SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
Search
Test your basic knowledge |
MCTS: Connecting To Networks
Start Test
Study First
Subjects
:
certifications
,
mcts
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. SSTP requires that the VPN server has a computer ______ installed and that clients trust the CA that issued the computer certificate.
Secure Sockets Layer (SSL)
certificate
HTTP
DirectAccess
2. DirectAccess was introduced with ______ and ______ - so clients on earlier operating systems will need to continue to use a traditional VPN.
Windows 7 and Windows Server 2008 R2
certificate
Network Policy And Access Services
end-to-edge protection and end-to-end protection
3. This NPS template configures IPv4 or IPV6 filters to configure which networks can connect.
Remote RADIUS Servers
Standard
WPA-EAP (also known as WPA-Enterprise)
IP Filters
4. In this wireless authentication mode - Windows authenticates prior to logon by using computer credentials. After logon - Windows submits user credentials.
Computer only
Standard
IP Filters
Computer or user
5. What is the strongest form of wireless network security supported by Windows 7 and Windows Server 2008 R2?
IPv6
certificates
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
WPA2.
6. In this wireless authentication mode - Windows authenticates to the wireless network prior to displaying the Windows logon screen.
Computer only
certificates
RADIUS Clients
Win Server 2003
7. If your DirectAccess server is connected to the IPv4 Internet - allow the following types of packets:
Datacenter
Protocol 41 - inbound and outbound - UDP destination port 3544 - inbound - UDP source port 3544 - outbound - TCP destination port 443 - inbound - TCP source port 443 - outbound
Microsoft: Protected EAP (PEAP)
certificate
8. ICS allows you to enable NAT on a server with just a few clicks. However - configuration options are very limited. For example - the internal interface must have the IP address ______. Additionally - you cannot use the DHCP Server role built into Win
-d
192.168.0.1
Win Server 2003
Remediation Server Groups
9. In this wireless authentication mode - Windows joins the network as a guest without authenticating.
Guest
VPN
Standard
certificates
10. With ______ DirectAccess clients connect directly to application servers using IPsec.
IPv6
Guest
L2TP
End-to-end protection
11. Win Server 2008 R2 ______ supports NPS with a maximum of 50 RADIUS clients and 2 remote RADIUS server groups.
Standard
Computer or user - Computer only - User only - Guest
Win Server 2003
Microsoft: Protected EAP (PEAP)
12. To use VPN Reconnect - both the VPN client and server must support the ______ VPN protocol.
Datacenter
HTTP
automatically applied
Internet Key Exchange version 2 (IKEv2)
13. Win Server 2008 R2 Enterprise and Win Server 2008 R2 ______ support NPS without restrictions.
Datacenter
Windows 7 and Windows Server 2008 R2
IPv6
192.168.0.1
14. To configure the VPN client - first - grant VPN users remote access. In AD domain environments - you can do this by editing the user's properties - clicking the Dial-In tab - and then selecting ______.
Internet Key Exchange version 2 (IKEv2)
RADIUS Clients
Network Policy And Access Services
Allow Access
15. SSTP is supported only by Win Server 2008 (as a VPN server or client) and Win Vista with Service Pack 1 (as a VPN ______).
Computer only
client
Remediation Server Groups
User only
16. In this wireless authentication mode - Windows authenticates to the wireless network after the user logs on.
User only
Internet Key Exchange version 2 (IKEv2)
DirectAccess
HTTP
17. If your DirectAccess server is connected to the IPv6 Internet - allow the following types of packets:
Network Policy Server (NPS)
Protocol 50 - inbound and outbound - UDP destination port 500 inbound - UDP source port 500 outbound - UDP destination port 4500 inbound - UDP source port 4500 outbound - ICMPv6 - inbound and outbound
DirectAccess
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
18. Access Client IPv4 Address and Access Client IPv6 Address - Controls access based on the IP address of the client when the Win Server 2008 computer is acting as a ______ server.
Standard
certificate
VPN
end-to-edge protection and end-to-end protection
19. L2TP uses PPP authentication methods for user-level authentication and ______ for computer-level peer authentication - data authentication - data integrity - and data encryption.
Configuration Model drop-down list - select Enabled.
HTTP
IPsec
Microsoft: Protected EAP (PEAP)
20. The most straightforward approach to deploying WPA-EAP is to use a ______ to deploy certificates to both your RADIUS server and all wireless client computers. 1. Add the Active Directory Certificate Services role to a server in your domain. 2. In the
certificate
VPN
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
PKI
21. Passes authentication requests to a back-end server - such as a computer running Windows Server 2008 R2 and RADIUS.
192.168.0.1
WPA-EAP (also known as WPA-Enterprise)
certificates
Network Policy And Access Services
22. DirectAccess requires the following _________________ to support IPv6 communications (which can include IPv6 translation technologies).:A DirectAccess server running Win Srvr 2008 R2 that is a member of a domain (but not a DC). - Clients must be dom
RADIUS
end-to-edge protection and end-to-end protection
Application servers and network infrastructure
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
23. This authentication method requires you to install a computer certificate on the RADIUS server and a computer certificate or user certificate on all wireless client computers.
WPA2.
Web
Microsoft: Protected EAP (PEAP)
client
24. Using ______ encapsulation allows SSTP to traverse many firewalls - NATs - and proxy servers that would cause PPTP and L2TP to fail.
HTTP
Guest
VPN
Datacenter
25. Win Vista wireless network policies are ______ to wireless clients running Win Vista - Win 7 - and Win Server 2008.
automatically applied
NPS templates
Network Policy Server (NPS)
IPsec
26. To improve Tracert performance - add the ___ parameter before the IP address to prevent DNS lookups.
End-to-end protection
Allow Access
WPA-EAP (also known as WPA-Enterprise)
-d
27. DirectAccess uses ______ for all communications - which prevents users from accessing IPv4-only resources.
Remediation Server Groups
IPv6
gpupdate - net stop iphlpsvc - and net start iphlpsvc
Computer or user - Computer only - User only - Guest
28. You can use ______ - a feature new to Win Server 2008 R2 - to reduce repetitive NPS configuration tasks.
DirectAccess
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
IPsec
NPS templates
29. By default - RADIUS will stop authenticating users if it ______ the authentications.
automatically applied
cannot log
Shared Secrets
End-to-edge
30. Which server role is required to support authenticating wireless users to Active Directory?
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
gpupdate - net stop iphlpsvc - and net start iphlpsvc
Remediation Server Groups
client
31. Win Server 2008 R2 can authenticate clients when they connect to wired or wireless networks by using ______.
Protocol 41 - inbound and outbound - UDP destination port 3544 - inbound - UDP source port 3544 - outbound - TCP destination port 443 - inbound - TCP source port 443 - outbound
Network Policy Server (NPS)
Remediation Server Groups
end-to-edge protection and end-to-end protection
32. To configure Win Server 2008 R2 as a RADIUS server - first add the ______ role.
certificates
Web
L2TP
Network Policy And Access Services
33. If no Win Vista wireless network policy exists - computers running Win Vista - Win 7 - and Win Server 2008 will apply ______ policy.
RADIUS Clients
192.168.0.1
the Windows XP
Protocol 41 - inbound and outbound - UDP destination port 3544 - inbound - UDP source port 3544 - outbound - TCP destination port 443 - inbound - TCP source port 443 - outbound
34. This authentication method requires computer certificates to be installed on all RADIUS servers and requires all client computers to trust the CA that issued the computer certificate installed on the RADIUS server.
WPA-EAP (also known as WPA-Enterprise)
End-to-end protection
Microsoft: Secured Password (EAP-MS CHAP v2)
Win Server 2003
35. This NPS template configures health policies - which must be added to the Health Policies condition of your network policy before they are enforced.
certificate
Guest
Windows 7 and Windows Server 2008 R2
Health Policies
36. SSTP uses PPP authentication methods for user-level authentication and HTTP encapsulation over a _____ channel for data authentication - data integrity - and data encryption.
RADIUS Clients
Network Policy And Access Services
L2TP
Secure Sockets Layer (SSL)
37. If you have existing RADIUS servers and you need a layer of abstraction between the access points and the RADIUS servers - or if you need to submit requests to different RADIUS servers based on specific criteria - you can configure Win Server 2008 or
Internet Key Exchange version 2 (IKEv2)
NPS templates
RADIUS proxy
HTTP
38. Windows Server 2008 and Windows Vista support three VPN technologies:
Microsoft: Protected EAP (PEAP)
IPv6
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
automatically applied
39. Windows wireless clients can authenticate using the following modes:
end-to-edge protection and end-to-end protection
the Windows XP
Computer or user - Computer only - User only - Guest
Internet Key Exchange version 2 (IKEv2)
40. This NPS template stores RADIUS shared secrets - allowing you to configure them without typing the shared secret at different computers.
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
certificates
Shared Secrets
Datacenter
41. ______ can keep mobile users connected to your intranet any time they have an Internet connection.
VPN
Web
DirectAccess
User only
42. This NPS template stores remote RADIUS servers.
VPN
Internet Key Exchange version 2 (IKEv2)
Remote RADIUS Servers
User only
43. To create a PKI and enable autoenrollment so that domain member computers have the necessary certificates to support WPA-EAP wireless authentication - follow these steps:
Configuration Model drop-down list - select Enabled.
end-to-edge protection and end-to-end protection
VPN
Microsoft: Secured Password (EAP-MS CHAP v2)
44. Win XP wireless network policies apply to clients running Win XP with SP2 and ______.
cannot log
Win Server 2003
Computer or user - Computer only - User only - Guest
-d
45. With ______ protection DirectAccess clients connect to the DirectAccess server using IPsec.
the Windows XP
IPsec
End-to-edge
Shared Secrets
46. PPTP uses Point-to-Point Protocol (PPP) authentication methods for user-level authentication and ______ for data encryption.
Microsoft Point-to-Point Encryption (MPPE)
Protocol 41 - inbound and outbound - UDP destination port 3544 - inbound - UDP source port 3544 - outbound - TCP destination port 443 - inbound - TCP source port 443 - outbound
Internet Key Exchange version 2 (IKEv2)
Standard
47. Client IPv4 Address and Client IPv6 Address - Controls access based on the IP address of the client when the Win Server 2008 computer is acting as a ______ server.
Health Policies
Remote RADIUS Servers
RADIUS Clients
RADIUS
48. ______ is the only VPN technology that can be used across the IPv6 Internet.
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
Protocol 50 - inbound and outbound - UDP destination port 500 inbound - UDP source port 500 outbound - UDP destination port 4500 inbound - UDP source port 4500 outbound - ICMPv6 - inbound and outbound
WPA-EAP (also known as WPA-Enterprise)
L2TP
49. Windows ______ Server 2008 R2 does not include NPS.
Web
End-to-edge
Computer or user
Computer only
50. To configure a DirectAccess client - run the following three commands: ______.
gpupdate - net stop iphlpsvc - and net start iphlpsvc
User only
End-to-edge
NPS templates