You work as the network administrator at ABC.com. The ABC.com network consists of a single
Active Directory domain named ABC.com. The ABC.com network contains several servers and
several hundred client computers. All servers on the ABC.com network run Windows Server 2003.
The client computers run a mix of Windows 98, Windows NT Workstation, Windows 2000
Professional and Windows XP Professional.
How can you make sure that all client computers use Kerberos authentication when users log in to

the domain?

You are working as a network administrator at ABC.com. The ABC.com network consists of a
single Active Directory domain named ABC.com. ABC.com has its headquarters in Chicago and
has branch offices all over the country. All servers on the ABC.com network run Windows Server
2003 and all client computers run Windows XP Professional.
A new ABC.com directive states that the branch offices should be able to connect to the Chicago
headquarters using VPN connections over the internet.
The Routing and Remote Access service has been enabled and configured on a Windows 2003
Server in each branch office. You are in the process of configuring four Windows 2003 servers in
the Chicago office to handle the VPN connections from the branch offices.
To enable centralized authentication and remote access policy management, you have installed
the Internet Authentication Service on a server named ABC-IAS1.
Which three of the following steps should you perform to complete the configuration?

The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003 and all client computers run Windows XP
Professional.
A domain controller named ABC-DC1 is configured as a DNS server. DC1 hosts the DNS zone for
the ABC.com internal LAN.
An external DNS server named ABC-DNS1 hosts the DNS zone for the ABC.com external website
and is configured with root hints. ABC-DNS1 is outside of the network firewall.

You need to protect the client computers by minimizing the risk of DNS-related attacks from the
Internet, without impacting on their access to Internet-based sites.
How should you configure the DNS servers and client computers?

The ABC.com network consists of a single Active Directory domain named ABC.com. All
computers on the ABC.com network are members of the ABC.com domain.
You install a new server named ABC-CA1 and configure it as a Certification Authority for the
ABC.com domain.
How would you enable an Active Directory global group named CA-Admins to issue, revoke and
approve certificates without assigning more permissions than necessary?

The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003 and all client computers run Windows XP
Professional. The ABC.com network contains an application server named ABC-SR20.
You had to reboot ABC-SR20 after you installed a new service on it but the logon screen was not
displayed once ABC-SR20 has rebooted. Your attempts to restore the server by using the Last
Known Good Configuration and Safe Mode startup options also fail. You restore ABC-SR20 from
backup. After later researching the problem, you discover that the service you installed was not
compatible with a driver.
How could you configure the servers to enable you to recover from this type of failure as quickly as
possible if this type of problem happens again?

The ABC.com network consists of a single Active Directory domain named ABC.com. All the
servers on the network run Windows Server 2003 servers and all the client computers run
Windows XP.
The network contains a two node server cluster for file sharing that has been created using two
Windows Server 2003 Enterprise Edition servers named ABC-SR01 and ABC-SR02. Both servers
contain a single hard disk containing the system volume. Both servers connect to a shared storage
array which hosts the shared folders.
ABC-SR01 is configured as the preferred owner of the file sharing resources. To prepare your
network for any disaster recovery, you decide to take regular backups using the Backup or
Restore Wizard.
A Full backup of the shared folders is taken every night.
A Full backup of ABC-SR01 and ABC-SR02 is taken every Saturday night.
Incremental backups of ABC-SR01 and ABC-SR02 are taken every night. System State Data
backups and Automated System Recovery (ASR) of both servers are taken every night.

During a routine monitoring check on Friday you discover that ABC-SR02 has gone offline.
How can you recover the cluster as soon as possible? Choose all that apply.

The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2003 and all client computers run Windows XP
Professional.
A server named ABC-SR12 contains two volumes named Drive D and Drive E and has been
designated to function as an application server.
The application on ABC-SR12 is a custom application that is currently used by the ABC.com Sales
Department. The application has been installed on the ABC-SR12 Drive D. You configure the
application database on Drive D, and you configure the application to store its database
transaction log files on the ABC-SR12 Drive E.
After a few days, Sales users report that the application has failed. You investigate the cause of

the failure and discover that the ABC-SR12 Drive E is almost completely filled with the
applications transaction log files.
You back up the database and delete the log files and the application runs successfully.
You want to design a solution that keeps the application running. The log files should not be
deleted unless the database has been backed up.
What should you do to keep the application running? Choose two.

The ABC.com network consists of a single Active Directory domain named ABC.com. All servers
on the ABC.com network run Windows Server 2000 and all client computers run Windows XP
Professional.
A junior administrator has configured a DHCP server named ABC-SR21.
You received reports from the ABC.com users complaining that they are unable to access web
sites on the internet. All ABC.com users are able to connect to network resources. You need to
investigate the complaint and therefore run the ipconfig.exe /all command on one of the client
computers and received the following results:

How would you enable the client computers to access Internet web sites?

The ABC.com network consists of a single Active Directory domain named ABC.com.
You want to improve the security on the Windows Server 2003 domain controllers by configuring
enahnced password policies and audit settings.

Which security template should you apply to the domain controllers?

The ABC.com network consists of a single Active Directory domain named ABC.com. ABC.com
has its headquarters in Chicago and several branch offices at various locations throughout the
country. All servers on the ABC.com network run Windows Server 2003.
You are in the process of configuring a VPN connection between the Chicago office and a branch
office in Dallas using Windows Server 2003 computers running Routing and Remote Access
(RRAS).
A ABC.com written security policy states that the requirements below must be met:
Data transmitted over the VPN must be encrypted with end to end encryption.
The VPN connection authentication should be at the computer level rather than at user level and

with no credential information transmitted over the internet.
How should you configure the VPN? Choose two.