070-649 試験問題を無料オンラインアクセス

Your network contains an Active Directory domain named Contoso.com. Contoso.com
contains an enterprise certification authority (CA) named CA1.
You enable Secure Socket Tunneling Protocol (SSTP) on a server named Server1.
A user named User1 attempts to establish an SSTP connection to Server1 and receives
the following error message: "Error 0x80092013: The revocation function was unable to
check revocation because the revocation server was offline."
You verify that all certificates services are online.
You need to ensure that User1 can connect to Server1 by using SSTP.
What should you do first?

• A.Configure a pre-shared key for IPSec on User1's computer.
• B.Configure User1 for certificate auto enrollment.
• C.Publish the certificate revocation list distribution point (CDP) to a location that is accessible from the Internet.
• D.Add a certificate to Server1 that contains Server1.contoso.com as a Subject Alternative Name (SAN).

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Remote Desktop Gateway (RD Gateway) role service installed.
You add the Domain Users group to a connection authorization policy named TS_CAP_01.
You need to ensure that only client computers that have Windows Firewall enabled can connect to Remote Desktop resources through the RD Gateway.
What should you do?

• A.From the Network Policy Server console, modify the properties of the TS GATEWAY AUTHORIZATION POLICY connection request policy.
• B.From the Network Policy Server console, modify the properties of the TS_CAP_01 network policy.
• C.From Remote Desktop Gateway Manager, modify the properties of the TS_CAP_01 connection authorization policy.
• D.From Remote Desktop Gateway Manager, modify the properties of the TS_RAP_01 resource authorization policy.

You have a server named Server1 that runs Windows Server 2008 R2. Server1 has the Key Management Service (KMS) installed. You need to identify how many computers were activated by Server1. What should you run?

• A.cliconfg.exe
• B.slui.exe
• C.slmgr.vbs /dli
• D.mrinfo.exe Server1

Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2.
Network Access Protection (NAP) is deployed on Server1. Server2 has the Routing and Remote Access service (RRAS) role service installed.
You need to configure Server2 to use NAP VPN enforcement.
Which authentication method should you enable on Server2?

• A.Allow machine certificate authentication for IKEv2
• B.Encrypted authentication (CHAP)
• C.Extensible authentication protocol (EAP)
• D.Microsoft encrypted authentication version 2 (MS-CHAP v2)

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 has the Routing and Remote Access service (RRAS) role service installed.
You need to view all inbound VPN packets. The solution must minimize the amount of data collected.
What should you do?

• A.At the command prompt, run netsh.exe ras set tracing rasauth enabled.
• B.From RRAS, create an inbound packet filter.
• C.From Network Monitor, create a capture filter.
• D.From the Registry Editor, configure file tracing for RRAS.