Your network contains an Active Directory domain.

You need to restore the Default Domain Controllers Policy to the default settings.

Which tool should you use?

You have a single Active Directory domain named contoso.com.You have two servers named Server1 and Server2 that run Windows Server 2003 Service Pack 2 (SP2).

Server1 is configured as a VPN server.Server2 is configured as an enterprise root certification authority (CA).Certificate autoenrollment is configured for all users and computers in the domain.

Server1 is configured to accept only VPN connections that authenticate by using Extensible Authentication Protocol-Transport Layer Security (EAP-TLS).

When users attempt to connect to Server1 from their home computers, their connections are refused. When users attempt to connect to Server1 from computers that are domain members, they can connect.

You need to ensure that users can establish VPN connections from their home computers.

Which two actions should you perform? (Each correct answer presents part of the solution.Choose two.)

You have a server that runs Windows Server 2003 Service Pack 2 (SP2).The server has the Routing and Remote Access service enabled and connects to the Internet by using a demand-dial connection.

From the Routing and Remote Access snap-in, you open the properties of the server and enable the Log additional Routing and Remote Access information setting.

You need to review the log file for issues related to the demand-dial connection.

Which file should you review?

Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).

You have a VPN server named Server1. You have an Internet Authentication Service (IAS) server named Server2.

You need to ensure that all VPN connections to Server1 are authenticated by Server2.

Which two actions should you perform? (Each correct answer presents part of the solution.Choose two.)

Your network consists of a single Active Directory domain.The domain contains a server named Server1.

Server1 runs Windows Server 2003 Service Pack 2 (SP2).

You install Windows Support Tools on Server1.

You need to view the IPSec settings applied to Server1.

What command should you run on Server1?

Your network consists of a single Active Directory domain.You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).

You need to record all attempts by domain users and local users to log on to Server1.

What should you do?

Your network consists of a single Active Directory domain named Contoso.com.All servers run Windows

Server 2003 Service Pack 2 (SP2).All client computers run Windows XP Professional Service Pack 3 (SP3).

You create an organizational unit (OU) that contains a computer account named Computer1. A Group Policy object (GPO) is linked to the OU and contains settings to enforce the use of IPSec.

You log on to Computer1 by using a user account named User1.

You need to verify that the IPSec settings have been applied.

Which command should you run?

You are the network administrator for your company.The network consists of a single Active Directory domain.All servers run Windows Server 2003. All client computers run Windows XP Professional.

You need to implement a new software update infrastructure.You discover that security patches, critical updates, and service packs have never been installed on any client computer on the network.

You install Windows Server Update Services (WSUS) on a Windows Server 2003 computer named Server5. You synchronize and approve all of the current security patches, critical updates, and service packs.

You need to ensure that all client computers receive all Microsoft security patches, critical updates, and service packs.

Which two actions should you perform? (Each correct answer presents part of the solution.Choose two.)

Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).Server1 has IPSec enabled.

Several users report that they cannot connect to Server1.

You need to see how many IPSec connection attempts failed due to authentication failures.

What should you do?

You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).Server1 has Windows Server Update Services (WSUS) 3.0 installed.Server1 has a WSUS client named Computer1.

You need to view a list of all critical updates that have not been installed on Computer1.

What should you do?