Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure

1.You are the network administrator for BlueYonder Airlines.The company uses a single Active Directory domain named blueyonderairlines.com. The company network consists of three subnets. The subnetsare connected by two hardware routers. Each subnet contains one Windows Server 2003 computer with the Routing and Remote Access service enabled andconfigured.The relevant portion of the network is configured as shown in the Network exhibit. (Click the Exhibitbutton.)        Users on the 192.168.30.0/24 subnet report that they cannot access resources on Server1.You verify that Server1 and Server2 can connectto each other. You run thetracert command on Server3 and view the output shown intheTracert exhibit. (Click the Exhibit button.) You need to ensure that users on all three segments of the network can access resources on Server1. What should you do?
A. Modify the route to the 192.168.30.0 network in the routing table on Router1.
B. Modify the route to the 192.168.10.0 network in the routing table on Router2.
C. Modify the route to the 192.168.30.0 network in the routing table on Server1.
D. Modify the route to the 192.168.10.0 network in the routing table on Server2.
E. Modify the route to the 192.168.10.0 network in the routing table onServer3.
Answer: B

2. You are the network administrator of your company.Thecompany network contains two subnets thatareconnected by a router. All servers run Windows Server 2003. All network hosts are manually configured with TCP/IP information.The network is configured as shown in the exhibit. (Click the Exhibit button.) A developer uses a server named Workstation6 for testing.She reports that she cannot access resources on a servernamed Server5. All other hosts on subnet A are able to access resources on Server5.From Workstation6 you successfully ping the Ipaddress of the router interface on the local subnet. However, youcannot ping the IP address of Server5 or the Ipaddress of the router interfaceon subnet B. You run the route printcommand onWorkstation6and receive the output as shown in the following table.You need to ensure that Workstation6 can connect to Server5 and any other hosts on subnet B.What should you do?
A. Change the IP address onWorkstation6to131.107.142.128.
B. Change the subnet mask on Workstation6 to 255.255.0.0.
C. Change the default gateway onWorkstation6 to 131.107.128.1.
D. Change the IP address of the router interface connecting to subnetA to 131.107.142.1. E. Change the IP address on the router interface connecting to subnet B to 131.107.194.1. Answer: C

3. You are the network administrator for aWeb hosting company. All servers run Windows Server2003. All clientcomputers runWindows XPProfessional.Your company is assigned the following IP address ranges by the ISP:.131.107.10.0 through 131.107.10.255 .131.107.11.0 through 131.107.11.255 The company's data center contains 400Windows Server 2003 computers and consists of two subnets named subnet A andsubnet B. Subnet A contains 200 servers and uses the 131.107.10.0 network address. Subnet B alsocontains 200 servers and uses the 131.107.11.0 network address. All server IP addresses are assigned by DHCP.All computers in the data center have valid Internet-accessible IP addresses. As a result of a corporate acquisition, 200 additional servers will be added to your company's data center withinone month. The new servers will be placed on the network segment thatmaps tosubnet A. The existing router does not have the capacity for an additional subnet, and the budget does not allowthe purchase of a new router. You will need to add the additional servers to the existing subnet A. The ISP assigns you the additional IP address range131.107.12.0 through 131.107.12.255. You need to change the Ipaddressing scheme to accommodate all required servers in subnet A and subnet B. You are authorized to make any necessary changes.The diagram in the work area shows the network configuration and the planned number of servers for each subnet.Which IP address should beassigned to each subnet?To answer, drag the appropriate IP address or addresses to the correct locations in the work area. Answer:

4. You are the network administrator for your company. The network consists of a single Active Directory domain.All servers run Windows Server 2003. The networkcontains twodomain controllers and three file servers. The DHCP server for thenetwork is namedServer2. All client computers are configured as DHCP clients.Users report that they cannot connect to the file servers on the network. On one of the affected computers, you run the ipconfig /all command. You receive the result shown in the Ipconfig exhibit. (Click the Exhibit button.) You log on to the DHCP server and view the DHCP console as shown in the DHCP exhibit. (Click the Exhibitbutton.) You need to ensure that theusers can connect to the network file servers. What should you do?
A. Start the DHCP service on Server2.
B. Increase the number of addresses available in the scope on Server2.
C. Authorize the DHCP server in Active Directory.
D. Add the Server2 computer account to the DHCPAdministrators domain local group. Answer: A

5. You are the network administrator for your company. The network consists of a single Active Directory domain.All servers run Windows Server 2003. The domain controllers in the domain are also configured as the DNS servers for the network.The DHCP server for the network is named Server1.You decide tomove the DHCP service toa server named Server2. You stopthe DHCP service onServer1. You logon to Server2 by using the local Administrator account, and you install DHCP.After you install DHCPon Server2, you create a new scope in DHCP.You activate the scope. Users report that theycannot log onto the network. You discover that the client computers are not receiving an Ipaddress configuration from the DHCP server. You open Event Viewer on Server2 and view the event shown in the exhibit. (Click the Exhibit button.) You need to ensure that client computers on the network can receive an Ipaddress configurationfrom Server2. What should you do?
A. Restart the DHCP service on Server2.
B. Authorize the DHCP service on Server2 in Active Directory.
C. Uninstall the DHCP service on Server1.
D. Install DNS on Server2. Configure a secondary zoneon Server2 for the Active Directory domain DNS zone.
Answer: B

6. You are the network administrator for your company. The network consists of a single Active Directory domain.All servers run Windows Server 2003. All servers are configured with static IP addresses. All client computers run Windows XP Professional. All client computers are configured as DHCP clients. Therelevant portion of the network is configured as shown in the Network exhibit. (Click the Exhibit button.) A user named Maria reports that she cannot access network resources by using her client computer. Her client computer is named Client2. Maria reports that she received an error message about a duplicate address on thenetwork when she started her computer thismorning.You examine the DHCP scope properties on the DHCP server. The scope properties are shown in the DHCPexhibit. (Click the Exhibit button.) You need to ensure thatMaria can access the network by using her client computer. You also need to ensure thatthis problemwill notrecur. What should you do?
A. Exclude the IP addresses 192.168.10.10 to 192.168.10.15 from the DHCP scope. Restart Client2.
B. Add the additional IP addresses 192.168.10.201 to 192.168.10.250 to the DHCPscope. Restart Client2.
C. Configure the DHCP scope todetect IP address conflicts. Restart Client2.
D. Reconcile the DHCP scope on the DHCP server. Restart Client2.
Answer: A

7.You are the network administrator for your company. All servers run Windows Server 2003. All servers are configured with static IP addresses. All client computers run Windows XP Professional. All client computers are configured as DHCPclients.The company has amain office and one branchoffice. The offices are separated by a router. A DHCP server is deployed in each office.One of the DHCP serversshuts down unexpectedly. It takes four hours to repair the server. Duringthattime, several mobile users connect their portable computers to the network and report that they cannot connect to shared resources on the network. After the server is repaired, you create a new scope on each DHCP server that includes Ipaddresses for the other office.You activate the scopes. You test the new DHCP configuration byshutting down the DHCP server in the main office. You find out that the client computers in the main office are not receiving Ipaddresses from the DHCP server in the branch office.You need to ensure that when the DHCPserver in one office fails, the client computers will receive a correct Ipaddress configuration from the DHCPserver in the other office.What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. Configure the router between the offices to forward BOOTP broadcasts.
B. Configure the DHCP server in each office with a DHCPscope thatincludes the same IP addresses as the DHCPserver in the other office. Activate the scope.
C. Configurethe DHCP server in each office with anadditional network adapter. Connect each new network adapter to the local network.Assign anIP address from the other office'snetwork toeach new network adapter.
D. Install and configure a DHCP relay agent in each office.
Answer: DANDA

8.You are the network administrator for your company. All servers run Windows Server 2003. All servers are configured with static IP addresses. All client computers run Windows XP Professional. All client computers are configured as DHCPclients.The company has amain office and one branchoffice. The offices are separated by a router. A DHCP server is deployed in each office.The DHCP servers are named DHCP1 and DHCP2. You configure scopes on the DHCP1 and DHCP2 as shown in the following table.You shut down DHCP1 for scheduled maintenance. While DHCP1 is shutdown, client computers inboth offices continue to receive correct IP address assignments fromDHCP2. You restart DHCP1. Several users report that when they restart their computers, they receiveerror messages stating that a duplicate IP address exists on the network.You need to ensure that these error messages do not appear when you shut down and restart a DHCP server.Youneed to ensure that changes you make does not affect the current DHCP functionality. What should you do?
A. On each DHCP server, configure a superscope that includes both DHCP scopes.
B. Configure the router between the offices to block all broadcasts.
C. Modify the Main scope on DHCP1 to include addresses 10.1.16.0 through 10.1.27.254. Modify the Branch scope on DHCP2 to include addresses 10.2.16.0 through 10.2.27.254.
D. Modify the Main scope on DHCP2 to include addresses 10.1.16.0 through 10.1.31.254. Modify the Branch scope on DHCP1 to include addresses 10.2.16.0 through 10.2.31.254.
Answer: C

9. You are the network administrator for your company. The network consists of a single Active Directory domain.All servers run Windows Server 2003. All client computers run Windows XP Professional.Two of the servers on the network contain highly confidential documents. The company's written security policy states that all network connections with these servers must be encrypted byusing an IPSec policy. You place the two servers inan organizationalunit (OU) named SecureServers.You configure a Group Policyobject (GPO) that requires encryptionfor all connections. You assignthe GPO to the SecureServers OU. You need to verify that users are connecting to the twoservers by using encrypted connections.What should you do?
A. Run the net viewcommand.
B. Run the gpresult command.
C. Use the IPSecurity Monitor console.
D. Use the IPSec Policy Management console.
Answer: C

10.You are the network administrator for your company.The network consists of a single Active Directorydomain. All servers runWindows Server 2003. One domain controller on the network is configured as acertification authority (CA). The network contains a Web server that runs IIS 6.0 and hosts a secure intranet site. The server also hosts other sites that do not requireHTTPS. You configure a server certificate on the IIS server by using a certificatefrom your internal CA. All users are required to connect to the intranetsite byusing HTTPS. Some users report that they cannot connect to the secureintranet site by using HTTPS. You confirm that all users can connect to the nonsecure sites hosted on the Web server byusing HTTP. You want to view the failedHTTPS requests. What should you do?
A. Review the log files created by IIS on the Web server.
B. Review the security log in Event Viewer on the Web server.
C. Review the security log in Event Viewer on the CA.
D. Review the contents of the Failed Requests folder on the CA.
Answer: A

11. You are the network administrator for your company. The network consists of a single Active Directory domain. All servers runWindows Server 2003. The network contains a Web server thatruns IIS 6.0 and hosts a secure intranet site. All users are required to connect to the intranet site by authenticating and using HTTPS. However,becausean automated Web applicationmust connect to the Web site by using HTTP, you cannot configure the intranet site to require HTTPS. You need to collect information about which users are connecting to the Web site by using HTTPS. What should you do?
A. Check the application log on theWeb server.
B. Use Network Monitor to capture network traffic on the Web server.
C. Review the log files created by IIS on the Web server.
D. Configure a performance log to capture allWeb service counters. Review the performance log data.
Answer: C

12.You are the network administrator for your company.The network consists of a single Active Directorydomain. All servers runWindows Server 2003. The network contains a Web server named Server1 that runs IIS 6.0 and hosts a secure Web site. The Web site is accessible from the intranet, as well as from the Internet. All users must authenticate when they connect to Server1.All users on the Internetmust use a secure protocol to connect to the Web site. Users on the intranet do not need touse a secure protocol. You need verify that all users are using a secure protocol to connect toServer1 from the Internet. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. Monitor the events in the application log on Server1.
B. Monitor the events in the security log on Server1.
C. Monitor the Web server connections on Server1 byusing a performance log.
D. Monitor network traffic to Server1 byusing Network Monitor.E. Monitor the IIS logs onServer1.
Answer: E AND D

13.You are the administrator of an Active Directory domain. All servers runWindows Server 2003. All clientcomputers runWindows XPProfessional. All computers are members of the domain. The Secure Server (Require Security) IPSec policy is assigned toa file server named Server6. The policy is configured as shown in the exhibit. (Click the Exhibit button.)  Users report that they cannot access shared folders on Server6. Users were able to access shared folders on Server6 prior to the implementation of the IPSec policy.You need to ensure that all client computers in the domain can access the shared folders on Server6.You must ensurethat allcommunications between client computers andServer6 be encrypted.What should you do?
A. On Server6, enable the All ICMP Traffic IP Security rule in the properties of the SecureServer (RequireSecurity) IPSec policy.
B. On Server6, enablethe<Dynamic> IP Security rule in the properties of theSecure Server (Require Security) IPSec policy.
C. On all client computers, assign the Client (Respond Only) IPSec policy.
D. On all client computers, install an IPSec communication certificatein the local machine store.
Answer: C

14. You are an administrator of a singleActive Directory forest that contains one domain. All servers run Windows Server 2003.A server named VPN1 is configured withRouting and Remote Access. VPN1 is configured to allow only inbound VPN connections that use L2TP.You assign the Server (Request Security) IPSec policy on VPN1. You configure the policy to use Kerberos and certificates for authentication.From a Windows XP Professional computer named Client1, which does not belong to the domain, you attempt toestablish a VPN connection to VPN1 and receive the error message shown in the exhibit. (Click the Exhibit button.)  You verify that the VPN ports onVPN1 are not being blocked byany intermediate devices.You need to configure Client1 to allow it to establish a VPN connection toVPN1. What should you do?
A. Assign the Client (Respond Only) IPSec policy.
B. Assign the Server (Request Security) IPSec policy.
C. Install a valid IPSec certificate in the local machine store.
D. Configure the VPN connection so that only L2TP IPSec VPN is enabled.
Answer: C

15.You are the administrator of an Active Directory domain. All servers runWindows Server 2003. All clientcomputers runWindows XPProfessional.A server named Filesrv1 contains confidential data that is only available to users in the human resources (HR) department. You want all computers in the HR department to connect to Filesrv1 by using an IPSec policy.You assign theServer (Request Security) IPSec policy to Filesrv1. Using Network Monitor, you notice that some computers in the HR department connect to Filesrv1 without using the IPSec policy.You need to configure Filesrv1 to ensure that all computers connect to it by using the IPSec policy.What should you do?
A. Assign the Secure Server (Require Security) IPSec policy.
B. Assign the Client (Respond Only) IPSec policy.
C. Unassign the Server (Request Security) IPSec policy.
D. Restart the IPSec Services service.
Answer: A

 16.You are the network administrator for your company. All servers run Windows Server 2003.You configure the Routing and Remote Access service on a server named Server2. Server2 is connected to a modem pool and supports eight simultaneous inbound connections.You instruct remote users to dial in to Server2from their home computers.The company's written business policy states that the only client computer operating systems that should besupported for dial-up access are Windows 95, Windows 98, Windows 2000 Professional, and Windows XPProfessional.You need to configure the remote access policy to support the most secure authentication methods possible.Youwant to enable onlythe necessary authentication methods based on the supported client computers that will be connecting. Which authentication method or methods should you enable? (Choose all that apply.)
 A. PAP
 B. SPAP
 C. CHAP
 D. MS-CHAPVersion1
 E. MS-CHAPVersion 2
 Answer: E AND D
 
 17.You are a network main.All servers run Windows Server 2003. The company has a main office and one branch office. The perimeter networks for each office are configuredas shown in the exhibit. (Click the Exhibit button.) You configure an L2TP/IPSec VPN tunnel between Server1 and Server2.You also configure and assign an IPSec policy named RASIPSec that requires secure communications. You needto ensure that nounsecuredtraffic from the Internet reaches the internalnetwork through this VPN. Youalso need to ensure thataccess to the VPN servers from their respective internal networks is not disrupted.What should you do?
A. Configure input and output L2TP/IPSec packet filters on the internal interfaces of Server1 and Server2.
B. Configure input and output L2TP/IPSec packet filters on the external interfaces of Server1 and Server2.
C. In the properties of RASIPSec, edit the All IP Traffic IP Filter listto include the IP addresses for only Server1 and Server2.
D. In the properties of RASIPSec, edit the All ICMP Traffic IP Filter list to include the IP addresses for onlyServer1 and Server2.
Answer: B

18. You are the administrator of a Windows Server 2003computer named Server1.The networkcontains another Windows Server 2003 computer named Server2 thathas the DNS and WINS services installed. Two hundred Windows 2000 Professional computers regularly connect to Server1 to access file and print resources. Administrators report that network traffic has increased and that response times for requests for network resources on Server1 have increased. You need to identify whether Server1 is receiving requests for resources through NetBIOS broadcasts. What should you do?
A. Use Network Monitor to capture traffic between Server1 and all client computers.
B. Use Network Monitor to capture traffic between Server1 and Server2.
C. Monitor EventViewer for Net Logon error or warning events.
D. Run the tracert command on Server1.
Answer: A

19.You are the administrator of aWindows Server 2003 computer named Server1. Server1 is an FTP server located inthecompany's internal network.Administrators report an increased amount of FTP traffic to Server1.You need to configure Server1 to achieve the following goals:Identify the media access control (MAC) address of any computer that is performing FTP transfers from Server1. Find out the exact FTP commands that were executed. Ensure that you donot disruptthe operation of Server1.What should you do?
A. Configure a performance alert to write an event to the application event log whenever the number ofestablished FTP connections exceeds 1.
B. Use a Network Monitor filter tocaptureIP traffic from any computer to Server1.
C. Run the finger command on Server1 to identify the source of the FTP requests.
D. Run the arp command on Server1 to identify the source of the FTP requests.
Answer: B

20. You are the administrator of anActive Directory domain. The domain contains a Windows Server 2003 computer named Server1. Server1 functions as a domain controller and a DNS server. The domain also containsa Windows XPProfessional client computer named Client1. You need to establish a detailed record of all of the communications that occur when a typical member of the Domain Users group named User1 logs on to the Active Directory domain from Client1.You might need to use this information as a troubleshooting tool if communications between Client1 and Server1 are disrupted or degraded.You want to use Network Monitor to obtain this baseline information.What should you do? To answer, move the appropriate actions from the list of actions to the answer area, and arrange them in the correct order.
A. Start a capture.
B. Enable TCP/IP filteringon Client1.
C. Start Network Monitor on Server1 and select Local Area Network.
D. Configure a capture filter to capture all traffic between Server1 and Client1.
E. Configure a display filter to display all traffic between Server1 and Client1.
F. Configure a capture filter to capture all traffic between Server1 and *ANY.
G. Configure a display filter to display all traffic between Server1 and *ANY.
H. Log on toClient1 as User1 and allow the logon process to complete.
I. Log on to Server1 as User1 and allow the logon process to complete.
J. Stop the capture and save it in a secure, reliable location.
Answer:
C . Start Network Monitor on Server1 and select Local Area Network.
D . Configure a capture filter to capture all traffic between Server1 and Client1.
A . Start a capture.
H . Log on to Client1 as User1 and allow the logon process to complete.
J .Stop the capture and save it ina secure, reliable location.
(H BEFORE J) AND (A BEFORE H) AND (D BEFORE A) AND (C BEFORE D)

21. You are the administrator of anActive Directory domain. The network contains a Windows Server 2003domain controller named Server1.Users report that they experience intermittent delayswhen they log on to Server1. Administrators report that replication attempts between Server1 and other domain controllers are occasionallydelayed.You need to verify the cause of the intermittent connection delays to Server1.You also need to find out whetherthe problem is related to a hardware deficiency on Server1.You need to track these delays over a period of one day.What should you do first?
A. Run the netdiag /verbose command to perform a network diagnostic test on Server1.
B. Run the replmon command to view the Active Directory replication status on Server1.
C. Use Network Monitor to view the network traffic packet contents between Server1 and all other computers.
D. Create a System Monitor counter to track the queue lengths on the network adapter on Server1.
Answer: D

22.You are the administrator of an Active Directory domain. All servers runWindows Server 2003. All clientcomputers runWindows XPProfessional and are members of the domain.The domain contains a single DNS server named Server1. Roothints are enabled on Server1. Internet access for the company is provided bya Network Address Translation (NAT) server named Server2. Server2 is connected to the Internet bymeans of a permanent connection to the company's ISP. Users report that they can no longer connect to http://www.adatum.com. Users can connect to internal resourcesand toother Internet Web sites. You can successfullyaccess http://www.adatum.com from a computer outsideofthe corporate network. You need to ensure that theusers can access http://www.adatum.com. You must also ensure that users retaintheir ability toaccess internal resources. Which two actions should you perform? (Eachcorrect answer presents part of the solution. Choose two.)
A. Disable Routing and Remote Access on Server2.
B. Create a root zone on Server1.
C. On all affected users' computers, run the ipconfig/flushdns command.
D. Configure all affected users'computers to use the ISP's DNS server.
E. Use the DNS console on Server1 toclear the DNS cache.
Answer: C AND E

23.You are the network administrator for your company. All servers run Windows Server 2003.Twenty company employees connect to a terminal server named Server2 to run applications and to gain access to the Internet. The 20 employees report that they receive security messages while browsingInternet Web sites. The employees report that they cannot modify the Internet Explorer security settings on their client computers while connected toServer2. You need to allowthese 20employees tomodify the Internet Explorer security settings on their client computers while connected to Server2.What should you do? A. Log on toServer2 as Administrator and add http:// to the list of trusted sites in Internet Explorer.
B. Instruct the 20 employees to add http:// to the list of trusted sites in Internet Explorer on their client computers.
C. Instruct the 20 employees to change theInternet Explorer privacy settings ontheir client computers to Low.
D. Uninstall Internet Explorer Enhanced Security Configuration on Server2.
Answer: D

24.You are the administrator of an Active Directory domain.All servers runWindows Server 2003. You configure a server named Server3 as the DNS server for the domain.The company recently started using a new ISP. Since the change to the new ISP occurred, users report that they cannot access InternetWeb sites by using their fully qualified domain names (FQDNs). You manually configure a test computer to use the DNS server address of the new ISP. The test computer can successfully access Internet Websites by using their FQDNs. You need to ensure that network users can access Internet Web sitesby using their FQDNs, while ensuring thatuser access tointernal resources is not disrupted.What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. Create a root zone on Server3.
B. Configure Server3 touse the default root hints.
C. Configure a forwarder on Server3 to the new ISP's DNS server.
D. Configure all computers on your network to use the new ISP's DNS server.
Answer: B AND C

25.You are the administrator of an Active Directory domain. All servers runWindows Server 2003. All clientcomputers run Windows XP Professional. The network is configured as shown in the exhibit. (Click the Exhibitbutton.) DC1 is configured as a DNS server for the domain named contoso.com. DC1 is configured to use ISP-DNS as a forwarder.A computer named NAT1 is a Network Address Translation (NAT) server. NAT1 provides Internet access for theentire company. You recently created a subnet named Subnet 10. You are configuring a DHCP server tosupport Subnet 10. You need to configure the DHCP server options for Subnet 10 toensure that all users can access the Internet and internal resources. What should you do? To answer, drag the appropriate IP address or addresses to the correctlocation or locations in the work area.
Answer:

26.You are the network administrator for your company. All servers run Windows Server 2003.The company is setting up a sales booth at a large trade show. Twelve company sales representatives will beworking in the booth. The sales representatives each have a portable computer that runs Windows XPProfessional.You configure a server named Server2 with a LAN connection and a dial-up connection to the Internet. All of the sales representatives' computers are also connected to the LAN. The 12 sales representatives report that they cannot connect to the Internet. You view the Ipconfiguration on one of the portable computers as shown in the exhibit. (Click the Exhibit button.) You need to provide the 12sales representatives' portable computers with Internet access.What should you do? A. Configure Internet Connection Sharing (ICS) on Server2.
B. Install theDHCP service on Server2. Create a scope for subnet 169.254.0.0/16.
C. Modify the Internet Explorer properties on the 12 sales representatives' computers to specify 169.254.0.1 as the proxy server.
D. Install the Connection Manager Administration Kit (CMAK) on Server2.
Answer: A

27.You are the network administrator for your company. All servers run Windows Server 2003.You configure a server named Server2 as a Network Address Translation (NAT) server. Server2 has a single network adapter and a modem. Server2 connects to the Internet through a demand-dial connection.Users report that whenthey attempt toconnect to Internet Web sites, theyintermittently receive the following error message: "Page not found." After waiting for several minutes, they can connect to the Web sites. These errors occur throughout the day. You need to configure Server2 to allow users to always connect to InternetWeb sites. What should you do?
A. Set the demand-dial connection to Persistent.
B. Set the dial-out hours on the demand-dial connection to any day and any time.
C. Set a demand-dial filter. Configure the filter for Only allow the following traffic. Specify a new filter for outbound port80.
D. Configure the demand-dial interface as the private interface.
Answer: A

28.You are the network administrator for your company. All servers run Windows Server 2003.The company's main office is located in NewYork City, and four branch offices are located in various North American cities. The network is configured as shown in the exhibit. (Click the Exhibit button.) Access to theInternetis provided by a Network Address Translation (NAT) server located in the Montreal office.The Ipaddress of the NAT server is 192.168.10.254.Users in the Los Angeles office report thatthey cannot connect to the Internet. Users in the New York office reportthat they can successfully connect to the Internet. Froma computer in the Los Angeles office, you cannot connect to servers located in the Montrealoffice by using their IP address. You want to find out where the communication failure resides by running a command prompt on a computer in the Los Angeles office. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. Run the pathping 192.168.10.254 command.
B. Run the net view\\192.168.10.254 command.
C. Run the tracert 192.168.10.254 command.
D. Run the nslookup 192.168.10.254 command.
Answer: A AND C

29. You are the administrator of a Windows Server 2003 computer named Server1.The LAN connection TCP/Ipproperties onServer1 are configuredto use a static Ipaddress. An administrator reports that Server1 is receiving incorrect results to a query for server2.fourthcoffee.com.You log on to Server1 and run the ipconfig /flushdns command.You receive the following error message. You need to start the appropriate service or services toensure that Server1 can correctly resolve name resolutionqueries.You want toachieve this goal byusing theminimum amount of administrative effort.Which service or services should you start?To answer, select the appropriate service or services in the work area.Answer:

30.You are the network administrator for your company. The network contains a third-party application that runs as a service. The application service is secured with a domain-level service account. The properties of the serviceaccount are displayed in the work area. Users report that the application is no longer available. The application service is stopped.An administrator reports that the password of the service account had expired and was changed.You reset the password on the service to match the new password of the service account.You unsuccessfully attempt to restartthe service.You need toensure that the service will start. You need to prevent this problem from happening again while retaining administrative control over the service accountpassword.What should you do? To answer, configure the appropriate option or options in the dialogbox in the work area.Answer: