You are the administrator of an Active Directory domain.All servers run Windows Server 2003. All client computers run Windows XP Professional.All computers are members of the domain.

The Secure Server (Require Security) IPSec policy is assigned to a file server named Server6. The policy is configured as shown in the exhibit.

Users report that they cannot access shared folders on Server6. Users were able to access shared folders on Server6 prior to the implementation of the IPSec policy.

You need to ensure that all client computers in the domain can access the shared folders on Server6. You must ensure that all communications between client computers and Server6 be encrypted.

What should you do?

Exhibit:

You are the network administrator for your company.The network consists of a single Active Directory domain.The functional level of the domain is Windows Server 2003. All client computers in the domain run Windows XP Professional.

An application named Inventory.exe is installed on all computers in the domain to remotely gather software inventory information.The application runs as a service in the security context of the Local System.The startup type of the service is set to Automatic.

In the Default Domain Policy Group Policy object (GPO), the security administrator has configured a software restriction policy that is applied to all computers in the domain.The policy contains a hash rule for the Inventory.exe application, and the hash rule is configured with a security level of Unrestricted.

The client computers on the network are attacked by a worm that is distributed by e-mail messages received over the Internet.The worm detects the presence of Inventory.exe on a computer, then starts a new instance of the application in the security context of the logged-on user.The worm exploits a bug in the application to cause the computer to fail.

You need to ensure that Inventory.exe cannot be started by the worm, while still allowing the application to run as a service.

What should you do?

Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).

You have two DNS servers named Server1 and Server2. Server1 hosts an Active Directory-integrated zone for contoso.com.Server2 hosts a secondary zone for contoso.com.

The serial number for the contoso.com zone is currently 985413.

You need to verify whether Server2 has the most up-to-date version of the zone.

What should you do?

You are the administrator of a Windows Server 2003 computer named Server1. Server1 is a domain member server that has the DNS service installed.

Server1 is configured with two network interfaces named NIC1 and NIC2. Routing is not enabled between the two network interfaces.NIC1 and NIC2 are configured as shown in the following table.

Resources on the preproduction network segment use the same fully qualified domain names (FQDNs) as resources in the production network.The TCP/IP properties on client computers in the preproduction environment are controlled by individual testers.

You need to ensure that the users in the preproduction environment cannot resolve FQDNs from the production network.You want to accomplish this goal by using the DNS console on Server1.

What should you do?

You have a server that runs Windows Server 2003 Service Pack 2 (SP2).You install the Windows Support Tools on the server.

You need to list all of the name servers in a DNS zone named contoso.com.

Which two possible commands should you run? (Each correct answer presents a complete solution.Choose two.)

Your company has a Berkley Internet Name Domain (BIND) DNS server named Server1 that hosts the contoso.com DNS zone.

You plan to replace Server1 with a DNS server named Server2 that runs Windows Server 2003 Service Pack 2 (SP2).

You need to configure DNS on Server2 to meet the following requirements:
.Retain all resource records currently in the contoso.com zone.
.Allow updates to resource records for the contoso.com zone on Server2.

What should you do?

Your network contains a single Active Directory domain named contoso.com.

You have a domain controller named DC1 that runs Windows Server 2003 Service Pack 2 (SP2) that has the DNS Server Windows component installed.You have a member server named Server1 that runs Windows Server 2003 SP2.

Server1 fails to update its host (A) record for the contoso.com domain.

You need to verify that DNS requests from Server1 are sent to DC1.

What should you do?

Your company has a single Active Directory domain named contoso.com.All servers in the domain run Windows Server 2003 Service Pack 2 (SP2).

You have two DNS servers named DNS1 and DNS2. DNS1 hosts an Active Directory-integrated zone for contoso.com.DNS2 hosts a standard secondary zone for contoso.com.

You need to monitor the total number of zone transfer requests.

What should you do?

Your network consists of a single Active Directory domain named contoso.com.All network servers run Windows Server 2003 Service Pack 2 (SP2).

You have a DNS zone named contoso.com.The zone is configured to support dynamic updates.All servers in the company are registered in the contoso.com zone.

You change the IP address of a server named Server1.

From a server named Server2, you attempt to ping Server1 by host name, but the request fails.You successfully ping the new IP address of Server1.

You need to ensure that Server2 can connect to Server1 by using the Server1 host name.

Which two actions should you perform? (Each correct answer presents part of the solution.Choose two.)

You are the network administrator for Contoso, Ltd.The network consists of an Active Directory forest that contains one domain named contoso.com.All servers run Windows Server 2003 Service Pack 2 (SP2).

Contoso has a subsidiary named A.Datum Corporation.The A.Datum network consists of an Active Directory forest that contains one domain named adatum.com.All A.Datum servers run Windows Server 2003 SP2.

Contoso and A.Datum offices are connected by a dedicated WAN link.The relevant portion of the network is configured as shown in the exhibit.

Datum servers are inaccessible from the Internet.

You must configure DNS1 to meet the following requirements:

.Allow Contoso users to resolve DNS names for adatum.com.

.Minimize DNS lookup traffic over the WAN link.

What should you configure on DNS1?

Exhibit: