2: You are a network administrator for your company.

The network consists of a single Active

Directory domain. All servers run Windows Server 2003. All client computers run Windows XP
Professional. You place client computers of the HR department in an organizational unit (OU)
named HRClients. A Group Policy object (GPO) named HRClientsPolicy is linked to the
HRClients OU. The HRClientsPolicy GPO has been configured to implement the Client
(Response Only) IPSec policy. You place secure servers in an OU named SecureServers. A GPO
named SecureServersPolicy is linked to the SecureServers OU. You have the following
requirements: All communications between the secure servers must be encrypted. All
communications between client computers of HR department and the secure servers must be
encrypted. Client computers that are not in the HRClients OU must not be able to communicate
with the secure servers.You need to configure the SecureServersPolicy GPO to meet the
requirements by using the Group Policy Object Editor console. Your operation must not affect
other settings.

Correct Answers: IP Security Policies open by default. Just “Assign Secure Server
(Required Security) “

3: You are a network administrator for Trey Research. The network contains a Windows Server
2003 computer named Server1. Server1 has two network connections named Internet Connection
and Local Area Network Connection. Internet Connection is used to connect to the Internet and
Local Area Network Connection is used to connect to the company network. Server1 also runs
Internet Information Services (IIS) 6.0 and hosts a public Web site on port 80. You configure
Server1 so that it can connect to the Internet and to the company network. You need to ensure
that company users can connect to the Internet through Server1. You also need to ensure that the
Web site is available to Internet users. You must accomplish these tasks with the least amount of
administrative effort by using the Network Connections console. Your operations must not affect
other settings on Server1.

Correct Answers:- ? (May be just enabling the NAT, but not sure) please find the
correct solution yourself.

Solution :

Right-click the connection that you use to connect to the Internet. For example, if you connect to
the Internet by using a modem, right-click the connection that you want under Dial-up.

1. Click Properties.
2. Click the Advanced tab.
3. Under Internet Connection Sharing, select the Allow other network users to
connect through this computer's Internet connection check box.
4. If you are sharing a dial-up Internet connection, select the Establish a dial-up
connection whenever a computer on my network attempts to access the Internet
check box if you want to permit your computer to automatically connect to the Internet.
5. Click OK. You receive the following message:

When Internet Connection Sharing is enabled, your LAN adapter will be set to use IP
address 192.168.0.1. Your computer may lose connectivity with other computers on your
network. If these other computers have static IP addresses, it is a good idea to set them to
obtain their IP addresses automatically. Are you sure you want to enable Internet
Connection Sharing?

6. Click Yes.

5: You are a network administrator for City Power & Light. The network consists of a single Active
Directory domain named cpandl.com. The network contains Windows Server 2003 computers,
Windows NT Workstation 4.0 computers, and Windows XP Professional computers. The
cpandl.com DNS namespace is used on the company's intranet. A Windows Server 2003 DNS
server named Server1 uses the IP address 192.168.0.1. A Windows Server 2003 WINS server
named Server6 uses the IP address 192.168.0.6. You need to ensure that the computers running
Windows Server 2003 and the computers running Windows XP Professional can connect to the
computers running Windows NT Workstation 4.0 when using computer names. You must
accomplish this task by using the cpandl.com Properties dialog box. Your operation must not
affect other settings on Server1.

Correct Answers: DNS Server  Properties  WINS TAB Add WIN Server IP ADD but
didn’t mark “Do not replicate” Apply OK

6: You are the network administrator for Trey Research. The network consists of a single Active
Directory domain named treyresearch.com. You need to enable auditing on all client computers to
log the events which attempts to restarts, shuts down the computer or the event affects the
security log. You must accomplish the task by using the Group Policy Object Editor console. Your
operation must not affect other settings.

Correct Answers: Audit System Even (Success & Failure) in computer

configuration  Windows Setting

 Security setting  Local Policies  Audit Policy

7: You are the network administrator for your company. You are configuring networking on a
Windows Server 2003 server in a new branch office. The network address consists of three
subnets. Each subnet contains a maximum of 10 computers. All computers on the network use
the 192.168.1.0/24 address scheme. The TCP/IP properties are configured as shown in the
following list: IP address: 192.168.1.10 Default gateway: 192.168.1.17 You need to configure a
subnet mask on the server. The new subnet mask must support the existing computers and allow
for the network to be separated into a maximum of six subnets in the future. You must
accomplish this task by using the Internet Protocol (TCP/IP) Properties dialog box.

Correct Answers: 255.255.255.224 is the subnet mask.

8: You are a network administrator for your company. The network consists of two IP subnets
named Subnet1 and Subnet2. All servers run Windows Server 2003. Subnet1 contains an intranet
Web server named Server1. A newly-written security policy states that only the client computers
in Subnet1 can communicate with Server1. You discover that users on Subnet2 can access
resources on Server1. You need to ensure that any hosts on Subnet2 cannot establish a network
session to Server1. You must accomplish this task by using the Internet Protocol (TCP/IP)
Properties dialog box on Server1. Your operation must not affect other settings on Server1.

Correct Answers: Remove the Default Gateway on Subnet 1 TCP/IP Properties

15: You are a network administrator for your company. All servers run Windows Server 2003. All
client computers run Windows XP Professional. All servers are configured with static IP addresses
and use 192.168.0.1 through 192.168.0.4 for network addresses. All client computers are
configured as DHCP clients and use 192.168.0.5 through 192.168.0.200. You have a server named
Fileserver that functions as a file server. You need to configure Fileserver to use a valid IP
configuration. You also need to enable Fileserver to communicate with all hosts on the network by
using fully qualified domain names (FQDNs). You must accomplish this task by using Fileserver’s
Internet Protocol (TCP/IP) Properties dialog box.

Correct Answers: 192.168.0.4

19: You are a network administrator for your company. The London office is currently connected
to the corporate WAN by using a Windows Server 2003 computer named Server1. Server1 is
Configured as a dial-up router. Server1 has two network adapters named LAN Interface and WAN
Interface. LAN Interface connects to the Ethernet LAN. WAN Interface is a broadband networking
device. You need to view real-time data to find out the current utilization of the WAN broadband
Connection by adding only one counter. You must accomplish this task by using the System
Monitor snap-in.
Correct Answers: Add the appropriate counter use Performance monitor / system
monitor -> press + icon to add counter, select Network interface, select Current
Bandwidth