Bachkhoa IT Academy

Address: 5th Floor - A17 Building (Hanoi University of Technology) No 17 Ta Quang Buu Hai Ba Trung Hanoi Tel: 84-4-8684321 Fax: 84-4-8684320 Email: contact@bkacad.com Web: www.bkacad.com

MCSA - <70-291>
Round: <Round 1>

Full name: ......................................................... Your score: ........................................... Date of exam:// exam: 90 minutes............................................

Date of birth: ...................................................... Grade: ................................. Time duration of

QUESTION NO: 1
You are the network administrator for Bkacad.com. A Windows Server 2003 computer is configured as a print server for a print device that has a built-in network interface. Users of the print device report that they cannot print to it. You confirm that the correct IP address and drivers are being used. You suspect that there is a problem with the MAC to IP address resolution on the print server. You want to find out which MAC address the print jobs are being sent to. Which command should you run on the print server? A. net session B. netstat.exe C. netsh.exe D. netcap.exe

QUESTION NO: 2
You are the network administrator for Bkacad.com. The network consists of a single Active Directory domain named bkacad.com and a single subnet. All servers run Windows Server 2003. The network contains 150 client computers and 16 servers. Al computers on the network use the 10.10.0.0/16 address scheme. Dr King, your manager, instructs you to place the 16 servers into a separate subnet that uses the 192.168.10 public addressing scheme. You must plan for a maximum of 30 servers in the future. You need to configure a new subnet mask. The subnet mask must allow a sufficient number of IP addresses for the existing servers and future growth. However, you want to conserve addresses as much as possible. Which subnet mask should you use?

A. 255.255.255.224
B. C. D. E. 255.255.255.240 255.255.255.248 255.255.255.252 255.255.255.254

QUESTION NO: 3
You are the network administrator for at the Mumbai office of Bkacad.com. The network contains a Windows Server 2003 computer named BKACAD5. BKACAD5 is a critical file server. BKACAD5 is configured with a DHCP client reservation. Users can successfully download FTP documents from BKACAD5. The DHCP server fails. Users report that they cannot access resources on BKACAD5. You want to configure BKACAD5 so that it is available even if it is unable to obtain or renew a lease from the DHCP server. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two. )

A. Configure a static IP address. B. On the Alternate Configuration tab of the Internet Protocol (TCP/IP) properties, configure
IP settings. C. Configure the DHCP scope in the 169.254.0.1. - 169.254.255.254 range. D. On the DHCP server, configure the DHCP 001 Resource Location Servers reservation option for BKACAD5.

QUESTION NO: 4
You are the network administrator for Bkacad.com. The network consists of a single Active Directory domain named bkacad.com. You install a new client-server application on a Windows Server 2003 computer named BKACAD2. BKACAD2 is not a member of the domain. BKACAD2 has static IP address 192.168.6.23. You install the client software on two Windows XP Professional domain computers in order to test access to the application on BKACAD2. You plan to install the client software on 270 additional Windows XP Professional computers. The client software must be able to resolve to BKACAD2 by using the fully qualified domain name (FQDN) BKACAD2.bkacad.com. A Windows Server 2003 computer named BKACADD is the DNS server and has the IP address 192.168.6.1. The bkacad.com zone is configured to accept only secure updates. When you run the ping command to 192.168.6.23, you receive valid replies. When you attempt to run the client software on the two test computers, the software cannot locate BKACAD2 and terminates. You need to correct this problem with the minimum amount of administrative effort. What should you do?

A. From a command prompt on BKACAD2, run the ipconfig /registerdns command. B. On each of two test computers, type the following line in the Hosts file: C. Create an OU named ApplicationServersOU.Create a computer account named
BKACAD2 in ApplicationServersOU. Set the Primary DNS Suffix Group Policy setting on an ApplicationServersOU GPO to bkacad.com. Restart BKACAD2. D. On BKACADD, enter a host (A) record for BKACAD2 that displays BKACAD2's IP address as 192.168.6.23. On BKACAD2, in the Computer Name Changes dialog box in System Properties, enter bkacad.com as the primary DNS suffix of the computer. Restart BKACAD2. E. On BKACAD2 in the Internet Protocol (TCP/IP) Properties dialog box, in the Preferred DNS server field, type 192.168.6.1. BKACAD2.bkacad.com 192.168.6.23 #pre

QUESTION NO: 5
You are the network administrator for Bkacad.com. The network consists of a single Active Directory domain named bkacad.com. All servers run Windows Server 2003. All client computers run either Windows 2000 Professional or Windows XP Professional.

BKACAD has offices in San Francisco, Los Angeles and London. Each office contains three servers that are configured as domain controllers and run the DNS Server service. All client computers and servers are configured to use a local DNS server as the primary DNS server. You create a new primary zone named east.bkacad.com on a server in London named BKACAD1. You need to configure DNS servers in San Francisco and Los Angeles to resolve queries for resources in east.bkacad.com. You must ensure that client computers can update DNS data on the local DNS servers. You also need to minimize WAN network traffic relating to DNS queries for resources in east.bkacad.com. What should you do?

A. On one DNS server in San Francisco and on one DNS server in Los Angeles, create a
secondary zone east.bkacad.com. Configure the secondary zone to receive DNS data from the DNS server in London. B. On one DNS server in San Francisco and on one DNS server in Los Angeles, create a primary zone east.bkacad.com. Enable dynamic updates on both servers for the east.bkacad.com zone. C. On BKACAD, configure the east.bkacad.com zone as an Active-Directory-integrated zone. Enable dynamic updates for the east.bkacad.com zone. D. On each DNS server, create an Active Directory-integrated stub zone for east.bkacad.com. Configure the stub zone to replicate DNS data from the DNS server in London

QUESTION NO: 6
You are the network administrator in the information technology (IT) department of BKACAD. BKACAD uses a DNS namespace named bkacad.com for the company intranet. The IT department manages three Windows Server 2003 computers that have the DNS service installed. The three DNS servers are not domain controllers. A primary zone named bkacad.com has been created on one of the DNS servers and has been replicated to secondary zones on the other two servers. The IT department plans to install additional DNS servers to host secondary-zone copies of bkacad.com in the future. The multimedia department uses a DNS namespace named multimedia.bkacad.com for its own intranet. The multimedia department manages three Windows Server 2003 computers that have the DNS service installed. A primary zone named multimedia.bkacad.com has been created on one of the DNS servers in the multimedia department and has been replicated to secondary zones on the other two servers. You need to configure a name resolution mechanism that will allow all DNS servers that are managed by the IT department to resolve DNS queries for hosts in the multimedia.bkacad.com namespace. To reduce the administrative overhead, you must implement a name resolution mechanism that you can configure on a single server. You must not be required to perform any additional configuration steps in the future, if additional DNS servers are installed by the IT department to host the bkacad.com zone. How should you configure the DNS servers that are managed by the IT department?

A. In the bkacad.com zone, create a delegated subdomain named multimedia. Specify all
the DNS servers in the multimedia department as name servers. B. Create a secondary zone named multimedia.bkacad.com. Specify all the DNS servers in the multimedia department as master servers. C. Configure conditional forwarding for the multimedia.bkacad.com namespace. Specify all the DNS severs in the multimedia department as target servers. D. Create a stub zone named multimedia.bkacad.com. Specify all the DNS servers in the multimedia department as master servers.

QUESTION NO: 7
You are the network administrator for Bkacad.com. The network consists of a single Active Directory domain bkacad.com. All servers run either Windows Server 2003 or Windows 2000 Server. All client computers run either Windows XP Professional, Windows 2000 Professional or Windows NT Workstation 4.0. All the computers are members of the domain.

All servers have static IP addresses, and all client computers are assigned addresses by a DHCP server that runs Windows Server 2003. The DNS service is installed on three Windows Server 2003 computers that are configured as domain controllers. Company network management standards state that a DNS domain must be created for each department in the company. A new department named Market Research has been organized. You need to create a corresponding DNS zone named marketresearch.bkacad.com. The network management standards contain the following requirements. 1. All computers must be registered in a DNS zone. 2. All DNS records must be kept up-to-date at all times, and any changes to the host name or IP address must be updated on the DNS record. 3. Only computers that have valid accounts in the domain must be allowed to dynamically register records in the DNS zone. 4. To reduce administrative effort, all possible administrative tasks should be automated. You must configure the marketresearch.bkacad.com zone to meet these requirements. Which three actions should you perform? (Each correct answer presents part of the solution. Choose three)

A. Create a standard primary zone named marketresearch.bkacad.com. B. Create an Active Directory-integrated zone named marketresearch.bkacad.com. C. Configure the Dynamic updates settings on the marketresearch.bkacad.com zone to be D. Configure the Dynamic updates settings on the marketresearch.bkacad.com zone to be E. Configure the Dynamic updates setting on the marketresearch.bkacad.com zone to be F. Manually create and update DNS records for all hosts in the marketresearch.bkacad.com
zone. G. Configure the DHCP server to register client computers that have received IP configuration from the DHCP server in the marketresearch.bkacad.com zone. None. Secure and nonsecure. Secure only.

QUESTION NO: 8
You are the network administrator for Bkacad.com. The network consists of a single Active Directory forest that contains two domain named asia.bkacad.com and africa.bkacad.com. The network contains Windows Server 2003 computers and Windows XP Professional computers. All client computers and 25 servers are dynamically assigned IP addresses by DHCP. All company computers are registered in either asia.bkacad.com DNS zone or the africa.bkacad.com DNS zone. All DNS servers contain copies of all zones. The written company network management policy states that computers cannot have duplicate host names. Client computers always connect to other computers by specifying only the name of the target computer. A fully qualified domain name (FQDN) is not required. You need configure the client computers to ensure that all computer names can be resolved by using DNS without the domain name being specified. The configuration of client computers must be automated so that they do not need to be manually reconfigured if an additional domain is added to the forest. What should you do?

A. Configure the Append these DNS suffixes option in the DNS client configuration of each
client computer. B. Configure the 015 DNS Domain Name option on all DHCP scopes. C. Configure the Default Domain Policy GPO in each domain. Enable the DNS Suffix Search List policy setting in the GPO. D. Configure the Default Domain Policy GPO in each domain. Enable the Primary DNS Suffix policy setting in the GPO.

QUESTION NO: 9
You are the network administrator for BKACAD. The network consists of a single Active Directory domain. All servers run Windows Server 2003. The network contains two DNS servers. These

servers are configured to forward DNS queries to a DNS server at a local ISP for all Internet name resolution. Users on your network report that they frequently cannot access Web sites on the Internet. You discover that the ISP's DNS server is frequently not available. You need to ensure that users can access Web sites on the Internet when the ISPs DNS server is not available. What should you do?

A. Configure the DNS servers on the network with forwarder records to each other. Remove B. Configure the DNS servers on the network with conditional forwarders to the ISP's DNS C. Configure the DNS servers on the network to use the default root hints. Remove the D. Configure the DNS servers on the network as authoritative servers for the Internet root
DNS zone. forwarder to the ISP's DNS server. server. the forwarder to the ISPs DNS server.

QUESTION NO: 10
You are the network administrator in the New York office of BKACAD. The company network consists of a single Active Directory domain bkacad.com. The New York office currently contains one Windows Server 2003 file server named BKACADA. All file servers in the New York office are in an organizational unit (OU) named New York Servers. You have been assigned the Allow - Change permission for a Group Policy object (GPO) named NYServersGPO, which is linked to the New York Servers OU. The written company security policy states that all new servers must be configured with specified predefined security settings when the servers join the domain. These settings differ slightly for the various company offices. You plan to install Windows Sever 2003, on 15 new computers, which all functions as file servers. You will need to configure the specified security settings on the new file servers. BKACADA currently has the specified security settings configured in its local security policy. You need to ensure that the security configuration of the new file servers is identical to that of BKACADA. You export a copy of BKACADA's local security policy settings to a template file. You need to configure the security settings of the new servers, and you want to use the minimum amount of administrative effort. What should you do?

A. Use the Security Configuration and Analysis tool on one of the new servers to import the B. Use the default Domain Security Policy console on one of the new servers to import the C. Use the Group Policy Editor console to open NYServersGPO and import the template D. Use the default Local Security Policy console on one of the new servers to import the
template file. file. template file. template file.

QUESTION NO: 11 Exhibit

Single Active Directory domain named bkacad.com. All servers run Windows Server 2003. All client computers run Windows XP Professional. All computers are members of the domain. The Secure Server (Require Security) IPSec policy is assigned to a file server named BKACAD2. The policy is configured as shown in the exhibit. Users report that they cannot access shared folders on BKACAD2. Users were able to access shared folders on BKACAD2 prior to the implementation of the IPSec policy. You need to ensure that all client computers in the domain can access the shared folders on BKACAD2. You must ensure that all communications between client computers and BKACAD2 be encrypted. What should you do?

A. On BKACAD2, enable the All ICMP Traffic IP Security rule in the properties of the Secure B. On BKACAD2, enable the <Dynamic> IP Security rule in the properties of the Secure C. On all client computers, assign the Client (Respond Only) IPSec policy. D. On all client computers, install an IPSec communication certificate in the local machine
store. Server (Require Security) IPSec policy. Server (Require Security) IPSec policy.

QUESTION NO: 12
You are the network administrator for Bkacad.com. All servers run Windows Server 2003. You configure the security settings for all servers by using a security template named Corpsec.inf. After a recent security breach on a member server named BKACAD2, you notice that the security settings are no longer configured as expected. You want to analyze all the security settings on BKACAD2 that do not match the security settings in the Corpsec.inf template. What should you do?

A. Import Corpsec.inf into the security settings on BKACAD2 by using the Local Security
Policy console.

B. Import Corpsec.inf into a new security database by using the Security Configuration and
Analysis console. C. Run the dsquery.exe computer command. D. Import Corpsec.inf into the security settings of the Default Domain Policy Group Policy object (GPO).

QUESTION NO: 13
You are the network administrator for Bkacad.com. All servers run Windows Server 2003. A server named BKACAD1 is configured with IIS. BKACAD1 hosts a Web site for the engineering department. The engineering Web site is configured to support communications by using HTTPS. You use Network Monitor on BKACAD1 and discover that users are connecting to the engineering Web site by using both HTTP and HTTPS. You must ensure that all access to the engineering Web site on BKACAD1 is gained by using HTTPS. What should you do on BKACAD1? A. Install a new server certificate. B. Change the TCP port on the engineering Web site to port 8080. C. Configure the engineering Web site to use only Integrated Windows authentication. D. Use the IIS Certificate wizard to renew the current certificate for the engineering Web site. E. Configure the engineering Web site to require a secure channel.

QUESTION NO: 14
You configure the Routing and Remote Access service on a server named BKACAD1. BKACAD1 is connected to a modem pool and support eight simultaneous inbound connections. You instruct remote users to dial on to BKACAD1 from their home computers. Bkacad.com's written business policy states that the only client computer operating systems that should be supported for dial-up access are Windows 95, Windows 98, Windows 2000 Professional, and Windows XP Professional. You need to configure the remote access policy to support the most secure authentication methods possible. You want to enable only the necessary authentication methods based on the supported client computers that will be connecting. Which authentication method or methods should you enable? Choose all that apply.

A. B. C. D. E.

PAP. SPAP. CHAP. MS-CHAP Version 1. MS-CHAP Version 2.

QUESTION NO: 15
You are the network administrator for BKACAD. A new Windows Server 2003 computer named BKACAD6 is located in a small branch office. BKACAD6 runs third-party update software and needs to connect to the Internet to download software updates. BKACAD6 distributes the updates to Windows XP Professional client computers in the branch office. You configure BKACAD6 so that when you double-click the Internet Explorer icon, a VPN dial-up connection to the main office automatically starts. You want BKACAD6 to access the Internet through a Microsoft Internet Security and Acceleration (ISA) Server computer named ISA1 in the main office. ISA1 uses IP address 131.107.68.92 on the Internet and is also the Routing and Remote Access server to the LAN. The ISA1 LAN interface uses IP address 10.10.0.1. Inbound VPN connections receive 10.10.0.0 IP addresses. Client computers can connect to the Internet only through ISA1. ISA1 has dynamically updates host (A) resource records for both ISA1 interfaces. On BKACAD6, you double-click the Internet Explorer icon to initiate an Internet connection. BKACAD6

successfully establishes a VPN connection to ISA1, but cannot connect to the Internet. The Internet Explorer settings for the VPN dial-up connection are shown in the exhibit.

Some users on other VPN connections to ISA1 report that they can connect to the Internet, and other users report that they cannot. You want BKACAD6 and all other VPN connections to ISA1 to consistently connect to the Internet. What should you do?

A. In the Internet Explorer settings for the VPN dial-up connection on BKACAD6, select the B. In the Internet Explorer settings for the VPN dial-up connection on BKACAD6, enter C. In the Internet Explorer settings for the VPN dial-up connection on BKACAD6, select the D. On the network properties for the 131.107.68.92 connection on ISA1, clear the Register
this connection's addresses in DNS check box. Automatically detect settings check box. 10.10.0.1 for the proxy server address. Bypass proxy server for local addresses check box.

QUESTION NO: 16
You are the network administrator for Bkacad.com. The network consists of a single Active Directory domain named bkacad.com. The functional level of the domain is Windows Server 2003. You install Terminal Services on all domain controllers. However, your technical support specialists report that they cannot use Terminal Services to access any domain controllers. Which action or actions should you perform to solve this problem? (Choose all that apply) A. Install Remote Desktop for Administration. B. Require the support specialists to use a console session to connect to the terminal servers. C. Add the Remote Administrators group to the Account Operators group. D. Add the support specialists to the Remote Desktop group.

E. Modify the Default Domain Controller Group Policy object (GPO) to grant the Log on
locally user right to the support specialists.