mcsa mcse exam 70-292 study guide phần 10 docx

628 Appendix B • Self Test Questions, Answers, and Explanations  D.The simplest way to configure DNS on the server is to connect to the server using a Remote Desktop connection and then run the DNS Manager in the Remote Desktop session.You do not even have to log the user off her PC.  A, B, C. Answer A is incorrect, because installing the Windows Administration Tool Pack would install DNS Manager on the user’s PC. But you would have to log the user off, locate the source file for the Administration Tool Pack, and run the DNS Manager as an administrator. Answer B is incorrect, because the Web Interface for Administration does not include a DNS management tool. Answer C is incorrect, because Computer Management does not include the DNS snap-in. 5. You are the network administrator for Joe’s Crab Shack.While at a meeting in Redmond, Washington, you are informed that one of your newly installed Windows Server 2003 DNS servers has stopped performing name resolution.Your CEO has asked you to make a Remote Desktop connection to the server via your virtual private network (VPN) con- nection to the network. After you have connected to your internal network via VPN, you attempt to create a Remote Desktop connection to the server and cannot.The DNS server is located on the same IP subnet as the VPN server.What is the most likely reason for this problem? A. TCP port 3389 is being blocked at your firewall. B. Remote Desktop is not enabled on the server. C. You do not posses the required credentials. D. Your Internet connection does not support the RDP 5.1 protocol.  B.The most likely problem is that you have not enabled Remote Desktop connections for this new server.  A, C, D.Answer A is incorrect, because since you have already connected to your internal network using a VPN, and both the VPN server and the DNS server are on the same IP subnet, the status of firewall ports is not an issue. Answer C is incorrect, because by default, when Remote Desktop for Administration is enabled, all administra- tive accounts can make connections. Answer D is incorrect, because no special support is required to use RDP over TCP/IP. 6. You have just installed Windows Server 2003 on one of your servers and would like to set up Remote Desktop for Administration so that you can connect to it remotely.Which of the following must you do? (Select all that apply.) A. Open the System properties in Control Panel B. On the Remote tab and select the check box next to Turn on Remote Assistance and allow invitations to be sent from this computer C. On the Remote tab, select the check box next to Allow users to connect remotely to your computer www.syngress.com 271_70-292_AppB.qxd 8/22/03 4:11 PM Page 628 Self Test Questions, Answers, and Explanations • Appendix B 629 D. Do nothing  A, C. Although installed by default with the Windows Server 2003 operating system, Remote Desktop for Administration must still be enabled before you can use it.To accomplish this, go to the Remote tab in the System properties located in Control Panel and select the check box next to Allow users to connect remotely to your computer located in the Remote Desktop section of the tab.After it is enabled, you should specify which users may connect by clicking on the Select remote users button on this tab or adding them to the Remote Desktop Users group.  B, D. Answer B is incorrect, because this check box turns on the Remote Assistance feature, not Remote Desktop for Administration. Answer D is incorrect, because although installed by default, Remote Desktop for Administration must still be enabled. 7. You are the network administrator for Joe’s Crab Shack.While at a meeting in Redmond, Washington, you are informed that one of your Windows Server 2003 DHCP servers is not leasing any more DHCP leases to clients.Your assistant administrator has verified that there are plenty of unused leases in the current DHCP scope, but is unable to determine the cause of the problem. Company policy prohibits the use of any Instant Messaging clients within your internal network. How can your assistant get Remote Assistance from you to help troubleshoot the DHCP server? A. Use an e-mail-based request. B. Use MSN Messenger to make the request. C. Use Emergency Management Services to make the request. D. Use the Recovery Console to make the request.  A. In this case, the only valid answer is to create and send an e-mail based request asking for Remote Assistance.  B, C, D.Answer B is incorrect, because MSN Messenger cannot be used to send Remote Assistance requests.Answer C is incorrect, because EMS is not used for Remote Assistance. Answer D is incorrect, because the Recovery Console cannot be used for Remote Assistance. 8. No matter how hard you try, you just cannot seem to figure out how to access your e-mail using the new application that was installed over the weekend.You decide to use the Remote Assistance feature to ask an administrator to walk you through the process.Which of the fol- lowing are valid methods that you can use to request assistance? (Select all that apply.) A. E-mail an administrator B. Use ICQ to contact an administrator C. Use Windows messaging to contact an administrator D. Save the request to a file and transfer it to an administrator www.syngress.com 271_70-292_AppB.qxd 8/22/03 4:11 PM Page 629 630 Appendix B • Self Test Questions, Answers, and Explanations  A, C, D.There are three methods that a Novice can use to request help from an Expert. First, the Novice can have Remote Assistance generate an e-mail request that contains a link on which the Expert can click to begin the session, therefore Answer A is correct. Second, the Novice can initiate a Remote Assistance request using Windows Messaging, therefore Answer C is correct. Finally, the Novice can save the Remote Assistance request to a file and give it to the Expert on a floppy or transfer it to the Expert across a network, therefore Answer D is correct.  B. Answer B is incorrect, because although similar to Windows Messaging, the ICQ messaging client was not created by Microsoft and does not contain the necessary code to request a Remote Assistance session. 9. You are attempting to initiate a Remote Desktop for Administration session with one of your Windows Server 2003 servers over the Internet.The server has a publicly accessible IP address but it is located behind an external firewall and a screening router.You can ping the server and establish Telnet session to the server.You have verified with onsite per- sonnel that Remote Desktop is enabled for this server and that your user account is allowed to make connections.What is the most likely reason for the inability to make the Remote Desktop for Administration connection? A. Port 3389 is being blocked B. Port 8088 is being blocked C. IIS 6.0 is not installed D. ASP.NET is not enabled on the server  A. All RDP connections use port 3389, thus if this port is not passing traffic a connec- tion will not be successful.  B, C, D.Answer B is incorrect, because Port 8088 and 8089 are used by the Web Interface for Remote Administration, not for RDP.Answers C and D are incorrect, because IIS 6.0 and ASP.NET are not required to initiate a Remote Desktop connec- tion. 10. You are configuring one of your Windows Server 2003 computers to allow Remote Desktop for Administration connections to it.What group do you need to add user accounts to in order to allow those users to create Remote Desktop for Administration connections? A. Network Configuration Operators B. Remote Desktop Users C. Help Services Group D. Telnet Clients  B.You must add the users who will be creating Remote Desktop for Administration connections to this server to the local Remote Desktop Users group on the computer. www.syngress.com 271_70-292_AppB.qxd 8/22/03 4:11 PM Page 630 Self Test Questions, Answers, and Explanations • Appendix B 631  A, C, D.Answer A is incorrect, because the Network Configuration Operators group is allowed to manage some of the networking properties of a server, but not to create Remote Desktop for Administration connections. Answer C is incorrect, because the Help Services Group is used by Remote Assistance connections. Answer D is incorrect, because the Telnet Clients group is populated with users who are allowed to create Telnet connections to the server. 11. You are assisting a user with a configuration issue on his computer using a Remote Assistance session.You have tried unsuccessfully to take control of the user’s computer. What possible reasons are there to explain why you have not been able to take control? (Select two correct answers.) A. The Novice is not allowing you to take control of his computer. B. A firewall is in place blocking the request. C. The remote computer is not configured to allow it to be controlled remotely. D. Your computer is not configured to allow it to initiate remote control sessions.  A, C. Either the Novice is not allowing you to take control or the remote computer is not configured to allow you to take remote control, therefore Answers A and C are correct.  B, D. Answer B is incorrect, because if you have an existing Remote Assistance session, a firewall would not likely be the cause of your inability to take control of the remote computer. Firewall and router issues typically prevent connections from being created in the first place. Answer D is incorrect, because your local computer requires no special configuration to allow you to take remote control of a remote computer. 12. You have sent an e-mail request for Remote Assistance to your support desk but the request expired before they could answer it and assist you with your problem. Company policy only allows members of the support desk to create Remote Assistance connections. You want to allow the request to be answered.What is the easiest way to go about this? A. Create a new request and send it to the support desk. B. Delete the expired request, causing it to be recreated anew. C. Resend the expired request to the support desk. D. Initiate the Remote Assistance connection yourself.  C.The easiest way to allow an expired request to be answered is to resend it as some of the required information will be retained from the previously expired request.  A, B, D.Answer A is incorrect, because creating a new request from scratch is not the most efficient solution as you will have to reenter all required information. Answer B is incorrect, because deleting the request does not cause it to be automatically recreated. Answer D is incorrect, because initiating the Remote Assistance request yourself is not an option per company policy. www.syngress.com 271_70-292_AppB.qxd 8/22/03 4:11 PM Page 631 632 Appendix B • Self Test Questions, Answers, and Explanations 13. You need to connect to your server’s console remotely.Which graphical terminal services utility can you use to accomplish this? A. The Remote Desktop Connection tool B. The Remote Desktop console C. The Remote Desktop Connection Web utility D. The Terminal Services Client Configuration Manager utility  B.The Remote Desktop console can be used to connect to the console session. On the Add New Connection window, select the check box next to Connect to console.It is important to note that a console connection can also be started from the command line, by using the mstsc command with the /console switch.  A, C, D. Each of these utilities is primarily designed to allow users to establish a single connection to a terminal services computer. By contrast, the Remote Desktop MMC console is a tool that is intended for administrators to use in establishing connections to one or more terminal services sessions within a single interface. Because the console should be accessed only by an administrator, this tool is the only one with that option. 14. You are the network administrator for Joe’s Crab Shack.You are creating the company policy for the usage of Remote Desktop for Administration.When discussing the differ- ences between disconnecting and logging off from an RDA session, which of the fol- lowing two statements are correct? (Choose two correct answers.) A. Disconnected sessions do not remain on the server. B. Disconnected sessions remain on the server, often consuming resources. C. Logged off sessions do not remain on the server. D. Logged off sessions remain on the server, often consuming resources.  B, C. Answer B is correct, because disconnected sessions remain on the server, waiting for reconnection by the user.They are still full sessions and continue to consume resources. For this reason, many administrators prefer to terminate these sessions after a period of time, to free up the resources they are using. Answer C is correct, because when a user logs off from a session, the session is fully removed from the terminal ser- vices computer and the resources it was consuming become available to the other clients.  A, D. Answer A is incorrect, because disconnected sessions remain on the server. Answer D is incorrect, because logged off sessions do not remain on the server. www.syngress.com 271_70-292_AppB.qxd 8/22/03 4:11 PM Page 632 Self Test Questions, Answers, and Explanations • Appendix B 633 Using EMS 15. You have a computer that has Windows Server 2003 and Windows XP Professional installed on it.You have connected a terminal to the serial port of the computer so that you can manage it remotely using EMS.You reboot the server and see the list of available operating systems on the terminal.You select Windows XP Professional from the boot list and then find that there is no further response on the terminal.What has happened? A. The computer crashed while booting into Windows XP Professional. B. EMS was enabled on the wrong serial port in the Windows XP Professional installa- tion. C. EMS was not enabled in the Windows XP Professional installation. D. Windows XP Professional does not support EMS.  D. Only Windows Server 2003 supports EMS, so as soon as Windows XP starts up there is no further communication on the serial port.  A, B, C. Answers A, B, and C are all incorrect because Windows XP does not support EMS. Chapter 4 Managing and Maintaining Web Servers What is New in IIS 6.0? 1. You have created a commercial Web site with sensitive business information.Your senior architect has advised you to use Advanced Digest authentication to maximize security benefits on IIS 6.0.You have been doing research on Advanced Digest authentication. What is an incorrect piece of information you came across in your research? A. It uses Active Directory to store user credentials B. It only works with HTTP 1.1 enabled browsers C. It will work with Internet Explorer 4.0 with JavaScript 1.3 support D. It only works with WebDAV enabled directories  C. Advance Digest authentication only works with HTTP 1.1 enabled browsers. Internet Explorer 4.0 implements HTTP 1.0.The HTTP 1.1 support was enabled after Internet Explorer version 5.0.The JavaScript 1.3 support is irrelevant.  A, B, D.Answer A is incorrect, because Advance Digest authentication uses Active Directory for user credentials storage. Answers B and D are incorrect, because they are also features of Advance Digest authentication. www.syngress.com 271_70-292_AppB.qxd 8/22/03 4:11 PM Page 633 634 Appendix B • Self Test Questions, Answers, and Explanations 2. IIS 6.0 introduces a worker process model concept. A worker process model is a separate ISAPI application (Web site) that runs in isolation. In previous IIS versions (version 5.0 and below) all applications ran in the same memory space as inetinfo.exe. IIS 6.0 does not let the applications run in the same space as inetinfo.exe.The IIS 6.0 concept of tracking its Web sites is referred as what? A. Using Health Detection B. Using HTTP.sys C. Using XML Metabase entries D. Using ASP.NET scripts that directly communicate to .NET Framework.  A. Heath Detection is the technology that IIS uses to make sure they are running smoothly.  B, C, D. Answer B is incorrect, because HTTP.sys is the new kernel mode driver to accept all incoming HTTP traffic.The Metabase holds all the configuration settings for IIS, therefore Answer C is incorrect, because ASP.NET is a scripting language to per- form business intelligence tasks. Answer D is incorrect, because it does not assist IIS in synchronizing its worker process. . Installing and Configuring IIS 6.0 3. You have been instructed to install Windows Server 2003 on a Windows 2000 machine. The current Windows 2000 Server is running under a FAT32 system.The Windows Server 2003 installation will permit you to upgrade or perform a clean installation.When you are performing the upgrade you have an option between FAT32 and NTFS file sys- tems.Which ones would you choose? A. FAT B. FAT32 C. NTFS D. FAT64  C.The preferred file system is NTFS. IIS 6.0 and other servers rely on NTFS security permissions to authenticate users.  A, B, D.Answer A is incorrect, because FAT is an old DOS file system that does not provide file security.This was superceded by FAT32. Answer B is also incorrect, because FAT32 was a 32-bit file allocation system that optimized the file system by utilizing a 4K cluster size over the 16 or 32K cluster sizes used by the original version of FAT, but still did not provide for file or folder security. Answer D is incorrect, because the FAT64 system was a proposed 64-bit file allocation system that follows the FAT format. This option is not implemented yet. www.syngress.com 271_70-292_AppB.qxd 8/22/03 4:11 PM Page 634 Self Test Questions, Answers, and Explanations • Appendix B 635 4. You have installed the standard default installation of Windows Server 2003.You were dis- appointed to find out that the IIS 6.0 was not installed by default.You have read that you can install IIS in several ways.You pick the Configure your Server Wizard option.You have discovered that the Windows server acts like an Application Server while investigating this option.What technology is not included in the Windows Server 2003 application server technologies? A. COM+ B. ASP.NET C. ASP D. IIS 6.0  C. ASP is not an application server technology.  A, B, D. Answers A, B and D are incorrect, because all COM+, ASP.NET, and IIS 6.0 are application server technologies in Windows Server 2003. These components can be configured from the Manage Your Server option from the Start menu. 5. You are employed as a Systems Administrator for a large Internet Server Provider.Your organization develops and hosts multiple Web sites for commercial users.Your organization is upgrading Windows 2000 Web farm to Windows Server 2003 servers.There are ten production servers, two staging servers, and three development Web servers in the organi- zation.You have been asked to perform the Windows Server 2003 installation on all of these servers.What is the best installation method for your organization? A. Use the Configure Your Server Wizard B. Use winnt32.exe with an answer file C. Use syscomgr.exe with an answer file D. Use Control Panel | Add/Remove Programs  B.This is complete Windows Server 2003 upgrade with IIS as an additional compo- nent.Therefore we should be using winnt32.exe not syscomgr.exe.  A, C, D.The upgrading from Windows 2000 to Windows Server 2003 server is the main catch with the question. Answers A, C, and D are all used as different options to install II6 6.0 after the operating system is been installed.The only command that can install IIS in parallel to Windows Server 2003 operating system is winnt32.exe. Managing IIS 6.0 6. You are creating a commercial Web site using IIS Manager 6.0.This Web site need to communicate to the legacy payroll system of the organization.The communication is done using an ISAPI DLL from the Web site.Which permission right is important to read the payroll data with the help of the ISAPI DLL? www.syngress.com 271_70-292_AppB.qxd 8/22/03 4:11 PM Page 635 636 Appendix B • Self Test Questions, Answers, and Explanations A. Read B. Run Scripts C. Browse D. Execute  D.You need Execute rights to perform ISAPI and CGI application interaction.  A, B, C. Answer A is incorrect, because it is there to confuse the user with the “read the payroll data” explanation. Answer B is incorrect, because Run Scripts only enable ASP and ASP.NET scripts to execute on a Web site. Answer C is incorrect, because the Browse option enables directory browsing on a Web site. 7. You are trying to create an SMTP virtual server using IIS Manager.You have entered the SMTP site name and are being asked to enter the IP address and the Port number for the SMTP server.You selected the default IP address option (All Unassigned) and Port 25.You click the Next button and get an error stating that the IP address and the port number is already in use.What is the cause of this error message? A. You must provide an IP address. (All Unassigned) is not acceptable B. You cannot use port number 25 C. The default SMTP site used these settings already. D. You should use port number 80.  C.The default SMTP site already uses these settings.The IIS installation creates the Default SMTP site on (All Unassigned) IP address.  A, B, D.Answer A is incorrect, because you can use (IP Unassigned) to run a SMTP site. Answer B is incorrect, because it is common convention that people associate port number 25 with SMTP. However, there is nothing stopping the users from running a SMTP site from a different port number.Answer D is also incorrect, because Port number 80 is commonly used for HTTP traffic.Therefore we should not use port 80 in any SMTP communications. 8. Web Services Extensions is a new feature in IIS 6.0. Using Web Services Extensions, we can configure IIS 6.0 components.We can enable and disable them from the IIS Manager console.You have been experimenting with enabling and disabling these components.You could not find some of the item(s) below.Which item(s) fall into this category? A. WebDAV B. ASP.NET C. File Sharing D. ASP www.syngress.com 271_70-292_AppB.qxd 8/22/03 4:11 PM Page 636 Self Test Questions, Answers, and Explanations • Appendix B 637  C. File sharing is an Application Server component. It does not have any relationship with Web Service Extensions.  A, B, D.Answer A is incorrect, because WebDAV access can be enabled and disabled from the Web Service Extension window.Answer B is incorrect, because ASP.NET is also under the control of the Web Service Extensions. Answer D is also incorrect, because ASP.NET is under the control of the Web Service Extensions. Managing IIS Security 9. There are several ways to apply security on Web sites. All of these can be configured by the Properties tab of a Web site.Which one of the following is not a security measure to prevent intruders from hacking into IIS 6.0 Web sites? A. Using SSL certificates B. Using WebDAV C. Using an authentication method to force the user to authenticate D. Apply IP restrictions on known offenders and networks  B.WebDAV is a file sharing mechanism and does not have any implications on Web site security.  A, C, D.Answer A is incorrect, because SSL has been used for years to encrypt com- munication to preserve sensitive information. Answer C is incorrect, because by forcing the users to authenticate we can check their credentials and keep a log of their activity. Answer D is incorrect, because we can also restrict the user by entering IP address restrictions on a Web site. 10. You have configured Digest authentication for your Web servers. Jon, one of your users who needs to authenticate to the Web servers, cannot do so.You have checked Jon’s user account properties and found that the Store Passwords Using Reversible Encryption option has been checked, but Jon still cannot authenticate.What is the most likely reason for his troubles? A. Jon’s user account is disabled.You should enable it from Active Directory Users and Computers. B. Jon did not change his password after the Store Passwords Using Reversible Encryption option was enabled for his account. C. Jon changed his password after the Store Passwords Using Reversible Encryption option was enabled for his account, which disabled this setting. D. Jon’s computer that he is attempting to make the connection with does not have the 128-bit high encryption patch applied. www.syngress.com 271_70-292_AppB.qxd 8/22/03 4:11 PM Page 637 [...]... B 443 C 25 D 110 B SSL makes connections on port 443 using URLs starting with https:// www.syngress.com 271 _70-292_ AppB.qxd 8/22/03 4:11 PM Page 639 Self Test Questions, Answers, and Explanations • Appendix B A, C, D Answer A is incorrect, because Port 8080 is typically used by proxy servers Answer C is incorrect, because Port 25 is used for SMTP Answer D is incorrect, because Port 110 is used by POP3... verify data integrity as part of the backup www.syngress.com 645 271 _70-292_ AppB.qxd 646 8/22/03 4:11 PM Page 646 Appendix B • Self Test Questions, Answers, and Explanations process Answer C is incorrect, because the “Back up contents of mounted drives” option configures the backup process to backup the contents of the mounted drive 10 You are the network administrator for the CVB Company.Your primary... thus not allowing any way for Chris to perform the procedure in the wrong order, therefore Answer C is incorrect www.syngress.com 271 _70-292_ AppB.qxd 8/22/03 4:11 PM Page 655 Self Test Questions, Answers, and Explanations • Appendix B Configuring the DNS Server Options 10 You are configuring your Windows Server 2003 DNS and want to prevent it from caching referral answers that are not directly related... www.syngress.com 661 271 _70-292_ AppB.qxd 662 8/22/03 4:11 PM Page 662 Appendix B • Self Test Questions, Answers, and Explanations allow you to configure the Event Log, therefore Answer C is incorrect.The Registry node contains settings that allow you set key level security settings in the Registry, therefore Answer D is incorrect 6 You are the security administrator for your company’s network.You have 100 Windows... data to the new server? A Monday first,Tuesday second,Wednesday third B Monday first,Wednesday second,Tuesday third C Tuesday first,Wednesday second D Wednesday first,Tuesday second www.syngress.com 641 271 _70-292_ AppB.qxd 642 8/22/03 4:11 PM Page 642 Appendix B • Self Test Questions, Answers, and Explanations C Since you performed a normal backup on Tuesday, you can begin your restoration process with that... backups Answer D is incorrect, because when a tape device and media is available for Backup to use, it will allow you to select to use it from the Backup destination dropdown list www.syngress.com 271 _70-292_ AppB.qxd 8/22/03 4:11 PM Page 643 Self Test Questions, Answers, and Explanations • Appendix B 5 Members of your organization store files on a Windows Server 2003 computer Each department has its... of backup is performed, the archive attribute is not cleared, so data on one differential backup will contain the same information as the previous differential backup plus any www.syngress.com 643 271 _70-292_ AppB.qxd 644 8/22/03 4:11 PM Page 644 Appendix B • Self Test Questions, Answers, and Explanations additional files that have changed.When restoring backed up data, the last normal backup and last... modify the documents she’s attempting to back up, she has the minimum permissions needed Answer D is incorrect, because the scenario states that disk quotas are not used on the server www.syngress.com 271 _70-292_ AppB.qxd 8/22/03 4:11 PM Page 645 Self Test Questions, Answers, and Explanations • Appendix B 8 You schedule a backup to run monthly on the 30th of each month, when you are using the Backup Utility...271 _70-292_ AppB.qxd 638 8/22/03 4:11 PM Page 638 Appendix B • Self Test Questions, Answers, and Explanations B If the Store Passwords Using Reversible Encryption option is selected and Jon still cannot use... B, C Answers B and C are incorrect, because making Catherine a member of the Server Operators or Domain Admins groups will result in her having privileges that she does not require www.syngress.com 271 _70-292_ AppB.qxd 8/22/03 4:11 PM Page 647 Self Test Questions, Answers, and Explanations • Appendix B Using Automated System Recovery 12 A disaster has occurred, requiring you to use an ASR set to restore . attempting to connect to? A. 8080 B. 443 C. 25 D. 110  B. SSL makes connections on port 443 using URLs starting with https://. www.syngress.com 271 _70-292_ AppB.qxd 8/22/03 4:11 PM Page 638 Self Test. administrator D. Save the request to a file and transfer it to an administrator www.syngress.com 271 _70-292_ AppB.qxd 8/22/03 4:11 PM Page 629 630 Appendix B • Self Test Questions, Answers, and Explanations . incorrect, because IIS 6.0 and ASP.NET are not required to initiate a Remote Desktop connec- tion. 10. You are configuring one of your Windows Server 2003 computers to allow Remote Desktop for Administration