|
|
|
|
Microsoft - Braindumps
Zurück
zu Braindumps zu Microsoft-Prüfung Nr. 70-216
Prüfung: Microsoft 70-216
Implementing and Administering a Microsoft® Windows® 2000 Network Infrastructure
|
Alles von & über Microsoft!
Braindumps-Eintrag:
| Gepostet von: @m0re | | Titel: über 50 fragen | | Datum: 10.04.2003 |
| 1. You are creating a DHCP scope for your 192.168.1.32/28 subnet. The subnet consists of Windows 2000, Windows 98, and Windows 95 computers.
You have two UNIX computers on this subnet that will be assigned the two highest available static IP addresses. The subnet's default gateway will be assigned the lowest available IP address on the subnet.
Which scope should you create on your DHCP server?
A. 192.168.1.34 - 192.168.1.46
B. 192.168.1.34 - 192.168.1.44
C. 192.168.1.33 - 192.168.1.45
D. 192.168.1.34 - 192.168.1.61
E. 192.168.1.33 - 192.168.1.60
Answer B
2. You install Network Monitor on a Windows 2000 Server to analyze ISO and TP4 communications to the Microsoft Exchange Server on your network. How should you configure Network Monitor? (Choose two)
A. Change the Temporary Capture Directory.
B. Copy ISO.dll and TP4.dll to Netmon Subdirectory.
C: Copy ISO.DLL and TP4.DLL to the NetMonParsers subdirectory.
D: Modify the Parser.ini.
E. Modify the Netmon.ini.
Answers : C, D. [Agreed]
4. Your network uses an address of 172.30.0.0/16. Your projected growth for the network indicates a need for at least 25 subnets with a minimum of 1,000 hosts per subnet. What subnet mask should you configure to meet these needs?
A: 255.255.252.0
3. You administer your company's Windows 2000 network. Your network consists of 5 Windows 2000 Server computers, 300 Windows 2000 Professional computers, and 10 UNIX servers. One of your Windows 2000 Server computers is your DNS server. The DNS zone is configured as an Active Directory integrated zone. The DNS zone is also configured to allow dynamic updates.
Users report that although they can access the Windows 2000 computers by host name, they cannot access the UNIX servers by host name.
What should you do?
A. Manually enter A (host) records for the UNIX servers in the zone database
B. Manually add the UNIX servers to the Windows 2000 domain
C. On the DNS server, manually create a HOSTS file that contains the records for the UNIX servers
D. Configure a UNIX computer to be a DNS server in a secondary zone
Answer A [Agreed]
4. You are the administrator for a Windows 2000 network. Your internal DNS server is located behind a firewall. When you test your DNS server by using the Monitoring tab on the server's properties page, the DNS server passes the simple test but fails the recursive test.
What should you do?
A. Run ipconfig /registerdns
B. Delete the %systemroot%system32dnscache.dns file
C. Copy the %systemroot%system32dnssamplescache.dns file to %systemroot%dns, and overwrite the existing cache.dns file
D. Create a forward lookup zone for the root zone. Name the forward lookup zone "."
Answer C
5. Your WAN network consists of ten internal subnets in two physical buildings connected by routers. An additional subnet is configured for Internet access. All routers on the network will be multihomed Windows 2000 Servers running Routing and Remote Access.
You want to accomplish the following goals:
1. Administrative overhead for routing tale configuration is minimized.
2. Broadcast traffic for routing table configuration is minimized.
3. Link redundancy within ten minutes is ensured in case of router failure.
4. Ensure convergence times of less than one minute for all known routes.
5. Internal routing information will never be exposed to external routers.
You take the following actions:
.Install RIP version 1.
.Configure RIP to use all interfaces on all multihomed computers.
.Enable RIP authentication by specifying a password on each interface.
.What results do these actions produce? (Choose all that apply)
A. Administrative overhead for routing tale configuration is minimized.
B. Broadcast traffic for routing table configuration is minimized.
C. Link redundancy within ten minutes is ensured in case of router failure.
D. Ensure convergence times of less than one minute for all known routes.
E. Internal routing information will never be exposed to external routers.
Answer A, E
6. Your Web server is configured to run a third party Web application for users on your network. Users complain that each time they try to connect to a secure Web page stored on the Web server, they receive the error message "Web page requested is not available". They have no problem connecting to FTP.
You have verified that the Web service has started. What should you do to diagnose this problem?
A. Verify that port 443 is permitted in your TCP/IP filter.
B. Verify that port 80 is permitted in your TCP/IP filter.
C. Verify that port 21 and port 20 is permitted in your TCP/IP filter.
D. Verify that the correct NTFS file permissions are configured for the web page.
Answer A [Agree]
7. Your domain is in mixed mode. Routing and Remote Access is enabled for remote access on Srv1. The domain also has a Windows NT 4.0 member server computer named Srv2. Srv2 is running Remote Access Service (RAS). Users in the domain use Windows 2000 Professional computers to dial in to the network through Srv1 or Srv2. However, Srv2 is not able to validate remote access credentials of domain accounts.
How should you configure the network to enable Srv2 to validate remote access domain users?
A. Add the Everyone group to the RRAS access group
B. Configure srv2 as a DHCP relay agent
C. Configure Srv1 to use MSChap for authentication and Srv2 to use Chap
D: Add the Everyone group to the Pre-Windows 2000 Compatible Access group.
Answer D [Agree]
8. You are the administrator of your domain. You have client computers evenly distributed across five sites. Atlanta.xco.com recently upgraded its two DNS servers that service the subdomain. You suspect the upgrade has resulted in an incorrect configuration of your zone delegation.
What should you do to verify proper zone delegations?
A. Use System Monitor to confirm that the counters for the DNS zone transfer failure are zero.
B. Use System Monitor to confirm that the counters for the DNS recursive query are zero.
C. Run the nslookup -querytype=ns atlanta.xco.com command with the server option set to query the atalanta.xco.com server. Ping the records displayed in the output of the nslookup command.
D. Run the nslookup -ls -d atlanta.xco.com command. Ping the records displayed in the output of the nslookup command.
Answer C
9. Your domain has a Windows 2000 member server computer named London and a DHCP server. Routing and Remote Access is enabled for remote access on London. The domain is in native mode. Users in the domain dial in to the network by using Windows 2000 Professional portable computers. Dial-up connection configuration for the Windows 2000 Professional computers is set to obtain an IP address automatically. You do not want to change this configuration. You want to designate a fixed IP address for each of the users. All users should receive a different fixed IP address when a dial-up connection is made. How should you configure the network to accomplish this goal?
A. Configure each laptop with a specific static IP address
B. Create a user class for the laptops and exclude these IP addresses from the DHCP scope
C. In Active Directory Users and Computers, assign a static IP address for each user
D. Create a separate subnet for the laptops and configure DHCP to issue IP addresses for this subnet only to the laptops
Answer C
10. To allow Internet access through a dial-up connection to Server A, you install NAT routing protocol. All computers in your network use Automatic Private IP addressing. There is no DHCP server in the network. Server A is configured as below:
LAN interface has an IP address of 10.65.3.1 and a subnet mask of 255.255.255.0.
NAT automatically assigns IP addresses of 10.65.3.2 through 10.65.3.60 to computers on the private interface.
NAT uses a demand-dial interface named Dial ISP to connect to the ISP.
The demand-dial interface uses an address pool of 207.46.179.33 through 207.46.179.36.
The routing table has a default static route for the public interface.
What configuration should you use for the static route for the public interface?
A. Interface: Local Network Connection
Destination: 207.46.179.44
Network Mask: 255.255.255.255
Gateway: 0.0.0.0
B. Interface: Local Network Connection
Destination: 10.65.3.0
Network Mask: 255.255.255.0
Gateway: 10.65.3.1
C. Interface: Dial ISP
Destination: 0.0.0.0
Network Mask: 0.0.0.0
Gateway: None
D. Interface: Local Network Connection
Destination: 207.46.174.32
Network Mask: 255.255.255.240
Gateway: 207.46.179.32
Answer C
11. You are the administrator of your company's network You are configuring your users' portable computers to allow users to connect to the company network by using Routing and Remote Access. You test the portable computers on the LAN and verify that they can successfully connect to resources on the company network by name. When you test the connection through Remote Access, all of the portable computers can successfully connect, but they cannot access files on computers on different segments by using the computer name.
What should you do to resolve this problem?
A. Set the authentication method to Allow remote systems to connect without authentication
B. Enable the computer account for each portable computer
C. Change the computer name on each portable computer
D. Install the DHCP Relay Agent on the Remote Access server
Answer D
12. You install and configure DHCP Server service on a Windows 2000 Server to automate TCP/IP client configuration. You create a scope that contains the range of valid IP addresses. You create an exclusion range, and address reservations for your TCP/IP network printers so they will always receive the same address.
None of your printers are receiving addresses from the DHCP server. Client computers are not experiencing problems. What should you do?
A. Remove the address reservation for the printers
B. Remove the exclusion range for the addresses that are in use by the printers.
C. Disable address conflict detection feature of the dhcp server service
D. Enable address conflict detection feature of the dhcp server service
Answer B
13. You are configuring a Windows 2000 network for dial-up access. Your company issues smart cards to all users who have dial-up access. What should you do to configure your Routing and Remote Access server? (Choose two)
A. Configure the use of Mutual Authentication.
B. Configure the RRAS server to use SLIP for dial-in
C. Select the Extensible Authentication Protocol (EAP) check box
D. Install a smart card logon certificate on the RRAS.
E. Configure the RRAS server to use the PAP protocol
F. Configure the RRAS server to use the IPSec protocol
Answer C, D
14. You are the administrator of a Windows 2000 network. Your company's primary DNS server, named ns1.contoso.com, is heavily used, and the CPU utilization on this server is consistently high.
Because of the large number of records that are stored on the DNS server, you suspect that some DNS queries result in answers that exceed the limit for a single UDP packet
You want to know if answers to DNS queries are exceeding the limit for a single UDP packet
What should you do?
A. Start System Monitor. On the DNS server, monitor the counters for DNS TCP Responses Sent and DNS TCP Responses Sent/Sec.
B. Start System Monitor. On the DNS server, monitor the counters for DNS UDP Message Memory.
C. Use Network Monitor to analyze network traffic. Use nslookup on a separate computer to query for NS records on the primary DNS server. Compare the number of UDP packets returned from the DNS server in response to your queries with the number of queries you issued
D. Use Network Monitor to analyze network traffic. From a client computer on your network, ping host records that are stored on your DNS server. Compare the number of UDP packets returned from the DNS server in response to your queries with the number of queries you issued
Answer C
60. You are the administrator of a Windows 2000 network. Your company's primary DNS server, named ns1.contoso.com, is heavily used, and the CPU utilization on this server is consistently high.
Because of the large number of records that are stored on the DNS server, you suspect that some DNS queries result in Answer that exceed the limit for a single UDP packet. You want to know if Answer to DNS queries are exceeding the limit for a single UDP packet What should you do?
a. Start System Monitor. On the DNS server, monitor the counters for DNS TCP Responses Sent and DNS TCP Responses Sent/Sec.
b. Start System Monitor. On the DNS server, monitor the counters for DNS UDP Message Memory.
c. Use Network Monitor to analyze network traffic. Use nslookup on a separate computer to query for NS records on the primary DNS server. Compare the number of UDP packets returned from the DNS server in response to your queries with the number of queries you issued
d. Use Network Monitor to analyze network traffic. From a client computer on your network, ping host records that are stored on your DNS server. Compare the number of UDP packets returned from the DNS server in response to your queries with the number of queries you issued
Answer:d
15. You enable route and remote access on a computer running win2000 server.
The Windows 2000 server is configured for use as a VPN Access to the VPN should be limited to employees who belong to the windows 2000 domain local security group VPN-Access.
You configure an account for each member of the VPN-Access group by setting the option "control access through Remote Access Policy". You then delete the default remote access policy.
What step should you take to limit access to the VPN to only members of the VPN_Access Group?
A. Configure the remote access server to use the EAP-TIS authentication.
B. Create a remote access policy and set the condition Windows-Groups to VPN-access in the policy
C. Create a remote access policy and set the profile associated with the policy to allow access only to VPN-Access
D. Create a remote access policy and set the permissions of the remote access policy object to allow read only to VPN-Access
Answer B
16. You have seven Windows 2000-based WINS servers in separate locations. How should you configure these servers to have a convergence time of less than 60 minutes. What should you do?
A. Create a display of the seven WINS servers in a circular arrangement Configure each WINS server as a push/pull partner with the two WINS servers beside it in the circle .Use a replication interval of 25 minutes
B. Designate one of the WINS servers as the central WINS server. Configure the other WINS servers as push/pull partners with the central server. Configure the central WINS server as push/pull partner with the other WINS servers. Use a replication interval of 25 minutes.
C. Configure each WINS server to automatically configure the other WINS servers as its replication partners Use the default interval time for automatic partners configuration.
D. Configure each WINS server to use a renew interval of 50 minutes. Use the default value for the verification interval
Answer B
17. You are the administrator of your companies network. You want to configure remote administration for your network. You install Routing and Remote Accessona Windows 2000 domain controller.
You take the following actions
Set the level or levels of encryption to No Encryption and Basic.
Add Domain Admins to the Windows Group Policy condition.
Configure the rest of the remote access policy as shown in the exhibit
(Click the Exhibit button)
Configure the remote access policy Disconnect if idle for 60 minutes
Configure the remote access policy Restrict maximum session time 20 minutes
Configure the remote access policy Restrict access to the following days and times to
Sun 07:00-16:00
Mon 07:00-16:00
Tue 07:00-16:00
Wed 07:00-16:00
Thu 07:00-16:00
Fri 07:00-16:00
Sat 07:00-16:00
What result or results do these actions produce? (Choose all that apply)
A. Only administrators have dial-up access
B. Dial-up connections are accepted only between 4.00 PM and 7.00 A.M
C. Connections are forcibly disconnected after 20 minutes of inactivity
D. All connections encrypt all communications
E. Connections are limited to 60 minutes
Answer A
19. Your main office and two branch offices are connected by dedicated T1 lines. Two additional branch offices use 128-Kbps ISDN lines and Routing and Remote Access over the Internet to connect to the company's network. You are designing your DNS name resolution environment, and want to accomplish the following goals:
DNS Name resolution traffic across the WAN should be minimized.
DNS Replication traffic across the WAN should be minimized.
DNS Replication traffic across the public WAN should be secure.
Name resolution performance for client computers should be optimized.
You take the following actions:
Install the DNS Server service on one server at each office.
Create a standard primary zone at the main office.
Create a standard secondary zone at the four other offices.
Configure client computers to query their local DNS server.
What results do these actions produce?
A. DNS Name resolution traffic across the WAN should be minimized.
B. DNS Replication traffic across the WAN should be minimized.
C. DNS Replication traffic across the public WAN should be secure.
D. Name resolution performance for client computers should be optimized.
Answer A, D
20. You are a branch office network administrator. You are connected to the company network via a Windows 2000 Routing and Remote Access two-way demand-dial connection over ISDN. Sensitive company data, e-mail, and application traffic is sent across the connection.
You take the following actions:
Install a Certificate Services server at the main office.
Enable EAP-TLS as the authentication protocol on both Routing and Remote Access servers.
Enable RIP version 2 on the demand-dial interfaces.
Which results do these actions produce? (Choose all that apply)
A. All data should be secure.
B. Rogue routers will be prevented from exchanging router information with either router.
C. Both routers will be able to validate each other.
D. Both routers will maintain up-to-date routing tables.
E. Traffic over the link during peak business hours will be minimized.
Answer A, C,D
21. You are a branch office network administrator. You are connected to the company network via a Windows 2000 Routing and Remote Access two-way demand-dial connection over ISDN. Sensitive company data, e-mail, and application traffic is sent across the connection.
You want to accomplish the following goals:
All data should be secure.
Rogue routers will be prevented from exchanging router information with either router.
Both routers will be able to validate each other.
Both routers will maintain up-to-date routing tables.
Traffic over the link during peak business hours will be minimized.
You take the following actions:
Enable MS-CHAP as the authentication protocol on both Routing and Remote Access servers.
Enable OSPF on the demand-dial interfaces.
Set the Require Encryption option on both Routing and Remote Access servers.
Which results do these actions produce? (Choose all that apply)
A. All data transmitted over the connection is secure.
B. Prevent Rogue routers from exchanging router information with either router.
C. Both routers will be able to validate each other.
D. Both routers maintain up-to-date routing tables.
E. Traffic over the link during peak business hours will be minimized.
Answer A, D [Agree]
Q. 22
You are the administrator of your company’s network. To allow fault tolerance for your external DNS Server, your Internet Service Provider (ISP) hosts a DNS Server on its UNIX Server. The UNIX Server issused as the secondary DNS server for your primary external DNS Server.
Users inform you that they are not able to connect to the URL of the company’s web Server. You investigate and discover that this inability to connect occurs during times when your primary external DNS Server is unavailable.
What should you do to resolve this problem?
To answer, click the appropriate check box in the Advanced tab of the Properties dialog box.
Answer: In the Server options list, select the ‘Bind Secondaries’ check box
Q. 23
You are the administrator of a Windows 2000 network that consists of three subnets. For load-balancing purposes, each web server on the network is configured to maintain exactly the same content as all the other web servers.
You want to configure your DNS server to allow users to type a host name in their browser to connect to web server that is on the same subnet. The host name that all users type will be identical regardless of the subnet they are on.
How should you configure your DNS server?
A. On the primary DNS server, create three A (host) records that map the same host name to the IP address of the web server on each subnet.
B. On the primary DNS server, create one A (host) that is located on the same subnet as the DNS server. On the secondary DNS servers on the two remaining subnets, edit the zone file for the domain on each DNS server to include an A (host) record for the web server on each subnet.
C. On the primary DNS server, create three A (host) records that map a different host name to the IP address of the web server on each subnet.
D. On the primary DNS server, create one A (host) record for one web server and two CNAME (canonical name) records for the remaining two web servers.
Answer: A.
Q.24
You are the administrator of Windows 2000 network. The network contains a Windows 2000 server computer named Dublin. Dublin has two network interfaces named SideA and SideB. Routing and remote access is enabled as a router on Dublin.
Only the network segment connected to the SideA interface has a DHCP server. The DHCP server is a Windows 2000 server named ServerA.
The network is shown in the exhibit. .
You want to allow computers on segment connected to the SideB interface to receive IP addresses from ServerA.
How should you configure Dublin to accomplish this goal? (Choose all that apply)
A. Create an IP tunnel to connect the SideA interface to the SideB interface.
B. Create a static route to the IP address of the SideB interface.
C. Configure the DHCP Relay Agent routing protocol to run the SideA interface.
D. Configure the DHCP relay agent routing protocol to run the SideB interface.
E. Configure the DHCP relay agent routing protocol to use the IP address of the DHCP server as the server address.
F. Configure the DHCP relay agent routing protocol to use the port number of the DHCP server.
Answer: D, E.
Q. 26
You are the administrator of a Windows 2000 domain named contoso.com. The domain has a Windows 2000 member server computer named Ras1 and a Windows 2000-based DHCP server computer named Dora. Routing and Remote access is enabled for access on Ras1. The network has two DNS servers that use IP addresses of 10.1.5.2 and 10.1.5.3.
Ras1 has configured to use DHCP to assign IP addresses to the remote access client computers.
The configuration of the scope options on the DHCP server is shown in the following windows. The DHCP scope does not have any client computer reservations.
When remote access client computers dial into Ras1, they receive an IP address form the DHCP scope range, but they do not receive the DNS address configured in the DHCP scope. Instead, the remote access client computers receive a DNS server address of 10.1.5.2.
You want the remote access client computers to receive the DNS option from the DHCP server.
How should you configure the network to accomplish this goal?
A. Configure the remote access client computers to enable DHCP on the dial-up connection.
B. Configure Ras1to use Windows authentication.
C. Install and configure the DHCP relay agent routing protocol on the internet interface of Ras1.
D. On the DHCP server, configure the DNS scope option of 10.1.5.3 for the default routing and remote access user class.
Answer: C
Q. 27
You are the administrator of your company’s network. Network is configured as shown in the exhibit.
You are configuring your Windows 2000 server computer that runs Internet Information Server (IIS).
Your Server uses the IP address of 131.107.2.2 to support Internet users. Your server uses the IP address of 10.1.1.2 to support an intranet application.
You want to configure your server to permit only web communications from the Internet. You also want to configure your server to allow access to shared folders and other resources for users on the intranet.
What should you do? (Choose two)
A. Enable a TCP filter. Permit only port 80 on the network adapter that uses the IP address of
131.107.2.2.
B. Enable a TCP filter. Permit only port 21 and port 20 on the network adapter that uses the IP address of 131.107.2.2.
C. Permit all ports on the network adapter that uses the IP address of 131.107.2.2.
D. Enable a TCP filter. Permit only port 80 on the network adapter that uses the IP address of 10.1.1.2.
E. Enable a TCP filter. Permit only port 21 and port 20 on the network adapter that uses the IP address of 10.1.1.2.
F. Permit all ports on the network adapter that uses the IP address of 10.1.1.2.
Answer: A, F
Q. 28
You are the administrator of your company's network. The network consists of 10 Windows 2000 Server computers, 200 Windows 2000 Professional computers, 250 Windows 98 computers, and 25 UNIX workstation computers running SMB server software. The network runs only TCP/IP as its transport protocol. You implement WINS in the network for NetBIOS name resolution.
Users of the Windows-based client computers report that they cannot access resources based on the UNIX computers by NetBIOS name. There is no problem accessing Windows-based resources by NetBIOS name.
What should you do to resolve this problem?
A. Install a WINS proxy agent on one of the UNIX computers.
B. Install a WINS proxy agent on one of the Windows-based computers.
C. On the WINS server, create static mappings for the UNIX computer.
D. On the WINS server, create static mappings for the Windows-based computers.
Answer: C
Q. 29
You are the administrator of your company's network. The network consists of Windows 2000 Server computers, Windows NT Workstation client computers, and Windows for Workgroups 3.11 client computers distributed across three subnets. All client computers are configured as DHCP client computers to automate TCP/IP configuration.
You install a WINS server on one subnet on your network. You also define a DHCP scope option to include the WINS server's address.
Users report that they can access resources on servers on their own subnet, but they cannot access resources on other subnets.
What should you do to resolve this problem?
A. Use the ipconfig/renew command to refresh the client computers' configuration
B. Use the ipconfig/release command to refresh the client computers' configuration.
C. Install a WINS proxy agent on the subnet that hosts the WINS server.
D. Install a WINS proxy agent on the subnets that do not host the WINS server.
Answer: D
Q. 30
You are the administrator of a Windows 2000 network. The network has three segments connected by a router. Each segment contains a Windows 2000-based WINS server and two other Windows 2000 Server computers. The network also has 300 Windows NT Workstation 4. 0 WINS client computers distributed evenly over the three segments.
Users in each network segment inform you that they cannot browse any network resources on the other network segments. They do not have problems browsing their own segment.
How should you configure the network to enable users to browse for network resources on all three network segments?
A. Configure all WINS client computers to be NetBIOS node type Mixed (m-node)
B. Configure all WINS client computers to use all three WINS servers.
C. On each WINS server, configure the Lmhosts file to contain entries that include #PRE and #DOM For the other two WINS servers
D. Configure the three WINS servers as replication partners of one another.
Answer: D
Q. 31
You are the administrator of a Windows 2000 network. The network has seven Windows 2000-based WINS servers, and each is in a separate location.
Because network users frequently logon at different locations, you want to configure the seven WINSservers to have a convergence time of less than one hour.
How should you configure the seven WINS servers to accomplish this goal?
A. Create a display of the seven WINS servers in a circular arrangement.
Configure each WINS server as a push/pull partner with the two WINS servers beside it in the circle. Use a replication interval of 25 minutes.
B. Designate one of the WINS servers as the central WINS server.
Configure the other six WINS servers as push/pull partners with the central WINS server. Configure the central WINS server as the push/pull partner with the other six WINS servers.
Use a replication interval of 25 minutes.
C. Configure each WINS server to automatically configure the other WINS servers as its replication partners. Use the default interval time for automatic partner configuration.
D. Configure each WINS server to use a renew interval of 50 minutes.
Use the default value for verification interval.
Answer: B
Q. 32
You are the administrator of your company’s network. Your network is configured to use DHCP to automate the TCP/IP configuration of client computers on your network. All client computers are running Windows 2000 Professional.
To provide router and DNS server information to the client computers, you configure options at the scope level. Your network has certain computers that always require specific address and configuration.
You configure reservations in your scope for these computers.
Your Internet service provider (ISP) brings a new router online, which changes your Internet gateway.
You reconfigure your scope options to reflect the new router address.
Users of the computers that have the reserved addresses report that they can no longer gain access to Internet, even after they have restarted their computers.
Which two actions should you take to resolve the problem? (Choose Two)
A. Use the ipconfig/release command at each client computer.
B. Use the ipconfig/renew command at each client computer.
C. Configure the scope options to include the perform router discovery button.
D. Configure the server option to include the perform router discovery option.
E. Configure the options on each address reservation to include the new router information.
Answer: B, E
Q. 33
You are the administrator of your company's network. The relevant portion of its configuration is shown in the following diagram.
Projected growth in the West office will require five additional subnets during the next year. Projected growth in the East Office will require 10 additional subnets during the next year.
To reduce administrative complexity, you want to minimize the number of entries in the routing table for interoffice communication. You also want to provide for projected growth and conserve network address space.
Which subnet mask should you use for route summarization between the two offices?
To answer, click the select and place button, and then drag the correct subnet mask to the appropriate location.
Select and Place
Answer: Router1: 255.255.240.0 Router2: 255.255.248.0
33. You are the administrator of Windows 2000 network. The network consists of 15 Windows 2000 Server computer computers, 50 Windows 2000 Professional desktop computers and 200 Windows 2000 Professional portable computers. The portable computers are frequently utilized by users at locations that are not on the network.
The TCP/IP configuration of all the Windows 2000 Professional computers is provided by two DHCP servers on the network.
You want to configure different lease times for the desktop computers and portable computers. The desktop computers should use the default lease time. The portable computers should use a default lease time of four hours.
Which three actions should you take to achieve these goals? (Choose Three)
A. On the portable computer, set the DHCP class ID setting to Windows 2000 portable computer.
B. On the portable computer, set the DHCP vendor class ID setting to Windows 2000 options.
C. On the portable computers, manually configure a DHCP lease time of four hours. Allow other TCP/IP parameters to be configured by the DHCP servers.
D. On the DHCP servers, configure the scope so that it has an empty lease duration value.
E. On the DHCP servers, define a new user class that has the ID specified on the portable computers.
F. On the DHCP servers, configure the scope options to use a lease time of four hours for the portable computer user class.
G. On the DHCP servers, create a superscope that has two scope ranges. Use one scope for portable computer so that it has a lease time of four hours and one scope for desktop computers so that it has a default lease time.
Answer: A, E, F
34. You are the administrator of your company’s network. To allow users to access network resources when they are not in the office, you configure remote access services in their native mode Windows 2000 domain. Because your company operates 24 hours a day and seven days a week, and because your users are not running Windows 98 and Windows NT workstation, you do not want to apply any time or authentication restrictions. To accomplish this, you delete the default remote access policy. However, you want to restrict access by unauthorized users.
You grant all users in the domain to allow access dial-in permission, but you begin to receive reports that users are not able to receive the connection.
What should you do to resolve the problem?
A. Create a new remote access policy that has the condition to grant all members of the domain users group dial-in access.
B. Create a new group policy that grants dial-in permissions to the domain user group.
C. Edit the remote access profile to allow the use of encrypted authentication (CHAP) as the only authentication method.
D. Edit the remote access profile to allow the users of unencrypted authentication (PAP, SPAP) as the only authentication method.
Answer: A
35. You are the administrator of a Windows 2000 domain. The Domain has a Windows 2000 member server computer named Helsinki. Routing and remote access is enabled for remote access on Helsinki. Users in the domain are able to dial in to the network by using their Windows 2000 Professional computers.
Your company has a group named sales. You want to allow members of the sales group to use a smart card for the remote authentication. The dial-in permission for all users in the sales group is set to control access through remote access policy.
You create a new access policy named sales access. This remote access policy grants remote access to members of the sales group any time of the day. This remote access policy is the first policy on the list of remote access policies on Helsinki.
Members of the sales group are able to dial in to the network, but they report that they are unable to use a smart card for remote authentication. You want to ensure that members of the sales group are able to use the smart card authentication method.
What should you do?
A. In active directory, add Helsinki to the Pre-Windows 2000 compatible access group.
B. Enable EAP as an authentication method on the Helsinki remote access server and the Windows 2000 remote access client computers. Enable EAP in the profiles of the sales access remote access policy.
C. For all the member of the sales group, select stored passwords using reversible encryption.
D. For all the members of the sales group, configure the user account to be trusted for delegation.
Answer: B
36. You are the administrator of a Windows 2000 network. The network consists of a Windows 2000 based DHCP server, two Windows 2000 based DNS server, a Windows 2000 based routing and remote access server and 60 Windows 2000 Professional portable computers.
The network is configured as shown in the exhibit.
The DHCP server has a scope that has an IP address range of 10.65.4.20 through 10.65.4.80 with subnet mask 255.255.255.0.
You want the portable computers to use the DNS server that has an IP address of 10.65.4.12 when they dial in to the routing and remote access server. The routing and remote access server gathers IP addresses from the DHCP server for distribution to the portable computers when the portable computers dial in. You configure the DHCP scope so that it has an IP address of 10.65.4.12 for the DNS servers scope option. When users dial into the network by using the portable computer, all portable computers receive the IP address of 10.65.4.13 for the DNS server.
How should you configure the network so that the portable computers will receive the IP address of 10.6.4.12 for the DNS server?
A. Configure the DHCP server to always register and update client computer information to contain the configured DNS server.
B. Configure the routing and remote access server to use the LAN interface to obtain DHCP, DNS and WINS addresses for dial-up client computers.
C. Configure the LAN interface of the routing and remote access server to not use an IP address for the DNS server.
D. Enable the DHCP relay agent on the internal interface of the routing and remote access server. Configure the DHCP relay agent to use 10.65.4.1 as the IP address of DHCP server.
Answer: A
37. Your domain has a Windows 2000 member server named London and a DHCP server. RRAS is enabled for remote access on London. The domain is in native mode. Users in the domain dial in to the network on Windows 2000 Professional laptops. Dial-up connection configuration for the Windows 2000 Professional computers is set to obtain an IP address automatically. You do not want to change this configuration. You want to designate a fixed IP address for each dial-in user. Each individual user should receive the same IP address when he dials in but each user must get a unique IP address. How would you configure this?
A. Configure each laptop with a specific static IP address
B. Create a user class for the laptops and exclude these IP addresses from the DHCP
Scope
C. In Active Directory Users and Computers, assign a static IP address for each user
D. Create a separate subnet for the laptops and configure DHCP to issue IP addresses for this subnet only to the laptops .
Answer: C
38. You are the administrator of a Windows 2000 network. The network has two Windows 2000-based WINS servers. You want periodic backups of the WINS database of both WINS servers to occur automatically.
How should you configure the network to accomplish this goal?
A. In the WINS console on both WINS servers, use the right mouse button (Right-click) to select the server name, and then select the Back Up database command.
B. In the WINS console on both WINS servers, configure the general properties of the WINS server to specify a default backup path.
C. On both WINS servers, use Windows backup to schedule a regular backup of the system32\Wins folder.
D. On the both WINS servers, configure the file replication service to copy the System32\Wins folder to another location on the disk.
Answer: B
39. You are the administrator of a Windows 2000 network. The network has two Windows 2000 Server computers named Router1 and Router2. Routing and Remote Access is enabled as a router on Router1 and Router2. There are no other routers on the network.
A part of the IP routing table of Router1 is shown in the following table.
Destination Network Mask Gateway Interface Metric
10.30.0.0 255.255.0.0 10.30.1.1 10.30.1.1 1
10.30.1.1 255.255.255.255 127.0.0.1 127.0.0.1 1
10.40.5.0 255.255.255.0 10.40.5.1 10.40.5.1 1
10.40.5.1 255.255.255.255 127.0.0.1 127.0.0.1 1
10.255.255.255 255.255.255.255 10.30.1.1 10.30.1.1 1
10.255.255.255 255.255.255.255 10.40.5.1 10.40.5.1 1
To exchange routing information, you want to enable RIP for IP on Router1 and Router2.
You configure RIP for IP on Router1 and Router2 as follows:
• Set operation mode to Periodic update mode.
• Set outgoing packet protocol to RIP version 1 broadcast.
• Set incoming packet protocol to RIP version 1 and 2.
• Specify Router1 and Router2 as unicast neighbors of each other.
When you monitor the IP routing table of Router2, you notice that the Server is not receiving the correct routes. What should you do?
A. Configure RIP for IP to include host routes in announcements that are sent.
B. Configure RIP for IP interfaces to add an input packet filter that will allow network traffic for RIP port 520.
C. Set the RIP for IP outgoing packet protocol to RIP version 2 broadcast.
D. Specify Router 1 and Router 2 as RIP for IP peer routers.
Answer: C
40. You are the administrator of Windows 2000 network. The network of 85 Windows 2000 Professional computers and two Windows 2000 Server computers named Amsterdam and Utrecht. Amsterdam has a permanent cable modem connection to the Internet.
All Windows 2000 Professional computers on the network are configured to use automatic private IP addressing (APIPA). The network does not contain a DHCP server.
To allow all Windows 2000 Professional computers on the network to access the Internet through the cable modem connection of Amsterdam, you install and configure the network address translation (NAT) routing protocol on Amsterdam.
You decide to use IP addresses in the range of 172.20.20.1 through 172.20.20.150 for the network. Amsterdam is configured to use an IP address of 172.20.20.1.
Utrecht is a web server configured with an IP address of 172.20.20.2 and a default gateway of 172.20.20.1 You want to allow Internet users from outside your internal network to access the resources on Utrecht through the NAT on Amsterdam.
How should you configure the network to accomplish this goal?
A. Configure the NAT routing protocol to enable the use of a network application. Specify web server as the name of the application. Use the web port number as the remote server port number.
B. Configure the public interface of the NAT routing protocol to use an address pool with an
address of 172.20.20.2
C. Configure the public interface NAT routing protocol to use a special port that maps to the web server port and an IP address 172.20.20.2
D. Configured Amsterdam so that it has a static route on the private network. Use a destination address of 172.20.20.2, a network mask of 255.255.255.255, and a gateway of 172.20.20.1
Answer: C.
41. You are the administrator of a Windows 2000 network. The network consists of a Windows 2000 Server computer named ServerA and 45 Windows 2000 Professional computers. ServerA has a dial-up connection that connects to the internet.
To allow all Windows 2000 Professional computers on the network to access the internet through dial-up connection of ServerA, you install and configure the Network Address Translation (NAT) routing protocol on ServerA.
All Windows 2000 Professional computers in the network are configured to use Automatic Private IP Addressing (APIPA). There is no DHCP server on the network.
You want to configure the network to use IP addresses in the range of 172.16.65.1 through 172.16.65.250 for ServerA and the 45 Windows 2000 Professional computers.
What should you configure ServerA to accomplish this goal? (Choose all that apply)
A. Assign an IP address 172.16.65.1 to the LAN interface of ServerA.
B. Enable Internet Connection Sharing on the dial-up connection of ServerA.
C. Configure Routing and Remote Access on ServerA to automatically assign IP addresses in the range of 172.16.65.2 through 172.16.65.250 dial-in client computers.
D. Configure the NAT routing protocol on ServerA to automatically assign IP addresses in the range of 172.16.65.2 through 172.16.65.250 to computers on the private interface.
E. Configure the public NAT interface to use an IP address pool in the range of 172.16.65.2 through 172.16.65.250.
Answer: AD
42. You are the administrator of Windows 2000 network. The network consists of 30 Windows 2000 Professional computers, and two Windows 2000 Server computers named Athens and Boston. Athens has a permanent cable modem connection to the internet. All Windows 2000 Professional computers on the network are configured to use Automatic Private IP addressing (APIPA). The network does not contain a DHCP server.
To allow all Windows 2000 Professional computers on the network to access the internet through the cable modem connection of Athens, you install and configure the network address translation (NAT) routing protocol on Athens.
You decide to use IP addresses in the range of 192.168.40.1 through 192.168.40.50 for the network. Athens is configured to use an IP address of 192.168.40.1.
Boston is a web server configured with an IP address of 192.168.40.2 and a default gateway of 192.168.40.1. Your internet service provider has allocated two IP addresses, 207.46.179.16 and 207.46.179.17 to your network. The network is shown in the exhibit.
You want to allow internet users from outside your internal network to use an IP address of
207.46.179.17 to access the resources on Boston through the NAT service on Athens.
How should you configure the network to accomplish this goal?
A. Configure Athens with a static route on the private interface of the NAT routing protocol. Use a destination address of 207.46.179.17, a network mask of 255.255.255.255, and a gateway of 192.168.40.2.
B. Configure Boston with a static route on the LAN interface. Use a destination address of
192.168.40.1, a network mask of 255.255.255.255, and a gateway of 207.46.179.17.
C. Configure the LAN interface of Boston to use multiple IP addresses. Assign the additional IP address of 207.46.179.17 to the interface.
D. Configure the public interface of the NAT routing protocol to use an address pool with a starting address of 207.46.179.16 and a mask of 255.255.255. 254. Reserve a public IP address of 207.46.179.17 for the private IP address of 192.168.40.2.
Answer: D
43. You are the administrator of your company’s network, which consists of a single Windows 2000 domain.
The network includes three Windows 2000 domain controllers. All three have the DNS server service installed. Each DNS server hosts an Active Directory integrated zone and requires secure dynamic updates.
The network contains 200 client computers running Windows NT Workstation 4.0. All 200 have static IP addresses and static A (host) records in the DNS zone file.
You upgrade the client computers to Windows 2000 Professional and configure them as DHCP clients. Your DHCP server is configured to always update client records in DNS.
After the upgrade, users report that they cannot access certain workgroup resources on the network. When you examine the DNS zone, you discover that the A records of your client computers are not being updated.
You need to ensure that the DHCP server updates the A records in the DNS zone. You must accomplish this goal with the least possible disruption to client computers. What should you do?
A. On the DNS zone file, run DnsCmd.exe with the /AgeAllRecords option
B. On the DNS zone file, run DnsCmd.exe with the /StartScavenging option
C. Delete the A records of your client computers from the DNS zone file. Run the ipconfig/registerdns command on the client computers
D. Delete the A records of your client computers from the DNS zone file. Run the Reconcile Scope command in the DHCP to refresh the records in the DNS zone.
Answer: A
44. You are the administrator of the blueskyairlines.com domain. You maintain a local DNS server to provide name resolution within your internet domain. Your DNS server runs on Windows 2000 server. You have five web servers, which contain company and flight information in addition to the online flight reservation system.
For load-balancing purposes, each web server is configured to maintain exactly the same contents as all the other web servers. All the web servers respond to the host name www.blueskyairlines.com. Customer feed back indicates that web server response times are unacceptably slow. You monitor your web servers and discover that only one of the five servers is servicing customer requests, while the others are sitting idle.
You want to ensure load balancing and improve response time for customer web request. What could you do in the DNS management console? (Choose two)
A. Enable round robin in the DNS server’s properties.
B. Disable round robin in the DNS server’s properties.
C. Enable forwarders and configure them to point to each web server.
D. Verify that A (host) records have been created for each web server.
E. Verify that CNAME (canonical name) records have been created for each web server.
Answer: A, D
45. You are the administrator of a Windows 2000 network. Your internal DNS server is located behind a firewall. When you test your DNS server by using the Monitoring tab on the server’s properties page, the DNS server passes the simple test but fails the recursive test.
What could you do to resolve the problem?
A. Run the ipconfig/registerDNS doc command.
B. Delete the systemroot \system32 \DNS \cache.dns file.
C. Copy the systemroot\system32 \DNS \samples\cache.dns file to the systemroot \system32 \DNS\cache. DNS file.
D. Create a forward lookup zone for the root zone. Name the forward lookup zone ‘.’.
E. Create a reverse lookup zone for the subnet on which the resource records for the primary name server are located.
Answer: C
46. You are the administrator of one standard primary DNS server and two standard secondary DNS servers in a Windows 2000 domain. There are no other DNS servers on the network. The domain includes Windows 2000 Professional computers and a Windows 98 computer.
The DNS zone for the Windows 2000 domain is configured to allow dynamic updates. All three DNS servers are located on domain controllers. You want client computers to be able to register with any DNS server.
What should you do?
A. Change the zone type of the DNS zone for the Windows 2000 domain on all three DNS servers to active directory integrated.
B. Change the settings on the standard primary DNS server to notify the two standard secondary DNS servers when the zone is updated.
C. Change the settings on the standard primary DNS server to allow zone transfers to only the two standard secondary DNS servers.
D. Change the dynamic update option on the standard primary DNS server to allow only secure updates.
Answer: A
47 Windows 2000 Server computer named ServerA and 45 Windows 2000 Professional computers. ServerA has a dial-up connection that connects to the internet.
To allow all Windows 2000 Professional computers on the network to access the internet through dial-up connection of ServerA, you install and configure the Network Address Translation (NAT) routing protocol on ServerA.
All Windows 2000 Professional computers in the network are configured to use Automatic Private IP Addressing (APIPA). There is no DHCP server on the network.
You want to configure the network to use IP addresses in the range of 172.16.65.1 through 172.16.65.250 for ServerA and the 45 Windows 2000 Professional computers.
What should you configure ServerA to accomplish this goal? (Choose all that apply)
A. Assign an IP address 172.16.65.1 to the LAN interface of ServerA.
B. Enable Internet Connection Sharing on the dial-up connection of ServerA.
C. Configure Routing and Remote Access on ServerA to automatically assign IP addresses in the range of 172.16.65.2 through 172.16.65.250 dial-in client computers.
D. Configure the NAT routing protocol on ServerA to automatically assign IP addresses in the range of 172.16.65.2 through 172.16.65.250 to computers on the private interface.
E. Configure the public NAT interface to use an IP address pool in the range of 172.16.65.2 through 172.16.65.250.
Answer: AD
48. You are the administrator of your company's network. The network consists of two Windows 2000 server computers and 50 Windows 2000 Professional computers. You are using DHCP to automate the assignment of the TCP/IP configurations of the client computers. You configure the DHCP server to automatically update your DNS server’s forward and reverse lookup zone files with the DHCP client information.
You discover that 15 of the client computers are referenced by PTR (pointer) records in the reverse lookup zone. There are no PTR records for the remaining 35 client computers.
How should you resolve this problem?
A. Configure the client computers so that they register their A (host) records with the DNS server.
B. Configure the client computers so that they do not register their domain name with the DNS server.
C. Configure the DHCP server to enable updates for client computers that do not support dynamic update
D. Configure the DHCP server to always update DNS, even if a client computer does not request it.
Answer: C
49. You are the administrator of your company's network. The network consists of three network segments connected by a router as shown in the exhibit.
You install the DHCP server service on a Windows 2000 server computer to automate the configuration of client computers on your network. You create scopes for each subnet’s range of addresses and activate each scope.
Users from Subnet 2 and Subnet 3 report that they cannot connect to the network. Users from Subnet 1 report no connectivity problems. You discover that computers on subnets 2 and 3 are not receiving a TCP/IP configuration from the DHCP server.
What should you do to resolve this problem?
A. Install the DHCP Relay Agent service on the DHCP server.
B. Install the DHCP Relay Agent service on a computer on each remote subnet.
C. Install the WINS server service on a Windows 2000 server computer and configure the client computers to use WINS to find the DHCP server.
D. Install the WINS proxy Agent service on a computer on each remote subnet.
E. Install the DNS server service on a Windows 2000 Server computer and configure the client computers to use DNS to find the DHCP server.
F. Install a DNS caching-only server on a computer on each remote subnet.
Answer: B
50. You are the network administrator for Trey Research. Trey Research’s network consists of 90 client computers and 50 portable computers, all running Windows 2000 Professional. Only 20 of the users of the portable computers will ever be in the office at the same time. To accommodate the number users on the network, Trey Research purchases a subnetted Class B subnet with a 25-bit mask.
All users need access to the internet while in the office. How should you configure DHCP?
A. Create two scopes that have different lease durations
B. Create manual reservations for all portable computer users
C. Create one scope that has two user classes, each with a different lease duration
D. Create one scope that has two vendor classes, each with a different lease duration.
Answer: C
51. You are the administrator of Windows 2000 network. The network consists of 10 segments. These segments are connected by four Windows 2000 server-based routers named Router1, Router2, Router3 and Router4. Routing and remote access is enabled as a router on these four servers. To exchange routing information, the four servers use RIP version 2 for IP.
There are two other routers on the network that use RIP version 2 to exchange routing information. These other routers might have been erroneously configured and, consequently, contain incorrect routing information.
You want to ensure that Router1, Router2, Router3 and Router4 do not process routes received from any other router than Router1, Router2, Router3 and Router4.
How can you configure the four routers to accomplish this goal? (Choose all that apply)
A. Configure the RIP routing protocol on the four routers to RIP peer filters. List the other three routers as RIP peers.
B. Configure each RIP interface on the four routers to unicast announcements to RIP neighbors. List the other three routers as RIP neighbors.
C. Configure each RIP interface on the four routers to use password authentication. Use the same password on all four routers.
D. On each RIP interface on the four routers, configure routes for outgoing routes. Announce only routes in the route ranges of the network IDs that are connected to the four routers.
Answer: ABCD
52. You are the administrator of your company’s WAN. The network consists of 10 internal subnets in two physical sides connected by routes as shown in the exhibit.
You have an additional subnet that is configured for access to the Internet. The routers on the network will be multihomed Windows 2000 server computers running routing and remote access.
You want to accomplish the following goals.
• Administrative overhead for configuration of routing tables on each router will be minimized.
• Broadcast traffic for configuration of routing tables on each router will be minimized.
• In the event of a router failure, link redundancy within 10 minutes will be ensured.
• Convergence time of less than one minute for all known routers on all routers will be ensued.
• Internal routing information will never be exposed to external router.
You take the following actions:
• Install RIP version1.
• Configure RIP to use all interface on all multihomed computers.
• Enable RIP authentication by specifying a password on each interface.
A. Administrative overheads for configuration of routing tables on each router is minimized.
B. Broadcast traffic for configuration of routing tables on each router is minimized.
C. In the event of a router failure, link redundancy within 10 minutes is ensured.
D. Convergence time of less than one minute for all known routes on all routers will be ensued.
E. Internal routing information is never exposed to external routers.
Answer: A
53. You are the administrator of a Windows 2000 domain. The domain has a Windows 2000 member server computer named Houston. Routing and remote access is enabled for remote access on Houston. The domain also has a DHCP server. The domain is in native mode.
Users in the domain dial in the network by using Windows 2000 Professional portable computers. The onfiguration of the dial-up connection on the Windows 2000 Professional computer is set to obtain an IP address automatically. You do not want to change this configuration.
For administrative purposes, you want to designate a fixed IP address for each of the users. All users should receive a different fixed IP address when a dial-up connection is made.
How should you configure the network to accomplish this goal?
A. On the Houston remote access service, create a static address pool so that it has only the IP address of the remote access dial-in interface. Use a mask of 0.0.0.0.
B. On the Houston remote access service, create a static address pool for IP address assignment. Use a mask of 255.255.255.255.
C. On the DHCP server, create a reservation that uses a specific IP address for each user.
D. In the active directory user and computers console, assign static IP address for each user.
Answer: D
|
|
|
|
|
|
Braindumps-Eintrag 
zurück]