What should you do?
Your network consists of a single Active Directory domain.The domain contains an organizational unit (OU)
named SecureServers.The SecureServers OU contains a computer account for a server named Server1.
You link a Group Policy object (GPO) to the SecureServers OU.In the GPO, you assign an IPSec policy that requires encryption for all communications.
You notice that all communications to Server1 are unencrypted.
You need to ensure that all communications to Server1 are encrypted immediately.
What should you do?
What should you do?
Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).
You have two servers named Server1 and Server2. Server2 is on an isolated network segment.Both servers run Windows Server Update Services (WSUS) 3.0 and have the same WSUS configurations.
You copy the WSUS updates from Server1 to Server2.
You need to ensure that Server2 has the same WSUS approvals as Server1.
What should you do?
Which rule should you configure for the software restriction policy?
You are the network administrator for your company.The network contains a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
You create a software restriction policy.
You need to prevent administrators from running script files with a .js extension on Server1.
Which rule should you configure for the software restriction policy?
What should you do next?
Your network consists of a single Active Directory domain named Contoso.com.You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).Server1 has a smart card reader.
Your company’s security policy states the following:
�Administrators must use a smart card for secondary logons.
�Secondary logons must be used to run administrative tools.
You have two domain user accounts named Admin1 and User1. You have a smart card for Admin1. Admin1 is a member of the Administrators group on Server1. User1 belongs to the Domain Users group only.
You need to start the Computer Management console on Server1. You must achieve this goal while meeting the security policy.
You log on to Server1 as User1.
What should you do next?
What should you do?
You are the network administrator for your company.A Windows Server 2003 computer named Router11 is used to connect the network to the Internet.
You find out that some computers on the network are infected with a worm, which occasionally sends out traffic to various hosts on the Internet.This traffic always uses a certain source TCP port number.
You need to identify which computers are infected with the worm.You need to configure a solution on Router11 that will perform the following two tasks:
Detect and identify traffic that is sent by the worm.
Immediately send a notification to a network administrator that the infected computer needs to be repaired.
What should you do?
What should you do?
Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).
You have two servers named Server1 and Server2. Both servers have Windows Server Update Services (WSUS) 3.0 installed.
You need to ensure that Server2 automatically receives the same update approvals as Server1.
What should you do?
Which tool should you use?
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
You need to compare the current security settings of the server to a security template.
Which tool should you use?
What should you do?
You have a DNS server that runs Windows Server 2003 Service Pack 2 (SP2).
You need to prevent the DNS server from resolving host names on the Internet.
What should you do?
What should you do on Server1?
You have a DNS server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
You create a primary zone on Server1 for contoso.com.
You run the DNS simple query test and recursive query test.The simple query test completes successfully, but the recursive query test fails.
You need to ensure that the recursive query test can complete successfully.
What should you do on Server1?
Which type of resource record should you create in DNS?
Your network consists of a single Active Directory domain.
You have a Web server named server1.contoso.com that runs Windows Server 2003 Service Pack 2 (SP2).
Users access a Web site on Server1 by using the URL http://server1.contoso.com.Users also access the Web site on Server1 by using the URL http://192.168.1.10.
You need to configure DNS to enable users to access the Web site by using the URL http://www.contoso.com.The solution must prevent the need to manually update DNS if the IP address of Server1 changes.
Which type of resource record should you create in DNS?