70-649最も有効な質問と解答で勉強

Microsoft TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialistは出題範囲が広く、独学だけでは論点の取りこぼしが起きがちな試験です。Tech4Examが用意する70-649向けの303問の問題集は、本試験の傾向を踏まえて構成されており、苦手分野を的確に洗い出せます。

Microsoft 70-649 試験概要:

Microsoft 70-649 試験シラバストピック:

70-649試験のQ&A – 受験前に知っておきたいこと

Microsoft TS: Upgrading Your MCSE on Windows Server 2003 to Windows Server 2008, Technology Specialist 認定 70-649 試験問題：

問題 #1

Your company has a server named DC1 that runs Windows Server 2008 R2. Server1 has the DHCP Server server role installed.
You find that a desktop computer named Computer1 is unable to obtain an IP configuration from the DHCP server.
You install the Microsoft Network Monitor 3.0 application on Server1. You enable P-mode in the Network Monitor application configuration. You plan to capture only the DHCP server-related traffic between Server1 and Computer1.
The network interface configuration for the two computers is shown in the following table.

You need to build a filter in the Network Monitor application to capture the DHCP traffic between Server1 and Computer1.
Which filter should you use?

A. IPv4.Address == 169.254.15.84 && DHCP
B. IPv4.Address == 192.168.2.1 && DHCP
C. Ethernet.Address == 0x000A5ElC7F67 && DHCP
D. Ethernet.Address == 0x001731D55EFF &&. DHCP

問題 #2

Your network contains three servers named ADFS1, ADFS2, and ADFS3 that run Windows Server 2008 R2. ADFS1 has the Active Director Federation Services (AD FS) Federation Service role service installed.
You plan to deploy AD FS 2.0 on ADFS2 and ADFS3.
You need to export the token-signing certificate from ADFS1, and then import the certificate to ADFS2 and ADFS3.
In which format should you export the certificate?

A. Cryptographic Message Syntax Standard PKCS #7 (.p7b)
B. DER encoded binary X.509 (.cer)
C. Base-64 encoded X.S09 (.cer)
D. Personal Information Exchange PKCS #12 (.pfx)

問題 #3

You deploy Network Access Protection (NAP) on your network.
An administrator configures a network policy as shown in the exhibit. (Click the Exhibit button.)

You discover that noncompliant client computers cannot access the remediation network.
You need to configure the network policy to ensure that noncompliant client computers can access the remediation network.
What should you do?

A. In Access Permission, select the Ignore user account dial-in properties check box.
B. In the Type of network access server list, click Health Registration Authority.
C. In Access Permission, select the Grant access. Grant access if the connection request matches this policy option button.
D. In the Type of network access server list, click HCAP Server.

問題 #4

Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2. Server1 has the Active Directory Federation Services (AD FS) Federation Service role service installed.
You plan to deploy AD FS 2.0 on Server2.
You need to export the token-signing certificate from Server1, and then import the certificate to Server2.
Which format should you use to export the certificate?

A. Cryptographic Message Syntax Standard PKCS #7 (.p7b)
B. DER encoded binary X.509 (.cer)
C. Base-64 encoded X.S09 (.cer)
D. Personal Information Exchange PKCS #12 (.pfx)

問題 #5

Your network contains an Active Directory domain named contoso.com.
An administrator named Admin1 plans to install the Routing and Remote Access service (RRAS) role service on a server named Server1. Admin1's user account is not a member of the Domain Admins group.
You need to ensure that Server1 can authenticate users from Active Directory by using Windows authentication.
What should you do?

A. Install the Network Policy Server (NPS) role service on a domain controller.
B. Install the Active Directory Lightweight Directory Services (AD LDS) role on Server1.
C. Add the computer account for Server1 to the Windows Authorization Access Group.
D. Add the computer account for Server1 to the RAS and IAS Servers group.

解説：