Your network consists of a single Active Directory domain. The remote access permission for all users is set to Control access through Remote Access Policy. You have a VPN server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). The current configuration allows all authenticated users to establish VPN connections to Server1. You create a global group named Group1. You need to prevent all members of Group1 from establishing VPN connections to Server1. 
What should you do? （）

 You have a VPN server that runs Windows Server 2003 Service Pack 2 (SP2). The VPN server is configured to have a static IP address pool. The IP address range is 10.10.10.1 to 10.10.10.200. All clients connect to the server by using PPTP. You discover that the VPN server supports only five concurrent VPN connections. You need to ensure that the VPN server supports 100 concurrent VPN connections. 
What should you do?（）

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).  Computer accounts for the client computers are located in three organizational units (OUs) named OU1, OU2, and OU3. You install Windows Server Update Services (WSUS) 3.0 on a member server named Server1. On Server1, you create three WSUS computer groups named OU1, OU2, and OU3.  You need to ensure that each client computer is assigned automatically to the WSUS computer group that corresponds to the OU in which the computer account resides. 
Which two actions should you perform?（）

Your network consists of a single Active Directory domain named Contoso.com. All servers on the network run Windows Server 2003 Service Pack 2 (SP2). All client computers on the network run Windows XP Professional Service Pack 3 (SP3). All computers run a custom application named App1. App1 requires domain authentication. App1 does not support smart card authentication. Your company implements a new security policy that states that all users must log on to their computers by using a smart card. You need to ensure that all users can use App1 while eeting the new security policy. 
What should you do?（）

You have a single network segment. All servers run Windows Server 2003 Service Pack 2 (SP2). You have a DHCP server named Server1. Client computers receive IP addresses from Server1. You add a second network segment separated by a RFC 1542-compliant router. You need to ensure that computers in the new network segment can receive their IP configurations from Server1. You make the appropriate configuration changes on the router. 
What should you do on Server1?（）

You have two servers named Server1 and Server 2 that run Windows Server 2003 Service Pack 2 (SP2). Server1 is a file server. Server2 is a DNS server. The relevant portion of the network is configured as shown in the exhibit. (Click the Exhibit button.) On Server1 you run the Nslookup command and receive the following error message: DNS request timed out. timeout was 2 seconds. You need to ensure that Server1 can contact Server2 and query DNS records. 
What should you do? （）

You have a DNS server that runs Windows Server 2003 Service Pack 2 (SP2). The server contains two zones named nwtraders.com and contoso.com. Nwtraders.com is configured as an Active Directory-integrated zone. Contoso.com is configured as a standard primary zone. You discover that stale resource records are not being removed from contoso.com. Stale resource records are being removed from nwtraders.com. You need to ensure that stale resource records are automatically removed from contoso.com. 
What should you do?（）  
 

You have a DNS server that runs Windows Server 2003 Service Pack 2 (SP2). You need to prevent the DNS server from resolving host names on the Internet. 
What should you do?（）

Your network consists of a single Active Directory domain named contoso.com. All servers runWindows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3). You have two DNS servers named DNS1.contoso.com and DNS2.contoso.com. All client computers are configured to use DNS1 as their preferred DNS server and DNS2 as an alternate DNS server. You need to verify that DNS1 is responding to name resolution queries from a client computer. 
What should you run from the client computer?（）  

Your network consists of a single Active Directory domain named contoso.com. All computers are members of the domain. All network servers run Windows Server 2003 Service Pack 2 (SP2). Your company opens a branch office. In the branch office, you deploy a DNS server that hosts a zone named west.contoso.com. You enable dynamic updates on the west.contoso.com zone. You need to ensure that all computers in the branch office register resource records in the west.contoso.com zone. 
What should you do?（）