Microsoft 70-216: Implementing and Administering a Microsoft Windows 2000 Network
#71. You are the network administrator for a windows 2000 domain. Client computers in your domain are Windows 98 computers or Windows 2000 computers. Clients in your domain use a client/server application that accesses files from one of the NT4.0 server computers. Users are reporting that they cannot connect to this Windows NT server computer. The Windows NT 4.0 server computer can successfully connect to the Windows 2000 computers.
#72. You are the administrator of a Windows 2000 network that consists of a single domain. Because no employee in your company should have the ability to encrypt files by using Encrypting File System (EFS), you need to remove this ability from all users in the domain.
What should you do to accomplish this goal? (choose all that apply)
#73. Your main office and two branch offices are connected by dedicated T1 lines. Two additional branch offices use 128-Kbps ISDN lines and Routing and Remote Access over the Internet to connect to the company's network. You are designing your DNS name resolution environment.
You want to accomplish the following goals: DNS Name resolution traffic across the WAN should be minimized. DNS Replication traffic across the WAN should be minimized. DNS Replication traffic across the public WAN should be secure. Name resolution performance for client computers should be optimized.
You take the following actions: Install the DNS Server service on one server at each office. Create a standard primary zone at the main office. Create a standard secondary zone at the four other offices. Configure client computers to query their local DNS server.
What results do these actions produce? (choose all that apply)
#74. You are a branch office network administrator. You are connected to the company network via a Windows 2000 Routing and Remote Access two-way demand-dial connection over ISDN. Sensitive company data, e-mail, and application traffic is sent across the connection.
You want to accomplish the following goals: All data should be secure. Rogue routers will be prevented from exchanging router information with either router. Both routers will be able to validate each other. Both routers will maintain up-to-date routing tables. Traffic over the link during peak business hours will be minimized.
You take the following actions: Enable MS-CHAP as the authentication protocol on both Routing and Remote Access servers. Enable OSPF on the demand-dial interfaces. Set the Require Encryption option on both Routing and Remote Access servers.
Which results do these actions produce? (choose all that apply)
#75. The DNS server on your network is not performing as well as you think it could. You think there are resource records that are no longer in use and this is causing the poor performance.
#76. You are the admin for a large dynamic IP network that uses OSPF. All servers are running win2k advanced server. You want to better manage the internal routers and area border routers of the network.
#77. Your domain has a Windows 2000 member server named Ras1 and a Windows 2000-based DHCP Server named Dhc1. Routing and Remote Access is enabled on Ras1. Two DNS servers use IP addresses of 10.1.5.2 and 10.1.5.3. Ras1 is configured to use DHCP to assign IP addresses to remote access clients. DHCP server scope options include: Vendor: Standard, Value: 10 1 5 3, Class--None. It does not have any client reservations. When remote access clients dial into Ras1, they receive an IP address from the DHCP scope range, but they do not receive the DNS address configured in the DHCP scope. They receive a DNS server address of 10 1 5 2.
How should you configure your network to allow remote access clients to receive the DNS option from the DHCP server?
#78. You are the administrator of a Windows 2000 network. The network consists of a Windows 2000 Server computer named Srv1 and 12 Windows 2000 Professional computers. Srv1 has a dial-up connection that connects to the Internet. Srv1 is configured to use Internet Connection Sharing to allow Internet access through the dial-up connection of Srv1. The 12 Windows 2000 Professional computers are configured for static TCP/IP addressing. The IP addresses are 192.168.0 1 through 192.168.0.12, and the subnet mask is 255.255.255.0 The 12 Windows 2000 Professional computers have no default gateway configured. You discover that the Windows 2000 Professional computers are not able to access the Internet through the dial-up connection of Srv1. You confirm that the preferred DNS server on the Windows 2000 Professional computers is configured correctly.
What should you do to allow all 12 computers to access the Internet through the dial-up connection of Srv1? (choose all that apply)
#80. Your organization is using CA to provide identification to users. You would like to ensure customers of your identity while providing employees access to secure areas on your web server.