Which IP addressing scheme should you use?
Your company has a main office and two branch offices. All servers run Windows Server 2003. All client computers have dynamically assigned IP addresses. The main office has 50 servers and no client computers.
The branch offices each have 200 client computers and no servers. You are planning a network infrastructure strategy. You need to minimize unused IP addresses.
Which IP addressing scheme should you use?
Which command-line utility should you use on the RRAS server?
All servers in your environment run Windows Server 2003. You have a Routing and Remote Access service (RRAS) server that is a member of the domain. The RRAS server uses the NAT/Basic Firewall routing protocol.
Users report intermittent Internet connectivity failures. You need to troubleshoot the failures.
Which command-line utility should you use on the RRAS server?
You need to ensure that portable client computers can connect to the wireless network
Your company has a single Active Directory directory service domain with an Enterprise root certification authority (CA). All servers run Windows Server 2003.
All portable client computers run Windows XP SP3 and connect to the network through wireless access points. The wireless network uses 802.1x authentication. You are designing a security plan for the wireless network.
You need to ensure that portable client computers can connect to the wireless network. You issue and install computer certificates on each portable client computer.
What should you do next?
You need to recover from the corrupted quorum log
Your company has an Active Directory directory service domain. You have a four-node failover cluster that is a member of the domain. The quorum log is corrupted.
You do not have a backup of the quorum log file. You need to recover from the corrupted quorum log.
What should you do first?
You need to ensure that as soon as possible, client computers do not trust the revoked certificates
Your company has an Active Directory directory service domain. All servers run Windows Server 2003. You have an Enterprise root certification authority (CA). Several critical certificates are compromised.
You revoke the compromised certificates. You need to ensure that as soon as possible, client computers do not trust the revoked certificates.
What should you do?
Which two settings should you configure? (Each correct answer presents part of the solution
Your company has an Active Directory directory service domain. All servers run Windows Server 2003. You are designing a security plan to reduce the risk in the event of a brute force password attack.
You need to modify Group Policy settings to record unauthorized access attempts.
Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)
You need to apply the FilePrint
Your company has an Active Directory directory service domain. All file servers run Windows Server 2003 and are located in the FilePrint organizational unit (OU). You create a security template named FilePrint.inf that modifies existing audit settings and disables unwanted services.
You need to apply the FilePrint.inf security template to all file servers, and you must ensure that the security settings applied by the template cannot be overwritten.
What should you do?
You need to ensure that all users can auto-enroll by using the template
Your company has a single Active Directory directory service domain. All servers in your environment run Windows Server 2003. You install a Windows Server 2003 Enterprise root certification authority (CA). Users are unable to auto-enroll by using an existing version 2 User certificate template that has two registration authorities assigned. Users have the Enroll and Read permissions for the template.
You need to ensure that all users can auto-enroll by using the template. What should you do?
Which console should you use?
Your company has a single Active Directory directory service forest with three domains. All servers in your environment run Windows Server 2003. You are planning a public key infrastructure (PKI). You plan to deploy one root certification authority (CA), one policy CA, and two issuing CAs. You need to manage the health of all the CAs simultaneously.
Which console should you use?
You need to ensure that client computers can correctly resolve host names
Your company has a single Active Directory directory service domain. You have one primary DNS server and four secondary DNS servers. All DNS servers run Windows Server 2003. The DNS zone is not Active DirectoryCintegrated. Client computers are configured to use only secondary DNS servers for name resolution.
Client computers are receiving stale information in response to host name inquiries. You find out that the primary DNS server returns correct information. You need to ensure that client computers can correctly resolve host names.
What should you do?