70 291evilren besmart

70-291- Pass4Sure Questions By EvilRen_besmart 70-291- Pass4Sure Questions By EvilRen Number: 070-291 Passing Score: 700 Time Limit: 120 File Version: 1.0 Microsoft Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure Q&A with explanations P4S 2.4 Combained TESTKING 52 Total number of questions: 129+3 Sims Table of Contents Implementing, Managing, and Maintaining IP Addressing Configure TCP/IP addressing on a server computer Manage DHCP Troubleshoot TCP/IP addressing Troubleshoot DHCP Implementing, Managing, and Maintaining Name Resolution Install and configure the DNS Server service Managing DNS Monitor DNS Tools might include System Monitor, Event Viewer, Replication Monitor, and DNS debug logs Implementing, Managing, and Maintaining Network Security 70-291- Pass4Sure Questions By EvilRen_besmart Implement secure network administration procedures Monitor network protocol security Tools might include the IP Security Monitor Microsoft Management Console (MMC) snap-in and Kerberos support tools Troubleshoot network protocol security Tools might include the IP Security Monitor MMC snap-in, Event Viewer, and Network Monitor Implementing, Managing, and Maintaining Routing and Remote Access Configure Routing and Remote Access user authentication Manage remote access Manage TCP/IP routing Implement secure access between private networks Troubleshoot Routing and Remote Access routing Maintaining a Network Infrastructure Monitor network traffic Tools might include Network Monitor and System Monitor Troubleshoot connectivity to the Internet Troubleshoot server services Miscellaneous Simulations (3 Questions) Total number of questions: 132 Credites: B.A P4S v2.4 TK52 Azim Besmart Sections 1.Monitor DNS Tools might include System monitor, Event viewer, Replication Monitor, and DNS debug logs (? questions) 2.Managing DNS zone settings (? questions) 70-291- Pass4Sure Questions By EvilRen_besmart 3.Troubleshoot connectivity to the internet (? questions) 4.Configure DNS zone options (? questions) 5.Configure DNS forwarding (? questions) 6.Manage DNS record settings (? questions) 7.Troubleshoot TCP/IP addressing (? questions) 8.Manage routing protocols (? questions) 9.Manage DHCP databases (? questions) 10 10.Configure TCP/IP addressing on a server computer (? questions) 11 11.Diagnose and resolve issues related to DHCP reservation configuration (? questions) 12 12.Manage DNS server options (? questions) 13 13.Diagnose and resolve issues related to remote access VPNs (? questions ) 14 14.Manage DHCP clients and leases (? questions) 15 15.Manage routing and remote access clients (? questions) 16 16.Monitor network trafic (? questions) 17 17.Diagnose and resolve issues related to service dependency (? questions) 18 18.Use service recovery options to diagnose and resolve service - related issues (? questions) 19 19.Miscellaneous (? questions) 20 20.Monitor network protocol security (? questions) 21 21.Implement security baseline settings and audit settings by using securirty templates and ploicies (? questions) 22 22.Troubleshoot user access to remote access services (? questions) 23 23.Configure remote access authentication protocols (? questions) 24 24.Configure DNS server options (? questions) 25 25.Monitor network protocol security (? questions) 26 26.Implement security baseline settings and audit settings by using securirty templates and ploicies (? questions) 27 27.Diagnose and resolve issues related to configuration of DHCP server and scope options (? questions) 28 28.Diagnose and resolve issues related to incorrect TCP/IP configuration (? questions) 29 29.Manage DHCP relay agent (? questions) 30 30.Configure rounting and remote access policies to permit or deny access (? questions) 31 31.Manage reservations and reserved clients (? question) 32 32.Manage routing tables (? questions) 33 33.Troubleshoot network protocol security (? questions) 34 34.Troubleshoot demand - dial routing (? questions) 35 35.Sim (3 Simtulations) 70-291- Pass4Sure Questions By EvilRen_besmart Exam A QUESTION You are the network administrator for TestKing.com The network consists of a single Active Directory domain named testking.com All servers run Windows Server 2003 All client computers run Windows XP Professional A Windows Server 2003 computer named TestKing5 is the only DNS server in the domain It hosts no other zones Users report that connecting to computers within the testking.com domain is slow You need to find out whether DNS client traffic on TestKing5 is causing this problem What should you do? A B C D Use System Monitor to create a log of the DNS counters Dynamic updates/sec and Total querie Use System Monitor to create a log of the NetworkInterface counter Total bytes/sec Enable debug loggin on TestKing5 Configure the log to capture Notification events Enable debug loggin on TestKing5 Configure the log to capture Update events Answer: A Section: 1.Monitor DNS Tools might include System monitor, Event viewer, Replication Monitor, and DNS debug logs (? questions) Explanation/Reference: Explanation: The System Monitor utility is used to collect and measure the realtime performance data for a local or remote computer on the network Through System Monitor, you can view current data or data from a log file When you view current data, you are monitoring real-time activity When you view data from a log file, you are importing a log file from a previous session Using the System Monitor, you can generate statistics on the following types of information regarding DNS services: AXFR requests (all-zone transfer requests), IXFR requests (incremental zone transfer requests), DNS server memory usage, Dynamic updates, DNS Notify events, Recursive queries, TCP and UDP statistics, WINS statistics and Zone transfer issues Thus to find out where DNS client traffic is responsible for the slow speed at which computers connect within the testking.com domain, then you should create a log of the Dynamic Updated/sec and the Total queries/sec given the fact that TestKing5 is the only DNS server in the domain Incorrect answers: B:The NetworkInterface counter Total bytes/sec is not going to yield the information that you need to check C, D:This is inappropriate in the given circumstances as it willnot yield the proper 70-291- Pass4Sure Questions By EvilRen_besmart information that you will need to check to see if DNS client traffic on TestKing5 is responsible for the slow connections within the domain Reference: James Chellis, Paul Robichaux and Matthew Sheltz, MCSA/MCSE: Windows Server 2003 Network Infrastructure Implementation, Management, and Maintenance Study Guide, Sybex Inc Alameda, 2003, pp 70-73, 304 QUESTION You are the network administrator for TestKing The network consists of a single Active Directory domain named testking.com The network topology is shown in the exhibit The configurations of the DNS servers that host the zone named testking.com are shown in the following table The refresh interval for the zone is one hour The zone contains 10,000 records The network connection to Caracas is operating at 90 percent of capacity You remove Testking3 from the network to perform hardware maintenance Two hours later, you bring Testking3 back on the network You need to ensure that Testking3 can immediately provide accurate responses to client computer requests for data You also need to ensure that no unnecessary traffic is generated by the DNS servers What should you on Testking3? Exhibit: 70-291- Pass4Sure Questions By EvilRen_besmart A B C D Transfer the zone from the master server Reload the zone from the master server Update server data files Scavenge stale resource records Answer: A Section: 2.Managing DNS zone settings (? questions) Explanation/Reference: Explanation: A DNS zone transfer is the process by which the zone's resource records are copied, or replicated, to other DNS servers The resource records in the zone are stored in a database that is copied at specified intervals to other DNS servers to ensure reliable host name resolution Thus transferring the zone from the master server will have the desired effect Incorrect answers: B: Reloading the zone is not going to make sure that unnecessary traffic is not generated by the DNS servers C: Updating server data files is not going to ensure that unnecessary trasffic is generated on the DNS servers It is irrelevant in this case D: Be careful when enabling DNS scavenging and understand that it is disabled by default for a reason If it is set up incorrectly, vital DNS resource records could be deleted accidentally, causing more problems than an abundance of stale records Scavenging stale resource records is not advised in this case Reference: 70-291- Pass4Sure Questions By EvilRen_besmart Deborah Littlejohn Shinder, Dr Thomas W Shinder, Chad Todd & Laura Hunter, MCSA/MCSE Exam 70-291: Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure Guide & DVD Training System, Syngress Publishing, Rockland, 2003, pp 434, 501 QUESTION You are the network administrator for TestKing.com The network contains a DNS server named Testking1 Testking1 is configured to resolve queries for external internet resources.Testking1 also hosts the testking.com internal zone for Active Directory Users report that they are directed to the wrong Web site when browsing for wellknown Internet Web sites You need to minimize the occurrence of unexpected results when users browse the Internet in the future You also need to minimize disruption to users What should you do? A B C D Enable the Disable recursion setting in the advanced properties of Testking1 Enable Fail on load if bad zone data setting in the advanced properties of Testking1 Enable the Secure cache against pollution setting in the advanced properties of Testking1 Enable the Enable automatic scavenging of stale resource records setting in the advanced prop of Testking1 and set it to days Answer: C Section: 1.Monitor DNS Tools might include System monitor, Event viewer, Replication Monitor, and DNS debug logs (? questions) Explanation/Reference: Explanation: When theSecure cache against pollutionsetting is disabled, all records received in response to DNS queries are cached This is true even when the records not match to a queried domain name Enabling the Secure cache against pollution setting disables the ability to pollute the DNS cache with incorrect information, and spoof DNS queries With Windows Server 2003 the default setting is that caches are secured against pollution This will then prevent users that browse the Internet from being directed to the wrong websites Incorrect Answers: A:Checking this option enables the use of recursive forwarders) lookups on the entire server regardless of conditional settings on the Forwarders tab It disables the use of forwarders This is not what is required in this scenario 70-291- Pass4Sure Questions By EvilRen_besmart B:By default, Windows Server 2003 DNS servers load their zones regardless of any errors in zone files The Fail on load if bad zone data option can be used to alter that behavior so that the DNS server service logs errors, but fails to load a zone file containing records data that is determined to have errors However in this case it is a matter of queries not being resolved D:Because stale resource records can accumulate within a zone over a period of time E.g., if a computer registers its own resource record and is shut down improperly, the record might not be removed from the zone file Scavenging stale resource records can eliminate any problems, such as outdated information Thus Enabling automatic scavenging of stale resource records and setting it to days may still allow users to be directed to the wrong web sites Information can still become outdated within days You need to secure the cache from pollution Reference: Deborah Littlejohn Shinder, Dr Thomas W Shinder, Chad Todd and Laura Hunter, MCSA/MCSE: Exam 70-291: Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure Guide & DVD Training System, Syngress Publishing Inc., Rockland, 2003, pp 496-497 J.C Mackin, Ian McLean, MCSA/MCSE Self-Paced Training Kit (exam 70-291): Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 network Infrastructure, Microsoft Press, Redmond, 2003, Part 1, Chapter 3, pp 285, 291 QUESTION You are the network administrator for TestKing.com The network consists of two DNS domains named testking.com and south.testking.com A Windows Server 2003 computer named TestKingSrvA is a domain controller and DNS server for testking.com TestKingSrvA is also a secondary zone server for south.testking.com A Windows 2000 Server computer named TestKingSrvB is a domain controller and the DNS server for south.testking.com The two DNS domains are connected through an ISDN line You need to monitor the successful incremental zone transfers from south.testking.com to testking.com What should you do? 70-291- Pass4Sure Questions By EvilRen_besmart Answer: 70-291- Pass4Sure Questions By EvilRen_besmart Section: 1.Monitor DNS Tools might include System monitor, Event viewer, Replication Monitor, and DNS debug logs (? questions) Explanation/Reference: The IXFR Success Received counter indicates the number of successful incremental zone transfers received by a secondary DNS server AXFR relates to an all zone transfer The Dynamic Update Received counter is typically for determining whether DNS clients are attempting to update their DNS addresses The Secure Update Received counter is for determining the number of systems that is successfully performing secure updates in DNS The WINS Reverse Lookup counter relates to WINS reverse lookups Reference: Deborah Littlejohn Shinder, Dr Thomas W Shinder, Chad Todd and Laura Hunter, Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure Guide & DVD Training System, Syngress Publishing Inc., 10 70-291- Pass4Sure Questions By EvilRen_besmart Step Enter a password and click Next Step Click Finish 250 70-291- Pass4Sure Questions By EvilRen_besmart Step In the Users container, double click the Domain TestKingAdmin1 account Step On the “Member of” tab, click Add 251 70-291- Pass4Sure Questions By EvilRen_besmart Step Type in ‘domain admins’ and click OK Step 10 Click OK to close the dialog box 252 70-291- Pass4Sure Questions By EvilRen_besmart The second requirement of this question states that members of the PasswordAdmin group should be able to reset passwords for the Sales OU To this, we can delegate control Step Right click on the Sales OU and select Delegate Control 253 70-291- Pass4Sure Questions By EvilRen_besmart Step The Delegation of Control wizard starts Click Next Step Click Add 254 70-291- Pass4Sure Questions By EvilRen_besmart Step Type in ‘passwordadmin’ and click OK Step Click Next 255 70-291- Pass4Sure Questions By EvilRen_besmart Step Select the checkbox for resetting passwords and click Next Step Click Finish 256 70-291- Pass4Sure Questions By EvilRen_besmart The third requirement of this question states that member of the UserAdmin group should be able to create and manage user accounts in the Sales OU To this, we can delegate control Step Right click on the Sales OU and select Delegate Control 257 70-291- Pass4Sure Questions By EvilRen_besmart Step The Delegation of Control wizard starts Click Next Step Click Add 258 70-291- Pass4Sure Questions By EvilRen_besmart Step Type in ‘useradmin’ and click OK Step Click Next Step Select the checkbox for creating and managing user accounts and click Next 259 70-291- Pass4Sure Questions By EvilRen_besmart Step Click Finish The fourth requirement of this question states that members of the GroupsAdmin group should be able to manage group membership in the Sales OU 260 70-291- Pass4Sure Questions By EvilRen_besmart To this, we can delegate control Step Right click on the Sales OU and select Delegate Control Step The Delegation of Control wizard starts Click Next Step Click Add 261 70-291- Pass4Sure Questions By EvilRen_besmart Step Type in ‘GroupsAdmin’ and click OK Step Click Next 262 70-291- Pass4Sure Questions By EvilRen_besmart Step Select the checkbox “Modify the membership of a group” and click Next Step Click Finish 263 70-291- Pass4Sure Questions By EvilRen_besmart 264 ... south.testking.com to testking.com What should you do? 70- 291- Pass4Sure Questions By EvilRen _besmart Answer: 70- 291- Pass4Sure Questions By EvilRen _besmart Section: 1.Monitor DNS Tools might include... What should you do? Network (exhibit): 21 70- 291- Pass4Sure Questions By EvilRen _besmart route (exhibit): 22 70- 291- Pass4Sure Questions By EvilRen _besmart A B C D E Change the IP address on... advised in this case Reference: 70- 291- Pass4Sure Questions By EvilRen _besmart Deborah Littlejohn Shinder, Dr Thomas W Shinder, Chad Todd & Laura Hunter, MCSA/MCSE Exam 70- 291: Implementing, Managing,