Your company has an Active Directory directory service domain. All client computers run Windows XP Professional. You are upgrading your servers from Windows 2000 Server to Windows Server 2003. You need to ensure that all network traffic between all computers uses server message block (SMB) signing, while maintaining client computer connectivity.

Which two Security Options policy settings should you enable? (Each correct answer presents part of the solution. Choose two.)

Your company has an Active Directory directory service domain. You are setting up a six-node Windows Server 2003 file services cluster. You plan to configure a Fibre Channel SAN to store six 2-TB volumes that will be used as cluster resources. You need to prevent interference to your storage logical unit numbers (LUNs) from other clusters that use the SAN.

What should you do?

Your company has an Active Directory directory service domain with a single site. All servers run Windows Server 2003. All Web servers run IIS 6.0. Web servers on the internal network are member servers. Web servers in the perimeter network (also known as DMZ) are stand-alone servers. All Web servers on the internal network are located in a single organizational unit (OU). You create a security template for Web servers. You need to apply the security template to all Web servers in the perimeter network.

What should you do?

All servers in your environment run Windows Server 2003. Your network is divided into several IP subnets that are connected by dedicated routers. You plan to install new Routing and Remote Access service (RRAS) servers to replace the existing routers. You need to enable a routing protocol on the RRAS servers that uses link state in route decision making and supports variable- length subnet masks.

Which protocol should you use?

A server that runs Windows Server 2003 acts as a stand-alone certification authority (CA). You create a local group named Key Recovery Team, and you add user accounts to the local group. You need to ensure that members of the Key Recovery Team group can recover archived private keys for users.

What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

All servers in your environment run Windows Server 2003. You need to configure a server to automatically send a network message when its Average Disk Queue Length setting exceeds a specific value.

Which type of tool should you use?

Your company has a file server that runs Windows Server 2003. You are planning a backup and recovery strategy for the file server. You have the following requirements. Back up the file server nightly. Minimize the disk space that is used by the backups. Ensure that you can restore the file server data to any backup point within the past 7 days. You schedule a normal backup to run weekly. You need to schedule an additional nightly backup that supports the requirements.

Which type of backup should you schedule?

All servers in your environment run Windows Server 2003 R2 Standard Edition. You have 200 file servers and 50 management servers. You plan to monitor the file servers and perform key administrative tasks from the management servers by using the Microsoft Management Console (MMC).

You need to ensure that the management servers automatically receive changes that are made to the monitoring configuration, and you must achieve this goal with the least amount of administrative effort.

Which two actions should you perform? (Each correct answer presents part of the solution). (Choose two.)

Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. You need to define a new IPSec policy for the domain.

What should you use?

All servers in your environment run Windows Server 2003. You need to modify the IPSec configuration on the servers.

Which command-line tool should you use?