You need to allow Admin1 to apply Policy1 to the member servers
Your network consists of a single Active Directory domain.An organizational unit (OU) named Servers
contains all member servers in the domain.The domain contains a Group Policy object (GPO) named Policy1. A user account named Admin1 is used to administer the member servers.
You need to allow Admin1 to apply Policy1 to the member servers.You must prevent Admin1 from modifying Policy1.
What should you do?
You need to ensure that all users can use App1 while meeting the new security policy
Your network consists of a single Active Directory domain named Contoso.com.All servers on the network run Windows Server 2003 Service Pack 2 (SP2).All client computers on the network run Windows XP Professional Service Pack 3 (SP3).
All computers run a custom application named App1. App1 requires domain authentication.App1 does not support smart card authentication.
Your company implements a new security policy that states that all users must log on to their computers by using a smart card.
You need to ensure that all users can use App1 while meeting the new security policy.
What should you do?
You need to ensure that Server1 can communicate with the Windows Update servers
You are the network administrator for your company.The network consists of a single Active Directory domain.All servers run Windows Server 2003. All client computers run Windows XP Professional.
You install Windows Server Update Services (WSUS) on a network server named Server1. When you attempt to synchronize Server1 with the Windows Update servers, you receive an error message.You open Internet Explorer and verify that you can communicate with an external Web site by using the proxy server.
You need to ensure that Server1 can communicate with the Windows Update servers.
What should you do on Server1?
You need to view the fully qualified domain names for all security associations
Your network contains a DNS server that has a reverse lookup zone for all of your network segments.
You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).An IP security policy is assigned to Server1.
You verify IPSec traffic and see that the current security associations display only by IP address.
You need to view the fully qualified domain names for all security associations.
What should you do?
You need to provide a user named User1 the required permissions to reset passwords in the domain
Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).
You need to provide a user named User1 the required permissions to reset passwords in the domain.
What should you do?
What should you configure on DNS2?
75.Your company has a main office and one branch office.All servers run Windows Server 2003 Service Pack 2 (SP2).The relevant portion of the network is configured as shown in the exhibit.
All computers in the branch office are configured to use DNS2 for name resolution.
You need to configure name resolution in the branch office to meet the requirements:
Resolve names for Internet hosts.
Minimize the amount of DNS traffic over the WAN link between offices.
What should you configure on DNS2?
Exhibit:
What should you do?
You have DNS server named DC1 that runs Windows Server 2003 Service Pack 2 (SP2).DC1 hosts an Active Directory-integrated zone that has dynamic updates enabled.
You enable aging and scavenging for the zone.
You discover that stale records are not being removed from the zone.
You need ensure that stale records are removed from the zone.
What should you do?
You need to ensure that requests for www
You have a DNS server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).You have two Web servers named Server2 and Server3.
The Web servers host an internal Web site that will be accessed by the URL http://www.contoso.com.
You need to ensure that requests for www.contoso.com are distributed between Server2 and Server3.
What should you do?
You need to ensure that you can connect to Internet hosts by using fully qualified domain names (FQDNs)
Your network consists of a single Active Directory domain named litwareinc.com.You have server named
DC1 that runs Windows Server 2003 Service Pack 2 (SP2).DC1 has the DNS server role installed and is the only DNS server for the network.
On DC1, you open the DNS snap-in as shown in the exhibit.
At the command prompt, you run Nslookup www.contoso.com and receive the following error message; “***
Localhost can’t find www.contoso.com: Non-existent domain.”
You need to ensure that you can connect to Internet hosts by using fully qualified domain names (FQDNs).
What should you do?
Exhibit:
Which port should you open on the firewall?
Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).
A firewall separates the internal network from the Internet.The firewall blocks all outbound traffic except for HTTP and SMTP traffic.
You install a DNS server.The DNS server is configured to use the default root hints.
You need to ensure that the DNS server can resolve the host names on the Internet.
Which port should you open on the firewall?