SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
Search
Test your basic knowledge |
MCTS: Connecting To Networks
Start Test
Study First
Subjects
:
certifications
,
mcts
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. This authentication method requires you to install a computer certificate on the RADIUS server and a computer certificate or user certificate on all wireless client computers.
Microsoft: Protected EAP (PEAP)
Configuration Model drop-down list - select Enabled.
Guest
certificates
2. Win Vista wireless network policies are ______ to wireless clients running Win Vista - Win 7 - and Win Server 2008.
Network Policy Server (NPS)
Remediation Server Groups
Remote RADIUS Servers
automatically applied
3. Using ______ encapsulation allows SSTP to traverse many firewalls - NATs - and proxy servers that would cause PPTP and L2TP to fail.
gpupdate - net stop iphlpsvc - and net start iphlpsvc
HTTP
Computer or user - Computer only - User only - Guest
Health Policies
4. DirectAccess requires the following _________________ to support IPv6 communications (which can include IPv6 translation technologies).:A DirectAccess server running Win Srvr 2008 R2 that is a member of a domain (but not a DC). - Clients must be dom
Secure Sockets Layer (SSL)
Application servers and network infrastructure
certificate
Network Policy And Access Services
5. ______ can keep mobile users connected to your intranet any time they have an Internet connection.
DirectAccess
L2TP
Standard
Computer or user - Computer only - User only - Guest
6. ______ is the only VPN technology that can be used across the IPv6 Internet.
Secure Sockets Layer (SSL)
Remediation Server Groups
NPS templates
L2TP
7. L2TP uses PPP authentication methods for user-level authentication and ______ for computer-level peer authentication - data authentication - data integrity - and data encryption.
Protocol 41 - inbound and outbound - UDP destination port 3544 - inbound - UDP source port 3544 - outbound - TCP destination port 443 - inbound - TCP source port 443 - outbound
Health Policies
IPsec
Application servers and network infrastructure
8. With ______ protection DirectAccess clients connect to the DirectAccess server using IPsec.
End-to-edge
Secure Sockets Layer (SSL)
Network Policy Server (NPS)
client
9. You can use ______ - a feature new to Win Server 2008 R2 - to reduce repetitive NPS configuration tasks.
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
NPS templates
RADIUS Clients
end-to-edge protection and end-to-end protection
10. To configure a DirectAccess client - run the following three commands: ______.
gpupdate - net stop iphlpsvc - and net start iphlpsvc
NPS templates
Allow Access
Win Server 2003
11. If you have existing RADIUS servers and you need a layer of abstraction between the access points and the RADIUS servers - or if you need to submit requests to different RADIUS servers based on specific criteria - you can configure Win Server 2008 or
RADIUS proxy
Web
the Windows XP
Microsoft: Secured Password (EAP-MS CHAP v2)
12. Win Server 2008 R2 ______ supports NPS with a maximum of 50 RADIUS clients and 2 remote RADIUS server groups.
Allow Access
Standard
Remediation Server Groups
gpupdate - net stop iphlpsvc - and net start iphlpsvc
13. You can choose from two different DirectAccess connection types: ______.
end-to-edge protection and end-to-end protection
certificate
Guest
RADIUS Clients
14. Win Server 2008 R2 Enterprise and Win Server 2008 R2 ______ support NPS without restrictions.
gpupdate - net stop iphlpsvc - and net start iphlpsvc
Datacenter
Microsoft Point-to-Point Encryption (MPPE)
End-to-edge
15. ICS allows you to enable NAT on a server with just a few clicks. However - configuration options are very limited. For example - the internal interface must have the IP address ______. Additionally - you cannot use the DHCP Server role built into Win
192.168.0.1
RADIUS proxy
WPA2.
automatically applied
16. L2TP requires both the VPN clients and servers to have computer ______.
192.168.0.1
NPS templates
Microsoft: Protected EAP (PEAP)
certificates
17. If no Win Vista wireless network policy exists - computers running Win Vista - Win 7 - and Win Server 2008 will apply ______ policy.
the Windows XP
IPv6
end-to-edge protection and end-to-end protection
Protocol 50 - inbound and outbound - UDP destination port 500 inbound - UDP source port 500 outbound - UDP destination port 4500 inbound - UDP source port 4500 outbound - ICMPv6 - inbound and outbound
18. This NPS template allows you to quickly configure the same RADIUS clients on different servers.
RADIUS Clients
Computer only
L2TP
gpupdate - net stop iphlpsvc - and net start iphlpsvc
19. In this wireless authentication mode - Windows authenticates prior to logon by using computer credentials. After logon - Windows submits user credentials.
Computer or user
automatically applied
Windows 7 and Windows Server 2008 R2
End-to-end protection
20. This NPS template configures health policies - which must be added to the Health Policies condition of your network policy before they are enforced.
Health Policies
RADIUS Clients
Standard
Microsoft Point-to-Point Encryption (MPPE)
21. SSTP uses PPP authentication methods for user-level authentication and HTTP encapsulation over a _____ channel for data authentication - data integrity - and data encryption.
-d
IPv6
NPS templates
Secure Sockets Layer (SSL)
22. If your DirectAccess server is connected to the IPv4 Internet - allow the following types of packets:
Health Policies
DirectAccess
Protocol 41 - inbound and outbound - UDP destination port 3544 - inbound - UDP source port 3544 - outbound - TCP destination port 443 - inbound - TCP source port 443 - outbound
gpupdate - net stop iphlpsvc - and net start iphlpsvc
23. To create a PKI and enable autoenrollment so that domain member computers have the necessary certificates to support WPA-EAP wireless authentication - follow these steps:
certificate
Standard
Protocol 50 - inbound and outbound - UDP destination port 500 inbound - UDP source port 500 outbound - UDP destination port 4500 inbound - UDP source port 4500 outbound - ICMPv6 - inbound and outbound
Configuration Model drop-down list - select Enabled.
24. Win XP wireless network policies apply to clients running Win XP with SP2 and ______.
certificates
Win Server 2003
RADIUS
Microsoft Point-to-Point Encryption (MPPE)
25. This NPS template stores remote RADIUS servers.
End-to-edge
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
Microsoft: Protected EAP (PEAP)
Remote RADIUS Servers
26. To improve Tracert performance - add the ___ parameter before the IP address to prevent DNS lookups.
RADIUS Clients
the Windows XP
-d
L2TP
27. DirectAccess uses ______ for all communications - which prevents users from accessing IPv4-only resources.
IPv6
Secure Sockets Layer (SSL)
Web
User only
28. To configure the VPN client - first - grant VPN users remote access. In AD domain environments - you can do this by editing the user's properties - clicking the Dial-In tab - and then selecting ______.
Allow Access
Protocol 50 - inbound and outbound - UDP destination port 500 inbound - UDP source port 500 outbound - UDP destination port 4500 inbound - UDP source port 4500 outbound - ICMPv6 - inbound and outbound
WPA2.
Secure Sockets Layer (SSL)
29. By default - RADIUS will stop authenticating users if it ______ the authentications.
cannot log
L2TP
Protocol 41 - inbound and outbound - UDP destination port 3544 - inbound - UDP source port 3544 - outbound - TCP destination port 443 - inbound - TCP source port 443 - outbound
PKI
30. Access Client IPv4 Address and Access Client IPv6 Address - Controls access based on the IP address of the client when the Win Server 2008 computer is acting as a ______ server.
VPN
the Windows XP
automatically applied
IPv6
31. What is the strongest form of wireless network security supported by Windows 7 and Windows Server 2008 R2?
WPA2.
Application servers and network infrastructure
RADIUS Clients
Computer or user
32. Win Server 2008 R2 can authenticate clients when they connect to wired or wireless networks by using ______.
Network Policy Server (NPS)
Windows 7 and Windows Server 2008 R2
End-to-edge
Protocol 50 - inbound and outbound - UDP destination port 500 inbound - UDP source port 500 outbound - UDP destination port 4500 inbound - UDP source port 4500 outbound - ICMPv6 - inbound and outbound
33. In this wireless authentication mode - Windows joins the network as a guest without authenticating.
Protocol 41 - inbound and outbound - UDP destination port 3544 - inbound - UDP source port 3544 - outbound - TCP destination port 443 - inbound - TCP source port 443 - outbound
automatically applied
Guest
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
34. Windows ______ Server 2008 R2 does not include NPS.
DirectAccess
gpupdate - net stop iphlpsvc - and net start iphlpsvc
WPA-EAP (also known as WPA-Enterprise)
Web
35. This NPS template configures remediation server groups - which are groups of servers that unauthenticated clients can access.
Secure Sockets Layer (SSL)
RADIUS
Computer or user - Computer only - User only - Guest
Remediation Server Groups
36. To use VPN Reconnect - both the VPN client and server must support the ______ VPN protocol.
IPv6
Network Policy Server (NPS)
RADIUS Clients
Internet Key Exchange version 2 (IKEv2)
37. To configure Win Server 2008 R2 as a RADIUS server - first add the ______ role.
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
IPv6
Allow Access
Network Policy And Access Services
38. If your DirectAccess server is connected to the IPv6 Internet - allow the following types of packets:
Computer or user
Protocol 50 - inbound and outbound - UDP destination port 500 inbound - UDP source port 500 outbound - UDP destination port 4500 inbound - UDP source port 4500 outbound - ICMPv6 - inbound and outbound
IPsec
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
39. Additionally - DirectAccess configures clients with globally routable ______ addresses. Therefore - you will need to use transition technologies - such as 6to4 - Teredo - and ISATAP - to allow connections across the IPv4 Internet and portions of your
192.168.0.1
certificate
Computer only
IPv6
40. Which server role is required to support authenticating wireless users to Active Directory?
PKI
Windows 7 and Windows Server 2008 R2
Shared Secrets
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
41. This NPS template stores RADIUS shared secrets - allowing you to configure them without typing the shared secret at different computers.
Health Policies
Computer only
Shared Secrets
Microsoft: Protected EAP (PEAP)
42. Windows wireless clients can authenticate using the following modes:
Computer or user - Computer only - User only - Guest
IP Filters
End-to-end protection
Microsoft: Protected EAP (PEAP)
43. DirectAccess was introduced with ______ and ______ - so clients on earlier operating systems will need to continue to use a traditional VPN.
Internet Key Exchange version 2 (IKEv2)
Windows 7 and Windows Server 2008 R2
Win Server 2003
User only
44. PPTP uses Point-to-Point Protocol (PPP) authentication methods for user-level authentication and ______ for data encryption.
RADIUS Clients
User only
VPN
Microsoft Point-to-Point Encryption (MPPE)
45. In this wireless authentication mode - Windows authenticates to the wireless network after the user logs on.
Computer only
WPA-EAP (also known as WPA-Enterprise)
User only
-d
46. In this wireless authentication mode - Windows authenticates to the wireless network prior to displaying the Windows logon screen.
Shared Secrets
Computer only
DirectAccess
Internet Key Exchange version 2 (IKEv2)
47. SSTP is supported only by Win Server 2008 (as a VPN server or client) and Win Vista with Service Pack 1 (as a VPN ______).
client
IP Filters
IPv6
Web
48. Client IPv4 Address and Client IPv6 Address - Controls access based on the IP address of the client when the Win Server 2008 computer is acting as a ______ server.
Microsoft: Protected EAP (PEAP)
RADIUS
Computer or user - Computer only - User only - Guest
Datacenter
49. This NPS template configures IPv4 or IPV6 filters to configure which networks can connect.
client
-d
IP Filters
Web
50. The most straightforward approach to deploying WPA-EAP is to use a ______ to deploy certificates to both your RADIUS server and all wireless client computers. 1. Add the Active Directory Certificate Services role to a server in your domain. 2. In the
PKI
Secure Sockets Layer (SSL)
RADIUS proxy
Application servers and network infrastructure