Microsoft 70-216: Implementing and Administering a Microsoft Windows 2000 Network
#351. You are the administrator of your company. To monitor the traffic on your network, you install Network Monitor. You need to monitor the source IP address, and destination IP address, and destination port number of every TCP/IP frame on the network. You want to log this information for a period of three hours.
#352. You are the administrator of your company’s network. Network is configured as shown in the exhibit.
You are configuring your Windows 2000 server computer that runs Internet Information Server (IIS). Your Server uses the IP address of 131.107.2.2 to support internet users. Your server uses the IP address of 10.1.1.2 to support an intranet application.
You want to configure your server to permit only web communications from the internet. You also want to configure your server to allow access to shared folders and other resources for users on the intranet.
#353. You are the administrator of your company’s network. Your network is configured in a Windows 2000 domain as shown in the following diagram.
Acct1 and Acct2 belong to the accounting department. Sales1 and Sales2 belong to the sales department.
Production1 and Production2 belong to the production department. Manager1 belongs to the management department. The accounting department does not access the Internet.
You want to accomplish the following goals:
• All communications involving the Acct1 and Acct2 will be encrypted. • Internet communications will not be encrypted. • Communications between the sales department and the management department will be encrypted. • Performance overhead for encryption will be minimized.
You take the following actions:
• Create an organizational unit (OU) structure as shown in the exhibit. • Add Acct1 and Acct2 to the ACCT OU. • Add Sales1 and Sales2 to the Sales OU. • Add all other computers to the Comp OU. • Assign the default Secure Server IPSec Policy to the domain.
Which result or results do these actions produce? (Choose all that apply)
#354. You are the administrator of your company's network. The network consists of a single Windows 2000 domain. The network has Windows 2000 Server computers, Windows 2000 Professional computers, and Windows NT Workstation 4.0 computers distributed across two IP subnets as shown in the exhibit.
Two Windows 2000 domain controllers are located on Subnet1. Each domain controller is also a DNS server hosting an Active Directory integrated zone. You implement WINS for NetBIOS name resolution on your network. WINS is installed on a server on Subnet2.
Users of the Windows NT Workstation 4.0 computers on Subnet2 report that they are receiving the following error message, “Domain Controller cannot be located”. Subsequently, these users cannot be validated on the network. Windows NT Workstation 4.0 users on Subnet1 are not experiencing this problem. However, they do report that response times for logon requests are extremely slow. None of the Windows 2000 Professional users on either subnet report these problems.
You want to ensure that Windows NT Workstation 4.0 users on Subnet2 can be validated. You also want to improve logon request response time for users on Subnet1.
#355. You have 2 subnets. Domain Controller on each. Subnet 1 has 2000 DNS1 with standard primary. Subnet 2 has Unix DNS2 with secondary. DNS successfully accepts zone transfers from DNS1. All clients use DHCP. DHCP issues Ip addresses to DNS1 and DNS2. Users say sometimes they cannot log onto the domain, only when DNS1 is taken offline.
gen. 0.046
Forum
Master braindump