The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003.
ABC.com has its headquarters in Chicago and two branch offices in Dallas and Miami. The branch
offices are connected to the headquarters by means of T1 WAN links. The network at each office
is configured as a separate Active Directory site as shown below.

ABC.com users in all three sites require access to a file server named ABC-SR10 that is located in
the Chicago site.
Users in the Miami and Dallas offices are complaining about the unacceptable file server
performance during peak working hours. You want to design a solution that provides fault
tolerance for the file server and minimizes traffic over the WAN links during office hours.
Which solution would you recommend?

The company consists of an Active Directory domain called ABC.com. All servers on the corporate
network run Windows Server 2003.
The network contains a server that runs Internet Authentication Service (IAS) called ABC-SR01.
ABC-SR01also runs the Routing and Remote Access service to provide VPN access to the
network for external users. During routine monitoring you discover that an external unauthorized
user is trying to access the network through ABC-SR01.
How would you set up ABC-SR01 to log the IP addresses of the remote computers when they
attempt to connect to the network using the VPN connection?

The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003 and all client computers run Windows XP
Professional. The domain consists of two IP subnets named ABCA and ABCB. A server named
ABC-SR20 has Routing and Remote Access enabled and currently connects ABCA and ABCB.
Each subnet has a DHCP server which is used to sign IP configurations to client computers on the
local subnet. All servers have static IP configurations.
The network layout is shown below:

You are preparing the provision of Internet connectivity by means of implementing a Microsoft
Internet Security and Acceleration (ISA) Server 2000 array on the network. The arrays internal IP
address is 172.35.60.1.
You configure ABC-SR10 to provide the 172.35.60.1 as the default gateway. ABC-SR11 provides
the IP address 172.28.60.1 as the default gateway for ABCB client computers. ABCB client
computers can access servers on ABCA successfully.
You received complaints from the ABCB users about an inability to access Internet-based
resources.
How can you ensure that the ABCB users can access the internet?

The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003 and all client computers run Windows XP
Professional.
All client computers are located in an organizational unit named ABC-Clients. All servers are
located in an organizational unit named ABC-Servers.
Several servers host sensitive data. A new ABC security policy states that communications with
those servers should be encrypted whereas communications with other servers should remain
unencrypted.
The Default Domain group policy has the default Client (Respond only) IPSec policy enabled. A
GPO with a custom IPSec policy is applied to the ABC-Servers OU.
While monitoring network connections, you find that no encryption is applied to network
communications.
How would you examine the policies that are being applied to the servers that contain sensitive
data?

The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003.
ABC.com contains a member server named ABC-SR24. ABC-SR24 is configured as a File and
Print server and hosts shared folders for all ABC.com users.
One morning a ABC.com user named Dean Austin complains that ABC-SR24 responds poorly at
various times throughout the day. You suspect that the poor performance is caused by broadcast
traffic on the ABC.com network.
What would be the best way to monitor ABC-SR24 while minimizing administrative effort?

All servers on the ABC.com network run Windows Server 2003 and all client computers run
Windows XP Professional. The Active Directory forest operates at Windows Server 2003 level.
ABC.com has a head office in Chicago and several branch offices. Each office contains a domain
controller and is configured as an Active Directory Site. Every domain controller also serves as a
DNS server. The branch offices access the resources in the Chicago office via a 128-Kbps WAN
connection.
You received a report from branch office users that they cannot access the Chicago office
resources during peak business hours.
How can you solve the logon issues while ensuring Active Directory replication traffic across the
WAN links is kept to a minimum?

The ABC.com network consists of a single Active Directory domain named ABC.com. All the
servers on the network run Windows Server 2003 servers and all the client computers run
Windows XP.
A two node network load balancing (NLB) cluster host a highly available intranet application. The
intranet application uses HTTP and HTTPS.
During the course of the day you receive an instruction from the CIO to reduce the cluster’s
vulnerability to attack by filtering the IP ports of the Network Load Balancing cluster.
What is the easiest way to filter the IP ports of the NLB cluster?

The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003.
The ABC.com domain contains two Active Directory sites named ABC-Site1 and ABC-Site2. ABC-Site1 contains a domain controller named ABC-DC1. ABC-Site2 contains a domain controller
named ABC-DC2. Each domain controller is configured as a DNS server and hosts the ABC.com
Active Directory Integrated Zone.
Users in ABC-Site2 report that they are unable to log on to the domain.
On a client computer in ABC-Site2, you run the nslookup ABC-DC2 command. The command
returns the IP address of ABC-DC2.
You open Active Directory Users and Computers on the client computer but you are unable to

connect to ABC-DC2.
How can you resolve this problem?

The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003. Your instruction is to set up a child domain
named us.ABC.com.
You install Windows Server 2003 on a new standalone server named ABC-DC03 and manually
assign an IP address. You attempt to run dcpromo to promote ABC-DC03 to a domain controller.
You select the new domain in an existing forest option. The wizard prompts you for the network
credentials to join the us.ABC.com to the ABC.com forest. You then receive an error message
indicating that a domain controller in the ABC.com domain cannot be found.
How can you ensure that ABC-DC03 can be promoted to a domain controller in the us.ABC.com
domain?

The ABC.com network consists of a single Active Directory domain named ABC.com. All the
servers on the network run Windows Server 2003 servers.
The network contains a file server named ABC-SR24. ABC-SR24 hosts shared folders for users in
the Sales department.
All shared folders are backed up using a Normal backup on a weekly basis over the weekend. An
incremental backup of the shared folders is taken every night.

A Copy backup of the shared folders is taken every Thursday night after the incremental backup.
On Friday morning, the Sales manager reports that he has accidentally deleted an important file.
He asks you to restore the file as quickly as possible. He doesnt know when the file was last
modified.
From which backup tape or tapes should you restore the file?