70-649 Exam

Quality and Value for the 70-649 Exam

just4study Practice Exams for Microsoft 70-649 are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development.

100% Guarantee to Pass Your 70-649 Exam

If you prepare for the exam using our just4study testing engine, we guarantee your success in the first attempt. If you do not pass the MCTS 70-649 exam (TS:Upgrading MCSE on Wndws Serv 2003 to Wndws Serv 2008) on your first attempt we will give you a FULL REFUND of your purchasing fee AND send you another same value product for free.

Microsoft 70-649 Exams (in EXE format)

Our Exam 70-649 Preparation Material provides you everything you will need to take your 70-649 Exam. The 70-649 Exam details are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books, but logic is the key. Our Product will help you not only pass in the first try, but also save your valuable time.

70-649 Downloadable, Interactive Testing engines

We are all well aware that a major problem in the IT industry is that there is a lack of quality study materials. Our Exam Preparation Material provides you everything you will need to take a certification examination. Like actual certification exams, our Practice Tests are in multiple-choice (MCQs) Our Microsoft 70-649 Exam will provide you with exam questions with verified answers that reflect the actual exam. These questions and answers provide you with the experience of taking the actual test. High quality and Value for the 70-649 Exam:100% Guarantee to Pass Your MCTS exam and get your MCTS Certification.
　
　
Exam : Microsoft 70-649
Title : TS:Upgrading MCSE on Wndws Serv 2003 to Wndws Serv 2008


1. Your company has deployed Network Access Protection (NAP). You configure secure wireless access to the network by using 802.1x authentication from any access point. You need to ensure that all client computers that access the network are evaluated by NAP. What should you do?
A. Configure all access points as RADIUS clients to the Remediation Servers.
B. Configure all access points as RADIUS clients to the Network Policy Server (NPS).
C. Create a Network Policy that defines Remote Access Server as a network connection method.
D. Create a Network Policy that specifies EAP-TLS as the only available authentication method.
Answer: B

2. Your company has Active Directory Certificate Services (AD CS) and Network Access Protection (NAP) deployed on the network. You need to ensure that NAP policies are enforced on portable computers that use a wireless connection to access the network. What should you do?
A. Configure all access points to use 802.1X authentication.
B. Configure all portable computers to use MS-CHAP v2 authentication.
C. Use the Group Policy Management Console to access the wireless Group Policy settings, and enable the Prevent connections to ad-hoc networks option.
D. Use the Group Policy Management Console to access the wireless Group Policy settings, and disable the Prevent connections to infrastructure networks option.
Answer: A

3. You have a server that runs Windows Server 2008. You need to prevent the server from establishing communication sessions to other computers by using TCP port 25. What should you do?
A. From Windows Firewall, add an exception.
B. From Windows Firewall, enable the Block all incoming connections option.
C. From the Windows Firewall with Advanced Security snap-in, create an inbound rule.
D. From the Windows Firewall with Advanced Security snap-in, create an outbound rule.
Answer: D

4. Your company has 10 servers that run Windows Server 2008. The servers have RDP enabled for server administration. RDP is configured to use default security settings. All administrators' computers run Windows Vista. You need to ensure the RDP connections are as secure as possible. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Set the security layer for each server to the RDP Security Layer.
B. Configure the firewall on each server to block port 3389.
C. Acquire user certificates from the internal certificate authority.
D. Configure each server to allow connections only to Remote Desktop client computers that use Network Level Authentication.
Answer: CD

5. Your network contains a server that runs Windows Server 2008. The server has the Network Policy Server (NPS) service role installed. You need to allow only members of a global group named Group1 VPN access to the network. What should you do?
A. Add Group1 to the RAS and IAS Servers group.
B. Add Group1 to the Network Configuration Operators group.
C. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.
D. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.
Answer: C

6. Your company has a main office and 15 branch offices. The company has a single Active Directory domain. All servers run Windows Server 2008.
You need to ensure that the VPN connections between the main office and the branch offices meet the following requirements:
All data must be encrypted by using end-to-end encryption.
The VPN connection must use computer-level authentication.
User names and passwords cannot be used for authentication.
What should you do?
A. Configure an IPsec connection to use tunnel mode and preshared key authentication.
B. Configure a PPTP connection to use version 2 of the MS-CHAP v2 authentication.
C. Configure a L2TP/IPsec connection to use the EAP-TLS authentication.
D. Configure a L2TP/IPsec connection to use version 2 of the MS-CHAP v2 authentication.
Answer: C

http://www.Just4study.com The safer.easier way to get MCTS Certification.