| Coverage : IPSec/certificates
MBSA and SUS
Multicasting
NLB
OSI/Infrastructure
Performance
Policies |
| 1. | John is the network administrator for a company running windows 2003 server domain. His network consists of some remote mobile users connecting their laptops from their homes. He wants the communication to be secure between his mobile users and server by using the certificates. No public key policies have been configured on certificate server.
Which of the following actions must he take for configuring a secure network connection? |
| a. | | Connect and join the mobile users to corporate network by using MS-CHAP |
| b. | | Connect and join the mobile users to corporate network by using PAP |
| c. | | Mobile users will be issued the certificates automatically once connected with corporate network |
| d. | | Request a user certificate |
| e. | | Connect to corporate network again by using certificate based-authentication such as EAP or ipsec |
| f. | | Connect to corporate network by using L2TP with certificate based authentication such as EAP
|
| |
| 2. | Which of the following statements are true about IPsec policies in windows server 2003? |
| a. | | L2TP and L2TP/IPSec cannot be used in combination for all VPN connections |
| b. | | IPSec cannot be used in tunnel mode for gateway-to-gateway tunnels |
| c. | | Securing communication between domain members and domain controllers is not recommended |
| d. | | Destination multicast and broadcast address can be filtered
|
| |
| 3. | Which of the following security tool should be used to secure communication between an Exchange 2003 front-end server and a back-end server? |
| a. | | IPSec |
| b. | | TLS |
| c. | | SSl |
| d. | | Basic authentication
|
| |
| 4. | An administrator faced the problem with IPSec when implemented with NAT in windows server 2003. What may have caused this problem? |
| a. | | IPSec |
| b. | | VPN |
| c. | | DHCP |
| d. | | Certificates
|
| |
| 5. | Tom is the network administrator for a company. His network consists of windows 2003 and 2000 domain controllers and clients running on windows XP. He is using IPsec with 3DES to provide network security and data confidentiality. Later on, it was discovered that communication with server 2003 is secured but windows 2000 provides some level of confidentiality rather than blocking all communications. How can he provide more security in windows 2003 server with 3DES? |
| a. | | Install High encryption pack or service pack 2 or later |
| b. | | Use client (respond only)ipsec policy in windows server 2000 |
| c. | | Create new ipsec rule for windows 2000 filtering ip traffic |
| d. | | Set shorter time for session key
|
| |
| 6. | Mary is the network administrator for a company running on windows 2003 domain controller. She wants to create an ip sec policy that will always be applied if local or active-directory based policies are corrupted or not applied. How can she be sure that at least one ip sec policy must always be configured if other policies are missing? |
| a. | | Local cached policies are always applied if no policy is discovered |
| b. | | Create persistent ipsec policy using netsh utility |
| c. | | Apply two ipsec policies for fault tolerance |
| d. | | Always use a pre-shared key
|
| |
| 7. | Which of the following statements hold true regarding windows server 2003 ipsec peers connected with internet? |
| a. | | Always use kerberos authentication for computers connected with internet |
| b. | | Certificate provides more security over internet |
| c. | | Unsecure communication over internet allow data accessible with risk |
| d. | | Always exclude the name of a CA while requesting over internet
|
| |
| 8. | While running mbsacli.exe from CD-ROM in windows server 2003, an administrator gets an error message reporting the catalog file to be corrupted or damaged and stops scanning. Which of the following may be the problem of that error? |
| a. | | Administrative privileges are missing |
| b. | | mbsacli.exe file is corrupted |
| c. | | wsusscan.cab is residing at read-only location |
| d. | | Stop all anti-virus softwares before running mbsacli.exe
|
| |
| 9. | Joseph is the administrator for a company running on windows 2003 domain environment. When he ran the MBSA utility to scan the security vulnerabilities in his server, it always reports telnet problem. Upon checking the telnet service, it was found disabled. How can he configure the MBSA so that it does not report incorrect information related to telnet? |
| a. | | Remove telnet parameter from service.txt file |
| b. | | Install latest version of MBSA |
| c. | | MBSA doesnot support telnet |
| d. | | Modify the hosts file
|
| |
| 10. | Elle is the administrator in a company. When she scanned a remote window XP computer using MBSA, she got an authentication problem "user is not an administrator on the machine ". Remote machine is not joined in the domain but she has used local administrative rights for scanning remote computer. Which of the followings action must she take for scanning a remote workgroup computer? |
| a. | | Disable simple file sharing |
| b. | | Set the local security setting classis-local users authenticate as themselves |
| c. | | Enable the Guest account |
| d. | | Remote computer must be joined in domain before scanning
|
| |
| 11. | Brooke is a network administrator in a company. The SUS server is installed in windows 2003 domain server. While using SUS server, SUS was found to be unable in deploying windows XP SP2 to its clients even though no problem was encountered in pushing hot fixes or patches. What may be the cause of this problem? |
| a. | | SP can't be deployed through SUS server |
| b. | | Size of Service pack exceeds than recommended for SUS server |
| c. | | Service Pack may be corrupted or damaged |
| d. | | Clients not supported for service pack
|
| |
| 12. | Which of the following multicast address is used by the ALLSPF routers to send its routing table information to other OSPF routers? |
| a. | | 224.0.0.6 |
| b. | | 224.0.0.9 |
| c. | | 224.0.0.5 |
| d. | | 224.0.0.10
|
| |
| 13. | Which of the following statements hold true regarding Multicasting and Unicasting routing? |
| a. | | Multicast traffic is sent to an ambiguous group destination |
| b. | | Unicast forwarding table summarized group addresses |
| c. | | Unicast routing table summarized globally unique destinations |
| d. | | Unicast routing protocol update IP multicast forwarding table
|
| |
| 14. | Which of the following protocols are supported by IP Multicasting? |
| a. | | IGMP |
| b. | | ICMP |
| c. | | MOSPF(Multicast Extension to OSPF) |
| d. | | PIM (Protocol-Independent Multicast) |
| e. | | RIP |
| f. | | All of the above
|
| |
| 15. | Danny is a network administrator for a Web site hosting company. His company has more than 10 sites hosted on windows server 2003. For improving web performance, NLB with clustering is configured. After configuring NLB, he got a duplicate address error message. He want to know the reason for this error message and how to overcome it? |
| a. | | NLB and clustered address are the same |
| b. | | Two mac addresses are mapped to the same IP address in cluster modes |
| c. | | Configure NLB before assigning cluster address |
| d. | | Restart the NLB and configuration services
|
| |
| 16. | A server cluster was implemented and configured in windows server 2003. Another windows 2003 server has been configured as software router that connects an inside network with an outside network. After configuring cluster in windows server 2003, remote clients complain that they were unable to ping to cluster's server address. how can the outside network be allowed to be able to use ping to access the cluster's address without exposing the network security? |
| a. | | Allow ICMP traffic to pass by Firewall |
| b. | | Enable Proxy ARP support in router |
| c. | | Enter a static ARP entry |
| d. | | Enable RIP instead of static entry
|
| |
| 17. | Which protocol is required to be enabled on router, when using NLB in either multicast or unicast mode? |
| a. | | Proxy ARP |
| b. | | Inverse ARP |
| c. | | Reverse ARP |
| d. | | NetBEUI
|
| |
| 18. | Network Load Balancing in Windows server 2003 provides security risk to data when using remote control feature is used. Which other tools or options are available to access the remote control feature without data tampering? |
| a. | | Enable IPsec |
| b. | | Use Windows Management Instrumentation (WMI) |
| c. | | UDP ports 1717 and 2504 should not be blocked incorrectly by the firewall |
| d. | | Use simple passwords for accessing remote control in NLB
|
| |
| 19. | What are the limitations of using NLB.exe instead of Network Load balancing Manager? |
| a. | | Administrative scripts cannot be used with nlb.exe |
| b. | | Remote control needed to be enabled to manange remote cluster |
| c. | | New clusters cannot be created using nlb.exe |
| d. | | No administrative privileges are required to run nlb.exe
|
| |
| 20. | After implementing a 5-Node cluster in windows server 2003, the convergence begins but never completes after the cluster hosts start. What may be the reason? |
| a. | | Different port rules entered on each clustered host |
| b. | | Hubs/switches working on mismatched duplexing |
| c. | | Hosts configured with different cluster opertaion modes |
| d. | | Low system r4esources on cluster hosts |
| e. | | Cluster'IP address not configured on one or more host
|
| |
| 21. | What is the logical structure in windows 2003 environment? |
| a. | | Domain |
| b. | | Domain controller |
| c. | | Sites |
| d. | | OU |
| e. | | Tree |
| f. | | Forest
|
| |
| 22. | Which of the following network devices generates more broadcast domains? |
| a. | | Hubs |
| b. | | Switches |
| c. | | Routers |
| d. | | All of the above
|
| |
| 23. | Which information structure does the OSI model follow? |
| a. | | Data |
| b. | | Segment |
| c. | | Frame |
| d. | | Packet
|
| |
| 24. | What does the term "attenuation" mean in networking? |
| a. | | Signal weakened as it travel along a medium |
| b. | | Monitoring bandwidth using network monitoring tools |
| c. | | The difference between the highest and lowest frequencies in a given range |
| d. | | Network medium in which the signals are confined to a restricted place
|
| |
| 25. | Which of the following are connection-oriented protocols? |
| a. | | TCP |
| b. | | UDP |
| c. | | IPX |
| d. | | SPX
|
| |
| 26. | Which of the following are types of fiber-optic media? |
| a. | | Multimode |
| b. | | Single mode |
| c. | | Dual mode |
| d. | | Thread mode
|
| |
| 27. | Thomas is a network administrator for a company. His network is running a windows 2003 domain and windows XP clients. He is using Basic Firewall in windows server 2003 to protect his network from outside. How will he configure the server to log maximum information related to echo requests reaching to his network? |
| a. | | Enable audit system events |
| b. | | Enable remote access logging |
| c. | | Logging is enabled by default in %windir%/tracing directory |
| d. | | Enable W3C Extended Log File Format Logging
|
| |
| 28. | A network has one subnet running domain controller in windows 2003 server and 50 XP clients which use DNS and Web server on DC. The company expansion needs a new subnet where 100 XP clients will use the newly installed application server in their subnet. Later on, some user reports slow access while connecting or using resources from application server. Both subnets have same problems. How can the application server impact on network be determined? |
| a. | | Open performance monitor and select ICMP received Echo reply/sec counter |
| b. | | Open system monitor, select network Interface object and compare the Packet Received Non-unicast/sec with baseline |
| c. | | Use network monitor and filter the broadcast traffic and compare against baseline |
| d. | | Use network monitor default state as it would display only broadcast traffic
|
| |
| 29. | An IAS server was installed and configured in windows server 2003. What steps should be taken for improving IAS performance? |
| a. | | Install IAS on domain controller |
| b. | | IAS logging must always be disabled |
| c. | | Always install IAS on Global catalog |
| d. | | Always enable NAS notification forwarding
|
| |
| 30. | Tom is an administrator for a company running windows 2003 server. He has installed two network adapters and configured ICF in server for filtering and securing network traffic. ICF logging is enabled to log dropped packets and active connections. Later on, it was discovered that information is collected each time by ICF is overwritten from pfirewall.log file. The events that are deleted from pfirewall.log file are to be checked. Which of the following ICF should be used to save old events. |
| a. | | pfirewall.log.old |
| b. | | event viewer |
| c. | | network monitor |
| d. | | pfirewallold.log
|
| |
| 31. | You are the network administrator for your company. Your network consists of one windows 2003 server promoted as domain controller and 100 windows XP clients. You have granted the domain administrative right to some of the users for testing their applications of production server, but some users stated restarting the server. Which auditing policy must be enabled to track the events related to shutdown or restarting of server? |
| a. | | Audit object access |
| b. | | Audit directory service access |
| c. | | Audit system events |
| d. | | Audit process tracking
|
| |
| 32. | A company has one domain controller running on windows server 2003. Sometimes, the server is unavailable due to some maintenance but the user's working must not be disturbed. How can the users login in to domain controller even if it is unavailable? |
| a. | | Configure the reversible encryption password policy for domain users |
| b. | | Set the number of previous logon cache |
| c. | | Enable the Allow anonymous SID/Name translation policy |
| d. | | Users can never login if domain controller is offline
|
| |
| 33. | A network consists of domain controllers running on 2000 and 2003. What will happen if one user is logged in two different machines and password is changed in one of them? |
| a. | | Account will be locked out in second machine due to authentication failure |
| b. | | Multiple logins are restricted in domain controllers |
| c. | | Password will be automatically verified by the second machine |
| d. | | Password cannot be changed in multiple logins
|
| |
| 34. | Tom is the network administrator in windows 2003 domain environment having 100 windows XP clients. He is worried that some users in his network might open attachments in e-mails that can adversely affect the network. He needs to use in-built operating features that disallow users from running specific file types in e-mails. What should he do? |
| a. | | Configure Internet connections firewall in windows XP |
| b. | | Block virus infected mail from Proxy server |
| c. | | Use third party anti-virus |
| d. | | Apply software restriction policies
|
| |
| 35. | Which rule should be created in windows server 2003 to prevent the virus or Trojan horse to be able to run in a network? |
| a. | | Certificate rule |
| b. | | Hash rule |
| c. | | Internet zone rule |
| d. | | Path rule
|
| |
