Microsoft 70-291

Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure
Version: Demo 41.2

Microsoft 70-291 Exam Topic 1, Volume B

QUESTION NO: 1 You are the network administrator for A. Datum Corporation. The company uses the adatum.com namespace for its internal network. The company network consists of two networks that are connected by a WAN link. The 10.9.9.0 network uses the 10.9.9.0/24 address. The 10.9.8.0 network uses the 10.9.8.0/24 address. The relevant portion of the network is shown in the exhibit. (Click the Exhibit button.) The network contains the DNS servers that are configured as shown in the following table.

In the 10.9.9.0/24 network, a server named Server1 frequently needs to resolve names in the adatum.com namespace and on the Internet. You need to configure the TCP/IP properties of Server1 to use the most efficient server as its preferred DNS server. The number of hops required to resolve any name must be kept to a minimum. You also need to minimize the amount of network traffic that is caused by name resolution. On Server1, which DNS server should you configure as the preferred DNS server?

A. DNS1 B. 131.107.5.1 "Ensure Success with Money back Guarantee" - Testinsides.com 2

Microsoft 70-291 Exam C. DNS3 D. DNS2 Answer: C Explanation: The preferred DNS server should be the DNS server that is physically closest to the client computer. Its important to note that manual DNS settings override DNS settings obtained from a DHCP server. Reference: James Chellis, Paul Robichaux and Matthew Sheltz, MCSA/MCSE:Windows Server 2003 Network Infrastructure Implementation, Management, and Maintenance Study Guide, Sybex Inc. Alameda, 2003, pp. 53.

Topic 2, Volume F

QUESTION NO: 2 CORRECT TEXT You are the network administrator for your company. The network contains a Windows Server 2003 server named Server1. You configure Routing and Remote Access Service (RRAS) on Server1 to allow Virtual Privet Network (VPN) connections. You verify that remote clients using Internetwork Packet Exchange (IPX) and Apple Talk protocol can connect to Server1. Users report that they are unable to connect to Server1 by using TCP/IP. You need to ensure that remote clients using TCP/IP are able to establish a VPN connection to Server1. You must accomplish the task by using the Server1 (local) Properties dialog box. Your operation must not affect other settings on Server1.

Answer: Here are the step by step explanation. Explanation: Step# 1. Open Routing and Remote Access

"Ensure Success with Money back Guarantee" - Testinsides.com

Microsoft 70-291 Exam

Step # 2. Right Click on SERVER 2003 (local)

Step# 3. Click on Properties to open Properties panel. "Ensure Success with Money back Guarantee" - Testinsides.com 4

Microsoft 70-291 Exam

"Ensure Success with Money back Guarantee" - Testinsides.com

Microsoft 70-291 Exam Step # 4. Go to the IP tab.

"Ensure Success with Money back Guarantee" - Testinsides.com

Microsoft 70-291 Exam Step # 5. Go to Use the following adapter to obtain DHCP, DNS, and WINS addresses for dial-up clients and select the Allow RAS to select adapter from the drop down menu.

Step # 6. Click on Apply to save the setting and Click OK to close the Tab. You have successfully accomplish the task.

"Ensure Success with Money back Guarantee" - Testinsides.com

Microsoft 70-291 Exam

"Ensure Success with Money back Guarantee" - Testinsides.com

Microsoft 70-291 Exam

Topic 3, Volume C

QUESTION NO: 3 DRAG DROP You are a network administrator for the School of Fine Art. The network contains five Windows Server 2003 computers that also function as DNS servers. The servers are configured as shown in the work areA. The Caracas and Santiago branches of the school each have five client computers. The Lima branch has 5,000 client computers. The Sao Paulo branch has 2,500 client computers. Server1 is located in the school's main office in BogotA. Server1 is the authoritative server for a zone named fineartschool.net. School management plans to update the network infrastructure in the main office. During these upgrades, there will be frequent changes to the name server (NS) resource records for fineartschool.net. You need to ensure that each DNS server on the WAN has a dynamically updated list of NS records for fineartschool.net. You also need to minimize zone replication traffic across the slow connections and minimize DNS lookups on Server1. How should you configure the DNS servers in the school's branches? To answer, drag the appropriate server configuration to the correct server or servers in the work area.

Answer:

Explanation:

"Ensure Success with Money back Guarantee" - Testinsides.com

Microsoft 70-291 Exam

Topic 4, Volume A QUESTION NO: 4 You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. One domain controller on the network is configured as a certification authority (CA). The network contains a Web server that runs IIS 6.0 and hosts a secure intranet site. The server also hosts other sites that do not require HTTPS. You configure a server certificate on the IIS server by using a certificate from your internal CA. All users are required to connect to the intranet site by using HTTPS. Some users report that they cannot connect to the secure intranet site by using HTTPS. You confirm that all users can connect to the nonsecure sites hosted on the Web server by using HTTP. You want to view the failed HTTPS requests. What should you do? A. Review the log files created by IIS on the Web server. B. Review the security log in Event Viewer on the CA. C. Review the contents of the Failed Requests folder on the CA. D. Review the security log in Event Viewer on the Web server. Answer: A Explanation: We can review the log files created by IIS on the Web server to view connection data.

Topic 3, Volume C

QUESTION NO: 5 DRAG DROP

"Ensure Success with Money back Guarantee" - Testinsides.com

10

Microsoft 70-291 Exam You are the network administrator for a Web hosting company. All servers run Windows Server 2003. All client computers run Windows XP Professional. Your company is assigned the following IP address ranges by the ISP: 131.107.10.0 through 131.107.10.255 131.107.11.0 through 131.107.11.255 The company's data center contains 400 Windows Server 2003 computers and consists of two subnets named subnet A and subnet B. Subnet A contains 200 servers and uses the 131.107.10.0 network address. Subnet B also contains 200 servers and uses the 131.107.11.0 network address. All server IP addresses are assigned by DHCP. All computers in the data center have valid Internet-accessible IP addresses. As a result of a corporate acquisition, 200 additional servers will be added to your company's data center within one month. The new servers will be placed on the network segment that maps to subnet A. The existing router does not have the capacity for an additional subnet, and the budget does not allow the purchase of a new router. You will need to add the additional servers to the existing subnet A. The ISP assigns you the additional IP address range 131.107.12.0 through 131.107.12.255. You need to change the IP addressing scheme to accommodate all required servers in subnet A and subnet B. You are authorized to make any necessary changes. The diagram in the work area shows the network configuration and the planned number of servers for each subnet. Which IP address should be assigned to each subnet? To answer, drag the appropriate IP address or addresses to the correct locations in the work area.

Answer:

"Ensure Success with Money back Guarantee" - Testinsides.com

11

Microsoft 70-291 Exam Explanation:

Explanation: To accommodate all required servers in Subnet A and Subnet B, without having to purchase a new router and with the ISP assigns you the additional IP address range 131.107.12.0 through 131.107.12.255, you should assign Subnet A and Subnet B the following IP addresses respectively: 131.107.10.0/23 and 131.107.12.0/24 Reference: Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Chad Todd and Laura Hunter, MCSA/MCSE:Exam 70-291: Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure Guide & DVD Training System, p. 57

Topic 4, Volume A QUESTION NO: 6 You are the network administrator for City Power & Light. The network consists of a single Active Directory domain named cpandl.com. The domain contains Windows Server 2003 computers and Windows XP Professional computers.A server named Server1 functions as a DHCP server, and a server named Server2 functions as a DNS server. The relevant portion of the network is shown in the Network exhibit.

"Ensure Success with Money back Guarantee" - Testinsides.com

12

Microsoft 70-291 Exam

You configure Server1 to distribute IP addresses to all of the client computers on the 10.9.7.0 subnet. The DHCP server scope settings are shown in the DHCP exhibit.

All users of client computers on the 10.9.7.0 subnet report that they can see each other's computers in My Network Places but cannot access the Internet or the 10.9.8.0 subnet. Users of client computers in the 10.9.7.0 network cannot access servers on either subnet. Users of client computers on the 10.9.8.0 subnet can access servers on both subnets and can access the Internet. All servers use static IP addresses. You need ensure that all client computers can access the Internet.What should you do?

A. On Server2, configure the DHCP Relay Agent. B. On Server2, add a host (A) record for Server1 at address 10.9.8.91. C. On Server1, activate the 10.9.7.0 scope. D. On Server1, disable the 001 Microsoft Disable Netbios Option option.

"Ensure Success with Money back Guarantee" - Testinsides.com

13

Microsoft 70-291 Exam E. On Server1, authorize DHCP. Answer: A Reference: Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Chad Todd and Laura Hunter, Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure Guide & DVD Training System, pp. 142, 201 J. C. Mackin, Ian McLean, MCSA/MCSE Self-Paced Training Kit (exam 70-291): Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 network Infrastructure, Part 1, Chapter, pp. 537 540

Topic 5, Volume D QUESTION NO: 7 You have a DNS server named Server1 that runs Window 2003 Server Service Pack 2 (SP2). You need to ensure that the DNS server only creates event log entries when errors occur. What should you do? A. From Local Computer Policy, modify the audit policy settings. B. From Event Viewer, modify the properties of the DNS server log. C. From the DNS snap-in, modify the properties of Server1. D. From the DNS snap-in, modify the properties of the DNS event log. Answer: C Explanation:

Topic 4, Volume A QUESTION NO: 8 You are the administrator of a Windows Server 2003 computer named Server1. Server1 is an FTP server located in the company's internal network. Administrators report an increased amount of FTP traffic to Server1. You need to configure Server1 to achieve the following goals: "Ensure Success with Money back Guarantee" - Testinsides.com 14

Microsoft 70-291 Exam Identify the media access control (MAC) address of any computer that is performing FTP transfers from Server1. Find out the exact FTP commands that were executed. Ensure that you do not disrupt the operation of Server1. What should you do? A. Run the arp command on Server1 to identify the source of the FTP requests. B. Configure a performance alert to write an event to the application event log whenever the number of established FTP connections exceeds 1. C. Run the finger command on Server1 to identify the source of the FTP requests. D. Use a Network Monitor filter to capture IP traffic from any computer to Server1. Answer: D Explanation: Network Monitor tool allows you to capture datA. The tool also allows you to identify its source from where it came from. The Network Monitor tool also allows you to analyze the content of the message. Use a Network Monitor capture filter to capture IP traffic from any computer to SERVER1, and apply the capture filter before capturing the data. Reference: Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Chad Todd and Laura Hunter, MCSA/MCSE:Exam 70-291: Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure Guide & DVD Training System, Syngress Publishing Inc., Rockland, 2003, pp. 198, 543 J. C. Mackin, Ian McLean, MCSA/MCSE Self-Paced Training Kit (exam 70-291): Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 network Infrastructure, Microsoft Press, Redmond, 2003, Part 1, Chapter 3, pp. 140, 144, 145.

Topic 1, Volume B

QUESTION NO: 9 You are the network administrator for your company. All servers run Windows Server 2003. Twenty company employees connect to a terminal server named Server2 to run applications and to gain access to the Internet. The 20 employees report that they receive security messages while browsing Internet Web sites. The employees report that they cannot modify the Internet Explorer security settings on their client computers while connected to Server2. You need to allow these 20

"Ensure Success with Money back Guarantee" - Testinsides.com

15

Microsoft 70-291 Exam employees to modify the Internet Explorer security settings on their client computers while connected to Server2. What should you do? A. Log on to Server2 as Administrator and add http:// to the list of trusted sites in Internet Explorer. B. Instruct the 20 employees to change the Internet Explorer privacy settings on their client computers to Low. C. Instruct the 20 employees to add http:// to the list of trusted sites in Internet Explorer on their client computers. D. Uninstall Internet Explorer Enhanced Security Configuration on Server2. Answer: D Explanation: Internet Explorer Enhanced Security Configuration is installed by default on Windows 2003 Server computers. With Internet Explorer Enhanced Security Configuration installed, web pages may not display in Internet Explorer as expected and applications that require the browser may not work correctly because scripts, Microsoft ActiveX controls, the Microsoft virtual machine (Microsoft VM) for HTML content, and file downloads have been disabled. This is what is causing the security messages when users connect to the server via Terminal Services. Therefore, the solution is to uninstall Internet Explorer Enhanced Security Configuration on SERVER2.

QUESTION NO: 10 You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. You install and configure a single server to run Windows Server Update Services (WSUS). You configure the appropriate Group Policy settings to specify separate WSUS target groups for client and server computers. You need to ensure that computers automatically assign themselves to the correct computer group. What should you do? A. In the WSUS console, create the appropriate computer groups. B. In the WSUS console, configure Computer Options so that Use group policy or registry settings on computers is selected. C. In the WSUS console, configure Computer Options so that Use the Move Computers Task in Windows Server Update Services is selected. D. Create organizational units (OUs) for each group. Answer: A,B Explanation:

"Ensure Success with Money back Guarantee" - Testinsides.com

16