What should do you do?
You have a server that runs Windows Server 2003 Service Pack 2 (SP2) and Windows Server Update Services (WSUS) 3.0.
You need to view the approved WSUS updates that have been superseded by newer updates.You want to achieve
this goal by using the minimum amount of administrative effort.
What should do you do?
What should you do?
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).The server has Windows Server Update Services (WSUS) 3.0 installed.
You need to delete update revisions that have not been approved for 30 days or more.
What should you do?
What should you do?
Your network consists of a single Active Directory domain.The domain contains an organizational unit (OU)
named SecureServers.The SecureServers OU contains a computer account for a server named Server1.
You link a Group Policy object (GPO) to the SecureServers OU.In the GPO, you assign an IPSec policy that requires encryption for all communications.
You notice that all communications to Server1 are unencrypted.
You need to ensure that all communications to Server1 are encrypted immediately.
What should you do?
What should you do?
Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).
You have two servers named Server1 and Server2. Server2 is on an isolated network segment.Both servers run Windows Server Update Services (WSUS) 3.0 and have the same WSUS configurations.
You copy the WSUS updates from Server1 to Server2.
You need to ensure that Server2 has the same WSUS approvals as Server1.
What should you do?
Which rule should you configure for the software restriction policy?
You are the network administrator for your company.The network contains a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
You create a software restriction policy.
You need to prevent administrators from running script files with a .js extension on Server1.
Which rule should you configure for the software restriction policy?
What should you do next?
Your network consists of a single Active Directory domain named Contoso.com.You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).Server1 has a smart card reader.
Your company’s security policy states the following:
�Administrators must use a smart card for secondary logons.
�Secondary logons must be used to run administrative tools.
You have two domain user accounts named Admin1 and User1. You have a smart card for Admin1. Admin1 is a member of the Administrators group on Server1. User1 belongs to the Domain Users group only.
You need to start the Computer Management console on Server1. You must achieve this goal while meeting the security policy.
You log on to Server1 as User1.
What should you do next?
What should you do?
You are the network administrator for your company.A Windows Server 2003 computer named Router11 is used to connect the network to the Internet.
You find out that some computers on the network are infected with a worm, which occasionally sends out traffic to various hosts on the Internet.This traffic always uses a certain source TCP port number.
You need to identify which computers are infected with the worm.You need to configure a solution on Router11 that will perform the following two tasks:
Detect and identify traffic that is sent by the worm.
Immediately send a notification to a network administrator that the infected computer needs to be repaired.
What should you do?
What should you do?
Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).
You have two servers named Server1 and Server2. Both servers have Windows Server Update Services (WSUS) 3.0 installed.
You need to ensure that Server2 automatically receives the same update approvals as Server1.
What should you do?
Which tool should you use?
You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
You need to compare the current security settings of the server to a security template.
Which tool should you use?
What should you do?
You have a DNS server that runs Windows Server 2003 Service Pack 2 (SP2).
You need to prevent the DNS server from resolving host names on the Internet.
What should you do?