Practice Test GeeksMCTS 70-642 Exam Practice Test
← All MCTS 70-642 Flashcard Decks

Case Studies & Practical Application Flashcards

7 cards from real MCTS 70-642 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Case Studies & Practical Application flashcards as text

  1. A company migrates from a single-site to a multi-site SSTP VPN deployment. Remote clients connecting to the secondary site receive Certificate warnings. The primary site works correctly. What is the most likely cause?

    Answer: The secondary VPN server's certificate CN does not match its external FQDN

    SSTP validates that the server certificate's CN or SAN matches the DNS name clients use to connect; a mismatch triggers certificate warnings.

  2. Clients on a Windows Server 2008 R2 network obtain IP addresses via DHCP but cannot reach hosts on remote subnets. All clients have valid IP addresses, subnet masks, and default gateways. What should the administrator verify on the DHCP server?

    Answer: That DHCP option 003 (Router) is configured with the correct gateway IP

    DHCP option 003 provides the default gateway; if it is missing or incorrect, clients cannot route traffic beyond their local subnet.

  3. After implementing DNSSEC on a Windows Server 2008 R2 DNS zone, some older resolvers report SERVFAIL for queries in that zone. What is the most likely reason?

    Answer: The older resolvers do not support EDNS0 extensions required for DNSSEC

    DNSSEC responses are larger than standard DNS responses and require EDNS0 support; resolvers without EDNS0 cannot process the additional records and return SERVFAIL.

  4. An administrator must configure Windows Server 2008 R2 to allow only authenticated computers to obtain IP addresses from DHCP. Which feature combination achieves this without third-party software?

    Answer: NAP DHCP enforcement with health policies checking domain membership

    NAP DHCP enforcement can use a health policy that checks domain membership, issuing full leases only to computers that pass the health check.

  5. A Windows Server 2008 R2 IIS server hosts an HTTPS site. After renewing the SSL certificate, users receive a 'certificate not trusted' error. The old certificate worked fine. What should the administrator check first?

    Answer: Whether the intermediate CA certificate is installed in the correct store

    If the intermediate CA certificate is missing from the server's Intermediate Certification Authorities store, clients cannot build a trusted chain to the root CA.

  6. A routing table on a Windows Server 2008 R2 RRAS server shows a persistent route to 10.2.0.0/16 via interface 1, but traffic to that network fails. Ping to the next-hop gateway succeeds. What is the most likely issue?

    Answer: The next-hop gateway does not have a return route to the source subnet

    Asymmetric routing occurs when the remote gateway lacks a return path; packets reach the destination but responses cannot return, causing the connection to appear failed.

  7. A company deploys Windows Server 2008 R2 with the DNS Server role. The internal zone uses the same name as the company's public domain. External names resolve correctly from the internet but internal clients cannot resolve external names in the same domain. What should be implemented?

    Answer: Split-brain DNS with internal zone serving internal records and conditional forwarders for external

    Split-brain (split-horizon) DNS allows the internal zone to serve internal-only records while forwarding external queries to public resolvers for names not defined internally.