You need to ensure that all internal computers can access Internet servers
Your network consists of a single Active Directory domain and a single subnet.The network is not connected to the Internet.All servers run Windows Server 2003 Service Pack 2 (SP2).All client computers run Windows XP Professional Service Pack 3 (SP3).
You have a DHCP server named Server1. All client computers receive their IP configurations from Server1.
You implement a new server named Server2. You connect Server2 to the internal network and the Internet.You then configure Server2 as a network address translation (NAT) router.
From a client computer, you discover that you cannot access any Internet servers.
From Server2, you verify that you can access Internet servers and internal servers.
You need to ensure that all internal computers can access Internet servers.
What should you do?
Which IP configuration should you change on Server1?
Your company has two offices.
The network consists of a single Active Directory domain.You have two domain controllers named DC2 and DC3.
All servers run Windows Server 2003 Service Pack 2 (SP2).The relevant portion of the network is configured as shown in the exhibit.
You verify the IP configuration of Server1 as shown in the following Command Prompt window.
You need to ensure that Server1 can locate a domain controller if a single server fails.
Which IP configuration should you change on Server1?
Exhibit:
You need to configure the server to support only the MS-CHAP v2 authentication protocol for remote access auth
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).Routing and Remote Access is enabled and the server is configured as a remote access server.
You need to configure the server to support only the MS-CHAP v2 authentication protocol for remote access authentication.
What should you do from the Routing and Remote Access snap-in?
You need to ensure that all users can use App1 while meeting the new security policy
Your network consists of a single Active Directory domain named Contoso.com.All servers on the network run Windows Server 2003 Service Pack 2 (SP2).All client computers on the network run Windows XP Professional Service Pack 3 (SP3).
All computers run a custom application named App1. App1 requires domain authentication.App1 does not support smart card authentication.
Your company implements a new security policy that states that all users must log on to their computers by using a smart card.
You need to ensure that all users can use App1 while meeting the new security policy.
What should you do?
Which tool should you use?
You have 10 DNS servers that run Windows Server 2003 Service Pack 2 (SP2).
You need to automate the management of the DNS server.
Which tool should you use?
You need to track these delays over a period of one day
You are the administrator of an Active Directory domain.The network contains a Windows Server 2003 domain controller named Server1.
Users report that they experience intermittent delays when they log on to Server1. Administrators report that replication attempts between Server1 and other domain controllers are occasionally delayed.
You need to verify the cause of the intermittent connection delays to Server1. You also need to find out whether the problem is related to a hardware deficiency on Server1. You need to track these delays over a period of one day.
What should you do first?
You need to see how many IPSec connection attempts failed due to authentication failures
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).Server1 has IPSec enabled.
Several users report that they cannot connect to Server1.
You need to see how many IPSec connection attempts failed due to authentication failures.
What should you do?
You need to verify whether Server2 has the most up-to-date version of the zone
Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).
You have two DNS servers named Server1 and Server2. Server1 hosts an Active Directory-integrated zone for contoso.com.Server2 hosts a secondary zone for contoso.com.
The serial number for the contoso.com zone is currently 985413.
You need to verify whether Server2 has the most up-to-date version of the zone.
What should you do?
You need to ensure that you can download the device driver while ensuring that access to scripts on other Web
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
You attempt to download a device driver.You receive an error message indicating that the Web site is blocked and scripting is disabled.
You need to ensure that you can download the device driver while ensuring that access to scripts on other Web sites are restricted.
What should you do?
Which tool should you use?
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
You need to get a list of all the open connections on the server and all the port numbers used by the connections.
Which tool should you use?


