Info

Laptop Repair Made Easy

Laptop Repair Made Easy

Get Instant Access

iutoviaric

Lüc-aä System

"^jjecandary Log^n

Startud

Automatic

Local System

%webcllent

stattec)

Autocratie

LocaJ Service

You need to enable users to access the intranet Web content on TestKingA.

Which two actions should you perform on TestKingA? (Each correct answer presents part of the solution. Choose two)

A. Start the Computer Browser service.

B. Start the HTTP SSL service.

C. Start the Net Logon service.

D. Restart the Secondary Logon service.

E. Restart the Web Client service.

QUESTION NO: 141

You are the network administrator for TestKing. The network consists of two Active Directory domains. One domain is named testking.com. A subsidiary company named Acme has a domain named acme.com. Both domains are in a single forest.

A primary DNS server for testking.com is located in the company's Berlin office. A primary DNS server for acme.com is located in the company's Prague office. Both DNS servers are Windows Server 2003 computers.

Each domain has three regional offices. Each regional office contains the following computers:

• A secondary DNS server in its respective domain.

• A recently installed Microsoft Internet Security and Acceleration (ISA) Server computer that connects the LAN to the Internet.

Company sales representatives visit the Berlin office, the Prague office and all regional offices several times each month. All sales representatives use Windows XP Professional portable computers that are members of the testking.com domain.

You create an appropriate wpad.dat script file on each of the ISA servers in each regional office. On each DHCP server you configure the 252 Proxy Autodiscovery option and the corresponding http://ISAServerName/wpad.dat string value.

Sales representatives report that they cannot access to the Internet by using Internet Explorer when they visit an office that is in the acme.com domain. You need to ensure that all users can access the Internet at all times. You want to use the minimum amount of administrative effort.

What should you do?

A. Configure Windows XP Professional portable computers with the primary DNS suffix of acme.com.

B. Configure the Advanced TCP/IP Settings settings on the Windows XP Professional portable computers with a DNS suffix for this connection setting of acme.com.

C. On each DHCP server that is a member of the acme.com domain, configure the 015 DNS Domain Name option to be acme.com.

D. On the primary DNS server for the acme.com domain, add an _http service service locator (SRV) resource record for each ISA server in the acme.com domain.

Answer: C

QUESTION NO: 142

You are the network administrator for TestKing. The network contains 12 Windows Server 2003 computers and 300 Windows XP Professional computers.

Three servers named TestKing4, TestKing5, and TestKing6 run a critical business application. When performing performance baselining on these three servers, you notice that TestKing6 has a larger number of concurrently connected users at any given moment than TestKing4 or TestKing5. The additional workload is causing performance problems on TestKing6. You need to identify which client computers are connected to TestKing6.

You plan to run Network Monitor on TestKing6 to capture all packets sent to TestKing6. The capture task must be configured to meet the following requirements:

• To reduce the size of the captured data, you want to capture only the packet headers.

• If a large number of packets are captured, the packets must be retained on the server. Captured packets must not overwrite previously captured packets.

Which two tasks should you perform to configure Network Monitor? (Each correct answer presents part of the solution. Choose two)

A. Configure the Network Monitor display filters.

B. Configure the Network Monitor capture filters.

C. Increase the Network Monitor buffer size setting.

D. Decrease the Network Monitor buffer size setting.

E. Increase the Network Monitor frame size setting.

F. Decrease the Network Monitor frame size setting.

QUESTION NO: 143

You are the network administrator for TestKing. The network consists of a single Active Directory domain named testking.com. The functional level of testking.com is Windows Server 2003. The sales division has 500 users. These users belong to global groups as shown in the following table.

Group name

Users

Member of

Sales Users

All sales personnel

None

Internal Sales

Internal sales personnel

Sales Users

All sales personnel with the exception of the employees in the Internal Sales group, are roaming users who require access to the network from remote locations.

You configure a server named TestKing13 to function as a Routing and Remote Access server. In the properties of all user accounts, you enable the Control access through remote access policy setting.

You need to configure remote access polices on TestKing13. You also need to ensure that only roaming users are able to connect to TestKing13 from remote locations.

What should you do?

A. 1. Create a remote access policy named Policy1.

On Policy1, add the policy condition Windows-Groups matches "testking.com\Sales Users". Configure Policy1 to allow access based on this policy condition. 2. Create a remote access policy named Policy2.

On Policy2, add the policy condition Windows-Groups matches "testking.com\Internal Sales".

Configure Policy2 to ************MISSING*************

B. 1. Create a remote access policy named Policy1.

On Policy1, add the following condition Windows s-Groups matches "testking.com\Sales Users". Configure Policy1 to allow access based on this policy condition.

2. Create a remote access policy named Policy2.

On Policy2, add the policy condition Windows s-Groups matches "testking.com\Internal Sales". Configure Policy2 to deny access based on this policy condition.

3. Assign Policy2 an order of 1. Assign Policy1 an order of2.

C. 1. Create a remote access policy named Policy1.

On Policy1, add the policy condition Windows s-Groups matches "testking.com\Sales Users".

2. On Policy1, add the second policy condition Windows s-Groups matches "testking.com\Internal Sales".

3. Configure Policy1 to deny access based on these policy conditions.

D. 1. Create a remote access policy named Policy1.

On Policy1, add the following condition Windows s-Groups matches "testking.com\Sales Users".

2. On Policy1, add the second policy condition Windows s-Groups matches Windows s-Groups matches "testking.com\Internal Sales".

3. Configure Policy1 to allow access based on these policy conditions. Answer: B

QUESTION NO: 144

You are the network administrator for TestKing. The network contains 400 Windows XP Professional computers and a Windows Server 2003 computer that runs Microsoft Internet Security and Acceleration (ISA) Server.

Three hundred employees work from remote locations. These users dial in to the company LAN to establish an Internet connection and then using a VPN connection to connect to a Windows Server 2003 computer named TESTKINGRAS. Internet access speeds among the dial-in users range from 28.8 Kbps to 3 Mbps.

The proxy server logs a higher level of Internet activity when the dial-in users connect. The DNS server forwards DNS queries to two Internet service provider (ISP) DNS servers.

Regardless of Internet access speed, dial-in users report that local Web browsing for public Internet pages slows dramatically whenever they establish a VPN connection to TESTKINGRAS.

You run a network monitoring utility and verify that the LAN bandwidth utilization is within acceptable limits.

You need to resolve the slow Internet performance issue. You plan to use the Connection Manager Administration Kit wizard to configure all the dial-in user connections.

What should you do?

A. Configure the Internet Explorer LAN settings to Automatically detect settings.

B. In the TCP/IP settings for each VPN client connection, add the DNS IP addresses of the two DNS servers hosted by the ISP as the primary DNS address.

C. In the TCP/IP settings for each VPN client connection, add the DNS IP address of TestKing's DNS server as the primary DNS address.

D. In the TCP/IP settings for each VPN client connection, clear the Make this connection the client's default gateway check box.

Answer: Pending. If you have a suggestion mail it to [email protected].

QUESTION NO: 145

You are the network security administrator for TestKing. The network consists of a single Active Directory domain testking.com. The domain contains Windows Server 2003 computers and Windows XP Professional computers.

The human resources department stores confidential data on a server named TestKingB. The written company security policy states that TCP/IP traffic sent to and from TestKingB must be encrypted.

You need to encrypt all TCP/IP traffic that is sent between TestKingB and the client computers in the human resources department.

What should you do?

A. Use autoenrollment to request and install an IPSec certificate on all client computers in the human resources department and on TestKingB.

B. Use autoenrollment to request and install a Computer certificate on all client computers in the human resources department and on TestKingB.

C. Use Encrypting File System (EFS) to encrypt all human resources data that is stored on TestKingB.

D. Assign the Secure Server IPSec policy to TestKingB.

Assign the Client IPSec policy to all client computers in the human resources department.

Answer: D

QUESTION NO: 146

You are the network administrator for TestKing. The relevant portion of the network is shown in the exhibit.

TestKingSrvA

TestKing.

Was this article helpful?

0 0

Post a comment