70-643 무료 덤프문제 온라인 액세스

Your company has a single Active Directory domain. All servers run Windows Server 2008 R2.
You install an iSCSI storage area network (SAN) for a group of file servers.
Corporate security policy requires that all data communication to and from the iSCSI SAN must be as secure as possible.
You need to implement the highest security available for communications to and from the iSCSI SAN.
What should you do?

• A.Create a Group Policy object (GPO) to enable the System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing setting.
• B.Implement IPsec security in the iSCSI Initiator Properties. Set up inbound and outbound rules by using Windows Firewall.
• C.Create a Group Policy object (GPO) to enable the System objects: Strengthen default permission of internal systems objects setting.
• D.Implement mutual Microsoft Challenge Handshake Authentication Protocol (MSCHAPv2) authentication in the iSCSI Initiator Properties. Set up inbound and outbound rules by using Windows Firewall.

You manage a Web server named Server1 that runs Windows 2008 R2 Server1 has the SMTP Server feature installed.
You need to verify whether you can connect to Server1 over port 25
Which tool should you use?

• A.Local Security Policy
• B.Ftp
• C.Iisreset
• D.System Configuration
• E.Internet Information Services (IIS) Manager
• F.Internet Information Services (IIS) 6.0 Manager
• G.Performance Monitor
• H.Telnet
• I.Component Services
• J.Services
• K.Security Configuration Wizard (SCW)
• L.Windows Firewall

Your network contains a server named Server1 that has the Streaming Media Services server role installed. Server1 is located in the perimeter network.
A firewall named Firewall1 connects the perimeter network and the Internet.
You need to ensure that clients from the Internet can access streaming content from Server1 by using RTSP and HTTP. The solution must minimize the number of open ports on Firewall1.
Which three inbound firewall ports should you open on Firewall1? (Each correct answer presents part of the solution, choose three.)

• A.TCP 443
• B.UDP 8080
• C.TCP 554
• D.TCP 80
• E.UDP 5005

Your company has a single Active Directory domain named contoso.com. All servers in the domain run Windows Server 2008.
The DNS service is installed on two domain controllers named DC1 and DC2. Both DNS servers host Active Directory integrated zones that are configured to allow the most secure updates only.
DC1 has Key Management Service (KMS) installed and activated.
You discover that the service locator records from the contoso.com zone hosted on DC1 and DC2 are missing.
You need to force registration of the KMS service locator records in the contoso.com zone.
What should you do?

• A.On DC2 at the command prompt, run the net stop netlogon command, and then run the net start netlogon command.
• B.Configure the contoso.com zone to accept non-secure updates.
• C.On DC1 at the command prompt, run the slmgr.vbs Crearm script.
• D.On DC1 at the command prompt, run the net stop sppsvc command, and then run the net start sppsvc command.

You manage a Web server named Server1 that runs windows server 2008 R2. Server1 has
the FTP Server role installed.
You need to manage the FTP settings on Server1.
Which tool should you use?

• A.Ftp
• B.Local Secutity Policy
• C.Internet Information Services (IIS)6.0 Manager
• D.Iisreset
• E.System Configuration
• F.Internet Information Services (IIS) Manager
• G.Windows firewall
• H.Performance Monitor
• I.Telnet
• J.Services
• K.Component services
• L.Security Configuration Wizard (SCW)