Pass Your Microsoft 70-642 Exam Easy!

@japp
- It states: DC1 has a DHCP scope for the 10.10.10.0/24 network ID ... This means adress in the scope is: 10.10.10.0 till 10.10.10.255. (.0 = reserved and 255 is reserved (broadcast). Because the whole range is used you CANNOT extend it. Answer : modify the start adress is not correct. You can only extend the scope with an additional subnet.


Incorrect. As you said, "..scope 1 is 98% full with only 2 IP addresses remaining". My math is not the greatest, but I'm certain that if you have 2 IP addresses left, and it's 98% full, then the scope would be 100 addresses TOTAL. I am sure they gave us that information for a reason. Looks to me like there is plenty of room to extend the scope. :)

Your network contains an Active Directory domain named contoso.com. The domain contains two Active Directory sites named Site1 and Site2.

You have a domainbased Distributed File System (DFS) namespace named \contoso.compublic that has a single namespace server located in Site1.

You install another namespace server in Site2.

You need to verify that the client computers in Site2 use the new namespace server. You want to achieve this goal by using the minimum amount of administrative effort.

Which tool should you use?

ANswer shd be dfsutil

http://technet.microsoft.com/en-us/library/cc776211(v=ws.10).aspx
DFSUtil Examples
Example 1: Control a DFS Client's Ability to Link to Sites
Enabling the insite setting of a DFS server is useful when:

You don't want the DFS clients to connect outside the site.


You don't want the DFS client to connect to a site other than the site it is in, and hence avoid using expensive WAN links.


dfsutil /insite:\example.comdfsroot /enable

After using this command statement, clients will not get any referral for a replica outside the dfsroot site. This means that if the Replica sets in the client Site are down, the client will not do a failover to a Replica set in another site.

Disabling the insite setting of a DFS server is useful when:

You want to enable outside site referrals.


Note

If you want your DFS clients to be able to link to outside sites when no local server is available, and the DFS clients never seem to link outside the site, it may be because connectivity has been limited to an internal site using the /insiteenable setting. Disabling this setting will restore the ability of clients to link outside the site.

@ Jaap

Hi Jaap, thanks for explanation, that explanation for "Increase" make sense now, but I have just passed 3 hours ago, and thank god that question didn't pop up in the exam, I got some new questions. But some how I managed to to pass with 914 THANK YOU ALL FOR YOUR EFFORTS. As for me it's time to take some rest and forget everything I studid in this module..hehehe :) LOL

@mikhosamy

I already passed this exam but I will try to help you out.

- It states: DC1 has a DHCP scope for the 10.10.10.0/24 network ID ... This means adress in the scope is: 10.10.10.0 till 10.10.10.255. (.0 = reserved and 255 is reserved (broadcast). Because the whole range is used you CANNOT extend it. Answer : modify the start adress is not correct. You can only extend the scope with an additional subnet.

- Increase the clean up means in good English make it more/quicker cleanups. So instead of cleaning up 1 time in a hour INCREASE it to 2 or 4 times in a hour.

Please read: http://www.windowsnetworking.com/kbase/WindowsTips/Windows2003/AdminTips/Network/ConfiguringtheDHCPCleanupCycle.html

@ Donald Trump & elite and jaap

Regarding that question (DHCP) which I still can't see what's the best choice for it.

As far as you say "Donald" we should stick to the Decrease CLEAN UP INTERVAL, but in the choices it's INCREASE TIME INTERVAL, which still won't solve the problem
The three possible Choises for that questios are
=Modify the start address.
=Increase the database cleanup Interval.
=Reconcile the scope.
Modifiyig the start address for 10.10.10.0/24 is possible coz he didn't mention about the exclusion range and the start address just mentioning the scope does not mean whic Ip it starts with..i'm really confused
Reconsile the Scope does not make any sense.
For Increase the database cleanup Interval, it should be Decrease, so the most possible one I guess is Modify The Start Address..

it's Pretty Stupid question with very limited answers.>>>You are All Fired guys.. :-) LOL

@ elite and jaap

It says in the tech note that elite linked to, quote;
"When this occurs, consider the following possible solutions:

Use scope extension to expand the address range for the current scope.

Reduce the lease duration and decrease the cleanup interval. This can help to speed the reclaiming of expired scope IP addresses."

The key is it doesn't say do both. Which means that doing one of those actions is a solution that MS recommends.

Also, furthermore, is the fact that it doesn't say to reconcile the scope.

In fact, the page on scope reconciliation states that it is for resolving corrupt DB entries, and if it finds any discrepancies, it will create a temporary reservation for the IPs that it can't currently contact the host until the end of lease time expires.

So it won't cancel the leases of computers currently not connected to the network to allow to be reassigned, but the opposite and block new computers from being able to get those addresses.
http://technet.microsoft.com/en-us/library/dd183579(v=ws.10).aspx

P.S. you're fired

@Elite:

Please download magma's latest dump en look the question up.

It states: DC1 has a DHCP scope for the 10.10.10.0/24 network ID ...
No way that you can change the start adres without recreating a new or modified scope.../24 means adress 10.0.0.1 till 10.0.0.255...

This question regarding DHCP being almost full warning error message.

this link here. http://technet.microsoft.com/en-us/library/cc774806(v=ws.10).aspx

explains it how ever it states something about decreasing the cleanup interval is this an error?

Possibilities of this are either.

Increase the database cleanup interval.
Modify the start address.
magmas dump states that its Reconcile scope?

Can anyone please shed some light on this one as this question is puzzling my mind.

Thanks

@jaap

Well done, didn't doubt you would pass for a minute, looks like you are researching the topics too and not just memorizing dumps.

Well done!

YOU'RE FIRED!!!

I passed today..

I remember one question :

What port is used for secure POP3.
It seems that it is 995. I googled it up..
Stupid question anyway ..;-)

Thanks Donald Trump/jaap,
gonna seat for the exam tomorrow..

@Hades

If you install the role as a non-domain admin account, the Computer does not get added to the RAS and IAS server group.
http://technet.microsoft.com/en-us/library/cc770798(WS.10)

See next link for the function of the group:
http://ss64.com/nt/syntax-security_groups.html

@sammy:

11.On the Managing Multiple Remote Access Servers page, select whether you want to use a centralized RADIUS server for authentication of your network clients. If you select No, then RRAS uses its local account database or, if the RRAS server is joined to an Active Directory domain, the RRAS server uses the domain account database. To use Active Directory Domain Services (AD DS), you must join the RRAS server to a domain, and then add the computer account of this server to the RAS and IAS Servers security group in the domain of which this server is a member. The domain administrator can add the computer account to the RAS and IAS Servers security group by using Active Directory Users and Computers or by using the netsh ras add registeredserver command.

I think B is the correct answer.
To authenticate against AD you need to be memeber of above groups.
To install RRAS you only need Local Admin rights not domain admin rights.

Please read: http://technet.microsoft.com/en-us/library/dd458983.aspx
and http://technet.microsoft.com/en-us/library/cc754878.aspx

Hy, took the exam today with 890, some new questions from those 10 new, but also some old questions with diferent answers.
If you study the books carefully and pay attention to the question it's a pass.
Good luck to everyone and thank all for the dumps.

Hi Jaap/Magma,
Wht is the correct answer for this question?
Anonymous and Magma dump found with different answer?
Anonymous Answer = B
Magma Answer = C
0x000 Answer =C

Your network contains an Active Directory domain named contoso.com. An administrator named Admin1
plans to install the Routing and Remote Access service (RRAS) role service on a server named Server1.
Admin1s user account is not a member of the Domain Admins group. You need to ensure that Server1 can
authenticate users from Active Directory by using Windows authentication. What should you do?
A. Install the Active Directory Lightweight Directory Services (AD LDS) role on Server1.
B. Add the computer account for Server1 to the RAS and IAS Servers group.
C. Install the Network Policy Server (NPS) role service on a domain controller.
D. Add the computer account for Server1 to the Windows Authorization Access Group.

@Rich:

For Exam K Q20:
Svr1 has RRAS, Static RRAS filters only allow PPTP i/c.
You install IIS on Svr1.
Question asks for minimum open ports to configure on Svr1 to allow HTTP access.
Given answers are:
1. The inbound connection to Svr1 TCP port 80 = ok
2. An outbound connection from Svr1 TCP(established) on Port 80 =?
The incoming connection is going to provide a random and not well know source port isn't it?
Plus RRAS filters are not stateful.
There is another answer which defines an outbound connection from Svr1 TCP on Port= any. is this not the correct option?

Yes it is: keyword is (established). When you open een pptp tunnel on port 80 the traffic coming back from the web server is not going back on an other port but on port 80 (established = the current connection).

@Rich:

exam F Q18: server1 and server2 are namespace servers for contoso.comdfs1 namespace. we need to ensure users only connect to server1 if server2 unavailable.
given answer modify advanced settings on server2dfs1.
I'd say it should be to modify the advanced properties of server1dfs1 namespace servers entry, not server2dfs1 since you want server1 to be the last among targets - do you agree?
No I do not agree: the keyword is only.
You have to make shure they connect always to server1 and only of server1 is down connect to server2. To make shure they always connect to server 1 you have to lower the priority of server2: make server 2 last ...

@Rich:

you have an application server that runs Window Server 2008 R2. You need to configure Windows Firewall to allow Communications on the server as shown in the following table:
Name Port Direction
App1.exe 3402 Outbound
App1.exe 3433 Inbound
App2.exe 3400 Outbound
App2.exe 3401 Outbound
What is the minimum number of firewall rules you should create?"
Given answer=2

Doesn't Windows firewall allow outbound traffic by default?
Shouldn't the answer be 1 rule? (the inbound program rule on port 3433 for App1)

I have commented on this issue in an other thread and I agree with you that the answer is 1 rule since default outbound rules are allowed.
The issue with this question is : are they (microsoft) assume that you are creating 2 app rules anyway (because of app1 and app2). In my opinion there is no need to to create an app2.exe rule.

Jaap - previous post filtered out my backslashes on namespaces!!!! but I guess u can figure out what I mean
Cheers
Rich

Hi Jaap - Would appreciate your comments on the following:

exam F Q18: server1 and server2 are namespace servers for \contoso.comdfs1 namespace. we need to ensure users only connect to server1 if server2 unavailable.
given answer modify advanced settings on \server2dfs1.
I'd say it should be to modify the advanced properties of server1dfs1 namespace servers entry, not server2dfs1 since you want server1 to be the last among targets - do you agree?

For Exam K Q20:
Svr1 has RRAS, Static RRAS filters only allow PPTP i/c.
You install IIS on Svr1.
Question asks for minimum open ports to configure on Svr1 to allow HTTP access.
Given answers are:
1. The inbound connection to Svr1 TCP port 80 = ok
2. An outbound connection from Svr1 TCP(established) on Port 80 =?
The incoming connection is going to provide a random and not well know source port isn't it?
Plus RRAS filters are not stateful.
There is another answer which defines an outbound connection from Svr1 TCP on Port= any. is this not the correct option?

Also:

"you have an application server that runs Window Server 2008 R2. You need to configure Windows Firewall to allow Communications on the server as shown in the following table:
Name Port Direction
App1.exe 3402 Outbound
App1.exe 3433 Inbound
App2.exe 3400 Outbound
App2.exe 3401 Outbound
What is the minimum number of firewall rules you should create?"
Given answer=2

Doesn't Windows firewall allow outbound traffic by default?
Shouldn't the answer be 1 rule? (the inbound program rule on port 3433 for App1)
Would appreciate your help.
Regards
Rich

@cypher :

The answer is A Create an application directory partition.
By creating an application directory you actually put the DNS into the Active directory schema. This is by default encrypted.
Please read: http://technet.microsoft.com/en-us/library/cc754292

@GrandFather Od:

I partialy agree. The question is like a lot of questions veru vague.
A complete solution is including a restart of the DNS service. In this case both answers are not complete. They mis the restart.
But I think your explanation is better.So answer: regedit and dnscmd

Hello Jaap/Magma,
Can you share what is the correct answer for this dump. Both question appear in Microsoft.Braindump 2012-08-19 by Anonymous.329.q EXAM E Q24 and also in this dump.with different answer.

Anonymous dump answer is A
Magma dump answer is B

Which one is correct?

Thanks.


Your network contains an Active Directory domain named fabrikam.com. The domain contains five domain controllers named DC1, DC2, DC3, DC4, and DC5. All domain controllers run Windows Server 2008 R2 and have the DNS server role installed. On DC5, you create a new Active Directory-integrated DNS zone named adatum.com. You need to ensure that the adatum.com DNS zone is only replicated to DC5 and DC2. The solution must ensure that all zone replication traffic is encrypted. What should you do first?

A. Create an application directory partition.
B. Create a primary zone.
C. Modify the zone transfer settings.
D. Change the zone replication scope.

Your company has an Active Directory forest. The corporate network uses DHCP to configure client
computer IP addresses.
The DHCP server has a DHCP client reservation for a portable computer named WKS1. You install a
second DHCP server on the network.
You need to ensure that WKS1 receives the DHCP reservation from the DHCP service.
What should you do?

A. Run the ipconfig /renew command on WKS1.
B. Run the netsh add helper command on WKS1.
C.Add the DHCP reservation for WKS1 to the second DHCP server.
D. Add both DHCP servers to the RAS and IAS Servers group in the Active Directory domain.

Dump says answer =C but wouldn't the answer be A since you are ensuring WSK1 RECEIVES the DHCP reservation

@SK0228: & JAAP

Your network contains a DNS server that runs Windows Server 2008 R2 Service Pack 1 (SP1).

You need to prevent the DNS server from accepting updates for cached resource records until the time-to-live (TTL) value of the cached resource records expires.

Which tool should you use? (Each correct answer presents a complete solution. Choose two)

A. Server Manager
B. Netsh
C. DNS Manager
D. Regedit
E. Dnscmd
F. Dns.

The question is about finding two complete ways of configuring this setting.
"(Each correct answer presents a complete solution. Choose two)"
You can configure it by two metods, afterwards dns service needs a restart.

http://technet.microsoft.com/en-us/library/ee649148(v=ws.10).aspx

Answer
D. Regedit
E. Dnscmd

hi ALL, I have seen this question so many time in different dumps but with different answer can choose not sure which answer is the best.

Your network contains an Active Directory domain named contoso.com. The domain contains two Active Directory sites named Site1 and Site2.

You have a domainbased Distributed File System (DFS) namespace named contoso.compublic that has a single namespace server located in Site1.

You install another namespace server in Site2.

You need to verify that the client computers in Site2 use the new namespace server. You want to achieve this goal by using the minimum amount of administrative effort.

Which tool should you use?

**First pair of groups answer can choice**

A. Share and Storage Management
B. DFS Management
C. Windows Explorer
D. Services for Network File System (NFS)

** Second pair of group**

A. Share and Storage Management
B. DfsrAdmin
C. Dfscmd
D. Dfsrdiag.

** Third pair of group**

A. DfsrAdmin
B. Dfsutil
C. Dfsrdiag
D. Dfscmd.

** Fourth pair of Group**

A. Services for Network File System (NFS)
B. Dfsrdiag
C. DFS Management
D. Share and Storage Management

Hi Jaap. One more question I need your help.

Your network contains an Active Directory domain. The domain contains several VPN servers that run Windows Server 2008 R2. You need to log the time and the data users establish VPN connections to the network. The log must be stored in a central location.

What should you configure on the VPN servers?

A. the windows Accounting accounting provider
B. connection request policies.
C. health policies.
D. the RADIUS Accounting accounting provider.

Thank you for your help. jaap

@SK0228:

Your network contains a DNS server that runs Windows Server 2008 R2 Service Pack 1 (SP1).

You need to prevent the DNS server from accepting updates for cached resource records until the time-to-live (TTL) value of the cached resource records expires.

Which tool should you use? (Each correct answer presents a complete solution. Choose two)

A. Server Manager
B. Netsh
C. DNS Manager
D. Regedit
E. Dnscmd
F. Dns.

This is called cach locking.
Answer D Regedit
Answer C Dns manager = to restart DNS

Please read: http://technet.microsoft.com/en-us/library/ee683892(v=ws.10).aspx

@sk0228:

The answer is: B. Internet Key Exchange version 2 (IKEv2)

Please read: http://technet.microsoft.com/nl-nl/library/dd469724

one more new question:

Your network contains servers that run Windows Server 2008 R2. All client computer run Windows 7.

The network contains a VPN server that has the Routing and Remote Access service (RRAS) role service installed.

You need to prevent VPN Reconnect from reestablishing the connection when a client computer disconnects from the network for more than one minute.

Which VPN server properties should you modify?

A. IP version 4 (IPv4)
B. Internet Key Exchange version 2 (IKEv2)
C. Point-to-Point (PPP)
D. IP version 6 (IPv6)

anyone can help me give me answer:

Your network contains a DNS server that runs Windows Server 2008 R2 Service Pack 1 (SP1).

You need to prevent the DNS server from accepting updates for cached resource records until the time-to-live (TTL) value of the cached resource records expires.

Which tool should you use? (Each correct answer presents a complete solution. Choose two)

A. Server Manager
B. Netsh
C. DNS Manager
D. Regedit
E. Dnscmd
F. Dns.

@jaap Thanks for the corrections. I will confirm your answers and change them on my test. Questions from exam O are the new ones so the corrections will help everyone.

@Magma:

Exam O question 9:

Your network Contains a server named Server1 that runs Windows Server 2008 R2 Service Pack 1. (SP1).

You log on to Server1 by using an account named Admin1, and then you open Event Viewer as shown In the exhibit. (Click the Exhibit button.)

You need to ensure that you can view all of the events in the Security log.

What should you do?

Your answer: From a command prompt, run net localgroup /add "Event log Readers" Admin1. = Wrong
I made a cut and paste error: Correct answer: Clear filter...

@ magma: Some more:

Exam O question 9:

Your network Contains a server named Server1 that runs Windows Server 2008 R2 Service Pack 1. (SP1).

You log on to Server1 by using an account named Admin1, and then you open Event Viewer as shown In the exhibit. (Click the Exhibit button.)

You need to ensure that you can view all of the events in the Security log.

What should you do?

Your answer: From a command prompt, run net localgroup /add "Event log Readers" Admin1. = Wrong

I checked is on my system and the answer is: From Event Viewer, right-Click Security, and then click Refresh.
Reason: I emulated the screen by applying a filter. It looks exactly the same. If you have no persmission you have not the ability to apply a filter.

Exam O question 10:

Note: This question is part of a series of questions that use the same set of answer choices. Each answer Choice may be used once,
more than once, or not at all.

Your network contains a server named DC1 that has the DHCP Server server role installed.

DC1 has a DHCP scope for the 10.10.10.0/24 network ID.

You discover the following warning message in the Event Iog on DC1: "Scope, Scope1, is 98 percent full with only two IP addresses remaining."

You need to ensure that DC1 has enough IP addresses to assign to clients. The solution must not cause any IP conflicts.

What should you do?

Your answer: Reconcile the scope. = Wrong or only a part of the answer

Correct answer: Increase the database cleanup Interval.
Reconcile is part of rebuilding the scope in case of corruption. The example is not corruption but out of ip adresses.
Please read: http://www.windowsnetworking.com/kbase/WindowsTips/Windows2003/AdminTips/Network/ConfiguringtheDHCPCleanupCycle.html

@magma:

Exam O Question 2:

Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and chiId.contoso.com.

The contoso.contoso.com domain contains a server named Server1. Server1 has the Network Policy and Access Services (NPAS) server role installed.

You need to ensure that Server1 can read the diaI-in properties of user accounts In the chiId.contoso.com domain.

Which tool should you use?

Answer is: Active directory Users and Computers.

But an Exam O question 6:

You network contains an Active Directory forest named Contoso.com. The forest contains two domains named Contoso.com and child.contoso.com.

The Contoso.com domain contains a server named Server1. Server1 has the Network Policy and Access Services (NPAS) server role instead.

You need to ensure that Server1 can read the dial-in properties of user accounts in the child.contoso.com domain.

Which tool should you use?

You give the answer: Useraccountcontrolsettings = WRONG

Exam O Question 4:

Your network contains an Active Directory domain named contoso.com. The domain contains two Active Directory sites named Site1 and Site2.

You have a domainbased Distributed File System (DFS) namespace named \contoso.compublic that has a single namespace server located in Site1.

You install another namespace server in Site2.

You need to verify that the client computers in Site2 use the new namespace server. You want to achieve this goal by using the minimum amount of administrative effort.

Which tool should you use?

Your answer: Dfsrdiag = WRONG dfrsdiag is for replication only.
Good answer = DFSutil

Look it up at : http://technet.microsoft.com/nl-nl/library/cc776211(v=ws.10).aspx

@jaap What 5 answers are wrong jaap. Because test A's questions and answers from Anonymous are exactly identical to this dump. If you can't give me examples everyone who reads this should disregard your comment.

Even double and similar questions have different answers!!!!
I stick with Anonymous files.

I did 5 questions from this file ...5 wrong answers...very bad dump.

This .vce is a combination of Magican and 0x000's latest dumps. Magican's vce contained Maxbox's latest Q & A and I gathered them all into Exam O so some of the questions are repeated.

How valid is this because there are no comments on this at all. Everyone is complaining they are failing at the moment. Everyone is scoring 600-750