|
70-291
Hi I passed this with great score. Beleive
me its no more easy and some question are really
tricy.I am really thankful to
www.exams.ws for a best summary.
Q.
1 You are the network administrator for abc. The network consists
of a single Active Directory domain abc.com. The domain
contains Windows Server 2003 computers, Windows XP Professional
computers, and Windows 2000 Professional computers. An IPSec policy
is assigned to a server named abc A. By using the IP Security
Monitor console on abcA, you verify the IPSec communication
connections, and you notice that all computers that have established
security associations (SAs) with abcA are displayed by their
IP addresses. You want computers that have established SAs with abcA
to be displayed in IP Security Monitor by a fully qualified domain
name (FQDN). What should you do on abcA?
A. In the
assigned policy, add a new rule that filters all TCP and UDP traffic
on port 53. Configure the filter action to permit unsecured IP
packets to pass through.
B. Open the IP
Security Monitor console and configure the properties of abcA to
enable the Enable DNS name resolution option.
C. From a
command prompt, run the netsh ipsec static show all command.
D. From a
command prompt, run the netsh ipsec dynamic show all command.
Answer: B.
Q2 You are
the network administrator for abc. The network consists of two
Active Directory domains. One domain is named abc.com. A subsidiary
company named Acme has a domain named acme.com. Both domains are in
a single forest. A primary DNS server for abc.com is located in the
company’s Berlin office. A primary DNS server for acme.com is
located in the company’s Prague office. Both DNS servers are Windows
Server 2003 computers. Each domain has three regional offices. Each
regional office contains the following computers:
Company sales
representatives visit the Berlin office, the Prague office and all
regional offices several times each month. All sales representatives
use Windows XP Professional portable computers that are members of
the abc.com domain. You create an appropriate wpad.dat script file
on each of the ISA servers in each regional office. On each DHCP
server you configure the 252 Proxy Autodiscovery option and the
corresponding http://ISAServerName/wpad.dat string value.
Sales representatives report that they cannot access to the Internet
by using Internet Explorer when they visit an office that is in the
acme.com domain. You need to ensure that all users can access the
Internet at all times. You want to use the minimum amount of
administrative effort. What should you do?
A. Configure
Windows XP Professional portable computers with the primary DNS
suffix of acme.com.
B. Configure
the Advanced TCP/IP Settings settings on the Windows XP Professional
portable computers with a DNS suffix for this connection setting of
acme.com.
C. On each DHCP
server that is a member of the acme.com domain, configure the 015
DNS Domain Name option to be acme.com.
D. On the
primary DNS server for the acme.com domain, add an _http service
service locator (SRV) resource record for each ISA server in the
acme.com domain.
Answer: C
Q. 3 You are
the network administrator for abc. The network contains 12 Windows
Server 2003 computers and 300 Windows XP Professional computers.
Three servers named abc4, abc5, and abc6 run a critical business
application. When performing performance baselining on these three
servers, you notice that abc6 has a larger number of concurrently
connected users at any given moment than abc4 or abc5. The
additional workload is causing performance problems on abc6. You
need to identify which client computers are connected to abc6. You
plan to run Network Monitor on abc6 to capture all packets sent to
abc6. The capture task must be configured to meet the following
requirements:
·
To reduce the size of the captured data, you want to
capture only the packet headers.
Which two tasks
should you perform to configure Network Monitor? (Each correct
answer presents part of the solution. Choose two)
A. Configure the
Network Monitor display filters.
B. Configure the
Network Monitor capture filters.
C. Increase the
Network Monitor buffer size setting.
D. Decrease the
Network Monitor buffer size setting.
E. Increase the
Network Monitor frame size setting.
F. Decrease the
Network Monitor frame size setting.
Answer: C, F
Q. 4 You are
the network administrator for abc. The network contains Windows
Server 2003 computers and Windows XP Professional computers. You
install Software Update Services (SUS) on a server named abcSrv. You
scan the client computers to find out if any current hotfixes are
installed. You notice that no client computers have been updated
during the past seven days. You are unable to access the
synchronization logs on abcSrv. You need to ensure that SUS is
functioning properly..What should you do on abcSrv?
A. Delete the
History_Approve.xml file and restart the computer.
B. Delete the
Aucatalog.cab file and restart the computer.
C. Restart the
Background Intelligent Transfer Service (BITS).
D. Restart all
IIS-related services.
Answer: D
Q. 5 You are
the network administrator for abc. The network consists of a single
Active Directory domain named abc.com. The functional level of the
domain is Windows Server 2003. You install Terminal Services on all
domain controllers. However, your technical support specialists
report that they cannot use Terminal Services to access any domain
controllers. Which action or actions should you perform to solve
this problem? (Choose all that apply)
A. Install
Remote Desktop for Administration.
B. Require the
support specialists to use a console session to connect to the
terminal servers.
C. Add the
Remote Administrators group to the Account Operators group.
D. Add the
support specialists to the Remote Desktop group.
E. Modify the
Default Domain Controller Group Policy object (GPO) to grant the Log
on locally user right to the support specialists.
Answer: A, D
Q. 6 You are
the network administrator for abc. The network consists of a single
Active Directory domain named abc.com. The network contains a
Windows Server 2003 computer named abcSrv A. abcSrvA is a domain
controller and primary DNS server for abc.com. The company opens a
new branch office. A Windows Server 2003 computer named Serve2 is
located at the new office. abcSrvB is a domain controller and a DNS
server. You set up a DNS zone for east.abc.com on Serve2. You need
to ensure that computers in abc.com can resolve host names in
east.abc.com on abcSrvB.
What are two
possible ways to achieve this goal? (Each correct answer presents a
complete solution. Choose two)
A. Add a
start-of-authority (SOA) record to abcSrvA that refers to
abcSrvB.east.abc.com.
B. Add a new
delegation on abcSrvA for east.abc.com to abcSrvB.
C. Add a new
stub zone to abcSrvA named east.abc.com.
D. Add a
service locator (SRV) record to abcSrvA that refers to
abcSrvB.east.abc.com.
Answer: B, C
|
