Errata

Page 396, Step 2. I assume there is missing a piece of tekst.

Please change the line:
"In Server Manager, select Roles\Policies\Network Policies"
to:
"In Server Manager, select Roles\Network Policy and Access Service\NPS\Policies\Network Policies"

Note from the Author or Editor:
Valid. Please change as suggested.

Step 2d states: ". . . right-click Certificates (Local Computer)\Personal\Certificates . . ."

But there was no "certificates" folder inside the personal folder. It was not created until I right-clicked on the "PERSONAL" folder (not the non-existent certificates folder) and selected "request new certificate".

THEN the folder was created with the certificate inside.

Note from the Author or Editor:
On page 418, step 2D, change "\Personal\Certificates" to "\Personal".

Page 439 states that only the last 4 KB of data is stored in the log file by default, as shown below:
"By default, Windows Firewall writes log entries to %SystemRoot%\System32\LogFiles\Firewall
\Pfirewall.log and stores only the last 4 KB of data."

However, this is incorrect and the size of the data that the log file stores by default is actually 4,096 KB (or 4 MB).

The text in the book should be changed to read:
"By default, Windows Firewall writes log entries to %SystemRoot%\System32\LogFiles\Firewall
\Pfirewall.log and stores only the last 4,096 KB of data."

Note from the Author or Editor:
Valid errata. On page 439, please change "4 KB" to "4 MB".

Missing step between 7 and 8.

Should say:
On the 'Credentials' page, press the 'select' button and supply a domain administrative account.

Note from the Author or Editor:
Valid. Please insert after Step 7 on page 611:

8. If the Credentials page appears, click Select and provide provide Domain Admin credentials. Click Next.

Then, renumber existing steps 8-12

at page 606 , at first line we read :

" If you choose Only The Files And Programs That Users Specify Are Available Offline, users must configure mapped drives for use with Offline Files. "

why this is a must ??!!!

Note from the Author or Editor:
Rephrase sentence from: "If you choose Only The Files And Programs That Users Specify Are Available Offline, users must configure mapped drives for use with Offline Files"

to:

"If you choose Only The Files And Programs That Users Specify Are Available Offline, users must configure mapped drives for use with Offline Files if they want to access files while offline."

at page 526 , at the button of the page ,at NOTE section , change this sentence :

" NOTE Forwarding events from Windows XP and
Windows Server 2003

Before computers running Windows XP or Windows Server 2003 can act as forwarding computers, you must install WS-Management 1.1....... "

to


" NOTE Forwarding events from Windows XP SP2 and
Windows Server 2003 Sp1 and SP2

Before computers running Windows XP SP2 or Windows Server 2003 SP1 and SP2 can act as forwarding computers, you must install WS-Management 1.1....... "

Note from the Author or Editor:
Please change the note on page 526 to read:

"Before computers running Windows XP or Windows Server 2003 can act as forwarding computers, you must install WS-Management 1.1 and either Windows XP Service Pack 2 or Windows Sever 2003 Service Pack 1 or later..."

at the page 526 , on the third paragraph under "Configuring Event Forwarding " we read :

" Using event forwarding requires you to configure both the forwarding and collecting computers.
First, you must start the following services on both the forwarding and collecting computer:
■ Windows Remote Management
■ Windows Event Collector "

it is not necessary to start Windows Event Collector on Forwarding computer and in the book we don't see any step to start this service on forwarding computer.

Note from the Author or Editor:
Please change this on page 526:

First, you must start the following services on both the forwarding and collecting computer:

* Windows Remote Management
* Windows Event Collector

to this:

On the forwarding computer, start the Windows Remote Management service. On the collecting computer, start both the Windows Remote Management service and the Windows Event Collector service.

at page 414 , under Practice Configuring DirectAccess , it reads :

■ Boston : Boston Boston will act as the DirectAccess server.

■ DCSRV1 : DCSRV1 will be the DirectAccess server.

are both DirectAcces servers ?!!!!

Note from the Author or Editor:
On page 414, please change "DCSRV1 will be the DirectAccess server." to "DCSRV1 will be the domain controller."

at page 611 , the first sentence under Exercise 2 which is :

" Add a replicated folder to the DFS namespace by following these steps: " , seems to be false here and should be removed.

Note from the Author or Editor:
Please change the first sentence after the Exercise 2 heading on page 611 to start, "Add a server to the DFS namespace by following these steps:"

"in a workgroup environment......a number of conditions must be met. First, both the DNS client and the DNS server must be configured with the address of the DNS server as the preferred DNS server."

Should this not refer to the DHCP client and server being configured with the address of the DNS server as the preferred DNS server?

Note from the Author or Editor:
The DHCP server doesn't need to be configured with the address of the DNS server. However, the text should be changed anyway because it is slightly inaccurate.

On page 167 paragraph 2 sentence 4 (beginning with "First..."), delete the words "and the DNS server".

On page 167 paragraph 2 sentence 6 (beginning with "Third..."), change "the DNS client must be" to "both the DNS client and server must be". In the same sentence, change "or assigned automatically" to "or (in the case of the DNS client) assigned automatically".

At Subnet Masks: Pointing to Figure 1-29 (at the 4th Line) is wrong. This should be Figure 1-30.

Note from the Author or Editor:
On page 42, paragraph 4, line 4, change "Figure 1-29" to "Figure 1-30".

Obatain server certificate so that clients can connect to da.contoso.com

should be changed to

da.nwtraders.msft

same thing at point 2.f

Note from the Author or Editor:
Valid, please change as described.

While going through and following the steps of the "Using the Configuration NAP wizard" I came across a screen that not mentioned at all in the book. Its titled Configure Traffic Controls. It has where you can configure traffic controls for both Full Access Network and Restricted Access Network. I'm assuming that this is where you configure where clients will be routed based on their compliance status (complaint or non-compliant)

Note from the Author or Editor:
On page 451, step 7, bullet point 2, change "Configure Virtual LANs (VLANs)" to "Configure Traffic Controls". The GUI changed with WS 2008 R2.

642p_4.5_02

- This situation will never occur. Probably this question has been re-used from a batch of 2008 questions ?
Windows server 2008 R2 is 64bit only, and thus the first driver to be installed will be a 64bit driver. So if a printer is installed on 2008 R2, a 64bit Windows 7 will always be able to install the driver. To support a 32bit Windows 7 an additional driver would be needed.

Note from the Author or Editor:
On this PTQ, please change "32-bit" in the question to "64-bit", and change "64-bit" to "32-bit"

642p_4.3_05

- This would be a minor error. The correct answer should read "In windows explorer right-click the volume and then choose configure shadow copies. Click the ENABLE button."
Shadow copies are disabled by default and need to be enabled to use them. This cannot be done by altering the settings or schedule, only by clicking the ENABLE button.

Note from the Author or Editor:
Valid. For PTQ 642P_4.3_05, please change the correct answer from "Click the Settings button." to "Click the Enable button."

642p_1.2_09

- The question "How should you configure client computers" makes no sense at all, nothing needs to be changed on the clients. "What should you change on the DHCP server" or similar would be a better question.

- Also the answer is wrong, you need to edit the existing 006 DHCP option, not add an additional one, which is impossible if a previous one exists. Whether this happens on server or scope level depends on the current DHCP implementation, but not enough information is given to make this decision.

- To top it off, the provided explanation is also wrong. Options set on server level are inherited by the scopes on that server, existing and new ones, unless a overruling option has been set in the scope. (this compares to the way NTFS rights are inherited)

Note from the Author or Editor:
Change "How should you configure client computers?" to "How should you configure the DHCP server?"

Set the correct answer to be "Edit the 006 Dynamic Host Configuration Protocol (DHCP) server option". Mark the existing correct answer as incorrect.

Change the explanation to:

"The 006 option defines DNS servers (the 015 option defines the default DNS domain name). To modify the configuration for existing scopes, you need to edit the existing option rather than adding an option."

at page 388 , since the page is about Dial-up connections ( not VPN ) , in FIGURE 7-12 change any " VPN Client" to " Dial-up Client " and change the " VPN Server" to " Dial-up Server".

Note from the Author or Editor:
Valid, please change as described.

Obtain a web server certificate os that clients can connect to crld.nwtraders.msft should be Obtain a web server certificate so that clients can connect to nls.nwtraders.msft


there has no A record for crld.nwtraders.msft been defined in the previous excercises.

Note from the Author or Editor:
On page 417, step 9, change "crld.nwtraders.msft" to "nls.nwtraders.msft"

at page 300 , line before Static Routing , change

" select persistent connection and click ok. "

to

" on the options tab , select persistent connection and click ok. "

Note from the Author or Editor:
Valid. On page 300, please change:

"select Persistent Connection and click OK."

to:

"on the Options tab, select Persistent Connection and click OK."

The first line says:
Select the Computer Configuration\Policies\Windows Settings\System Services node

It should say:
Select the Computer Configuration\Policies\Windows Settings\Security Settings\System Services node

Note from the Author or Editor:
Valid, please change as described

at page 256 , in the last paragraph it reads :

" If the DHCP client shuts down normally, or if an administrator runs the command Ipconfig /release, the client sends a DHCP Release message to the DHCP server that assigned the IP address. The DHCP server then marks the IP address as available and can reassign it to a different DHCP client. "

this sentence is correct only about runing Ipconfig /release command but is not correct about shutting down the DHCP clients. because if you capture packets using network monitor you will see that when clients shut down either normally or abnormally , they don't send any DHCP release message to DHCP Server and also DHCP server doesn't mark the IP address as available.

so i think the above sentence should change to :

" if an administrator runs the command Ipconfig /release, the client sends a DHCP Release message to the DHCP server that assigned the IP address. The DHCP server then marks the IP address as available and can reassign it to a different DHCP client. "

Note from the Author or Editor:
On page 256, make the following two changes.

1. Change the first sentence of the last paragraph to the following:

"If an administrator runs the command Ipconfig /release, the client sends a DHCP Release message to the DHCP server that assigned the IP address."

2. Change the 3rd sentence in the final paragraph to the following:

"If the DHCP client does not request a DHCP release, the DHCP server will not assign the IP address to a different client until the DHCP lease expires."

In the second sentence of 6th step, change "if you want the VPN server..." to "if you want the dial-up server..."

Note from the Author or Editor:
Valid; please make the change as described.

at page 195 , on the last paragraph above EXAM TIP , in second line , that would be more accurate to change :

(cache, local zone data,queries to other servers)

to

( local zone data, Cache , queries to other servers)

Note from the Author or Editor:
On page 195, in the last line of the last paragraph and just above the Exam Tip, change "(cache, local zone data, queries to other servers)" to "(local zone data, cache, queries to other servers)".

at page 162, at the end of the 6th line
change :
100 MB
to
100 Mbps

Note from the Author or Editor:
On page 162, at the end of the 6th line, please replace "100 MB" with "100 Mbps".

To configure the location of the nls, the instruction directs to enter: https://nls.contoso.com. This should be https://nls.nwtraders.msft.

Do you agree? https://nls.contoso.com does not seem to work

Note from the Author or Editor:
Yes, sorry about that. nls.contoso.com should be nls.nwtraders.msft on page 420.

in the page 142 , the 3rd line reads:
"When a client queries a DNS server with a name resolution request, the DNS server first checks its cache to see whether it already has the answer stored "

it is not accurate because as we know, DNS servers always first check their zones and if didn't find the answer,then check their cache. so it will be more accurate to change:

"When a client queries a DNS server with a name resolution request, the DNS server first checks its cache to see whether it already has the answer stored "

to

"When a client queries a DNS server with a name resolution request, the DNS server first checks its Zones and if didn't find the answer,then check their cache to see whether it already has the answer stored "

Note from the Author or Editor:
Change second sentence on page 142 to the following: "When a client queries a DNS server with a name resolution request, the DNS server checks to see if it can answer the query with local zone data and then checks its cache to see whether it has the answer stored."

DirectAccess client is labelled as server in both diagrams.

Note from the Author or Editor:
On pages 407 and 408, change the laptop icon on the left of the figures so that the label reads "DirectAccess client" instead of "DirectAccess server". The icon in the center should remain laballed "DirectAccess server"

On page 685, the first sentence of the explanation for answer B of question 3 is incorrect.

Change:
"This filter would show only HTTP communications from the IP address 192.168.10.1"

To:
"This filter would show only HTTP communications from the IP address 192.168.10.12."

Note from the Author or Editor:
This errata description is perfect; please make the described change.

On page 392, in the second line at the second sentence of Step 7 , change "if you want the dial-up server..." to "if you want the VPN Server..."

Note from the Author or Editor:
This errata is perfect; please make the described change.

On page 84, the second sentence of the fourth bullet point contains incorrect addresses. change 17 to 172 and 254 to 255. so
Change:
"These ranges include 10.0.0.0 to 10.255.255.254, 17.16.0.0 to 17.31.255.254, and 192.168.0.0 to 192.168.255.254."

To:
"These ranges include 10.0.0.0 to 10.255.255.255, 172.16.0.0 to 172.31.255.255, and 192.168.0.0 to 192.168.255.255."

Note from the Author or Editor:
In the fourth bullet point on page 84, change this sentence:

"These ranges include 10.0.0.0 through 10.255.255.254, 17.16.0.0 through 17.31.255.254, and 192.168.0.0 through 192.168.255.254."

to the following version:

"These ranges include 10.0.0.0 through 10.255.255.255, 172.16.0.0 through 172.31.255.255, and 192.168.0.0 through 192.168.255.255."

The binary representation of decimal value 222 is 11011110.

Yet it is said to be 10001010 (which converts to 138)

Note from the Author or Editor:
I can confirm this error. The rightmost octet in Figure 1-31 and 1-32 should appear as 11011110 (not 10001010).

In the book we read the following statement:

Some IP address ranges are reserved for use in private networks: 10.0.0.0?10.255.255.255, 172.16.0.0?172.31.255.254, and 192.168.0.0?192.168.255.254.

Private address ranges should include both the network and broadcast addresses. The second and third address ranges are missing the broadcast address (172.31.255.255 and 192.168.255.255 respectively).

Note from the Author or Editor:
I can confirm the error. Please change both instances of "254" to "255."

In the book we read the following statement:

Transition technologies have been defined to allow IPv4 and IPv6 to interoperate. With ISATAP, a special router negotiates directly between an IPv4-only and an IPv6-only LAN. 6to4 enables IPv6-only hosts to tunnel over an IPv4 network such as the Internet. Teredo is a host-based technology that is used when no other option is available. It uses Internet servers to help create IPv6 tunnels over the Internet.

While it is true that IPv6-only hosts benefit of 6to4 technology, a 6to4 host may have an IPv4 address. The current statement seems to exclude IPv6/IPv4 nodes (as defined on RFC 2893) from 6to4 support.

Note from the Author or Editor:
I agree that this wording is slightly misleading. Please replace "6to4 enables IPv6-only hosts" with "6to4 enables IPv6 hosts".

On the book we can read the followinq question:

2. Which technology allows an IPv4-only host to communicate with the IPv6 Internet?

Since RFC 4213 defines an IPv4-only node as "A host or router that implements only IPv4. An IPv4-only node does not understand IPv6." and the current lesson focuses on IPv6 transition technologies (with no reference to proxies) it seems the question should be "Which technology allows a host on an IPv4-only network to communicate with the IPv6 Internet?"

Note from the Author or Editor:
I can confirm that the text is misleading. Please change "an IPv4-only host" to "a host on an IPv4-only network".

On the book we read the following caption:

Figure 1-52 ISATAP routers allow IPv4-only and IPv6-only hosts to communicate with each other.

As for RFC 4213, an IPv4-only node is "A host or router that implements only IPv4. An IPv4-only node does not understand IPv6."
Since an ISATAP client uses IPv4 as a link layer for IPv6, the caption should be changed to something like "ISATAP routers allow IPv6 hosts to communicate with each other over an IPv4-only network"

Note from the Author or Editor:
The caption for Figure 1-52 is misleading. The caption should read, "ISATAP routers help tunnel IPv6 traffic across an IPv4 intranet."

On both the PDF and mobi versions we read the following statement:

The IANA has reserved certain ranges of IP addresses to be used only within private networks. These ranges include 10.0.0.0 through 10.255.255.254, 17.16.0.0 through 17.31.255.254, and 192.168.0.0 through 192.168.255.254.

Even if the available addresses falls within the indicated ranges, it is correct to include the broadcast addresses too, as reported on RFC 1918:
The Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of the IP address space for private internets:
10.0.0.0 - 10.255.255.255 (10/8 prefix)
172.16.0.0 - 172.31.255.255 (172.16/12 prefix)
192.168.0.0 - 192.168.255.255 (192.168/16 prefix)

Note from the Author or Editor:
In the third bullet point beneath the Lesson Summary, all instances of "254" should read "255.'

On both the PDF and mobi versions we read the following table:

Table 1-4 Private Address Ranges
Starting Address Ending Address
10.0.0.0 10.255.255.254
172.16.0.0 172.31.255.254
192.168.0.0 192.168.255.254

On the following paragraphs address ranges include both the network and the broadcast addresses. Table 1-4 should consistently include the broadcast addresses and read:
Starting Address Ending Address
10.0.0.0 10.255.255.255
172.16.0.0 172.31.255.255
192.168.0.0 192.168.255.255

Note from the Author or Editor:
In table 1-4, all instances of "254" should appear instead as "255."

In both the PDF and mobi versions we read the following statement:

This practice assumes that you have performed the computer lab setup as described in the Introduction to this book. On Dscrv1, Local Area Connection must be connected to the private lab network and Local Area Connection 2 must be disabled.

On the Introduction "Lab Setup Instructions" there's no reference to the number of network adapters configured on the Lab computers and nothing suggests DCSRV1 has a second NIC ("Local Area Connection 2"), so it is supposed it has a default one NIC configuration.

Note from the Author or Editor:
On page 36, the second sentence of the second paragraph should read, "On Dcsrv1, Local Area Connection must be connected to the private lab network." The rest of the sentence (which includes a reference to Local Area Connection 2) should be removed.

In both the PDF and mobi versions of the book we can read the following statement:

The Checksum field contains the result of a mathematical function whose purpose is to check the integrity of the IP header. A resulting sum of 0 confirms that the sum checks OK, and that the header has not been modified in transit.

As for RFC791, the Header Checksum is:
A checksum on the header only. Since some header fields change (e.g., time to live), this is recomputed and verified at each point that the internet header is processed.
The checksum algorithm is:
The checksum field is the 16 bit one's complement of the one's complement sum of all 16 bit words in the header. For purposes of computing the checksum, the value of the checksum field is zero.

Maybe the sample frame's checksum is 0x0 because of IPv4 Checksum Offload.

Note from the Author or Editor:
On page 9, second paragraph, please replace this (last) sentence:

"A resulting sum of 0 confirms that the sum checks OK, and that the header has not been modified in transit."

with this one:

"The checksum value of 0 here indicates that that the checksum value is being set and checked outside the TCP/IP stack."

Server Core installation option not defined correctly:
B. start /w ocsetup DHCPServer

Installation option should read:
B. start /w ocsetup DHCPServerCore

Note from the Author or Editor:
Answer choice B in Question 2 should read as follows:

"B. start /w ocsetup DHCPServerCore."