070-648 試験問題を無料オンラインアクセス

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2008 R2. The functional level of the domain is Windows Server 2008 R2. The functional level of the forest is Windows Server 2008.
You have a member server named Server1 that runs Windows Server 2008.
You need to ensure that you can add Server1 to contoso.com as a domain controller.
What should you run before you promote Server1?

• A.Set-ADDomainMode -Identity contoso.com -DomainMode Windows2008Domain
• B.dcpromo.exe /CreateDCAccount
• C.Set-ADForestMode -Identity contoso.com -ForestMode Windows2008R2Forest
• D.dcpromo.exe /ReplicaOrNewDomain:replica

Your network contains a domain-based namespace named DFS1. DFS1 has Windows 2008 Server mode
enabled.
You need to ensure that only files and folders in DFS1 that users have permissions to access are displayed.
What should you do?

• A.Modify the discretionary access control list.
• B.Disable referrals.
• C.Enable Access-Based Enumeration (ABE).
• D.Modify the system access control list.

Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates.
You need to implement key archival.
What should you do?

• A.Configure the certificate for automatic enrollment for the computers that store encrypted files.
• B.Install an Enterprise Subordinate CA and issue a user certificate to users of the encrypted files.
• C.Archive the private key on the server.
• D.Apply the Hisecdc security template to the domain controllers.

You deploy Network Access Protection (NAP) on your network.
An administrator configures a network policy as shown in the exhibit. (Click the Exhibit button.)
You discover that noncompliant client computers cannot access the remediation network.
You need to configure the network policy to ensure that noncompliant client computers can access the
remediation network.
What should you do?
Exhibit:

• A.In the Type of network access server list, click HCAP Server.
• B.In Access Permission, select the Grant access. Grant access if the connection request matches this policy option button.
• C.In Access Permission, select the Ignore user account dial-in properties check box.
• D.In the Type of network access server list, click Health Registration Authority,

You have a Windows Server 2008 R2 computer that has an IP address of 172.16.45.9/21. The server is configured to use IPv6 addressing.
You need to test IPv6 communication to a server that has an IP address of 172.16.40.18/21.
What should you do from a command prompt?

• A.Type ping ::9.45.16.172.
• B.Type ping 172.16.45.9::
• C.Type ping followed by the Site-local address of the server.
• D.Type ping followed by the Link-local address of the server.