|
Braindumps
of 70-296
Planning, Implementing,
and Maintaining a Microsoft
Windows Server 2003
Environment for a W2K MCSE
Exam Questions, Answers,
Braindumps (70-296)
Hello
every body , feeling free to clear my paper and
sending some questions from my paper which were
exactly the same ones which i got from
www.examcheets.com
QUESTION 1
You are a network
administrator for Abc. The network contains two Windows
Server 2003 computers named AbcA and AbcB. These servers
host an intranet application. Currently, 40 users
connect to AbcA and 44 users connect to AbcB. The
company is adding 35 employees who will need access to
the
intranet application. Testing shows that each server is
capable of supporting approximately 50 users without
adversely affecting the performance of the application.
You need to provide a solution for supporting the
additional 35 employees. The solution must include
providing server fault tolerance. You need to minimize
the costs and administrative effort required by your
solution. You add a new server named
AbcC
to the network and install the intranet application on
AbcC.
What else should you do?
A. Use Network Load
Balancing Manager to configure AbcA, AbcB, and AbcC as a
Network Load Balancing cluster.
B. Use Cluster Administrator
to configure AbcA, AbcB, and AbcC as a three-node server
cluster. Use the Majority Node Set option. Configure the
cluster so that all three nodes are active.
C. Use Cluster Administrator
to configure AbcA, AbcB, and AbcC as a three-node server
cluster. Configure the cluster so that two nodes are
active and one node is a hot standby node.
D. Use DNS load balancing to
utilize all three servers by using the same virtual
server name.
Answer: A
QUESTION 2
You are the system engineer
for Abc. The network consists of a single Active
Directory domain named Abc.com. All servers run Windows
Server 2003. The network is connected to the Internet by
a dedicated T3 line. Abc enters into a partnership with
another company for a new project. The partner company's
network
consists of a single Active Directory forest that
contains two domains. All servers in the network run
Windows 2003 Server. The partner network is also
connected to the Internet by a dedicated T3 line. The
partner network is accessible by a VPN connection that
was established between the two networks. The VPN
connection was tested and was verified to provide a
functional connection between the two networks. Users
from both companies need to connect to resources located
on another network. A forest trust relationship exists
between the two companies' forests to allow user access
to resources. Users in your company report that they can
access resources on the partner network, but that it can
take up to several minutes for the connection to be
established. This problem is most pronounced during the
morning. You verify that there is sufficient available
bandwidth on the connection between the two networks to
provide access. You also verify that both network's
routing tables are configured correctly to route
requests to the appropriate destinations. When you
attempt to connect to a server in the partner network by
host name by using the ping command, the connection
times out. However, when you attempt to connect to the
server a second time by IP address by using the ping
command, you receive a response within a few seconds.
You need to improve the performance of the network
connection between the two networks. What should you do?
A. Add the partner network's
domain names and DNS server addresses to the forwarders
list on your DNS servers.
B. Update the root hints
list on your DNS servers to include the host names and
IP addresses of the partner network's DNS servers.
C. Disable recursion on the
DNS servers in both companies' networks.
D. Add the partner network's
DNS server addresses to the 006 DNS Servers scope option
in your DHCP scope.
Answer: A
QUESTION 3
You are the network
administrator for Contoso, Ltd. The network consists of
a single Active Directory forest. The functional level
of the forest is Windows Server 2003. The forest root
domain is contoso.com. Contoso, Ltd,. recently merged
with another company named Abc, whose network consists
of a single Active
Directory
forest. The functional level of the
Abc
forest is Windows Server 2003. The forest root domain
for Abc
is Abc.com.
You need to create a forest trust relationship between
the two forests. Each company has dedicated connections
to the Internet. You need to configure DNS to support
the forest trust relationship. You want to maintain
Internet name resolution capability for each company's
network. What should you do?
A. Configure the contoso.com
DNS servers to forward to the Abc.com DNS servers.
Configure the Abc.com DNS servers to forward to the
contoso.com DNS servers.
B. Configure conditional
forwarding of Abc.com on the contoso.com DNS servers to
the Abc.com DNS servers. Configure conditional
forwarding of contoso.com on the Abc.com DNS servers to
the contoso.com DNS servers.
C. Configure a standard
primary zone for Abc.com on one of the contoso.com DNS
servers. Configure a standard primary zone for
contoso.com on one of the Abc.com DNS servers.
D. Configure an Active
Directory-integrated zone for Abc.com on the contoso.com
DNS servers. Configure an Active Directory-integrated
zone for contoso.com on the Abc.com DNS servers.
Answer: B
QUESTION 4
You are the network
administrator for Abc. The network consists of a single
Active Directory forest that contains three domains.
Each domain contains domain controllers that run Windows
2000 Server and domain
controllers
that run Windows Server 2003. The DNS Server service is
installed on all domain controllers. All client
computers run Windows XP Professional. You need to add
an additional DNS zone that is hosted on at least one
DNS server on each domain. You want to configure the
zone to allow secure updates only. What should you do?
A. Configure the new zone on
DNS servers in the root domain. Configure stub zones
that refer to DNS servers in another two domains.
B. Configure the new zone as
a primary zone on one DNS server. Configure other DNS
servers in the three domains as secondary servers for
this zone. Enable the DNS Security Extensions (DNSSEC)
protocol.
C. Configure the new zone as
an Active Directory-integrated zone on DNS servers in
the three domains. Store the zone data in the DNS
directory partition named DomainDNSZones.
D. Configure the new zone as
an Active Directory-integrated zone on DNS servers in
the three domains. Store the zone data in the DNS
directory partition named ForestDNSZones.
Answer: D
QUESTION 5
You are the network
administrator for Abc. The network consists of an
internal network and a perimeter network. The internal
network is protected by a firewall. The perimeter
network is exposed to the Internet. You
are deploying
10 Windows Server 2003 computers as Web servers. The
servers will be located in the perimeter network. The
servers will host only publicly available Web pages. You
want to reduce the possibility that users can gain
unauthorized access to the servers. You are concerned
that a user will probe the Web servers and find ports or
services to attack. What should you do?
A. Disable File and Printer
Sharing on the servers.
B. Disable the IIS Admin
service on the servers.
C. Enable Server Message
Block (SMB) signing on the servers.
D. Assign the Secure Server
(Require Security) IPSec policy to the servers.
Answer: A
QUESTION 6
You are the network
administrator for Abc. The network consists of a single
Active Directory domain named Abc.com. Abc's perimeter
network contains 50 Web servers that host the company's
public Internet site. The Web servers are not members of
the domain. The network design team completed a new
design
specification for the security of servers in specific
roles. The network design requires that security
settings must be applied to Web servers. These settings
include password restrictions, audit settings, and
automatic update settings. You need to comply with the
design requirements for securing the Web servers. You
also want to be able to verify the security settings and
generate a report during routine maintenance. You want
to achieve these goals by using the minimum amount of
administrative effort. What should you do?
A. Create a custom security
template named Web.inf that contains the required
security settings. Create a new organizational unit (OU)
named Web Servers and move the Web servers into the new
OU. Apply Web.inf to the Web Servers OU.
B. Create a custom security
template named Web.inf that contains the required
security settings, and deploy Web.inf to each Web server
by using Security Configuration and Analysis.
C. Create an image of a Web
server that has the required security settings, and
replicate the image to each Web server.
D. Manually configure the
required security settings on each Web server.
Answer: B
QUESTION 7
You are the network
administrator for Abc. The network contains a Windows
Server 2003 Web server that hosts the company intranet.
The human resources department uses the server to
publish information relating to
vacations and
public holidays. This information does not need to be
secure. The finance department wants to publish payroll
information on the server. The payroll information will
be published in a virtual directory named Payroll, which
was created under the default Web site on the server.
The company's written security policy states that all
payroll-related information must be encrypted on the
network. You need to ensure that all payroll-related
information is encrypted on the network. To preserve
performance, you need to ensure that other information
is not encrypted unnecessarily. You obtain and install a
server certificate. What else should you do?
A. Select the Require secure
channel (SSL) check box for the default Web site.
B. Assign the Secure Server
(Require Security) IPSec policy option for the server.
C. Select the Encrypt
contents to secure data check box for the Payroll
folder.
D. Select the Require secure
channel (SSL) check box for the Payroll virtual
directory.
Answer: D
|
