a certificate. What should you do? A. Modify the settings of the delta certificate revocation list (CRL). B. Configure an Online Certification Status Protocol (OCSP) responder. C. Configure an LDAP publishing point for the certificate revocation list (CRL). D. Replicate the certificate revocation list (CRL) by using Distributed File System (DFS).

Answer: B

Explanation:

Topic 1, Volume D

QUESTION NO: 8 Your company has a main office and a branch office. The branch office has three servers that runa Server Core installation of Windows Server 2008 R2. The servers are named Server1, Server2,and Server3. You want to configure the Event Logs subscription on Server1 to collect events fromServer2 and Server3. You discover that you cannot create a subscription on Server1 from anothercomputer. You need to configure a subscription on Server1. Which two actions should you perform? (Each correct answer presents part of the solution.Choose two.) A. Run the wecutil cs subscription.xml command on Server1.

Microsoft 70-648 Exam

"A Composite Solution With Just One Click" - Certification Guaranteed 5

B. Run the wevtutil im subscription.xml command on Server1. C. Create an event collector subscription configuration file. Name the file subscription.xml. D. Create a custom view on Server1 by using Event Viewer. Export the custom view to a filenamedsubscription.xml.

Answer: A,C

Explanation:

Topic 4, Volume C

QUESTION NO: 9 Your network contains a DHCP server named DHCP1. You have a DHCP reservation for acomputer named Computer1. You add a DNS server option to the reservation. You need to ensure that Computer1 immediately receives the new option. What should you do? A. Run ipconfig.exe /renew. B. Run ipconfig.exe /registerdns. C. On DHCP1, recreate the reservation. D. On DHCP1, delete the active lease for the reservation.

Answer: A

Explanation:

Topic 3, Volume E

QUESTION NO: 10 Your company has a single Active Directory domain. The company has a main office and a branchoffice. Both the offices have domain controllers that run Active Directory-integrated DNS zones. Allclient computers are configured to use the local domain controllers for DNS resolution. Thedomain controllers at the branch office location are configured as Read-Only Domain Controllers(RODC). You change the IP address of an existing server named SRV2 in the main office. You need

Microsoft 70-648 Exam

"A Composite Solution With Just One Click" - Certification Guaranteed 6

the branch office DNS servers to reflect the change immediately. What should you do? A. Run the dnscmd /ZoneUpdateFromDs command on the branch office servers. B. Run the dnscmd /ZoneUpdateFromDs command on a domain controller in the main office. C. Change the domain controllers at the branch offices from RODCs to standard domaincontrollers. D. Decrease the Minimum (default) TTL option to 15 minutes on the Start of Authority (SOA)record for the zone.

Answer: A

Explanation:

Microsoft 70-648 Exam

"A Composite Solution With Just One Click" - Certification Guaranteed 7