|
|
Authorized user can see question and answers.
Please log in or sign up. 
|
#21. You are the administrator of a Windows 2000 network. Your company wants you to provide a high level of security for its Public Key Infrastructure. You decide to create an offline root Certificate Authority (CA). You want the offline root CA to be capable of processing certificate requests from files, and you want the offline root CA to be recognized as a trusted root authority for Windows 2000 client computers.
How should you create the offline root CA?
Show comments for this question (0)
Add comments
Link to this question
|
|
#22. You are the administrator of a Windows 2000 network. Some of the members of your company's graphics department use Macintosh computers and are not using Internet Explorer as their browser These users inform you that they cannot request valid user certificates from your Enterprise Certificate Authority (CA). You want to make it possible for these users to request certificates by using Web-based enrollment.
What should you do?
Show comments for this question (0)
Add comments
Link to this question
|
|
#23. You are the administrator of a Windows 2000 network. The network consists of one Windows 2000 domain that has Windows 2000 Professional client computers and Windows NT Workstation 4.0 client computers. To create a digital certificate, you use a stand-alone certificate server configured as a root Certificate Authority (CA). You use the digital certificate to secure a virtual directory on your Internet Web server Users report that when they connect to the virtual directory by means of a new URL, a Security Alert dialog box appears with the following warning message 'The security certificate was issued by a company you have not chosen to trust'. You want to prevent this warning message from appearing. You also want to avoid any unnecessary reconfiguration of either the certificate server or the Web server.
What should you do?
Show comments for this question (0)
Add comments
Link to this question
|
|
#24. You are the administrator of your company's network. The network consists of Windows 2000 Server computers, Windows NT Workstation client computers, and Windows for Workgroups 3.11 client computers distributed across three subnets. All client computers are configured as DHCP client computers to automate TCP/IP configuration. You install a WINS server on one subnet on your network. You also define a DHCP scope option to include the WINS server's address. Users report that they can access resources on servers on their own subnet, but they cannot access resources on other subnets.
What should you do to resolve this problem?
Show comments for this question (0)
Add comments
Link to this question
|
|
#25. You are the administrator of a Windows 2000 network. The network has 18,000 Windows 2000 Professional WINS client computers and six Windows 2000-based WINS servers. The WINS client computers are portable client computers, and they frequently connect to the network at different locations. The WINS client computers access NetBIOS-based resources. The TCP/IP configuration of the WINS client computers is provided by DHCP servers on the network. Some of the WAN links in your network are unreliable. You want to ensure that all Windows 2000 Professional computers are able to resolve NetBIOS names, even if some of the WINS servers are not available.
How should you configure the network to accomplish this goal?
Show comments for this question (0)
Add comments
Link to this question
|
|
#26. You are the administrator of a Windows 2000 domain. The domain has a Windows 2000 member server computer named Ras5. Routing and Remote Access is enabled for remote access on Ras5. The domain also has a Windows NT 4.0 member server computer named Ras4. Ras4 is running Remote Access Service (RAS). The domain is in mixed mode. Users in the domain use Windows 2000 Professional computers to dial in to the network through Ras4 or Ras5. However, Ras4 is not able to validate remote access credentials of domain accounts.
How should you configure the network to enable the Windows NT 4.0 Ras4 member server computer to validate remote access domain users?
Show comments for this question (0)
Add comments
Link to this question
|
|
#27. You are the administrator of your company's network. Your Windows 2000 Server computer named Srv2 cannot communicate with your UNIX server named Srv1. Srv2 can communicate with other computers on your network. You try to ping Srv1, but you receive the following error message. "Unknown host Srv1." You create an A (host) record that has the correct name and IP address. However, when you try to ping Srv1 again, you receive the same error message.
What should you do to resolve this problem?
Show comments for this question (0)
Add comments
Link to this question
|
|
#28. You are the administrator of a Windows 2000 network. Your company's primary DNS server, named ns1.contoso.com, is heavily used, and the CPU utilization on this server is consistently high. Because of the large number of records that are stored on the DNS server, you suspect that some DNS queries result in answers that exceed the limit for a single UDP packet You want to know if answers to DNS queries are exceeding the limit for a single UDP packet.
What should you do?
Show comments for this question (0)
Add comments
Link to this question
|
|
#29. You are the administrator of your company's network. The network consists of a single Windows 2000 domain that spans multiple locations. The locations are connected over the Internet by using Routing and Remote Access. Resources are located on TCP/lP hosts on your network. To facilitate name resolution for client access to these resources, you implement Windows 2000 DNS servers on your network. You want to ensure that when the zone transfer traffic between your DNS servers crosses the Internet links between the locations, it cannot be compromised by outside parties.
What should you do?
Show comments for this question (0)
Add comments
Link to this question
|
|
#30. You are the administrator of the contoso.com domain. Your network environment consists of a main office and two branch offices. The branch offices are connected to the main office by 256-Kbps leased lines. You have a single DNS zone, and all DNS servers are located at the main office. All servers on your network are running Windows 2000 Server. Your network is not connected to the Internet.Users report that response times are extremely slow when they attempt to access intranet resources. When you monitor the network, you discover that DNS name resolution queries are generating heavy traffic across the WAN links.
You want to accomplish the following goals: Name resolution traffic across the WAN links will be reduced. Response times for name resolution queries will be reduced. Administrative overhead for DNS maintenance will be minimized. Current DNS namespace design will be maintained.
You take the following actions: Increase the refresh interval for zone transfers. For each branch office, create a new Windows 2000 domain in the same tree as the first domain. Install a DNS server and create a new standard primary DNS zone for each new Windows 2000 domain. Configure each DNS server to forward requests to the other DNS servers on the network. Add resource records for each office's local intranet resources to the local zone files. Configure client computers in the branch offices to query their local DNS servers only.
Which result or results do these actions produce? (choose all that apply)
Show comments for this question (0)
Add comments
Link to this question
|
|
|
|
 gen. 0.066
|
Server date 04:01 08-01-2009
|
Developed by Zip © 2006
|
|
|
|
|
Forum
Master braindump