SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
MCTS: Connecting To Networks
Start Test
Study First
Subjects
:
certifications
,
mcts
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. ______ is the only VPN technology that can be used across the IPv6 Internet.
certificate
RADIUS
Datacenter
L2TP
2. In this wireless authentication mode - Windows authenticates prior to logon by using computer credentials. After logon - Windows submits user credentials.
Secure Sockets Layer (SSL)
RADIUS
Computer or user
Microsoft Point-to-Point Encryption (MPPE)
3. If your DirectAccess server is connected to the IPv6 Internet - allow the following types of packets:
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
Protocol 50 - inbound and outbound - UDP destination port 500 inbound - UDP source port 500 outbound - UDP destination port 4500 inbound - UDP source port 4500 outbound - ICMPv6 - inbound and outbound
the Windows XP
Configuration Model drop-down list - select Enabled.
4. DirectAccess uses ______ for all communications - which prevents users from accessing IPv4-only resources.
IPv6
client
Web
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
5. ______ can keep mobile users connected to your intranet any time they have an Internet connection.
certificate
automatically applied
DirectAccess
Shared Secrets
6. This authentication method requires computer certificates to be installed on all RADIUS servers and requires all client computers to trust the CA that issued the computer certificate installed on the RADIUS server.
Standard
Microsoft: Secured Password (EAP-MS CHAP v2)
IPsec
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
7. Win Server 2008 R2 Enterprise and Win Server 2008 R2 ______ support NPS without restrictions.
Internet Key Exchange version 2 (IKEv2)
Datacenter
Computer or user - Computer only - User only - Guest
RADIUS proxy
8. You can use ______ - a feature new to Win Server 2008 R2 - to reduce repetitive NPS configuration tasks.
Web
NPS templates
192.168.0.1
Microsoft: Secured Password (EAP-MS CHAP v2)
9. Windows wireless clients can authenticate using the following modes:
-d
Remediation Server Groups
Computer or user - Computer only - User only - Guest
Health Policies
10. Win Server 2008 R2 ______ supports NPS with a maximum of 50 RADIUS clients and 2 remote RADIUS server groups.
Standard
DirectAccess
HTTP
PKI
11. ICS allows you to enable NAT on a server with just a few clicks. However - configuration options are very limited. For example - the internal interface must have the IP address ______. Additionally - you cannot use the DHCP Server role built into Win
Guest
End-to-end protection
192.168.0.1
Computer or user - Computer only - User only - Guest
12. To configure Win Server 2008 R2 as a RADIUS server - first add the ______ role.
Shared Secrets
gpupdate - net stop iphlpsvc - and net start iphlpsvc
Microsoft: Secured Password (EAP-MS CHAP v2)
Network Policy And Access Services
13. Passes authentication requests to a back-end server - such as a computer running Windows Server 2008 R2 and RADIUS.
WPA-EAP (also known as WPA-Enterprise)
RADIUS
Microsoft Point-to-Point Encryption (MPPE)
HTTP
14. To create a PKI and enable autoenrollment so that domain member computers have the necessary certificates to support WPA-EAP wireless authentication - follow these steps:
IPsec
Win Server 2003
Configuration Model drop-down list - select Enabled.
Shared Secrets
15. SSTP uses PPP authentication methods for user-level authentication and HTTP encapsulation over a _____ channel for data authentication - data integrity - and data encryption.
Secure Sockets Layer (SSL)
Computer or user - Computer only - User only - Guest
Shared Secrets
Microsoft: Protected EAP (PEAP)
16. DirectAccess was introduced with ______ and ______ - so clients on earlier operating systems will need to continue to use a traditional VPN.
end-to-edge protection and end-to-end protection
Windows 7 and Windows Server 2008 R2
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
-d
17. Access Client IPv4 Address and Access Client IPv6 Address - Controls access based on the IP address of the client when the Win Server 2008 computer is acting as a ______ server.
End-to-edge
gpupdate - net stop iphlpsvc - and net start iphlpsvc
VPN
Configuration Model drop-down list - select Enabled.
18. By default - RADIUS will stop authenticating users if it ______ the authentications.
cannot log
DirectAccess
Configuration Model drop-down list - select Enabled.
Microsoft Point-to-Point Encryption (MPPE)
19. To use VPN Reconnect - both the VPN client and server must support the ______ VPN protocol.
End-to-edge
Internet Key Exchange version 2 (IKEv2)
Windows 7 and Windows Server 2008 R2
L2TP
20. Win XP wireless network policies apply to clients running Win XP with SP2 and ______.
End-to-end protection
Remediation Server Groups
gpupdate - net stop iphlpsvc - and net start iphlpsvc
Win Server 2003
21. This NPS template stores RADIUS shared secrets - allowing you to configure them without typing the shared secret at different computers.
WPA-EAP (also known as WPA-Enterprise)
Shared Secrets
User only
Network Policy Server (NPS)
22. Windows Server 2008 and Windows Vista support three VPN technologies:
Configuration Model drop-down list - select Enabled.
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
User only
End-to-edge
23. Which server role is required to support authenticating wireless users to Active Directory?
DirectAccess
Network Policy And Access Services
NPS templates
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
24. This NPS template configures remediation server groups - which are groups of servers that unauthenticated clients can access.
Remediation Server Groups
HTTP
Computer only
IP Filters
25. If no Win Vista wireless network policy exists - computers running Win Vista - Win 7 - and Win Server 2008 will apply ______ policy.
NPS templates
WPA2.
the Windows XP
certificate
26. SSTP requires that the VPN server has a computer ______ installed and that clients trust the CA that issued the computer certificate.
certificate
Network Policy And Access Services
Shared Secrets
Computer or user - Computer only - User only - Guest
27. This NPS template configures IPv4 or IPV6 filters to configure which networks can connect.
Remediation Server Groups
IP Filters
Secure Sockets Layer (SSL)
Protocol 41 - inbound and outbound - UDP destination port 3544 - inbound - UDP source port 3544 - outbound - TCP destination port 443 - inbound - TCP source port 443 - outbound
28. L2TP requires both the VPN clients and servers to have computer ______.
Remote RADIUS Servers
certificates
Remediation Server Groups
Protocol 50 - inbound and outbound - UDP destination port 500 inbound - UDP source port 500 outbound - UDP destination port 4500 inbound - UDP source port 4500 outbound - ICMPv6 - inbound and outbound
29. L2TP uses PPP authentication methods for user-level authentication and ______ for computer-level peer authentication - data authentication - data integrity - and data encryption.
Computer or user - Computer only - User only - Guest
Remediation Server Groups
Microsoft: Protected EAP (PEAP)
IPsec
30. In this wireless authentication mode - Windows authenticates to the wireless network prior to displaying the Windows logon screen.
RADIUS proxy
Network Policy Server (NPS)
Computer only
Microsoft: Protected EAP (PEAP)
31. To configure the VPN client - first - grant VPN users remote access. In AD domain environments - you can do this by editing the user's properties - clicking the Dial-In tab - and then selecting ______.
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
End-to-edge
Health Policies
Allow Access
32. This NPS template stores remote RADIUS servers.
Remote RADIUS Servers
Health Policies
Internet Key Exchange version 2 (IKEv2)
RADIUS Clients
33. Windows ______ Server 2008 R2 does not include NPS.
Web
WPA2.
Guest
Computer only
34. In this wireless authentication mode - Windows joins the network as a guest without authenticating.
Guest
RADIUS Clients
HTTP
Application servers and network infrastructure
35. With ______ DirectAccess clients connect directly to application servers using IPsec.
Microsoft Point-to-Point Encryption (MPPE)
WPA-EAP (also known as WPA-Enterprise)
Protocol 50 - inbound and outbound - UDP destination port 500 inbound - UDP source port 500 outbound - UDP destination port 4500 inbound - UDP source port 4500 outbound - ICMPv6 - inbound and outbound
End-to-end protection
36. This NPS template configures health policies - which must be added to the Health Policies condition of your network policy before they are enforced.
client
DirectAccess
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
Health Policies
37. SSTP is supported only by Win Server 2008 (as a VPN server or client) and Win Vista with Service Pack 1 (as a VPN ______).
IP Filters
Point-to-Point Tunneling Protocol (PPTP) - Layer Two Tunneling Protocol (L2TP) - Secure Socket Tunneling Protocol (SS TP)
Computer or user
client
38. To improve Tracert performance - add the ___ parameter before the IP address to prevent DNS lookups.
NPS templates
-d
certificates
WPA-EAP (also known as WPA-Enterprise)
39. To configure a DirectAccess client - run the following three commands: ______.
RADIUS Clients
IPv6
gpupdate - net stop iphlpsvc - and net start iphlpsvc
L2TP
40. If you have existing RADIUS servers and you need a layer of abstraction between the access points and the RADIUS servers - or if you need to submit requests to different RADIUS servers based on specific criteria - you can configure Win Server 2008 or
certificate
RADIUS proxy
IPv6
WPA2.
41. Client IPv4 Address and Client IPv6 Address - Controls access based on the IP address of the client when the Win Server 2008 computer is acting as a ______ server.
Microsoft Point-to-Point Encryption (MPPE)
RADIUS
DirectAccess
192.168.0.1
42. DirectAccess requires the following _________________ to support IPv6 communications (which can include IPv6 translation technologies).:A DirectAccess server running Win Srvr 2008 R2 that is a member of a domain (but not a DC). - Clients must be dom
Application servers and network infrastructure
User only
PKI
End-to-end protection
43. This NPS template allows you to quickly configure the same RADIUS clients on different servers.
Windows 7 and Windows Server 2008 R2
end-to-edge protection and end-to-end protection
RADIUS Clients
HTTP
44. PPTP uses Point-to-Point Protocol (PPP) authentication methods for user-level authentication and ______ for data encryption.
IPsec
Microsoft Point-to-Point Encryption (MPPE)
Health Policies
Computer only
45. Additionally - DirectAccess configures clients with globally routable ______ addresses. Therefore - you will need to use transition technologies - such as 6to4 - Teredo - and ISATAP - to allow connections across the IPv4 Internet and portions of your
Web
NPS templates
End-to-end protection
IPv6
46. If your DirectAccess server is connected to the IPv4 Internet - allow the following types of packets:
Protocol 41 - inbound and outbound - UDP destination port 3544 - inbound - UDP source port 3544 - outbound - TCP destination port 443 - inbound - TCP source port 443 - outbound
IPv6
Health Policies
certificates
47. The most straightforward approach to deploying WPA-EAP is to use a ______ to deploy certificates to both your RADIUS server and all wireless client computers. 1. Add the Active Directory Certificate Services role to a server in your domain. 2. In the
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
Allow Access
PKI
Secure Sockets Layer (SSL)
48. With ______ protection DirectAccess clients connect to the DirectAccess server using IPsec.
End-to-edge
PKI
NPS templates
-d
49. You can choose from two different DirectAccess connection types: ______.
HTTP
Computer only
RADIUS proxy
end-to-edge protection and end-to-end protection
50. What is the strongest form of wireless network security supported by Windows 7 and Windows Server 2008 R2?
You must add the Network Policy And Access Services role to configure the server as a RADIUS server.
WPA2.
client
DirectAccess