MCSE,Win2k Network,Test 3

1 . Your domain is in mixed mode. Routing and Remote Access is enabled for remote access on Srv1. The domain also has a Windows NT 4.0 member server computer named Srv2. Srv2 is running Remote Access Service (RAS). Users in the domain use Windows 2000 Professional computers to dial in to the network through Srv1 or Srv2. However, Srv2 is not able to validate remote access credentials of domain accounts.
How should you configure the network to enable Srv2 to validate remote access domain users?

A.Add the Everyone group to the Pre-Windows 2000 Compatible Access group.

B.Configure Srv1 to use MSChap for authentication and Srv2 to use Chap

C.Configure srv2 as a DHCP relay agent

D.Add the Everyone group to the RRAS access group

2 . You are the administrator of your company's network You are configuring your users' portable computers to allow users to connect to the company network by using Routing and Remote Access. You test the portable computers on the LAN and verify that they can successfully connect to resources on the company network by name. When you test the connection through Remote Access, all of the portable computers can successfully connect, but they cannot access files on computers on different segments by using the computer name.
What should you do to resolve this problem?

A.Set the authentication method to Allow remote systems to connect without authentication

B.Change the computer name on each portable computer

C.Enable the computer account for each portable computer

D.Install the DHCP Relay Agent on the Remote Access server

4 . Your domain has a Windows 2000 member server computer named London and a DHCP server. Routing and Remote Access is enabled for remote access on London. The domain is in native mode. Users in the domain dial in to the network by using Windows 2000 Professional portable computers. Dial-up connection configuration for the Windows 2000 Professional computers is set to obtain an IP address automatically. You do not want to change this configuration. You want to designate a fixed IP address for each of the users. All users should receive a different fixed IP address when a dial-up connection is made. How should you configure the network to accomplish this goal?

A.In Active Directory Users and Computers, assign a static IP address for each user

B.Create a separate subnet for the laptops and configure DHCP to issue IP addresses for this subnet only to the laptops

C.Create a user class for the laptops and exclude these IP addresses from the DHCP scope

D.Configure each laptop with a specific static IP address

5 . You are the administrator for a Windows 2000 network. Your internal DNS server is located behind a firewall. When you test your DNS server by using the Monitoring tab on the server's properties page, the DNS server passes the simple test but fails the recursive test.
What should you do?

A.Copy the %systemroot%system32dnssamplescache.dns file to %systemroot%dns, and overwrite the existing cache.dns file

B.Delete the %systemroot%system32dnscache.dns file

C.Create a forward lookup zone for the root zone. Name the forward lookup zone "."

D.Run ipconfig /registerdns

6 . Your network has 3 Win2000 WINS servers. How would you manually compact the WINS database on one of the WINS servers?

A.Backup the WINS Database. Use the jetpack command line tool to compact the WINS database. Do an authoritative restore of the backup

B.Stop the Server's WINS Server. Use the Compact command from the command line. Restart the Server's WINS Server

C.Stop the Server's WINS Server. Use the Jetpack command line tool to compact the WINS database. Restart the server's WINS Server

D.Use the Compact command from the command line and specify the sysvol/wins folder.

7 . Your company policy is to allow only Administrators in your Houston office to install and use Network Monitor. You have been informed that Administrators in New York are installing and using Network Monitor. After you install Network Monitor, what should you do to monitor how many copies of Network Monitor are currently running? (Choose two)

A.On the Tools Menu in Net Monitor select Identify Network Monitor Users

B.Install Network Monitor on a computer on the second segment

C.Remove the default Remote Access Policy

D.Remove the "access Network Monitor" permission for Domain Admins

8 . You have Macintosh users who inform you that they cannot request valid user certificates from your Enterprise Certificate Authority. What should you do to allow these users to request certificates by using Web based enrollment?

A.In the Internet Information Services console, access the properties for the CertSrv virtual directory. On the Directory Security tab, set the authentication type to "Encrypted Authentication".

B.Install an Enterprise Subordinate Certificate Authority that uses a commercial CA as a parent.

C.Delete the CA, install File and Print sharing for Macintosh, Reinstall the CA.

D.In the Internet Information Services (IIS) console, access the properties for the CertSrv virtual directory. On the Directory Security tab, set the authentication type to "Basic Authentication".

9 . To centralize administration you implement a Remote Authentication Dial-In Service (RADIUS) server. Each of your branch offices will support their own Routing and Remote Access Server. You remove the default remote access policy.
What should you do to implement one company policy that requires all dial-up communications to use 40-bit encryption, and require secure communications? (Choose two)

A.Set encryption to Strong in the remote access policy or policies.

B.Create one remote access policy on the RADIUS server.

C.Create one remote access policy on each Routing and Remote Access server.

D.Set encryption to Basic in the remote access policy.

10 . Your Web server is configured to run a third party Web application for users on your network. Users complain that each time they try to connect to a secure Web page stored on the Web server, they receive the error message "Web page requested is not available". They have no problem connecting to FTP.
You have verified that the Web service has started. What should you do to diagnose this problem?

A.Verify that the correct NTFS file permissions are configured for the web page

B.Verify that port 80 is permitted in your TCP/IP filter.

C.Verify that port 443 is permitted in your TCP/IP filter.

D.Verify that port 21 and port 20 is permitted in your TCP/IP filter.

11 . You are the administrator of a Windows 2000 network. You have offices in two locations. In both offices you have recently installed a Windows 2000 Server configured as both Routing and Remote access server and Fax service server. A batch file and the windows scheduler are used to maintain accounting information at both offices.
Users are reporting that the accounting data does not seem to be synchronizing. No problems with Fax services or RRAS services have been reported. After further investigation, you find the synchronization is indeed failing.
What should you do to resolve this problem?

A.Configure the server as a Router.

B.Stop the FAX service.

C.Enable Internet Connecting Sharing

D.Enable Multilinking for the Fax Service and RRAS service.

13 . You are the administrator of your domain. You have client computers evenly distributed across five sites. Atlanta.xco.com recently upgraded its two DNS servers that service the subdomain. You suspect the upgrade has resulted in an incorrect configuration of your zone delegation.
What should you do to verify proper zone delegations.

A.Run the nslookup -ls -d atlanta.xco.com command. Ping the records displayed in the output of the nslookup command.

B.Use System Monitor to confirm that the counters for the DNS recursive query are zero.

C.Use System Monitor to confirm that the counters for the DNS zone transfer failure are zero.

D.Run the nslookup -querytype=ns atlanta.xco.com command with the server option set to query the atalanta.xco.com server. Ping the records displayed in the output of the nslookup command.

15 . You administer your company's Windows 2000 network. Your network consists of 5 Windows 2000 Server computers, 300 Windows 2000 Professional computers, and 10 UNIX servers. One of your Windows 2000 Server computers is your DNS server. The DNS zone is configured as an Active Directory integrated zone. The DNS zone is also configured to allow dynamic updates.
Users report that although they can access the Windows 2000 computers by host name, they cannot access the UNIX servers by host name.
What should you do?

A.On the DNS server, manually create a HOSTS file that contains the records for the UNIX

B.Configure a UNIX computer to be a DNS server in a secondary zone

C.Manually add the UNIX servers to the Windows 2000 domain

D.Manually enter A (host) records for the UNIX servers in the zone database