Page 1

TestKing Microsoft 70-649 Exam Questions & Answers

70-649 TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist Exam number/code: 70-649 Exam name: TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist Questions & Answers: 87 Q&A Related Certifications: MCITP, MCTS, MCSE 2008 Hundreds of people each day pass their IT certification exams with Testking guaranteed certification resources and training kits. Use the Microsoft 70-649 questions and answers to practice for your next Microsoft certification exam. If you don't pass – you don't pay! Testking has the first and only 100% product satisfaction and exam passing guarantee. Advanced practice questions and answers help drive the information into your routine thinking and surpass 70-649 brain dumps in retention and skill building. Microsoft 70-649 exam answers and practice questions can be used at home or office, installable on up to two PCs, or print the questions and answers to take with you and train on-the-go! Microsoft 70-649 preparation tools are the perfect fit for any Microsoft certification candidate with 70-649 training materials for every level of entry. Exam Engine Features Control your IT training process by customizing your practice certification questions and answers. The fastest and best way to train. * * * * * *

Truly interactive practice tests Create and take notes on any question Retake tests until you're satisfied YOU select the areas of the exam to cover Filter questions for a new practice test experience each time Re-visit difficult questions


TestKing Microsoft 70-649 Exam Questions & Answers

Exam: 70-649 Certification Questions & Answers

Question 1: You have recently joined Maya Corporation as a network administrator. The previous network administrator was in the process of deploying Windows Server 2008 and was using IPv6 in the network. He was designing the network in such a way that each department in the organization would have a separate subnetted address prefix. He had assigned subnetted address prefixes to four departments and one of the departments has the subnetted address prefix as 3FFF:2FFA:3B:AC00/55. There is no documentation which would tell you about the number of subnetted address prefixes that can be created. While looking for information, you find that the global address prefix assigned to the organization is 3FFF:2FFA:3B:A000/52. How many more subnetted address prefixes can be assigned to the remaining departments? A. 6 B. 4 C. 3 D. 2 Answer: B

Question 2: You work as the enterprise administrator at TestKing.com. TestKing.com has a domain named testking.com. The TestKing.com network servers run Microsoft Windows Server 2008 and the client computers run Microsoft Windows Vista. TestKing.com has three computers configured as follows: TESTKING-SR01 - configured as a domain controller for the domain. TESTKING-SR02 - configured as a domain controller for the domain. TESTKING-SR03 - configured as a domain controller for the domain. TestKing.com has a Marketing division which downloads files and updates from the Internet. During the course of the day the Marketing division members informs you TESTKING-SR01 and TESTKING-SR02 consumes high processor time and memory between 1:00 P.M. and 3:00 P.M. How would you ensure Performance Logs and Alerts are scheduled on TESTKING-SR01 and TESTKING-SR02 at 1:00 P.M.? A. By using the Reliability and Performance Monitor utility. B. By using the Microsoft Component Services snap-in. C. By using the Event Viewer. D. By using the Task Scheduler. Answer: A Explanation: To schedule the performance logs and alerts on TESTKING-SR01 and TESTKING-SR02 to automatically start at 12 P.M, you should use the Reliability and Performance Monitor. You can use the performance logs and alerts to set the new log for memory and processor to be scheduled at 12 P.M. You can access the Reliability and Performance Monitor through Microsoft Management Console (MMC) snap-in. In Windows Server 2008, the Windows Reliability and Performance Monitor provides functionalities combine all previous standalone tools, such as Performance logs and alerts, server performance advisor and system monitor. It also provides a graphical interface which can be used for customizing performance data collection and event trace sessions.


TestKing Microsoft 70-649 Exam Questions & Answers

Question 3: You work as the enterprise administrator at TestKing.com. TestKing.com has a domain named testking.com. The TestKing.com network servers run Microsoft Windows Server 2008 and the client computers run Microsoft Windows Vista. TestKing.com has virtual machines configurated on a computer named TESTKING-SR01 configured to host Microsoft Hyper-V. How would you configure the virtual machines for restoring to the original state in the event of a system failure? A. By creating a snapshot of the virtual machines using Virtual Services Manager. B. By using System Restore to create restore points to restore to. C. By installing and configuring third party backup software on Virtual machine. D. By using an Automated System Recovery (ASR) disk on the virtual machine when the application fails. Answer: A Explanation: To configure the virtual machines to revert back to their original state in the event of system failure, you should create a snapshot of the virtual machines through Virtual services manager. You can revert the VM back to its original state by using the snapshot you created.

Question 4: You are employed as an enterprise administrator at TestKing.com. The TestKing.com has a domain named testking.com. All servers on the domain run Microsoft Windows Server 2008 and all client computers run Microsoft Windows Vista. TestKing.com has a computer named TESTKING-SR20 that hosts the Internet Information Services (IIS) Web Server role though being configured not to utilize the Windows Performance and Reliability Monitor. During the course of the day TestKing.com instructs you to install and configure Reliability Monitor. How can you ensure TESTKING-SR20 collects reliability information keeping the system stability share current? A. By configuring the Remote Access Auto Connection Manager service to start automatically on the TESTKING-SR20. B. By configuring the Net Logon service to start automatically on the TESTKING-SR20. C. By configuring the Task scheduler service to start automatically on the TESTKING-SR20. D. By configuring the Error Reporting Services service to start automatically on the TESTKING-SR20. Answer: C Explanation: To configure the TESTKING-SR20 to collect the reliability monitor data, you need to configure the Task scheduler service to start automatically. Reliability Monitor uses data provided by the RACAgent scheduled task, a pre-defined task that runs by default on a new installation of Windows Vista. The seamless integration between the Task Scheduler user interface and the Event Viewer allows an event-triggered task to be created with just five clicks. In addition to events, the Task Scheduler in Windows Vista / Server 2008 supports a number of other new types of triggers, including triggers that launch tasks at machine idle, startup, or logon. Because you need Task Scheduler to collect reliability monitor data, you need to you need to configure the Task scheduler service to start automatically.


TestKing Microsoft 70-649 Exam Questions & Answers Reference: Network Monitor 3.1 OneClick ... now what? / Task Scheduler Changes in Windows Vista and Windows Server 2008 - Part One http://blogs.technet.com/askperf/ Reference: What allows the Reliability Monitor to display data? http://www.petri.co.il/reliability_monitor_windows_vista.htm

Question 5: You work as the enterprise administrator at TestKing.com. TestKing.com has a domain named testking.com. The TestKing.com network servers run Microsoft Windows Server 2008 and the client computers run Microsoft Windows Vista. TestKing.com has two computers configured as follows: TESTKING-SR01 - configured as a domain File server. TESTKING-SR02 - configured as a domain File server. TestKing.com has recently deployed and configured an iSCSI Storage Area Network (SAN) for TESTKING-SR01 and TESTKING-SR02 for storage purposes. How would you configure the iSCSI san to ensure the most secure security solution is used for traffic related to the Storage Area Network? A. By implementing IPSec security on the properties of iSCSI Initiator. By configuring Windows Firewall to use inbound and outbound rules. B. By using Extensible Authentication Protocol Transport Layer Security (EAP TLS) authentication in iSCSI Initiator Properties. C. By implementing Kerberos v5 authentication on the properties of iSCSI Initiator. By configuring Windows Defender to use inbound and outbound rules. D. By using Microsoft Challenge Handshake Authentication Protocol (MS-CHAPv2) authentication in iSCSI Initiator Properties. Answer: A Explanation: In order to implement the highest security available for communication to and from an iSCSI SAN, you need to implement IPSec security. You can access the IPSec security by opening the iSCSI Initiator Properties. After that you need to set inbound and outbound rules by using Windows Firewall.

Question 6: You are configuring a Terminal Services Gateway server for your organization. The server will provide remote users with access to select internal file resources on your network. All communications between the server and Terminal Services clients will be encrypted. Communication must pass through firewalls both at the client end and at the server end of the connection. You need to configure support for encrypted communication. You are using a certificate from a trusted third-party Certificate Authority (CA) for this purpose. You should not install any components that are not required by the solution and should keep network changes to a minimum. What should you do? A. Deploy a Network Address Translation (NAT) server and install the certificate on the NAT server. B. Install the certificate on the Terminal Services Gateway server. C. Install the certificate on the firewalls at each end of the connection. D. Deploy a Network Policy Server (NPS) and install the certificate on the NPS server. Answer: B


TestKing Microsoft 70-649 Exam Questions & Answers

Question 7: You work as the enterprise administrator at TestKing.com. TestKing.com has a domain named testking.com. The TestKing.com network servers run Microsoft Windows Server 2008 and the client computers run Microsoft Windows Vista. TestKing.com has a Routing and Remote Access computer named TESTKING-SR01 running Network Access Protection. How should you configure TESTKING-SR01 to ensure Point-to-Point (PP) authentication is used? A. By using the Microsoft Challenge Handshake Authentication Protocol (MS-CHAP) protocol. B. By using the Secure Shell (SSH) protocol. C. By using the Extensible Authentication Protocol (EAP) protocol. D. By using the Kerberos v5 protocol. Answer: D Explanation: To configure the Point-to-Point Protocol (PPP) authentication method on TESTKING-SR01, you need to configure Extensible Authentication Protocol (EAP) authentication method. Microsoft Windows uses EAP to authenticate network access for Point-to-Point Protocol (PPP) connections. EAP was designed as an extension to PPP to be able to use newer authentication methods such as one-time passwords, smart cards, or biometric techniques. Reference: Making sense of remote access protocols in Windows / DIAL-UP AUTHENTICATION http://articles.techrepublic.com.com/5100-10878_11-1058239.html

Question 8: You work as the enterprise administrator at TestKing.com. TestKing.com has a domain named testking.com. The TestKing.com network servers run Microsoft Windows Server 2008 and the client computers run Microsoft Windows Vista. TestKing.com has a computer named TESTKING-SR11 configured to run Internet Information Services (IIS) Web server role hosting confidential company information. TestKing.com has a Marketing division accessing the confidential information which loads excessively slow. During the course of the maintenance you discovered TESTKING-SR11 uses a high percentage of processor time. How would you gather information regarding the processor utilizing high percentages of processor time? A. By using Windows Reliability and Performance Monitor to check percentage of processor capacity. B. By using a counter log to track the processor usage. C. By using the Performance Logs and Alerts. D. By checking the security log for Performance events. E. By checking the error log for performance events. Answer: A Explanation: To gather additional data to diagnose the cause of the problem, you need to use the Resource View in Windows Reliability and Performance Monitor to see the percentage of processor capacity used by each application. The Resource View window of Windows Reliability and Performance Monitor provides a real-time graphical overview of CPU, disk, network, and memory usage. By expanding each


TestKing Microsoft 70-649 Exam Questions & Answers of these monitored elements, system administrators can identify which processes are using which resources. In previous versions of Windows, this real-time process-specific data was only available in limited form in Task Manager Reference: Windows Reliability and Performance Monitor http://technet.microsoft.com/en-us/library/cc755081.aspx

Question 9: You are the administrator for a nationwide company with over 5,000 employees. Your main office has approximately 4,500 employees, while the company's ten remote offices have 50 users residing in each. You are often unaware of the physical security in place at these offices. However, since there is a fairly sizable amount of users at each office, you must provide them with directory services. What is the BEST option to use for directory services when security is often an unknown? A. Lightweight Directory Services B. Read-only domain controllers C. Active Directory Federation Services D. Active Director Rights Management Services Answer: B

Question 10: You are the administrator for a nationwide company with over 5,000 employees. Your director tells you your company has just signed into a partnership with another organization, and that you will be responsible for ensuring that authentication can occur between both organizations without the need for additional sign-on accounts. Your boss mentions that the partner has a variety of Directory Services installed throughout their organizations. Which of the following can Active Directory Federation Services NOT connect to? A. Lightweight Directory Services B. Windows Server 2003 Directory Services C. Windows Server 2003 R2 Directory Services D. All of the above Answer: B

Question 11: You work as the enterprise administrator at TestKing.com. TestKing.com has a domain named testking.com. The TestKing.com network servers run Microsoft Windows Server 2008 and the client computers run Microsoft Windows Vista. TestKing.com has a computer named TESTKING-SR01 configured to hosts the Web Server role and the secure test.com web site. The TestKing.com Marketing division network users has self-signed certificates to access the secure test.com web site. How would you configure TESTKING-SR01 to ensure error messages are not displayed when accessing the secured test.com web site? A. By having the anonymous authentication module disabled. B. By making changes to the Site web.config file. C. By using the Certificates console to access the certificate. By exporting the self-signed certificate to a Test.com.cer file and linking the Test.com.cer file via the domain.


TestKing Microsoft 70-649 Exam Questions & Answers D. By using Forms Authentication with the default settings. Answer: C Explanation: You need to the self-signed certificate to a Test.com.cer file. This will allow the employees to connect to Test.com. The client computers that make use of the website should then have the Test.com.cer file installed. The users account will be authenticated through the certificate. The . cer file is an internet security certificate extension which confirms the authenticity of a website installed on a server.

Question 12: You work as the enterprise administrator at TestKing.com. TestKing.com has a domain named testking.com. The TestKing.com network servers run Microsoft Windows Server 2008 and the client computers run Microsoft Windows Vista. TestKing.com has a computer named TESTKING-SR25 configured to host the Internet Information Services (IIS) Web server role and a single web site. TestKing.com has a Marketing division which accesses the Web site from the Internet. How would you configure TESTKING-SR25 when using port 80 to host multiple Web sites using the same IP address? A. By configuring and using a unique host header for each of the multiple websites. B. By configuring and using a Virtual Directory with and editing the Host file with entries for the web sites. C. By configuring and using a Virtual Directory with a unique IP address for each of the multiple websites. D. By configuring and using a Virtual Directory with a unique port for each of the multiple websites. Answer: A Explanation: The best option is to set up a unique host header for each website. This will allow you to specify which name each Web-site would respond to. Incorrect Answers: B: You should not edit the Hosts file. It is used for name resolution which only works for TESTKING-SR12. C: You should not consider set up a unique IP address for each website. The scenario states that a single IP address be used. D: You should not set up a unique port for each website. The scenario states that only port 80 will be used.

Question 13: You are employed as the network administrator at TestKing.com. The TestKing.com network has a domain named testking.com. All servers on the domain run Windows Server 2008 and all client computers run Windows Vista. TestKing.com makes use of two WSUS servers named TESTKING-SR01 and TESTKING-SR02 configured in a WSUS hierarchy. On TESTKING-SR01, how can you make sure that updates can be received from TESTKING-SR02? A. By configuring TESTKING-SR01 in replica mode. B. By creating a new computer group for TESTKING-SR01. C. By opening Control Panel from the Start Menu and configuring Windows Update Settings on TESTKING-SR01 in the domain group policy.


TestKing Microsoft 70-649 Exam Questions & Answers D. By opening Control Panel from the Start Menu and configuring Windows Update Settings on TESTKING-SR01 in the local group policy. Answer: A Explanation: In order to configure WSUS on TESTKING-SR01 so it can receive updates from TESTKINGSR02, your first step should be to link the servers by configuring TESTKING-SR01 as downstream server and TESTKING-SR02 as upstream server. When you link WSUS servers together, there is an upstream WSUS server and a downstream WSUS server. Because an upstream WSUS server shares updates, you need to configure and TESTKINGSR02 as upstream server. There are two ways to link WSUS servers together, Autonomous mode and Replica mode. So you can configure TESTKING-SR01 in Replica mode. Reference: Choose a Type of WSUS Deployment/ WSUS server hierarchies http://technet2.microsoft.com/windowsserver/en/library/12b665bc-07fa-4a4e-aed8f970efe80c4c1033.mspx?mfr=true

Question 14: When installing the very first domain controller in a new forest, which one of the following must be installed during the Active Directory installation? A. DHCP B. DNS C. WINS D. Global Catalog E. RODC Answer: D

Question 15: You work as an enterprise administrator at TestKing.com. All servers on the domain run Microsoft Windows Server 2008 and all client computers run Microsoft Windows Vista. TestKing.com currently updates and maintains a computer named TESTKING-SR20 running WSUS. During the course of the day you receive instruction from TestKing.com to ensure the domain servers receive updates from the local WSUS server TESTKING-SR20. How should you ensure the domain servers use the local WSUS server TESTKING-SR20 for updates? A. By opening Control Panel from the Start Menu and configuring Windows Update settings on the domain servers. B. By opening Control Panel from the Start Menu and configuring Windows Update Settings on the domain servers using the local group policy. C. By configuring TESTKING-SR20 as a Proxy server and executing the wuauclt.exe command on the domain servers. D. By opening Control Panel from the Start Menu and configuring Windows Update Settings on the domain servers using the domain group policy. Answer: B Explanation: You need to configure the Windows Update Settings on each server by using the local group policy to receive updates from TESTKING-SR20. Microsoft suggests the use of Group Policy for setting up computers and WSUS in clients. Incorrect Answers:


TestKing Microsoft 70-649 Exam Questions & Answers A: To configure the Windows Update Settings on all the servers would be time consuming. C: Running these commands will force the update detection and reauthorization respectively and therefore cannot be used for configuration.Reference: What does wuauclt.exe /detectnow dohttp://www.wsus.info/forums/lofiversion/index.php?t6505.htmlReference: Adding Computers to WSUS 3.0 SP1 (Windows Server 2008)http://www.geekzone.co.nz/chakkaradeep/4564 D: To configure the Windows Update Settings on all the servers would be time consuming.

Related 70-649 Exams: 70-643

70-642

70-640

Popular Certification Exams: 646-573 642-176 000-204

1T6-222 920-468 MB2-631

1Y0-222 646-562 UM0-100

1K0-002 BR0-002 NS0-310

000-851 642-382 000-M23

CCA XP

Altiris

Solutions Developer

MCAT

Computer Associates

SeeBeyond

Hot Certifications: Intel

ENS

Popular Certification Providers: Tibco

IISFA

70-649  

Truly interactive practice tests Create and take notes on any question Retake tests until you're satisfied YOU select the areas of the exam...

Read more
Read more
Similar to
Popular now
Just for you