Info

audit: Audt tte accass cF aobal system ctJiBdts

Disabled

AlkíL (fw UK J R^ kif! flrld Rcllcr« pivin^

Disabled

a;fiudft: Shuc dtwrn system iirvnebately it tiiabe to eg security a-jiits

Dcabled

Sflreviíií}: Alta uníotKwthjul ttavng t<- 'So Ofi

Enabled

«^L^vces: ."'Hiwec tD format ard eisct removatJe inedia

Administrators

3!(|[>ívicej: Prevent Uirrr. f-oniin^olr g prin'iv driver*

En 40 ed

SS] Levees: Hastnct CD-ROht access toiacály logged-cn user only

Li cabled

wlrcvici:;; Re strict :> 'ppy kíííí to k¡<sllí baged-ufi ustr ori f

E netted

/^Devices: Lf:Sijred druw nstafction behauor

Do not alow instalatun

S3 Domain contrcJr?; Alow íín/ier iterators to schedule

Not Drfned

tMmaln corhrofcr LDfTP server Egnrg requrarrenti

Nona

SJÍ] Domain controle-: Reiusr matine acccuit PKlwcrd cringe*

Not Defied

-'y Leman rneimt-ei-: Digtally snci-ypt cr s¡gn secure channel dita (¿ways)

Énatled

ÑiflDom-iin member; Digtally mcrypt secure charral dita (^en possbt.)

Enabled

Domain irvannter: HgtaJly ngn ¿¿cue channel data (rthen p^ssrhe}

Enaded

Domain member; Disable mxHirie «count password changes

Disabled

¡i»] Loman ireiinber: MaKnum nnachrie account paswiord a^f

30 da.-;

!!f]&jirvjin member; Reguse strong (Wndo^s 2000 v later? sesson key

Enabled

You need to ensure that King can establish Remote Desktop connections with DC1. What should you do?

A. Direct King to establish a VPN connection with DC1 before he starts Remote Desktop Connection.

B. Direct King to set a password for his user account before he starts Remote Desktop Connection.

C. In the local security policy of DC1, disable the Require strong (Windows 2000 or later) session key setting.

D. In the local security policy of DC1, enable the Disable machine account password changes setting.

Answer: B

QUESTION NO: 44

You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.

A member server named TestKingSrvl runs Software Update Services (SUS). TestKingSrvl is configured to synchronize directly from the Microsoft Windows Update servers every day.

All client computers are configured to use the Automatic Updates client software to receive updates from TestKingSrv1. All client computers are located in an organizational unit (OU) named Clients.

Microsoft releases a critical security update for Windows XP Professional computers. TestKingSrv1 receives the update.

Client computers on the network do not receive this update. However, they receive other updates from TestKingSrv1.

You need to ensure that all client computers receive the critical security update. What should you do?

A. In the System Properties dialog box on each client computer, enable the Keep my computer up to date option.

B. Edit the Group Policy object (GPO) for the Clients OU by enabling the Reschedule Automatic Updates scheduled installations setting.

C. On TestKingSrvl, open the SUS content folder.

Select the file that contains the security update, and assign the Allow - Read permissions on the file to all client computers.

D. Use Internet Explorer to connect to the SUS administration page. Approve the security update.

Answer: D

QUESTION NO: 45

You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. The domain contains three servers. Information about the servers is shown in the following table.

Name

Operating system

Role

TestKingA

Windows Server 2003

Domain controller, DNS server

TestKmgB

Windows Server 2003

Domain controller, DNS server

TestKmgC

Windows 2000 Server

Application server

TestKingA is the start of authority (SOA) for testking.com.

TestKingA is the start of authority (SOA) for testking.com.

Test King adds a new branch office. The network in the new office is assigned to a child DNS domain named south.testking.com. The two domains connect to each other through a VPN connection. TestKingB is configured as the SOA for south.testking.com.

A Windows XP Professional computer named TestKing1 is located in the testking.com domain. The relevant portion of the network is shown in the exhibit.

A Windows XP Professional computer named TestKing1 is located in the testking.com domain. The relevant portion of the network is shown in the exhibit.

A user reports that he cannot connect to TestKingC from TestKing1. You need to ensure that client computers in the testking.com domain can resolve host named in south.testking.com.

What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two)

A. On TestKingB, add a host (A) record for TestKingA.

B. On TestKingA, add a delegation for south.testking.com.

C. On TestKingB, add a pointer (PTR) record for TestKingA.testking.com.

D. On TestKingA, add a host (A) record for TestKingB.

E. On TestKingA, add a stub zone for south.testking.com.

QUESTION NO: 46

You are the network administrator for TestKing. Your network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows 2000 Professional.

You install Windows Server 2003 with default settings on a new computer named TestKingSrvl. You install and share several printers on TestKingSrvl. You instruct all users to connect to these printers by using the address http://TestKingSrv1/Printers.

However, users report that they cannot connect to this address.

You need to ensure that all users can connect to the printers by using HTTP.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two)

A. Publish all shared printers that are installed on TestKingSrv1.

B. Create a virtual directory named Printers on TestKingSrv1.

C. Install IIS with default settings on TestKingSrv1.

D. Reshare all printers on TestKingSrv1.

E. Install the Internet Printing component of IIS.

F. Type Net Stat W3SVC at a command prompt.

QUESTION NO: 47

You are the network administrator for TestKing. The company operates a main office and two branch offices. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.

A server named TestKingSrvA is located in one of the branch offices, where it is a member of a workgroup. TestKingSrvA is configured with default operating system settings. Remote Desktop and Remote Assistance are enabled, and Windows Messenger is installed. The company intranet site is hosted on this server.

Mr King is the local administrator who manages the intranet site. He requests your assistance in installing an application on TestKingSrvA.

You need the ability to view Mr King's desktop during the installation process. What should you do?

A. From your computer, open a Remote Desktop connection with TestKingSrvA.

B. Direct Mr King to create and send an invitation for Remote Assistance from TestKingSrvA.

C. From your computer, offer Remote Assistance to TestKingSrvA.

D. Direct Mr King to start Application Sharing from Windows Messenger.

Answer: B

QUESTION NO: 48

You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. All network servers run Windows Server 2003.

All company Web sites are hosted on a server named TestKing5, which runs IIS. You create two new Web sites, Marketing and Sales. You create the appropriate host records on the DNS server. You test both Web sites offline and successfully access all content.

However, when you test the Web site online, you cannot access either site. You are directed to pages on the default Web site.

You open IIS Manager and see the display shown in the exhibit:

Internet 1 nlbnri.it ion Sennce-s (IIS) HMlaaci

ii^JilJ

Was this article helpful?

0 0

Post a comment