Microsoft 70-649 Actual Free Exam Questions & Community Discussion

Your network contains an Active Directory domain named contoso.com.
A partner organization has an Active Directory domain named fabrikam.com.
Your company plans to provide VPN access for fabrikam.com users.
You need to configure Network Policy Server (NPS) to forward authentication requests to fabrikam.com.
What should you configure on the NPS server?

Your network contains an Active Directory domain. The domain contains several VPN servers that run Windows Server 2008 R2.
You need to log the time and the date users establish VPN connections to the network. The log must be stored in a central location.
What should you configure on the VPN servers?

Your company has 10 servers that run Windows Server 2008 R2. The servers have Remote Desktop Protocol (RDP) enabled for server administration. RDP is configured to use default security settings. All administrators' computers run Windows 7.
You need to ensure the RDP connections are as secure as possible.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Your network contains a server named Server1 that runs Windows Server 2008 R2 Service Pack (SP1).
All users have laptops that run Windows 7. The users frequently work from network locations that only allow outbound communication to the Internet by using HTTP and HTTPS.
You plan to configure Server1 as a VPN server.
You need to identify which VPN protocol you should use to ensure that all of the users can establish VPN connections to Server1.
Which VPN protocol should you identify?

----
You need to document the following configurations of a server that runs Windows Server 2008 R2:
System services
Startup programs
Hardware configuration
Current CPU, network, disk, and memory utilization
Which command should you run?

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 is configured as an Active Directory Federation Services (AD FS) 2.0 standalone server.
You plan to add a new token-signing certificate to Server1.
You import the certificate to the server as shown in the exhibit. (Click the Exhibit button.)

When you run the Add Token-Signing Certificate wizard, you discover that the new
certificate is unavailable.
You need to ensure that you can use the new certificate for AD FS.
What should you do?

Your network has Network Access Protection (NAP) policies deployed.
You need to identify the health agent compliance status of a client computer.
Which command should you run?

Your network contains a server that runs Windows Server 2008 R2. The server has two host bus adaptors (HBAs). Each HBA is attached to a different switch.
The network contains a Storage Area Network (SAN).
You need to configure the server to use multiple paths to access the SAN.
Which tool should you use?

Your network contains a server named Server1. Server1 has two 100 GB hard disk drives named C and E that are configured as simplevolumes.
Drive E hosts a shared folder named Folder1.
You plan to allow a new group of users to store up to 400 GB of data in a new shared folder. You add two 500 GB disk drives to the server.
You need to ensure that new group of users can access the new shared folder and that the data stored in the folder is fault tolerant.
What should you do first?

Your network contains an Active Directory domain named contoso.com. The domain
contains a DNS server named Server1.
You are configuring DirectAccess.
You create a static host (A) record for isatap.contoso.com.
You discover that the DNS server fails to respond to queries for the isatap.contoso.com
record.
You need to ensure that the DNS server resolves queries for isatap.contoso.com. What should you do?