Which tool should you choose?
Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. Client computers run Windows XP or Windows Vista. You plan to create a security update scan procedure for client computers. You need to choose a security tool that supports all the client computers.
Which tool should you choose?
What should you do?
You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. The domain contains a Windows Server 2003 computer named Server1. You are planning a public key infrastructure (PKI) for the company.
You want to deploy a certification authority (CA) on Server1. You create a new global security group named Cert Administrators. You need to delegate the tasks to issue, approve, and revoke certificates to members of the Cert Administrators group.
What should you do?
What should you do?
You are a network administrator for your company. You install Windows Server 2003, Enterprise Edition on two servers named Server1 and Server2. You configure Server1 and Server2 as a two-node server cluster. Server1 and Server2 are connected to a shared fiber-attached array.
You configure the server cluster for file sharing. You configure Server1 as the preferred owner of the file sharing resources. You perform the following backups by using the Backup or Restore Wizard. Tuesday Wednesday Server1 Normal backup including system state Incremental backup and Automated System Recovery (ASR) backup Server2 Normal backup including system state Incremental backup and ASR backup On Thursday morning, Server2 experiences a hard disk failure. The failed disk contains only the operating system for Server2. You evict Server2 from the server cluster.
You need to recover Server2 and restore it to the cluster. You need to minimize data loss and recovery time.
What should you do?
What should you do?
Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. You have a stand-alone server that serves as a Stand-alone root certification authority (CA). You need to ensure that a specific user can back up the CA and configure the audit parameters on the CA.
What should you do?
Which technology and edition should you choose?
Servers in your environment run Windows Server 2003. You plan to configure a highly available file server. You need to choose the appropriate high-availability technology and the minimum Windows Server 2003 edition for this server.
Which technology and edition should you choose? (Each correct answer presents part of the solution. Choose two.)
What should you do?
Your network consists of a single Active Directory domain.You have a server named Server1 that runs
Windows Server 2003 Service Pack 2 (SP2) and Windows Server Update Services (WSUS) 3.0.
From IIS Manager, you configure WSUS to use port 4430 for SSL.You update your WSUS clients to connect to https://Server1:4430 for updates.
You need to ensure that clients can download updates from Server1.
What should you do?
What should you do?
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).The server is configured as a router and provides access to the Internet.
You need to log all connections made to the server.The log must contain the IP address and the port used to establish the connection.
What should you do?
Which tool should you use?
Your network consists of a single Active Directory domain that has three Active Directory sites.Each site contains two Active Directory domain controllers.All domain controllers run Windows Server 2003 Service Pack 2 (SP2).All domain controllers have Windows Support Tools installed.
You need to verify the replication status of Active Directory.
Which tool should you use?
What should you do?
You are the network administrator for your company.The network consists of a single Active Directory domain.The domain contains 25 Windows Server 2003 computers and 6,000 Windows XP Professional computers.
The written company security policy states that network traffic to Web servers must be audited on a regular basis.A server named Server1 is configured as a Web server on the company’s intranet.You install Network Monitor Tools from a Windows Server 2003 product CD-ROM on Server1.
You run Network Monitor on Server1 for three hours.When you stop the network capture, you see that Network Monitor captured over 40,000 frames.As you look at the captured frames, you notice that an extremely large number of TCP connection requests have all come from the 131.107.0.1 IP address.
In Network Monitor, you need to view only the frames for network traffic that are captured between Server1 and the 131.107.0.1 IP address.
What should you do?
What should you do?
You have two servers named Server1 and Server2 that run Windows Server 2003 Service Pack 2 (SP2).
On Server1, you install an application that runs as a service named App1. App1 will save files to a file share on Server2.
You perform the following actions:
�Create a domain account named App1Service.
�Set the password for App1Service.
�Create a file share on Server2.
.Grant App1Service the Allow – Change share permission.
You need to ensure that App1 can save files to the share on Server2.
What should you do?