Which group should you add Admin1 to?
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
You create a user account named Admin1.
You need to allow Admin1 to restart services and to review the security log.You must minimize the rights assigned to Admin1.
Which group should you add Admin1 to?
What should you use to configure the IPSec policy?
Your company has a main office and one branch office.All servers run Windows Server 2003 Service Pack 2 (SP2).
The main office has a third-party gateway device named Gateway1. Gateway1 is connected to the internal network and the Internet.Gateway1 supports IPSec.
In the branch office, you have a server named Server1.
You create an IPSec policy on Server1.
You need to ensure that Server1 can establish an IPSec tunnel to Gateway1.
What should you use to configure the IPSec policy?
What should you do?
You are the network administrator for your company.The network consists of a single Active Directory domain.
The domain contains an organizational unit (OU) named Webservers.The Webservers OU contains the computer accounts of 12 Windows Server 2003 computers that function as intranet Web servers.A Group Policy object (GPO) named WebserversPolicy is linked to the Webservers OU.The GPO is used to configure various settings on the computers in the OU. A global group named WebserverAdmins is a member of the Administrators local group on each intranet Web server.
You plan to install a security scanning application on each intranet Web server.The documentation for the application states that it uses a service account, which must be able to modify the HKEY_LOCAL_MACHINESYSTEM key in the registry of every computer on which the application is installed.
You create the service account in the domain.The company’s written security policy states that service accounts must be assigned only the minimum rights and permissions that they require to function.
You need to configure the intranet Web servers so that they comply with the installation requirements of the security scanning application.You also need to comply with the company’s security policy.You want to achieve this goal by using the minimum amount of administrative effort.
What should you do?
Which two actions should you perform?
Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).All client computers run Windows XP Professional Service Pack 3 (SP3).
Computer accounts for the client computers are located in three organizational units (OUs) named OU1, OU2, and OU3.
You install Windows Server Update Services (WSUS) 3.0 on a member server named Server1. On Server1, you create three WSUS computer groups named OU1, OU2, and OU3.
You need to ensure that each client computer is assigned automatically to the WSUS computer group that corresponds to the OU in which the computer account resides.
Which two actions should you perform? (Each correct answer presents part of the solution.Choose two.)
What should you do?
You have a Web server that runs Windows Server 2003 Service Pack 2 (SP2).
You need to collect the following information from the Web server:
�Unauthorized attempts to upload files
�Unsuccessful commands that try to run executables
You must achieve this goal by using the minimum amount of administrative effort.
What should you do?
What should you do?
Your network consists of a single Active Directory domain named contoso.com.All servers run Windows Server 2003 Service Pack 2 (SP2).
The domain has two domain controllers named DC1 and DC2. Both domain controllers are DNS servers.Windows
Support Tools is installed on both domain controllers.The contoso.com DNS zone is Active Directory-integrated.
You need to verify that the contoso.com zone has replicated between DC1 and DC2.
What should you do?
What should you do?
You have a DNS server named Server1 that runs Window 2003 Server Service Pack 2 (SP2).
You need to ensure that the DNS server only creates event log entries when errors occur.
What should you do?
What should you do?
Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).
You have two DNS servers named Server1 and Server2. Server1 hosts the primary zone for contoso.com.Server2 hosts the secondary zone for contoso.com.
You need to ensure that when records are updated on Server1, the records are replicated to Server2 in the shortest time possible.
What should you do?
What should you run from the client computer?
Your network consists of a single Active Directory domain named contoso.com.All servers run Windows Server 2003 Service Pack 2 (SP2).All client computers run Windows XP Professional Service Pack 3 (SP3).
You have two DNS servers named DNS1.contoso.com and DNS2.contoso.com.All client computers are configured to use DNS1 as their preferred DNS server and DNS2 as an alternate DNS server.
You need to verify that DNS1 is responding to name resolution queries from a client computer.
What should you run from the client computer?
What should you do?
Your company has a main office and one branch office.All servers run Windows Server 2003 Service Pack 2 (SP2).
In the main office, a server named DNS1 hosts a primary DNS zone for contoso.com.
In the branch office, you configure a primary DNS zone for west.contoso.com on a server named DNS2. All servers in the branch office are configured to have the west.contoso.com DNS suffix.
You need to ensure that users in the main office can resolve server names in the branch office.You must achieve this goal by using the minimum amount of administrative effort.
What should you do?