| Coverage : Certificate
RRAS
SUS
security
Security
Routing Protocols
IP Addressing and Protocols
|
| 1. | A network consists of one Windows Server 2003 running Enterprise Certificate Server. When a user requests for a new certificate, the request is processed. Later on, the administrator checked the Event Viewer and viewed a lot of Certificate errors related to Time and Date. When he opened the Certificate manager he found the Certificate Server down. When he tried to restart, there was the same time and date problem. What does this mean and how can it be corrected? |
| a. | | All certificates had expired |
| b. | | Certificate server was reinstalled |
| c. | | Server date and time had been changed |
| d. | | The proper date and time should be set and certificate services restarted
|
| |
| 2. | The network administrator installed Windows Server 2003 and Enterprise Certificate on the same, for his network clients running on Windows XP. He enabled the autoenrollment feature so that clients did not need to enter for requesting a new certificate. A lot of error messages were displayed in Event Viewer regarding failure of autoenrollment of the clients. Identify the error. |
| a. | | The RPC server was not available on the CA |
| b. | | The certificate services were not running on the server |
| c. | | Run the gpupdate command on the CA |
| d. | | Restart the netlogon service on the CA
|
| |
| 3. | The network administrator installed an Enterprise Certificate server on Windows Server 2003. His network consists of clients on Windows 200 and XP. They are configured with roaming profiles and each day the seat of every user changes. The administrator installs and configures an Exchange Server on Windows Server 2003 for Internal communication. The next day users complain that they are unable to open encrypted messages. Identify the problem. |
| a. | | Certificates are expired and need to be renewed |
| b. | | Re-install the certificate on each client |
| c. | | Private key is missing onto multiple machines |
| d. | | Re-install the certificate server
|
| |
| 4. | Which of the following utility should be used so that roaming users can read their digital and secured mails from any location? |
| a. | | Enable autoenrollment |
| b. | | Use smart cards |
| c. | | Reduce the certificate renewal period |
| d. | | Install subordinate CAs
|
| |
| 5. | RRAS server is configured in IAS on Windows Server 2003 Standard Edition. There are 500 clients running on Windows XP. Remote clients are configured to use RADIUS for remote authentication. After some days, most users complain that they are unable to connect to RRAS. Identify the problem. |
| a. | | Install L2TP/IPsec on server |
| b. | | Create a Group Policy on a new OU which allows for 500 RADIUS clients |
| c. | | Configure DHCP server that supports 500 addresses |
| d. | | IAS can be configured with a maximum of 50 RADIUS clients
|
| |
| 6. | Remote clients are unable to connect to RADIUS server configured on IAS in Windows Server 2003. What can be done to check the reason for connection failure? |
| a. | | Check m Network Monitor for the failure |
| b. | | Enable logging in IAS server |
| c. | | Check the system event log for failure event |
| d. | | Failure audit can be checked from Performance Monitor
|
| |
| 7. | Which of the following group(s) can serve as remote policies conditions? |
| a. | | Domain local group |
| b. | | Global group |
| c. | | Universal group |
| d. | | Security group
|
| |
| 8. | Where can the Protected Extensible Authentication Protocol(PEAP) be used in Windows Server 2003 under Remote access? |
| a. | | Smart cards |
| b. | | Digital certificates |
| c. | | Wireless devices |
| d. | | Ipsec
|
| |
| 9. | The users of Harry's company connect to his network from their homes using dial-up connection to the RRAS server running on Windows Server 2003. Users have no problem with the connection. Later on, he enabled callback for home users. After callback is enabled, users report that they are unable to maintain the RRAS connections. How should he allow the users to be able to maintain this connection using Callback? |
| a. | | Enter the static route entry in the properties tab of user's properties |
| b. | | Use MS-CHAP v2 protocol |
| c. | | Configure BAP protocol in the default policy |
| d. | | Enable Line control protocol in RRAS server
|
| |
| 10. | RRAS server has been configured in Windows Server 2003. MS-CHAP v2 has been configured for encryption. The remote clients consists of Win 98 and XP systems. Win XP clients report no problem in connections. But Win 98 are unable to connect to server over dial-up. Identify the cause of the
problem. |
| a. | | Win 98 clients can use MS-CHAP v2 only over VPN connections |
| b. | | Enable LCP in the properties of RRAS server |
| c. | | Install DHCP Relay Agent |
| d. | | Use Enterprise Certificates for authenticating remote clients
|
| |
| 11. | Which of the following protocols are considered as Mutual Authentication Protocols? |
| a. | | MS-CHAP |
| b. | | MS-CHAP V2 |
| c. | | PAP |
| d. | | SAP |
| e. | | EAP-TLS
|
| |
| 12. | The network administrator installed and configured a VPN server on Windows Server 2003. VPN client needs NetBIOS resolution for accessing resources. The administrator needs to process their request but without installing DNS and WINS. Which of the following features will he use in Windows Server 2003? |
| a. | | NetBT Proxy |
| b. | | WINS Proxy |
| c. | | Protected EAP |
| d. | | EAP-TLS
|
| |
| 13. | The network adminmistrator installed and configured one SUS server on Windows Server 2003 for updating 200 Windows XP clients. After some time, users are unable to connect to SUS server. What should he do to allow them to connect to SUS server for downloading latest updates? |
| a. | | Restart www publishing services |
| b. | | Re-install SUS server |
| c. | | SUS server have no latest updates |
| d. | | Restart IIS services
|
| |
| 14. | One SUS server is configured in Windows Server 2003 for updating Win XP clients. All clients are configured for Automatic Updates. All users are able to connect to and download updates from SUS server. But one automatic update client is unable to download update from SUS server. What should be done to update that client without wasting any time? |
| a. | | Enter registry path of server in SUS client |
| b. | | Restart www publishing services |
| c. | | Restart IIS server |
| d. | | Refresh the policies by running gpudate command
|
| |
| 15. | Which of the following log file is created on SUS client hard disk for keeping track of Windows Update? |
| a. | | %windir%\Windows Update.log |
| b. | | %windir%\system32\Logfiles\W3svc1\Wutrack.bin |
| c. | | %windir%\AutoUpdate\Windows Update.log |
| d. | | %windir%\Windows\Windows Update.log
|
| |
| 16. | An SUS server in Windows Server 2003 is installed. Clients running Win XP has been configured for automatic Updates. All client computers are the members of an OU named sales. GPO is applied to that OU for automatic client updation through SUS server. Which command line utility can be used to check if clients have been getting correct SUS configurations and GPO deployed? |
| a. | | gpupdate |
| b. | | gpresult |
| c. | | gpedit |
| d. | | netsh
|
| |
| 17. | Which two, among the following Operating Systems support NTLMv2? |
| a. | | Windows for workgroup |
| b. | | Windows 98 |
| c. | | Windows NT Service Pack 4 or later |
| d. | | Windows 2000
|
| |
| 18. | Jane is the network administrator for her company. Her network consists of one Windows Server 2003 hosting her domain, and clients on Windows XP, Windows 2000 and Windows NT 4.0 service pack 3. Security Templates (hisec.inf) have been configured for securing network. Later on, Windows NT users complain that they are unable to login to server. But other users have no problem in logging and accessing resources. What should she do? |
| a. | | Install windows NT service 4 or later |
| b. | | Use rootsec.inf templates |
| c. | | Create a security group for WinNT and grant the required permissions |
| d. | | Create a security group for WinNT, add it into an OU and assign the secure templates on that OU
|
| |
| 19. | Which of the following security templates can be used for restoring default settings in Windows Server 2003? |
| a. | | compatws.inf |
| b. | | rootsec.inf |
| c. | | notssid.inf |
| d. | | security.inf
|
| |
| 20. | Which of the following may be the possibilities under which a client running on Win XP is unable to logon into Win 2003 Domain controller? |
| a. | | DNS SRV records may be deleted |
| b. | | Time synchronization problem with PDC Emulator |
| c. | | No scope option is defined on DHCP server |
| d. | | KDC service may be stopped on Domain Controller |
| e. | | Windows Server 2003 latest service pack is not installed |
| f. | | Run ipconfig/flushdns command on client computers
|
| |
| 21. | Harry is the network administrator of his company having Windows 2003 domain controller under the domain of his company. His network consists of 100 Windows 2000 professional and 200 Windows 98 clients. His company policy states that all systems be upgraded to Windows XP. How will he check that after upgradation, all systems are with the same security settings? |
| a. | | Use the Setup security.inf templates on all Windows XP clients |
| b. | | Use hisecws.inf templates on all Windows XP clients |
| c. | | Run RSOP tool on all client systems |
| d. | | Run gpresult command on each system
|
| |
| 22. | Which of the following commands can be used to check the integrity of corrupted security database in Windows Server 2003? |
| a. | | bootcfg |
| b. | | evntcmd |
| c. | | esentutl |
| d. | | edbutil
|
| |
| 23. | Which of the following routing protocols support authentication? |
| a. | | RIP |
| b. | | RIP v2 |
| c. | | OSPF |
| d. | | IGRP |
| e. | | EIGRP
|
| |
| 24. | Which of the following statements regarding routing protocols are correct? |
| a. | | RIP maximum hop count support is 15 |
| b. | | RIP v1 supports VLSM |
| c. | | OSPF is the link state routing protocol |
| d. | | RIP v2 supports unicasting
|
| |
| 25. | John is the network administrator and his network consists of two Windows Server 2003 servers named server1 and server2. NAT is configured on server1 for securing the network and providing network access to clients. DHCP server is installed and configured on server2. A new subnet has been added to the network which will be assigned the addresses from server1 located on a different subnet. DHCP Relay agent has been configured on server1. Users complain that when they request the address from DHCP server, it fails and they get an error message that DHCP server is unreachable. John checked both the servers and found no error related to misconfiguration. Identify the problem. |
| a. | | Configure gateway address on clients on different subnet |
| b. | | Routing protocols need to be configured on server1 |
| c. | | DHCP server cannot be configured on server running NAT |
| d. | | PPP has not been enabled on server1
|
| |
| 26. | Routing and remote access server is configured on Windows Server 2003. The network consists of many subnets and each uses different routing protocols. Which route would the router use if the routing table consists of entries from different routing protocols? |
| a. | | Route with higher preference level is added to the routing table |
| b. | | Static entry will take priority over RIP |
| c. | | Route with lower preference is always added to the routing table |
| d. | | Each entry will be used and load-balanced
|
| |
| 27. | Which of the following are the benefits of static routes over dynamic routing? |
| a. | | Static routes are recommended for large networks |
| b. | | Static routes are less resource-intensive than dynamic routing protocols |
| c. | | Static routes supports unnumbered connections |
| d. | | Static router are fault tolerant
|
| |
| 28. | Which of the following addresses fall under private range? |
| a. | | 192.168.250.2 |
| b. | | 192.169.0.1 |
| c. | | 172.25.10.1 |
| d. | | 172.33.10.1 |
| e. | | 10.200.2.1
|
| |
| 29. | What does /29 represent? |
| a. | | 255.255.255.0 |
| b. | | 255.255.224.0 |
| c. | | 255.255.255.240 |
| d. | | 255.255.255.248
|
| |
| 30. | An organization has been assigned the 172.16.0.0 subnet and uses 255.255.224.0 subnet mask. How many addresses are available for host addresses? |
| a. | | 8190 |
| b. | | 7500 |
| c. | | 4096 |
| d. | | 4094
|
| |
| 31. | Which of the following IP class ranges is used for multicasting? |
| a. | | A |
| b. | | B |
| c. | | C |
| d. | | D |
| e. | | E
|
| |
| 32. | Which of the following protocols are part of Internet Layer in TCP/IP Model? |
| a. | | ICMP |
| b. | | IGMP |
| c. | | SMTP |
| d. | | DNS |
| e. | | UDP |
| f. | | ARP
|
| |
