Microsoft 70-291
Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure Version: Demo 41.2
Microsoft 70-291 Exam Topic 1, Volume E
QUESTION NO: 1 Your network consists of a single Active Directory domain named contoso.com. All servers run windows Server 2003 Service Pack 2 (SP2). The domain has two domain controllers named DC1 and DC2. Both domain controllers are DNS servers, windows Support Tools is installed on both domain controllers. The contoso.com DNS zone is Active Directory-integrated. You need to verify that the contoso.com zone has replicated between DC1 and DC2. What should you do? A. On DC1 and DC2, open Event Viewer and review the DNS server log. B. On DC1, open the DNS snap-in. From the properties of the contoso.com zone, review the Zone Transfer settings. C. On DC1 and DC2, open the DNS snap-in. From the properties of the contoso.com zone, review the Monitoring settings. D. From Active Directory Replication Monitor, connect to DC1. under the DC=DomainDnsZones,DC=contoso,DC=com directory partition, review the status of Default-FirstSite\DC2. Answer: D Explanation:
Topic 2, Volume A QUESTION NO: 2 You are the network administrator for A. Datum Corporation. The company registers the DNS domain name adatum.com. The adatum.com DNS domain will contain the host name records for three servers in the company that are accessible from the Internet. One of these servers functions as a Web server, one functions as an FTP server, and one functions as a mail server. The primary name server for the adatum.com zone is a Windows Server 2003 computer named DNS01. DNS01 is on a network segment that is accessible from the Internet.The company also wants to use the DNS namespace adatum.com to register hosts from the internal network. The internal network is protected by a firewall that filters traffic from the Internet. The written company security policy states that host names on the internal network must not be resolved by queries from the Internet.You install Windows Server 2003 on a computer named DNS02. DNS02 will be used to allow computers on the internal network to resolve host names in the adatum.com namespace. All
"A Composite Solution With Just One Click" - Certification Guaranteed
2
Microsoft 70-291 Exam computers on the internal network will be configured to use DNS02 as their DNS server. The company network is configured as shown in the exhibit. (Click the Exhibit button.)You need to configure DNS01 and DNS02 so that all computers on the internal network can resolve the host names of other computers on the internal network, and the three servers that are accessible from the Internet. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Manually add a host (A) record for each Internet-accessible computer to the adatum.com zone on DNS02. B. Create a secondary DNS zone named adatum.com on DNS02. C. Create a primary DNS zone named adatum.com on DNS02. D. Configure DNS forwarding from DNS01 to DNS02. E. Configure DNS forwarding from DNS02 to DNS01. F. Manually add a host (A) record for each computer on the internal network to the adatum.com zone on DNS01. Answer: A,C Explanation: You must configure a primary zone named adatum.com on the internal server to use the adatum.com name for the internal network. For the internal server to resolve the hostnames of the external servers, you must manually add a host (A) record for each server on the internal DNS server. Reference: Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Chad Todd and Laura Hunter, Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure Guide & DVD Training System, Syngress Publishing Inc., Rockland, 2003, pp. 33 and pp. 424 "A Composite Solution With Just One Click" - Certification Guaranteed
3
Microsoft 70-291 Exam
Topic 3, Volume B
QUESTION NO: 3 You are the network administrator for your company. All servers run Windows Server 2003. Twenty company employees connect to a terminal server named Server2 to run applications and to gain access to the Internet. The 20 employees report that they receive security messages while browsing Internet Web sites. The employees report that they cannot modify the Internet Explorer security settings on their client computers while connected to Server2. You need to allow these 20 employees to modify the Internet Explorer security settings on their client computers while connected to Server2. What should you do? A. Log on to Server2 as Administrator and add http:// to the list of trusted sites in Internet Explorer. B. Instruct the 20 employees to change the Internet Explorer privacy settings on their client computers to Low. C. Instruct the 20 employees to add http:// to the list of trusted sites in Internet Explorer on their client computers. D. Uninstall Internet Explorer Enhanced Security Configuration on Server2. Answer: D Explanation: Internet Explorer Enhanced Security Configuration is installed by default on Windows 2003 Server computers. With Internet Explorer Enhanced Security Configuration installed, web pages may not display in Internet Explorer as expected and applications that require the browser may not work correctly because scripts, Microsoft ActiveX controls, the Microsoft virtual machine (Microsoft VM) for HTML content, and file downloads have been disabled. This is what is causing the security messages when users connect to the server via Terminal Services. Therefore, the solution is to uninstall Internet Explorer Enhanced Security Configuration on SERVER2.
QUESTION NO: 4 You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains 35 Windows Server 2003 computers; 3,000 Windows XP Professional computers; and 2,000 Windows 2000 Professional computers. Windows Server Update Services (WSUS) is installed on a server named Server1. The necessary Group Policy object (GPO) is configured. You need to confirm whether all computers in the domain have received all approved updates from Server1. What should you do on Server1? A. Open the WSUS console. Run the Status of Computers report. B. At the command prompt, type gpresult /scope COMPUTER. "A Composite Solution With Just One Click" - Certification Guaranteed
4
Microsoft 70-291 Exam C. Open the WSUS console. Run the Synchronization Results report. D. Install and configure Urlscan.exe. Answer: A Explanation:
QUESTION NO: 5 You are the network administrator for Alpine Ski House. The network consists of two Active Directory domains. One domain is named alpineskihouse.com. A subsidiary company named Adventure Works has a domain named adventure-works.com. Both domains are in a single forest. A primary DNS server for alpineskihouse.com is located in the company's Seattle office. A primary DNS server for adventure-works.com is located in the company's Portland office. Both DNS servers are Windows Server 2003 computers. Each domain has three regional offices. Each regional office contains the following computers: a secondary DNS server in its respective domain a DHCP server a recently installed Microsoft Internet Security and Acceleration (ISA) Server computer that connects the LAN to the Internet Company sales representatives visit the Seattle office, the Portland office, and all regional offices several times each month. All sales representatives use Windows XP Professional portable computers that are members of the alpineskihouse.com domain. You create an appropriate wpad.dat script file on each of the ISA servers in each regional office. On each DHCP server, you configure the 252 Proxy Autodiscovery option and the corresponding http://ISAServerName/wpad.dat string value. Sales representatives report that they cannot access the Internet by using Internet Explorer when they visit an office that is in the adventure-works.com domain. You need to ensure that all users can access the Internet at all times. You want to use the minimum amount of administrative effort. What should you do? A. On each DHCP server that is a member of the adventure-works.com domain, configure the 15 DNS Domain Name option to be adventure-works.com. B. Configure Windows XP Professional portable computers with the primary DNS suffix of adventure-works.com. C. On the primary DNS server for the adventure-works.com domain, add an _http service service locator (SRV) resource record for each ISA server in the adventure-works.com domain. D. Configure the Advanced TCP/IP Settings setting on the Windows XP Professional portable computers with a DNS suffix for this connection setting of adventure-works.com.
"A Composite Solution With Just One Click" - Certification Guaranteed
5
Microsoft 70-291 Exam Answer: A Explanation: Configuring the 015 DNS Domain Name option to be the adventure-works.com will automatically set the “DNS Suffix for this connection� string. Reference: Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Chad Todd and Laura Hunter, Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure Guide & DVD Training System, Syngress Publishing Inc., Rockland, 2003, p. 187
Topic 4, Volume C
QUESTION NO: 6 You have a server that runs Windows Server 2003 Service Pack 2 (SP2).The server connects to the Internet by using a router. You attempt to launch Windows Update and receive the following error message: "Cannot find server or DNS Error." The IP configurations of the server are shown in the exhibit. (Click the Exhibit button.)
You need to ensure that the server can connect to Windows Update. What should you do?
"A Composite Solution With Just One Click" - Certification Guaranteed
6
Microsoft 70-291 Exam A. Configure the server to have static IP settings. B. Install the DNS Server service on Server1 and configure DNS to use a forwarder. C. Add an entry to the %systemroot%\system32\drivers\etc\hosts file for update.microsoft.com. D. Add an entry to the %systemroot%\system32\drivers\etc\lmhosts file for update.microsoft.com. Answer: A Explanation:
Topic 2, Volume A QUESTION NO: 7 You are a network administrator for your company. A Windows Server 2003 computer named Server1 is exhibiting connectivity problems. You monitor Server1 by using System Monitor and Network Monitor. While monitoring, you notice that Server1 has approximately 4 MB of available memory, and the average CPU utilization is running at 95 percent. When you investigate the Network Monitor capture, you notice that some network packets sent to Server1 during the capture have not been captured.You need to ensure that the impact of monitoring on Server1 is reduced and that all packets sent to the computer are captured. What should you do? A. From a command prompt, run the diskperf command. B. Run Network Monitor in dedicated capture mode. C. Configure a Network Monitor capture filter. D. Increase the buffer size in Network Monitor. Answer: B Explanation: The CPU of SERVER1 runs on 95%, which indicates that there is not enough resources to the network Monitor. Running Network Monitor in dedicated capture mode frees resources on the computer for capturing datA. This results in fewer frames being dropped. The capture statistics are not displayed or refreshed because the frames are copied to the capture buffer. Reference: Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Chad Todd and Laura Hunter, Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure Guide & DVD Training System, Syngress Publishing Inc., Rockland, 2003, p. 841
Topic 5, Volume F
"A Composite Solution With Just One Click" - Certification Guaranteed
7
Microsoft 70-291 Exam QUESTION NO: 8 CORRECT TEXT You are a network administrator for your company. The London office is currently connected to the corporate WAN by using a Windows Server 2003 computer named Server1. Server1 is configured as a dial-up router. Server1 has two network adapters named LAN Interface and WAN Interface. LAN Interface connects to the Ethernet LAN. WAN Interface is a broadband networking device. You need to view real-time data to find out the current utilization of the WAN broadband connection by adding only one counter. You must accomplish this task by using the System Monitor snap-in.
Answer: We need to configure System Monitor as shown below. Explanation: Step #1. Click Start > Run and type in “perfmon� to open System Monitor.
Step #2. Click the Add (+) sign to add a new counter.
"A Composite Solution With Just One Click" - Certification Guaranteed
8
Microsoft 70-291 Exam
Step #3. Select Network Interface in the drop-down box for the Performance object. In the right-hand window, select the WAN interface. Select Packets/sec for the performance counter then click Close.
"A Composite Solution With Just One Click" - Certification Guaranteed
9
Microsoft 70-291 Exam
Step #4. Verify that data is displayed then close System Monitor.
"A Composite Solution With Just One Click" - Certification Guaranteed
10
Microsoft 70-291 Exam
Topic 1, Volume E
QUESTION NO: 9 Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). You have a member server named Server1 that is configured as a DHCP server. You install a new stand-alone server named Server2 in the same subnet as Server1. You install the DHCP service on Server2. You need to ensure that Server2 can assign IP configurations to clients on the subnet. What should you do first? A. Join Server2 to the domain. B. Restart the DCHP Server service on Server1. C. From the DHCP snap-in on Server1, add Server2 by using the Add Server option. D. From the DHCP snap-in on Server2, add Server 1 by using the Add Server option. Answer: A Explanation:
Topic 2, Volume A QUESTION NO: 10 You are the network administrator for Contoso, Ltd. The network consists of a single Active Directory domain named contoso.com. The network topology is shown in the exhibit. (Click the Exhibit button.) The configurations of the DNS servers that host the zone named contoso.com are shown in the following table.
"A Composite Solution With Just One Click" - Certification Guaranteed
11
Microsoft 70-291 Exam
The refresh interval for the zone is one hour. The zone contains 10,000 records.The network connection to Caracas is operating at 90 percent of capacity. You remove Server3 from the network to perform hardware maintenance. Two hours later, you bring Server3 back on the network.You need to ensure that Server3 can immediately provide accurate responses to client computer requests for datA. You also need to ensure that no unnecessary network traffic is generated by the DNS servers.What should you do on Server3?
A. Update server data files. B. Scavenge stale resource records. C. Transfer the zone from the master server. D. Reload the zone from the master server. Answer: C Explanation: A DNS zone transfer is the process by which the zone’s resource records are copied, or replicated, to other DNS servers. The resource records in the zone are stored in a database that is copied at specified intervals to other DNS servers to ensure reliable host name resolution. Thus transferring the zone from the master server will have the desired effect. : Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Chad Todd & Laura Hunter, MCSA/MCSE Exam 70-291: Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure Guide & DVD Training System, Syngress Publishing, Rockland, 2003, pp. 434, 501
"A Composite Solution With Just One Click" - Certification Guaranteed
12