You are the network administrator for your company. The network consists of a single Active Directory domain. The network contains Windows Server 2003 file servers. The network also contains a Windows Server 2003 computer named Server1 that runs Routing and Remote Access and Internet Authentication Service （IAS）. Server1 provides VPN access to the network for users’ home computers.
You suspect that an external unauthorized user is attempting to access the network through Server1. You want to log the details of access attempts by VPN users when they attempt to access the network. You want to compare the IP addresses of users’ home computers with the IP addresses used in the access attempts to verify that the users are authorized. You need to configure Server1 to log the details of access attempts by VPN users.
What should you do？ （）
A. Configure the system event log to Do not overwrite.
B. In IAS， in Remote Access Logging， enable the Authentication requests setting.
C. Configure the Remote Access server to Log all events.
D. Create a custom remote access policy and configure it for Authentication-Type.
您可能感兴趣的试卷
你可能感兴趣的试题
You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain.
You administer a four-node Network Load Balancing cluster. All nodes run Windows Server 2003. The cluster has converged successfully. You use Network Load Balancing Manager on the default host to configure all nodes of the cluster.
The nodes have a single network adapter and are connected to the same switching hub device.
Administrators of non-cluster servers that are connected to the same switching hub device report that their servers receive traffic that is destined for the cluster nodes. Receiving this additional network traffic impairs the network performance of the non-cluster servers.
You need to ensure that traffic destined for only the cluster nodes is not sent to all ports of the switching hub device.
You do not want to move the cluster to another switching hub device.
What should you do？ （）
A. On one node， run the nlb.exe reload command.
B. On each node， run the wlbs.exe drainstop command.
C. Use Network Load Balancing Manager to enable Internet Group Management Protocol （IGMP） support on the cluster.
D. Use Network Load Balancing Manager to add a second cluster IP address.
You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain.
You administer a three-node Network Load Balancing cluster. Each cluster node runs Windows Server 2003 and has a single network adapter. The cluster has converged successfully.
You notice that the nodes in the cluster run at almost full capacity most of the time. You want to add a fourth node to the cluster. You enable and configure Network Load Balancing on the fourth node.
However， the cluster does not converge to a four-node cluster. In the System log on the existing three nodes， you find the exact same TCP/IP error event. The event has the following description： "The system detected an address conflict for IP address 10.50.8.70 with the system having network hardware address 02：BF：0A：32：08：46."
In the System log on the new fourth node， you find a similar TCP/error event with the following description： "The system detected an address conflict for IP address 10.50.8.70 with the system having network hardware address 03：BF：0A：32：08：46." Only the hardware address is different in the two descriptions. You verify that IP address 10.50.8.70 is configured as the cluster IP address on all four nodes. You want to configure a four-node Network Load Balancing cluster.
What should you do？ （）
A. Configure the fourth node to use multicast mode.
B. Remove 10.50.8.70 from the Network Connections Properties of the fourth node.
C. On the fourth node， run the nlb.exe resume command.
D. On the fourth node， run the wlbs.exe reload command.
You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain.
You administer a Network Load Balancing cluster that consists of three nodes. Each node runs Windows Server 2003 and contains a single network adapter. The Network Load Balancing cluster can run only in unicast mode. The Network Load Balancing cluster has converged successfully.
To increase the utilization of the cluster， you decide to move a particular application to each node of the cluster. For this application to run， you must add a Network Load Balancing port rule to the nodes of the cluster.
You start Network Load Balancing Manager on the second node of the cluster. However， Network Load Balancing Manager displays a message that it cannot communicate with the other two nodes of the cluster. You want to add the port rule to the nodes of the cluster.
What should you do？ （）
A. Use Network Load Balancing Manager on the Network Load Balancing default host to add the port rule.
B. Change the host priority of the second node to be the highest in the cluster， and then use Network Load Balancing Manager to add the port rule.
C. Run the nlb.exe drain command on each node， and then use Network Load Balancing Manager to add the port rule.
D. Add the port rule through Network Connections Properties on each node.
You are a network administrator for your company. The network contains four Windows Server 2003 computers configured as a four-node server cluster.
Each cluster node is the preferred owner of a clustered instance of Microsoft SQL Server 2000， and each cluster node is configured as a possible owner of all other instances of SQL Server. All nodes have identically configured hardware. All four nodes operate at a sustained 70 percent CPU average.
You add a server that has identically configured hardware to the cluster as a fifth node.
You want each SQL Server instance to continue operating at the same level of performance in the event of a single node failure.
What should you do？ （）
A. Clear the Affect group check box in the cluster resource properties for each SQL Server instance.
B. Configure the fifth node as the only possible owner other than the existing preferred owner of the cluster resources that are associated with each SQL Server instance.
C. Configure the fifth node as the preferred owner of each cluster group that contains an SQL Server instance.
D. Enable failback on each group that contains an SQL Server instance.
You are a network administrator for your company. You install Windows Server 2003 on two servers named Server1 and Server2. You configure Server1 and Server2 as a two-node cluster.
You configure a custom application on the cluster by using the Generic Application resource， and you put all resources in the Application group. You test the cluster and verify that it fails over properly and that you can move the Applications group from one node to the other and back again.
The application and the cluster run successfully for several weeks. Users then report that they cannot access the application. You investigate and discover that Server1 and Server2 are running but the Application group is in a failed state.
You restart the Cluster service and attempt to bring the Application group online on Server1. The Application group fails. You discover that Server1 fails， restarts automatically， and fails again soon after restarting. Server1 continues to fail and restart until the Application group reports that it is in a failed state and stops attempting to bring itself back online.
You need to configure the Application group to remain on Server2 while you research the problem on Server1.
What should you do？ （）
A. On Server2， configure the failover threshold to 0.
B. On Server2， configure the failover period to 0.
C. Remove Server1 from the Possible owners list.
D. Remove Server1 from the Preferred owners list.
You are a network administrator for your company. The network contains a Windows Server 2003 computer named Server1. Server1 has a single CPU， 512 MB of RAM， and a single 100-Mb network adapter.
All network users’ home folders are stored on Server1. Users access their home folders by using a mapped network drive that connects to a shared folder on Server1.
After several weeks， users report that accessing home folders on Server1 is extremely slow at certain times during the day.
You need to identify the resource bottleneck that is causing the poor performance.
What should you do？ （）
A. Capture a counter log by using LogicalDisk， PhysicalDisk， Processor， Memory， and Network Interface performance objects， and view the log data information that is captured during periods of poor performance.
B. Configure Alerts on Server1 to log entries in the event logs for the LogicalDisk， PhysicalDisk， Processor， Memory， and Network Interface performance objects when the value of any object is more than 90.
C. Capture a trace log that captures Page faults， File details， Network TCP/IP， and Process creations/deletions events.
D. Implement auditing on the folder that contains the users’ home folders. Configure Network Monitor on Server1.
You are a network adminstrator for your company. You install an intranet application on three Windows Server 2003 computers. You configure the servers as a Network Load Balancing cluster. You configure each server with two network adapters. One network adapter provides client computers access to the servers. The second network adapter is for cluster communications. Cluster communications is on a separate network segment.
The network team wants to reduce the cluster’s vulnerability to attack. These servers need to be highly available. The network team decides that the Network Load Balancing cluster needs to filter IP ports. The team wants the cluster to allow only the ports that are required for the intranet application.
You need to implement filtering so that only the intranet application ports are available on the cluster. You need to achieve this goal by using the minimum amount of administrative effort.
What should you do？ （）
A. Use Network Load Balancing Manager to configure port rules. Allow only the intranet application ports on the cluster IP address.
B. Use TCP/IP filtering on each server. Configure only the intranet application ports on the network adapter that provides client computers access to the servers.
C. Use TCP/IP filtering on each server. Configure only the intranet application ports on both of the network adapters.
D. Configure Routing and Remote Access on each server. Use Routing and Remote Access input filters to allow only the intranet application ports on the network adapter that provides client computers access to the servers.
You are a network administrator for your company. The company has a main office and two branch offices. The branch offices are connected to the main office by T1 lines. The network consists of three Active Directory sites， one for each office. All client computers run either Windows 2000 Professional or Windows XP Professional. Each office has a small data center that contains domain controllers， WINS， DNS， and DHCP servers， all running Windows Server 2003.
Users in all offices connect to a file server in the main office to retrieve critical files. The network team reports that the WAN connections are severely congested during peak business hours. Users report poor file server performance during peak business hours. The design team is concerned that the file server is a single point of failure. The design team requests a plan to alleviate the WAN congestion during business hours and to provide high availability for the file server.
You need to provide a solution that improves file server performance during peak hours and that provides high availability for file services. You need to minimize bandwidth utilization.
What should you do？ （）
A. Purchase two high-end servers and a shared fiber-attached disk array. Implement a file server cluster in the main office by using both new servers and the shared fiber-attached disk array.
B. Implement Offline Files on the client computers in the branch offices by using Synchronization Manager. Schedule synchronization to occur during off-peak hours.
C. Implement a stand-alone Distributed File System （DFS） root in the main office. Implement copies of shared folders for the branch offices. Schedule replication of shared folders to occur during off-peak hours by using scheduled tasks.
D. Implement a domain Distributed File System （DFS） root in the main office. Implement DFS replicas for the branch offices. Schedule replication to occur during off-peak hours.
You are a systems engineer for your company. Your company has 20，000 users in a large campus environment located in Los Angeles. Each department in the company is located in its own building. Each department has its own IT staff， which is responsible for all network administration within the building.
The company’s network is divided into several IP subnets that are connected to one another by using dedicated routers. Each building on the company’s main campus contains at least one subnet， and possibly up to five subnets. Each building has at least one router. All routers use RIP version 2 （RIPv2） broadcasts.
The company acquires a new business unit located in Denver. The Denver office has 25 users. The network in the Denver office is connected to the network at the main campus by using a leased frame relay connection. The network administrator at the Denver office installs a Windows Server 2003 computer and configures Routing and Remote Access on this server. The network administrator at the Denver office configures this server as a router and implements RIPv2 in Routing and Remote Access.
Later， the Denver administrator reports that his router is not receiving routing table updates from the routers on the main campus network. He must manually add routing entries to the routing table to enable connectivity between the locations. You investigate and discover that the RIPv2 broadcasts are not being received at the Denver office. You also discover that no routing table announcements from the Denver office are being received on the main campus network. You need to ensure that the network in the Denver office can communicate with the main campus network and can send and receive automatic routing table updates as network conditions change.
What should you do on the router in the Denver office？（）
A. Configure the router to use RIPv1 broadcasts.
B. Configure the router to use auto-static update mode.
C. Add the IP address ranges of the main campus network to the router’s Accept list and Announce list.
D. Add the IP addresses of the main campus routers to the router’s Neighbors list.
You are a network administrator for your company. The company has a main office and one branch office. The network consists of a single Active Directory domain. All servers run Windows Server 2003.
The company needs to connect the main office network and the branch office network by using Routing and Remote Access servers at each office. The networks will be connected by a VPN connection over the Internet.
The company’s written security policy includes the following requirements for VPN connections over the Internet： All data must be encrypted with end-to-end encryption. VPN connection authentication must be at the computer level.
Credential information must not be transmitted over the Internet as part of the authentication process.
You need to configure security for VPN connection between the main office and the branch office. You need to comply with the written security policy.
What should you do？ （）
A. Use a PPTP connection with EAP-TLS authentication.
B. Use a PPTP connection with MS-CHAP v2 authentication.
C. Use an L2TP connection with EAP-TLS authentication.
D. Use an L2TP connection with MS-CHAP v2 authentication.
最新试题
You are a network administrator for Alpine Ski House. The network consists of a single Active Directory domain. The domain name is alpineskihouse.com. The network contains three Windows Server 2003 domain controllers. You are creating the recovery plan for the company. According to the existing backup plan， domain controllers are backed up by using normal backups each night. The normal backups of the domain controllers include the system state of each domain controller. Your recovery plan must incorporate the following organizational requirements： • Active Directory objects that are accidentally or maliciously deleted must be recoverable.• Active Directory must be restored to its most recent state as quickly as possible.• Active Directory database replication must be minimized. You need to create a plan to restore a deleted organizational unit （OU）. Which two actions should you include in your plan？（）
You are a network administrator for your company. The network contains a perimeter network. The perimeter network contains four Windows Server 2003， Web Edition computers that are configured as a Network Load Balancing cluster. The cluster hosts an e-commerce Web site that must be available 24 hours per day. The cluster is located in a physically secure data center and uses an Internet-addressable virtual IP address. All servers in the cluster are configured with the Hisecws.inf template. You need to implement protective measures against the cluster’s most significant security vulnerability. What should you do？ （）
You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. The domain contains a Windows Server 2003 computer named Server1. You are planning a public key infrastructure （PKI） for the company. You want to deploy a certification authority （CA） on Server1. You create a new global security group named Cert Administrators. You need to delegate the tasks to issue， approve， and revoke certificates to members of the Cert Administrators group. What should you do？（）
You are a network adminstrator for your company. You install an intranet application on three Windows Server 2003 computers. You configure the servers as a Network Load Balancing cluster. You configure each server with two network adapters. One network adapter provides client computers access to the servers. The second network adapter is for cluster communications. Cluster communications is on a separate network segment. The network team wants to reduce the cluster’s vulnerability to attack. These servers need to be highly available. The network team decides that the Network Load Balancing cluster needs to filter IP ports. The team wants the cluster to allow only the ports that are required for the intranet application. You need to implement filtering so that only the intranet application ports are available on the cluster. You need to achieve this goal by using the minimum amount of administrative effort. What should you do？ （）
You are a network administrator for your company. The company has a main office and one branch office. The network consists of a single Active Directory domain. All servers run Windows Server 2003. The company needs to connect the main office network and the branch office network by using Routing and Remote Access servers at each office. The networks will be connected by a VPN connection over the Internet. The company’s written security policy includes the following requirements for VPN connections over the Internet： All data must be encrypted with end-to-end encryption. VPN connection authentication must be at the computer level. Credential information must not be transmitted over the Internet as part of the authentication process. You need to configure security for VPN connection between the main office and the branch office. You need to comply with the written security policy. What should you do？ （）
You are a network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. The company’s main office is in Barcelona， and it has branch offices in Paris and London. The company has no immediate plans to expand or relocate the offices. The company wants to connect the office networks by using a frame relay WAN connection and Routing and Remote Access servers that are configured with frame relay WAN adapters. Computers in each office will be configured to use the local Routing and Remote Access server as a default gateway. You are planning the routing configuration for the Routing and Remote Access servers. You need to allow computers in Barcelona， Paris， and London to connect to computers in any office. You want to minimize routing traffic on the WAN connection. What should you do？ （）
You are the network administrator for your company. The network consists of a single Active Directory domain. The network contains Windows Server 2003 file servers. The network also contains a Windows Server 2003 computer named Server1 that runs Routing and Remote Access and Internet Authentication Service （IAS）. Server1 provides VPN access to the network for users’ home computers. You suspect that an external unauthorized user is attempting to access the network through Server1. You want to log the details of access attempts by VPN users when they attempt to access the network. You want to compare the IP addresses of users’ home computers with the IP addresses used in the access attempts to verify that the users are authorized. You need to configure Server1 to log the details of access attempts by VPN users. What should you do？ （）
You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. You administer a three-node Network Load Balancing cluster. Each cluster node runs Windows Server 2003 and has a single network adapter. The cluster has converged successfully. You notice that the nodes in the cluster run at almost full capacity most of the time. You want to add a fourth node to the cluster. You enable and configure Network Load Balancing on the fourth node. However， the cluster does not converge to a four-node cluster. In the System log on the existing three nodes， you find the exact same TCP/IP error event. The event has the following description： "The system detected an address conflict for IP address 10.50.8.70 with the system having network hardware address 02：BF：0A：32：08：46." In the System log on the new fourth node， you find a similar TCP/error event with the following description： "The system detected an address conflict for IP address 10.50.8.70 with the system having network hardware address 03：BF：0A：32：08：46." Only the hardware address is different in the two descriptions. You verify that IP address 10.50.8.70 is configured as the cluster IP address on all four nodes. You want to configure a four-node Network Load Balancing cluster. What should you do？ （）
You are the network administrator for Tailspin Toys. The company has a main office and two branch offices. The network in the main office contains 10 servers and 100 client computers. Each branch office contains 5 servers and 50 client computers. Each branch office is connected to the main office by a direct T1 line. The network design requires that company IP addresses must be assigned from a single classful private IP address range. The network is assigned a class C private IP address range to allocate IP addresses for servers and client computers. Tailspin Toys acquires a company named Wingtip Toys. The acquisition will increase the number of servers to 20 and the number of client computers to 200 in the main office. The acquisition is expected to increase the number of servers to 20 and the number of client computers to 200 in the branch offices. The acquisition will also add 10 more branch offices. After the acquisition， all branch offices will be the same size. Each branch office will be connected to the main office by a direct T1 line. The new company will follow the Tailspin Toys network design requirements. You need to plan the IP addressing for the new company. You need to comply with the network design requirement. What should you do？ （）
You are the network administrator for your company. The network consists of a single Active Directory domain. All computers on the network are members of the domain. You administer a Network Load Balancing cluster that consists of three nodes. Each node runs Windows Server 2003 and contains a single network adapter. The Network Load Balancing cluster can run only in unicast mode. The Network Load Balancing cluster has converged successfully. To increase the utilization of the cluster， you decide to move a particular application to each node of the cluster. For this application to run， you must add a Network Load Balancing port rule to the nodes of the cluster. You start Network Load Balancing Manager on the second node of the cluster. However， Network Load Balancing Manager displays a message that it cannot communicate with the other two nodes of the cluster. You want to add the port rule to the nodes of the cluster. What should you do？ （）